Skip to content

Security: faest-sign/faest-ref

SECURITY.md

Security Policy

Reporting a Vulnerability

If you have found a security issue, side-channel concern, or vulnerability affecting this repository, please report it responsibly to team@feast.info or by reporting a private vulnerability on Github.

When reporting an issue, please include as much detail as possible:

  • affected commit, branch, or release;
  • affected parameter set, if applicable;
  • affected files and functions;
  • observed implementation behavior;
  • reproduction steps or proof-of-concept, if available;
  • impact assessment;

Supported Versions

This repository currently represents the reference implementation of FAEST and only supports the latest specification. As such, the following versions/branches are supported:

Version / Branch Supported
main Yes
3.0.x Yes
< 3.0.0 No

Disclosure Timeline

Response times and timelines for fixes and disclosure depend on the availability of the team. We aim to handle them as soon as possible, but cannot provide any commitments.

There aren't any published security advisories