Merge pull request #212 from PQClean/security-note

Create SECURITY.md
This commit is contained in:
Matthias J. Kannwischer 2019-07-25 13:04:57 +02:00 committed by GitHub
commit 1e879cdd57
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

12
SECURITY.md Normal file
View File

@ -0,0 +1,12 @@
# A note on the security of the included implementations and schemes
This project contains (reference) implementations of cryptographic libraries.
We do not make any security claims about the code included in PQClean.
In the current state, we distribute reference implementations with minor modifications.
We did not perform any extensive security analyses.
This code is suitable for experimental or scientific use.
We recommend careful expert code review before using any of the included implementations in production environments.
See also the [NIST PQC Forum][forum] for discussion about the cryptographic schemes included in PQClean.
[forum]: https://csrc.nist.gov/Projects/Post-Quantum-Cryptography/Email-List