Skip to content

Security: Krish9800/crypto-learning-toolkit

Security

SECURITY.md

Security Policy

Responsible Educational Disclosure

The Cryptography Learning Toolkit is an educational and defensive engineering tool. It contains both production-grade implementations of modern cryptographic primitives and controlled simulations of historical cryptographic vulnerabilities (e.g., ECB mode pattern leakage, GCM nonce reuse, CBC padding oracle attacks).

These vulnerability simulations are strictly isolated in crypto_toolkit/labs/ for defensive understanding and should never be used in production or deployed against unauthorized targets.

Supported Versions

Version Supported
0.1.x ✅

Reporting a Vulnerability

If you discover a vulnerability or insecure implementation flaw in the core cryptographic primitives:

  1. Do not create a public issue.
  2. Send report details and reproduction steps to: krish@example.com
  3. A response and triage update will be provided within 48 hours.

There aren't any published security advisories