Hacker News Reader

> The SDK has not yet been security reviewed, and the public Blyss service is still in beta.

Currently, what are your plans related to security audit both in terms of structuring it and context to you it would make sense?

View on HN

The main thing we'd like the security review to focus on is our Rust client code. We'd also really like to select for a reviewing team that has a deep level of familiarity with cryptography. We would provide the team with a summary of the sensitive operations involved in lattice-based key generation, so that lattice experience would not need to be a hard prerequisite to understanding the code.

While likely expensive, when I looked around awhile back, Trail of Bits [1] to me seemed to produce the best audits for cryptographic systems, though possible there are better/cheaper options.

[1] https://www.trailofbits.com/

Reply on news.ycombinator.com