Skip to content

Commit

Permalink
Add the results of zcash#784 to security warnings.
Browse files Browse the repository at this point in the history
  • Loading branch information
defuse committed Jul 14, 2016
1 parent 60991f9 commit 2b5c33e
Showing 1 changed file with 3 additions and 0 deletions.
3 changes: 3 additions & 0 deletions doc/security-warnings.md
Original file line number Diff line number Diff line change
Expand Up @@ -29,6 +29,9 @@ should assume other unprivileged users running on the same hardware as your
- Determine which notes you own by observing cache side-channel information
leakage from the incremental witnesses as they are updated with new notes.

- Determine which notes you own by observing the trial decryption process of
each note ciphertext on the blockchain.

You should ensure no other users have the ability to execute code (even
unprivileged) on the hardware your `zcashd` process runs on until these
vulnerabilities are fully analyzed and fixed.

0 comments on commit 2b5c33e

Please sign in to comment.