| Version | Supported |
|---|---|
| 1.3.x (current) | Best-effort; diligence / pilot use; not for mainnet value |
| 1.2.x | Superseded; migrate to 1.3 |
| 0.x | Superseded |
| Mainnet candidates | TBD after ceremony + audit |
- Ed25519 tx/consensus signatures
- BLAKE3 domain-separated hashing
- Groth16/BN254 shielded + rollup validity (
aether-zk) - Poseidon note CRH (native + R1CS); reference parameters
- Local circuit-specific trusted setup in
data/zk_keys.json(schema v2) - TCP multi-validator mesh (Noise/QUIC planned)
Do not deposit real assets until: MPC setup, audited Poseidon (or equivalent) parameters, Noise/QUIC networking, and external audit are complete.
Email security reports to the maintainers via GitHub Security Advisories on this repository (preferred) or open a private security advisory.
Please include:
- Affected crate / binary / RPC method
- Proof of concept (non-destructive)
- Impact assessment (funds, finality, privacy)
We aim to acknowledge within 72 hours.
- Never enable
AETHER_ALLOW_NOOP_ROLLUPin production - Restrict RPC; gate
aeth_loadSnapshot/aeth_createSnapshotbehind auth at the edge - Back up validator keys offline; use HSM/KMS when available
- Separate node key from consensus key in production deployments
- Treat peer scores as advisory until Noise transport lands
Open-source under Apache-2.0. See docs/IP.md and docs/ACQUISITION.md for trademark and diligence boundaries — they do not weaken this security policy.