From f174e291ac1ba6e7ab635038cc05332c37849511 Mon Sep 17 00:00:00 2001 From: Jean-Paul Calderone <exarkun@twistedmatrix.com> Date: Mon, 2 Oct 2023 09:54:36 -0400 Subject: [PATCH] note we don't do some things --- README.md | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/README.md b/README.md index 2a9f903..3a56ab7 100644 --- a/README.md +++ b/README.md @@ -13,7 +13,12 @@ However, its APIs are intended to be easy to integrate with such an implementati * SDMF write, read, and verify capabilities can be parsed and serialized. * SDMF shares can be deserialized, decoded, and decrypted. - * The cryptographic integrity and authenticity is not verified. + * The cryptographic integrity is not verified: + * a share's block hashes are not checked against the share's block hash tree + * the root of the computed share hash tree is not checked against share's pre-computed share hash tree root + * The cryptographic authenticity is not verified: + * signatures on the data are not checked + * Plaintext can be encrypted, encoded into shares, and the shares serialized to bytes. * Not all fields of the shares contain correctly initialized values. * Enough fields are correctly populated to recover the original plaintext. -- GitLab