Last Updated: Jul 25, 2026 Status: Production Ready

• Status: ACKNOWLEDGED — Monitoring for stable fix
• Severity: Medium (5.9 CVSS)
• Description: Potential key recovery through timing sidechannels (Marvin Attack)
• Mitigation:
  • RSA operations use random blinding to mask timing variability
  • Network-based attacks require significant resources and positioning
  • Monitoring RustCrypto/RSA#390 for permanent fix
• Action: Will update to patched version when stable release available

• Zero unsafe code — forbid(unsafe_code) workspace-wide
• Zero panic paths — No unwrap() in production; #[expect(clippy::expect_used, reason = "...")] on justified invariants; unwrap_used/expect_used warn at workspace level
• Result-based errors — All fallible operations return Result<T, E>
• Constant-time comparisons — Uses subtle::ConstantTimeEq for secrets
• Zeroize secrets — Sensitive memory zeroized on drop

• Crypto backend — Pure Rust rustls-rustcrypto CryptoProvider; ring, aws-lc-rs, and all C-crypto crates banned in deny.toml
• HSM abstraction — Software, PKCS#11, Android StrongBox backends (feature = "mobile" gated)
• Key derivation — HKDF-SHA256, family-scoped keys
• AEAD encryption — ChaCha20-Poly1305, AES-256-GCM
• Post-quantum — quantum_crypto module feature-gated (feature = "quantum-crypto"); experimental only
• ACME — Automated certificate lifecycle with renewal daemon; Pure Rust CSR generation via p256 + x509-cert (ECDSA P-256)

• No hardcoded secrets — Environment-first configuration
• Family isolation — Per-family key material, no cross-family leakage
• Comprehensive logging — All security operations audited
• Capability discovery — Runtime service discovery, no hardcoded endpoints

# Run security audit
cargo audit

# Check for advisories
cargo deny check advisories

BearDog runs regular dependency audits. All known advisories are documented and mitigated.

Report security vulnerabilities through secure channels to the ecoPrimals development team.

Do not open public issues for security vulnerabilities.

AGPL-3.0-or-later — Ensures full transparency of security implementations.