DO NOT open a public GitHub issue for security vulnerabilities.

• Email: security@zk.im
• Encrypted: Use our PGP key
• GitHub: Use the "Report a vulnerability" button on the Security tab

See security.txt for full details.

• Description of vulnerability
• Steps to reproduce
• Potential impact
• Suggested fix (if any)

• Initial response: 48 hours
• Assessment: 7 days
• Fix: Depends on severity

⚠️ This package uses NIST-standardized algorithms (FIPS 203/204) but is NOT FIPS 140-3 validated.

For complete security guidance, see the Security Guide.