diff --git a/44.md b/44.md index e66a7b3c..d69c688e 100644 --- a/44.md +++ b/44.md @@ -237,6 +237,12 @@ Before decryption, it's necessary to validate the message's pubkey and signature - Verify that the length of sliced plaintext matches the value of the two BE bytes - Verify that calculated padding from encryption's step 3 matches the actual padding +## Audit + +The v2 of the standard has been subject to an audit by [Cure53](https://cure53.de) in December 2023. +Check out [audit-2023.12.pdf](https://github.com/paulmillr/nip44/blob/ce63c2eaf345e9f7f93b48f829e6bdeb7e7d7964/audit-2023.12.pdf) +and [auditor's website](https://cure53.de/audit-report_nip44-implementations.pdf). + ## Tests and code A collection of implementations in different languages is available at https://github.com/paulmillr/nip44.