Please report security issues privately through GitHub's private vulnerability reporting: https://github.com/PQBlocks/sparse-bifurcation/security/advisories/new

You can also open an issue on GitHub or contact the author directly: Govind Dubey (govinddubeycse@gmail.com).

Do not open a public issue containing exploit details. We aim to acknowledge reports within 48 hours, agree a fix and disclosure timeline with the reporter (normally within 30 to 90 days), and credit the reporter in the advisory unless they ask otherwise.

This policy covers the code in this repository. The security posture of the package itself (what it protects, what it does not, constant-time and side-channel notes) is described in SECURITY_NOTES.md.