Q-SSP (Quantum-Stable Sanitization Protocol) is a security-critical tool. We prioritize the integrity of our entropy-injection and data-destruction logic. As this is a Research Prototype, we follow a coordinated disclosure model to ensure user safety while we bridge the gap between quantum theory and forensic practice.
| Version | Status | Security Updates |
|---|---|---|
| v1.0.0 | Research Prototype | ✅ Active |
| < v1.0.0 | Pre-release | ❌ End of Life |
Do not open public issues for security vulnerabilities.
If you discover a flaw in the entropy engine or hardware interaction layer, please use:
- GitHub Private Vulnerability Reporting: [Repository Security Tab]
- Direct Email:
aaronlijo6a+security@gmail.com- Subject:
[SECURITY] Q-SSP Vulnerability Report
- Subject:
- Acknowledgment: Within 48 hours.
- Initial Assessment: Within 7 days.
- Coordinated Disclosure: Usually 7 days after a patch is released.
- Entropy Acquisition: Flaws in the ANU QRNG API integration or validation.
- CSEE Engine: Cryptographic weaknesses in the expansion logic (
core/csee.py). - Hardware Seizure: Failure to bypass OS-level cache or direct sector access errors.
- Validation: Flaws in the Shannon Entropy calculation or SHA-256 audit chain.
- API Availability: Downtime of the ANU Quantum API.
- NAND Architecture: Physical wear-leveling or over-provisioning residual data (documented in the whitepaper).
- Social Engineering: User error in drive selection.
As a student-led project, we do not currently offer financial bounties. However, researchers who report valid, critical vulnerabilities will be:
- Publicly credited in the
SECURITY.mdHall of Fame. - Attested in future academic publications related to the protocol.
- Featured in release notes.
Your name could be here. Help us harden quantum sanitization.
Last Updated: December 26, 2025
Version: 1.0