Added info about audits

tevador · Sep 27, 2019 · f2bb1dd · f2bb1dd
1 parent 519b9cf
commit f2bb1dd
Show file tree

Hide file tree

Showing 5 changed files with 13 additions and 0 deletions.
diff --git a/README.md b/README.md
@@ -18,6 +18,19 @@ Full specification is available in [specs.md](doc/specs.md).
 
 Design description and analysis is available in [design.md](doc/design.md).
 
+## Audits
+
+Between May and August 2019, RandomX was audited by 4 independent security research teams:
+
+* [Trail of Bits](https://www.trailofbits.com/) (28 000 USD)
+* [X41 D-SEC](https://www.x41-dsec.de/) (42 000 EUR)
+* [Kudelski Security](https://www.kudelskisecurity.com/) (18 250 CHF)
+* [QuarksLab](https://quarkslab.com/en/) (52 800 USD)
+
+The first audit was generously funded by [Arweave](https://www.arweave.org/), one of the early adopters of RandomX. The remaining three audits were funded by donations from the [Monero community](https://ccs.getmonero.org/proposals/RandomX-audit.html). All four audits were coordinated by [OSTIF](https://ostif.org/).
+
+Final reports from all four audits are available in the [audits](audits/) directory. None of the audits found any critical vulnerabilities, but several changes in the algorithm and the code were made as a direct result of the audits. More details can be found in the [final report by OSTIF](https://ostif.org/four-audits-of-randomx-for-monero-and-arweave-have-been-completed-results/).
+
 ## Build
 
 RandomX is written in C++11 and builds a static library with a C API provided by header file [randomx.h](src/randomx.h). Minimal API usage example is provided in [api-example1.c](src/tests/api-example1.c). The reference code includes a `randomx-benchmark` and `randomx-tests` executables for testing.

diff --git a/audits/Report-Kudelski.pdf b/audits/Report-Kudelski.pdf
diff --git a/audits/Report-Quarkslab.pdf b/audits/Report-Quarkslab.pdf
diff --git a/audits/Report-TrailOfBits.pdf b/audits/Report-TrailOfBits.pdf
diff --git a/audits/Report-X41.pdf b/audits/Report-X41.pdf