CryptoUtils handles secrets (seed phrases, private keys, Shamir shares) — if you find a way that this tool weakens or leaks a secret it's supposed to protect, please report it privately rather than opening a public issue.

Email me@knst.cc with a description of the issue and steps to reproduce it. Please include the CryptoUtils version and, if relevant, your OS/JDK version.

You should receive a response within a few days. Once a fix is available, a coordinated disclosure timeline will be agreed on before any public writeup.

Only the latest release is supported with security fixes.