Currently only the latest version is supported.

If you discover a security vulnerability, please send an email to security@lattice.db.

Please include:

1. Description of the vulnerability
2. Steps to reproduce
3. Potential impact
4. Suggested fix (if known)

• Initial Response: Within 48 hours
• Detailed Response: Within 7 days
• Fix Release: As appropriate

Vulnerabilities are disclosed after a fix is released.

1. Enable Encryption: Always use database encryption
2. Secure Keys: Store keys securely (keychain, TPM)
3. Verify Sync: Use known sync servers or self-host
4. Backup: Regular encrypted backups

1. TLS Required: Always use HTTPS/WSS
2. Rate Limiting: Prevent abuse
3. Monitoring: Log and monitor for suspicious activity
4. Updates: Keep server updated

• Algorithm: AES-256-GCM
• Key Size: 256 bits
• KDF: Argon2id with appropriate parameters
• Signature: Ed25519

1. Generate new key pair
2. Re-encrypt data with new key
3. Update all devices
4. Archive old key securely
5. Delete old key after verification

This document will be updated as the security landscape evolves.

Last updated: 2025-01-03