Home | History | Annotate | Download | only in wycheproof
      1 Want to contribute? Great! First, read this page (including the small print at
      2 the end).
      3 
      4 ### Before you contribute
      5 Before we can use your code, you must sign the
      6 [Google Individual Contributor License Agreement]
      7 (https://cla.developers.google.com/about/google-individual)
      8 (CLA), which you can do online. The CLA is necessary mainly because you own the
      9 copyright to your changes, even after your contribution becomes part of our
     10 codebase, so we need your permission to use and distribute your code. We also
     11 need to be sure of various other thingsfor instance that you'll tell us if you
     12 know that your code infringes on other people's patents. You don't have to sign
     13 the CLA until after you've submitted your code for review and a member has
     14 approved it, but you must do it before we can put your code into our codebase.
     15 Before you start working on a larger contribution, you should get in touch with
     16 us first through the issue tracker with your idea so that we can help out and
     17 possibly guide you. Coordinating up front makes it much easier to avoid
     18 frustration later on.
     19 
     20 ### Disclosure
     21 If your tests uncover security vulnerabilities, please first report directly to
     22 the maintainers of the libraries. You should only submit tests to us once the
     23 bugs have been acknowledged or fixed.
     24 
     25 Google has several
     26 [security reward programs](https://www.google.com/about/appsecurity/programs-home/)
     27 that provide cash rewards for quality security research that identifies or fixes
     28 security vulnerabilities in products that we provide or proactive security
     29 improvements to select open-source products. If your tests found or helped fix
     30 vulnerabilities that are in scope you should submit them to these programs.
     31 
     32 If you have any question with regard to disclosure, please email us at
     33 security (a] google.com.
     34 
     35 ### Code reviews
     36 All submissions, including submissions by project members, require review. We
     37 use GitHub pull requests for this purpose.
     38 
     39 ### The small print
     40 Contributions made by corporations are covered by a different agreement than
     41 the one above, the
     42 [Software Grant and Corporate Contributor License Agreement]
     43 (https://cla.developers.google.com/about/google-corporate).