⚠️ Disclaimer

中文 · Version: v3.0.0-DRAFT · Updated: 2026-06-25

⚠️ Important Notice: This document is an internal self-review draft for the FIBEMATE open-source technology project. It has not been reviewed by a licensed attorney and does not constitute formal legal advice. All legal documents will be reviewed and signed by professional legal counsel before the project's formal release. Until the final version is published, please consult a qualified legal professional.

1. Project Nature

This website (fibemate.link / fibemate.net) and its associated software (FIBEMATE) constitute a personal, independently-developed, open-source technology project. Its core purpose is the research and implementation of post-quantum cryptography (ML-KEM, ML-DSA, SLH-DSA), Chinese national cryptographic algorithms (SM2/SM3/SM4), and privacy-preserving technologies.

This project is currently in the technical verification and testing phase (v3.0-preview). Source code will be progressively open-sourced after security audits. This project does not constitute a commercial entity and does not represent any enterprise or organization.

ICP Filing: 黑ICP备2026005787号-1 (personal filing, non-commercial internet information service).

2. Non-Commercial & Non-Profit Declaration

This website and the FIBEMATE software are completely free, open-source projects. We expressly declare:

No commercial operations, product sales, or paid services of any kind
No direct or indirect economic benefit through any channel (including but not limited to advertising, memberships, e-commerce, data sales, or API fees)
All development, hosting, and maintenance costs are borne by the developer personally
No payment channels, payment gateways, or payment card data processing
If donation channels (e.g., GitHub Sponsors, Open Collective) are introduced in the future, separate notice will be given and donations will be entirely voluntary with no consideration

3. Open-Source License

FIBEMATE core code will be open-sourced under GNU General Public License v3.0 (GPLv3), planned for 2026-08-31. Use, modification, and distribution of this software must comply with the license terms.

Third-party dependencies (e.g., @noble/post-quantum, pqc-kyber) are used under their respective licenses. All documentation in this document center is licensed under CC BY-NC-SA 4.0.

4. Post-Quantum Cryptography Disclaimer

Standardization Status: ML-KEM-768/1024 (FIPS 203) and ML-DSA-44/65/87 (FIPS 204) are NIST standards, but individual implementations (including this project's) may contain unknown vulnerabilities
Self-Implementation Risk: SM2-KDF, SM3, and related Chinese national cryptographic algorithms are self-implemented (referencing GB/T 32905-2016, GB/T 32918.4-2016) and have not been audited by a third-party cryptographic certification body
Side-Channel Attacks: SM2 implementation has passed TVLA side-channel verification (N=5,000/10,000, |t| < 4.5, 1st–4th order moments 20/20 PASS) with Montgomery Ladder triple protection against timing side-channels. This does not constitute resistance to physical attacks (power analysis, EM emanations), fault injection, or microarchitectural side-channels
Quantum Attack Evolution: Post-quantum cryptography is an active research field. Future advances in quantum computing may weaken current parameter security
Formal Verification Gap: Key constructions such as the Fujisaki-Okamoto (FO) transform have not undergone formal verification (EasyCrypt/Coq)

5. ZK Anonymous Login Research Statement

The zero-knowledge proof (ZK) anonymous login functionality is a cryptographic technology demonstration (Pedersen commitments + Schnorr ZK proofs). It does not fulfill legal real-name authentication requirements under the Cybersecurity Law of the People's Republic of China and is not a production-grade identity verification solution.

6. Timestamp & Attestation

All key documents (TVLA reports, verification reports, technical documentation) are timestamped via FreeTSA RFC 3161 + DigiCert dual-source timestamps. Timestamps serve only to record code integrity at a specific point in time and do not constitute third-party endorsement or guarantee of code security.

7. Copyright & Intellectual Property

FIBEMATE source code and documentation are owned by the project author. Third-party dependencies retain their original copyrights and licenses. The "FIBEMATE" name and logo are project identifiers and are not registered trademarks.

8. Privacy & Data Security

FIBEMATE implements end-to-end encryption with zero server-side plaintext access. Key material is not persisted to disk. The project does not collect, store, or process personal data for commercial purposes. See the Privacy Policy for full details.

9. Technical Service Limitations

This project is provided "AS IS" without warranty of any kind, express or implied. The author is not liable for any damages arising from the use of this software. The service may be interrupted, modified, or discontinued at any time without prior notice.

10. Governing Law

This disclaimer is governed by the laws of the People's Republic of China. Any disputes shall be resolved through amicable negotiation; failing that, through the competent court in the developer's jurisdiction.

Contact

Email: support@fibemate.net