DISCLAIMER

No version of TropicSSL has been certified under FIPS 140. This is unlikely to
happen unless/until an organization is willing to fund and shepherd the
validation process, which typically requires several months and many thousands
of dollars.

TropicSSL has not undergone external auditing for security vulnerbilities or
other related issues. While best industry accepted security practices have been
folloed by the authors in regards to securing the code against security
vulnerbilities, up to and including timing and other side-channel attacks, there
are no guarantees that any such issues do not exist. These issues can be serious
and may fully compromise your application or installation.

Security vulnerbilities and discussions will be posted on the TropicSSL mailing
list, which can be found at:

http://groups.google.com/group/tropicssl

THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND
ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR
ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
(INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON
ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.