X-Git-Url: http://git.bitcoin.ninja/index.cgi?a=blobdiff_plain;f=lightning-c-bindings%2FREADME.md;h=0c221c7c6ad44ad4c2d6c4b46b34d176e2a7924d;hb=cb83cfe366aaa07179cac1079694e9ea5c6cc9c6;hp=72426bdf334ed0f265cd7a4220c7c4381b1b86c0;hpb=d5912ec75f0f909172bf37277c10d2e5e8282128;p=rust-lightning

diff --git a/lightning-c-bindings/README.md b/lightning-c-bindings/README.md
index 72426bdf..0c221c7c 100644
--- a/lightning-c-bindings/README.md
+++ b/lightning-c-bindings/README.md
@@ -218,6 +218,9 @@ These include:
 	  ...
    } LDKChannelKeys;
    ```
+ * Private and public keys are asserted valid at the FFI boundary. Thus, before passing any
+   (untrusted) private or public key material across the boundary, ensure that they represent valid
+   (ie in-range) keys.
    
 **It is highly recommended that you test any code which relies on the C (or C++) bindings in
 valgrind, AddressSanitizer, MemorySanitizer, or other similar tools to ensure correctness.**