Back to matrix

C02-GN: No

Rationale

The CADET connection-create message carries the whole path of peer identities from origin to final destination. A forwarding peer decrypts its CORE adjacency traffic and parses this list in handle_connection_create. The first relay can therefore read the final peer identity, even though it cannot decrypt the end-to-end application payload. This does not imply knowledge of the final peer physical address or civil identity.

Assessment method

Pinned release-source analysis and primary protocol review; no runtime execution

Source context

src/cadet/cadet_protocol.h: GNUNET_CADET_ConnectionCreateMessage; src/cadet/gnunet-service-cadet_core.c: handle_connection_create

Public sources