C03-CJ: Yes
Rationale
The selected UDP peering uses outer point-to-point CryptoAuth. Its established data encryption wraps switch headers and control traffic, concealing those inner fields from a passive link observer. Outer IP/UDP framing, lengths and CryptoAuth session framing remain visible; authorized neighbors can read their decrypted control state.
Assessment method
Documentary analysis
Source context
Primary specification / explicit profile inference
Outstanding qualification
Pin executable cjdns and capture established UDP peering, including switch errors and router queries. Verify outer encryption on every selected path and inventory unencrypted framing. The whitepaper supplies architecture; no runtime capture or protocol-indistinguishability result is claimed.