Back to matrix

C04-I2: Yes

Rationale

NTCP2 AEAD Error Handling explicitly specifies probing-resistance behavior: on initial authentication failure, delayed closing with randomized timeout and read length, plus repeated-failure blacklisting. This credits a stated defense; ranges remain TBD and deployment efficacy is not established.

Assessment method

Documentary analysis

Source context

Primary specification / selected profile

Outstanding qualification

Pin an implementation and its timeout/read ranges, then evaluate probe distinguishability and false positives. The specification leaves those ranges TBD.

Public sources