C04-RA: No
Rationale
The selected native Ethernet shim registers its application name as a protocol address in RINARP. The ARP_REQUEST handler checks its target-name table and sends a RINARP reply when the target is present, without requiring the normal DIF AuthSSH2 credential. An uncredentialed participant able to send frames on that Ethernet segment and knowing a registered target name can therefore elicit a protocol-specific reply before normal-DIF admission. Normal-DIF encryption does not cover this discovery exchange.
Assessment method
Pinned native registration and unauthenticated discovery-response trace
Source context
IRATI Ethernet shim and RINARP request handler
Outstanding qualification
No for active-probe identification resistance across the selected native stack. This is a valid known-name discovery probe on the local Ethernet segment, not an Internet-wide scan, a guarantee of enumeration, or proof that arbitrary invalid/replayed authentication probes receive replies. Link access is a prerequisite; a separately protected link can restrict the observer. The reply identifies the RINA discovery service, not a civil identity or permission to exchange protected application payload. Source-level result; no packet capture or timing experiment performed.
Public sources
- https://github.com/IRATI/stack/blob/726b535c908f8a74e8c68dd493cfbb1bd8726546/kernel/rinarp/arp826-rxtx.c
- https://github.com/IRATI/stack/blob/726b535c908f8a74e8c68dd493cfbb1bd8726546/kernel/ipcps/shim-eth-core.c
Editorial evidence references
The following identifiers refer to research records not included in this public package; they are not public links.
- round675.html