C06-GN: No
Rationale
GNUnet 0.20.0 CADET places the connection identifier before the encrypted tunnel-message header and content. Intermediate CADET peers look up this identifier and forward a copy of the message, retaining it across the connection path. Authorized forwarding observers can match this common connection identifier across segments without decrypting the final payload.
Assessment method
Primary specification and pinned code review; no runtime experiment
Source context
I2P tunnel processing and GNUnet 0.20.0 CADET forwarding
Outstanding qualification
The observer participates in the CORE-protected peer links. CORE protects against an outsider without link keys but does not conceal the CADET header from that intermediary. This is connection association, not necessarily civil identity disclosure; fresh independent keys or connections do not remove the shared identifier inside an existing connection. The finding is specific to the selected v0.20.x baseline.
Public sources
- https://ftp.gnu.org/gnu/gnunet/gnunet-0.20.0.tar.gz
- https://docs.gnunet.org/v0.20.x/developers/cadet/cadet.html
Editorial evidence references
The following identifiers refer to research records not included in this public package; they are not public links.
- round502.html
- round502-sources.json