Back to matrix

C07-HP: Yes

Rationale

ESP provides optional Traffic Flow Confidentiality padding inside encrypted payloads. RFC 4303 section 2.7 permits it in transport mode when the next protocol supplies its real length; the selected UDP payload satisfies that condition. It can obscure useful-payload size beyond cipher-block alignment.

Assessment method

Documentary mechanism inventory; no traffic-analysis experiment

Source context

Primary packet-format, signaling and padding specifications

Outstanding qualification

Credits presence of an optional mechanism, not its activation or measured correlation resistance. Outer endpoints, timing and padded packet sizes remain observable; no gateway tunnel, constant-rate schedule or anonymity guarantee is inferred. Exact implementation support and MTU/cost need testing.

Public sources

Editorial evidence references

The following identifiers refer to research records not included in this public package; they are not public links.