E02-RI: Yes

Rationale

Fischlin, Guenther and Janson, Robust Channels: Handling Unreliable Networks in the Record Layers of QUIC and DTLS 1.3, Journal of Cryptology 37:9 (published 30 January 2024), supplies third-party computational analysis of DTLS 1.3 RFC 9147 protected-record processing in section 7. It models sliding-window handling of unreliable delivery and active ciphertext manipulation, proving conditional confidentiality/integrity bounds. This is analysis of a selected protocol mechanism, not merely an AEAD primitive. E02 permits bounded critical-mechanism coverage; it does not require a whole-stack audit.

Assessment method

Published computational protocol-security analysis; explicit component and independence scope

Source context

Fischlin, Guenther and Janson (2024), Journal of Cryptology 37:9; sections 7 and acknowledgements

Outstanding qualification

The paper excludes header protection and key updates from its channel constructions, assuming those mechanisms behave as intended. It does not establish external-PSK provisioning/handshake, RPL, 6LoWPAN or radio implementation. Established traffic-key assumptions remain prerequisites. Non-tight integrity bounds and repeated forgery attempts are discussed; Yes means published analysis exists, not unconditional security. Authors declare TU Darmstadt and IBM Research Europe affiliations (most Guenther work at ETH Zurich), academic DFG/ATHENE support and IETF feedback. They are distinct from the cited RFC author teams; no commissioning by the compared implementation projects is reported in the acknowledgements. This is disclosed academic third-party review, not a separate conflicts-of-interest investigation or certification. No new runtime test or benchmark.

Public sources

Editorial evidence references

The following identifiers refer to research records not included in this public package; they are not public links.

round291-sources.json