F04-RA: Yes
Rationale
The selected enrollment policy binds a peer IPCP name to a locally pinned RSA public key. Its challenge-response verification uses that key rather than the current routing address, providing a cryptographically verifiable participant reference independent of location.
Assessment method
Pinned documentation and authentication source inspection with explicit policy selection; no execution or audit
Source context
IRATI SSH2-inspired authentication policy
Outstanding qualification
This is a configured name/key association, not a self-certifying name or global naming service. Secure initial key distribution and continued correctness of the local binding are assumptions. This does not establish application-level peer authentication or cross-session authorization continuity.
Public sources
- https://github.com/IRATI/stack/blob/726b535c908f8a74e8c68dd493cfbb1bd8726546/librina/src/security-manager.cc
- https://github.com/IRATI/stack/blob/726b535c908f8a74e8c68dd493cfbb1bd8726546/README.md
- https://github.com/IRATI/stack/blob/726b535c908f8a74e8c68dd493cfbb1bd8726546/rinad/src/ipcp/plugins/sm-auth-psoc/sm-auth-psoc-plugin.cc
Editorial evidence references
The following identifiers refer to research records not included in this public package; they are not public links.
- round665.html