F25-CJ: Pending

Archived previous-definition assessment — revision 5.73. Retired in 5.82; excluded from the active matrix and counts. This historical verdict is not a current assessment.

Historical wake-traffic inventory (cutoff retired)

Rationale

The retained cjdns f5902ac source contains CryptoNoise based on BoringTun, with a cjdns-specific additional-data encoding. SessionInnerMut.update_additional serializes an optional previous-session index, the configured credential challenge, a protocol-version entity and four-byte alignment. The historical 120-byte CryptoAuth handshake description therefore cannot be applied indiscriminately to this source. A selected-mode inventory is needed before adding peering, route-server discovery and final-peer encryption costs.

Assessment method

Versioned wire-structure and construction-path inspection; no execution or total budget

Source context

Retained pinned cjdns source and GNUnet 0.20.0 release archive; reviewed 2026-10-22

Outstanding qualification

Pin the actual selected handshake mode and both endpoint builds. Account for fresh outer peering and final-peer session establishment, credential/version entities, handshake responses/cookies when applicable, switch/session headers, ordinary path lookup and route-server announcement/query traffic crossing the endpoint interface, UDP/IPv4/Ethernet and fresh ARP. Preserve private peering credentials and the selected route-server architecture; neither old DHT-only behavior nor a bare WireGuard handshake is an equivalent whole-stack witness. The record identifies source components, not a total byte bound or a default-mode claim. F25 remains Pending.

Public sources

https://github.com/cjdelisle/cjdns/blob/f5902acab6dd2f1a68bf6e4c89e352ed71f93698/rust/cjdns_sys/src/crypto/crypto_noise.rs

Editorial evidence references

The following identifiers refer to research records not included in this public package; they are not public links.

round419-sources.json
round419.html