Back to matrix

K01-PI: Yes

Rationale

The selected protected adjacency and E2E suite is now 0x0202, the wire-v4 recommended general suite: X25519 + ML-KEM-1024 with ChaCha20-Poly1305. Section 12 concatenates both shared secrets and binds them, the signed transcript, suite, scope, direction and generation into BLAKE3 derive-key. HS2 selects one exact suite; M2 repeats it and no in-exchange fallback is permitted. This meets the documented post-quantum key-establishment criterion. Identity authentication is independent; this verdict does not certify resistance to active quantum impersonation, independent audit or integrated runtime maturity.

Assessment method

Normative selected-profile analysis; source inspection, no new execution

Source context

prp-spec 9b515ce11cfee4fd9d9ec82a5aef9b13ecc7085b, specifications/prp-wire-v4.md sections 10–12; session-suites-v4 registry

Public sources

Editorial evidence references

The following identifiers refer to research records not included in this public package; they are not public links.