Roadmap & Release History
All CRITICAL and HIGH findings closed.
Original audit: 30 findings. CRYPTO-01/02/03/04/05/06/07/08/09/11/12/13, AUTH-02/03/05/06/07, API-01/02/03/07, INFRA — all closed.
IPC has no replay counter. DPAPI+PEERCRED+expiry accepted as sufficient mitigation at LOW severity.
DoH proxy is open resolver to local processes. loopback-only bind + MAX_INFLIGHT=20 is correct mitigation.
Malformed-packet log flood possible.
Current technical gaps.
Jio and similar CGNAT networks block UDP responses on ephemeral high-numbered ports. Live WAN circuit tests require non-CGNAT connectivity.
At L3+, daemon forces TLS for Circuit[0]. VPS nodes without a TLS listener on port 8443 cause Circuit[0] timeout at L3. Workaround: --connect 2.
Guard node consistently shows 0/1 peers acked on DHT announce. Root cause: ISP ephemeral port blocking. Fallback-to-seeds active.
End-to-end hidden service test on WAN not yet completed. 2294 unit tests pass; network test blocked by ISP CGNAT.
~2.5k LoC single file. Should be split into circuit.rs, tunnel.rs, health.rs, ipc_server.rs, state.rs.
ZERO_RELEASE_PUBKEY_HEX is the all-zeros placeholder. Release signing not yet deployed to https://releases.zero.network.
What's next.
Short-Term (6 weeks)
NEXTFix L3+ Circuit[0] TLS
Configure TLS listener on VPS nodes or adjust use_tls logic for production.
Live WAN hidden service E2E
Complete end-to-end HS test from non-CGNAT network.
Repository hygiene
Remove scratchpads (*.log, *.diff, patch_dns.ps1), fix .gitignore, add tracing crate.
SECURITY.md + CHANGELOG.md + LICENSE
Standard project hygiene files.
wintun.dll SHA-256 pin
Move to build.rs download + verify instead of committed binary.
Fix guard DHT replication
Resolve ephemeral port blocking on guard node ISP.
Mid-Term (3 months)
SOONRefactor daemon.rs
Split ~2.5k LoC into circuit.rs, tunnel.rs, health.rs, ipc_server.rs, state.rs.
Refactor node.rs
Move ~1200-line main loop to a typed message dispatcher.
Multi-signer directory consensus
Signed key bundle shipped in binary.
Containerize relay
Dockerfile + systemd unit + Helm chart.
Deploy release server
ZERO_RELEASE_URL + ZERO_RELEASE_PUBKEY for enforced upgrade verification.
Loopix-style cell batching
Replace static Poisson cover traffic.
Long-Term (6+ months)
LATERFull PQ envelope
Per-hop hybrid PQ Sphinx on every hop, client to exit.
Real TLS fronting
Full TLS handshake fronting instead of cosmetic mimic.
Pluggable transports
meek, Snowflake, V2Ray plugins via pluggable-transport trait.
Reputation gossip
Cross-client trust and ban gossip.
Formal verification
Formal verification of the cell-state machine.
External security audit
Cure53, NCC Group, or Trail of Bits.
19 releases since audit baseline.
Test progression: 341 (W2) → 659 (CRYPTO-03/04) → 1103 (Rel 5) → 1408 (Rel 9) → 1825 (Rel 11) → 2163 (Rel 16) → 2294 (PC2/PC6E/PC6F). All 2294 tests currently passing. Run: cargo test