v3.13.2-beta.1 — Reconnect hardening verified · chat leaves EXPERIMENTAL · Win98 boot splash
DCS98 v3.13.2-beta.1 — Reconnect hardening verified · chat leaves EXPERIMENTAL · Win98 boot splash
Tor P2P chat: reconnect path formally verified — the EXPERIMENTAL banner is gone
This closes the two remaining internal audit findings on the handshake:
- HIGH-1 — a dropped reconnect could permanently strand a contact (recoverable only by a fresh out-of-band invite). Reconnect now self-heals in-band: an authenticated
prekey_unknownReject + one bounded retry. - MED-2 — reconnect had no formal model and no DoS pre-gate. It is now DoS-gated by a per-contact keyed MAC (
mac_R) with an enforcement bootstrap (the responder only enforces after it has verified one valid MAC, so a half-completed reconnect can never lock a peer out) and a split, deduped rate-limiter; the gate key is stable per epoch.
Reconnect is now verified to the same standard as first-contact:
- ProVerif symbolic — reconnect + the Reject branch: injective I-authenticates-R, recovery soundness (a forged/replayed Reject can't make the initiator complete against an attacker-chosen prekey), and downgrade / accept↔reject substitution resistance.
- CryptoVerif computational —
mac_Rgate unforgeability (no valid MAC without the per-contact key).
The design cleared three independent adversarial-review passes before a line of implementation was written, and each implementation task went through spec + code-quality review.
The in-app EXPERIMENTAL / "not formally verified" chat banner is removed. The handshake is now formally verified internally (symbolic + computational). To be precise: an independent external audit and a FIPS-validated module remain the only unmet gates — this build does not claim "externally audited" or "FIPS-validated."
Also in this release
- Win98 boot splash — a DCS 98 startup screen (grayscale storm/flame logo) plays before the login screen while the startup jingle sounds, then fades to the desktop.
- New default wallpaper — the desktop default is now the blue 256-color-era DCS 98 scene. Only the default changes; any wallpaper you set yourself is untouched.
- Date/Time desktop widget — analog + digital, draggable, opt-in.
- Game renames — Minesweeper → Mine Detector, Pinball → DCS Space Ball.
Everything from v3.13.1-beta.1 carries forward (including the corrected pinball geometry). 505 automated tests.
Install
Download DCS98-Setup-3.13.2-beta.1.exe below, verify its SHA-256, then More info → Run anyway (unsigned, per-user, no admin).
SHA-256: 94bc12c2aed47074e6c1c26a23eb5f68c6e40f2b84715ebd1e8c9884a4c938fb
The last fully-stable build remains v3.6.8.