Skip to content

v3.13.2-beta.1 — Reconnect hardening verified · chat leaves EXPERIMENTAL · Win98 boot splash

Choose a tag to compare

@Dezirae-Stark Dezirae-Stark released this 09 Jun 02:54
· 273 commits to main since this release

DCS98 v3.13.2-beta.1 — Reconnect hardening verified · chat leaves EXPERIMENTAL · Win98 boot splash

Tor P2P chat: reconnect path formally verified — the EXPERIMENTAL banner is gone

This closes the two remaining internal audit findings on the handshake:

  • HIGH-1 — a dropped reconnect could permanently strand a contact (recoverable only by a fresh out-of-band invite). Reconnect now self-heals in-band: an authenticated prekey_unknown Reject + one bounded retry.
  • MED-2 — reconnect had no formal model and no DoS pre-gate. It is now DoS-gated by a per-contact keyed MAC (mac_R) with an enforcement bootstrap (the responder only enforces after it has verified one valid MAC, so a half-completed reconnect can never lock a peer out) and a split, deduped rate-limiter; the gate key is stable per epoch.

Reconnect is now verified to the same standard as first-contact:

  • ProVerif symbolic — reconnect + the Reject branch: injective I-authenticates-R, recovery soundness (a forged/replayed Reject can't make the initiator complete against an attacker-chosen prekey), and downgrade / accept↔reject substitution resistance.
  • CryptoVerif computational — mac_R gate unforgeability (no valid MAC without the per-contact key).

The design cleared three independent adversarial-review passes before a line of implementation was written, and each implementation task went through spec + code-quality review.

The in-app EXPERIMENTAL / "not formally verified" chat banner is removed. The handshake is now formally verified internally (symbolic + computational). To be precise: an independent external audit and a FIPS-validated module remain the only unmet gates — this build does not claim "externally audited" or "FIPS-validated."

Also in this release

  • Win98 boot splash — a DCS 98 startup screen (grayscale storm/flame logo) plays before the login screen while the startup jingle sounds, then fades to the desktop.
  • New default wallpaper — the desktop default is now the blue 256-color-era DCS 98 scene. Only the default changes; any wallpaper you set yourself is untouched.
  • Date/Time desktop widget — analog + digital, draggable, opt-in.
  • Game renames — Minesweeper → Mine Detector, Pinball → DCS Space Ball.

Everything from v3.13.1-beta.1 carries forward (including the corrected pinball geometry). 505 automated tests.

Install

Download DCS98-Setup-3.13.2-beta.1.exe below, verify its SHA-256, then More info → Run anyway (unsigned, per-user, no admin).

SHA-256: 94bc12c2aed47074e6c1c26a23eb5f68c6e40f2b84715ebd1e8c9884a4c938fb

The last fully-stable build remains v3.6.8.