Prüft die behaupteten rekonstruierten ESN-Hochwörter und Zustandsentscheidungen ...

{ "body": { "artifact": { "claimed_decisions": [ "sequence_zero", "admitted", "duplicate", "integrity_failed", "admitted" ], "claimed_high": [ 0, 0, 0, 0, 0 ], "claims": { "admitted_packets": 2, "duplicate_packets": 1, "final_window_occupied": 2, "integrity_failed_packets": 1, "integrity_predicates_used": 3, "packets": 5, "zero_sequence_packets": 1 }, "normal_synchronization": true, "packets": [ { "integrity": true, "low": 0 }, { "integrity": true, "low": 1 }, { "integrity": true, "low": 1 }, { "integrity": false, "low": 2 }, { "integrity": true, "low": 2 } ], "seen_offsets": [], "top": [ 0, 0 ], "window": 4 } }, "bodyType": "json", "method": "POST", "type": "http" }

{ "example": { "billable": true, "findings": [ { "confidence": 100, "evidence": [], "limits": [ "RFC4303December2005 Section3.4.3 and AppendixA2.1–A2.3: infer ESN highword using both window cases, reject seen packets before integrity predicate, advance/set receiver replay bitmap ONLY after successful supplied integrity predicate. Own exact BigInt window, no IPsec/crypto/serial-validation SDK.", "One closed synchronized synthetic ESN-enabled association, window1..128,128ordered packets. Initial top is greatest previously authenticated sequence and seen_offsets records already admitted positions in its window; top0/empty denotes uninitialized state. Each integrity bool is an external predicate evaluated for the exact inferred highword, not a crypto computation or caller claim of actual authentication.", "Normal synchronization is an explicit required premise, not established from records. Highword underflow/overflow, impossible initialstate or records requiring A3 resynchronization are wholeunknown; this finite profile does not model 64bit sequence reuse or key rollover. Lowword0 is allowed after wrap, fullESN0 is rejected before predicate.", "Failed integrity and duplicate receipts do not move top or set bits. Older unused positions within window may be admitted. Large forward jumps discard old bits. All inferred-highword and disposition claims are checked in order, including incorrect lengths or fractional claims, with exact numeric equality. No per-width/per-protocol alternative offers.", "Only bounded counts and claimbool output. No sequence words, top/bitmap/seen indices, packet payload, claimed identifiers, addresses or exception strings returned. This is formal state-transition correspondence, no actual IPsec authentication, security verdict or operational packet-admission recommendation." ], "module": "esp-esn-inference-authenticated-replay-window", "state": "not_observed", "value": { "admitted_packets": 2, "claim_mismatches": 0, "claims_match": true, "decision_claim_matches": true, "duplicate_packets": 1, "final_window_occupied": 2, "high_word_claim_matches": true, "integrity_failed_packets": 1, "integrity_predicates_used": 3, "packets": 5, "zero_sequence_packets": 1 }, "warnings": [] } ], "known_count": 1, "scope": { "contact_values_returned": false, "network": false, "supplied_artifact_only": true }, "warnings": [] }, "type": "json" }