Today for AI
HOT RADAR
toolsHEAT 11.1°

AI CLUSTERED EVENT · 10/12/2026

Radicle Discloses Critical Protocol Flaw: Dropped Noise Keys Expose Private Repos in Plaintext, Forcing Network Rebuild

1 reports archived1 independent sourcesupdated 10/12/2026, 10:26:05
Synthesis & Latest Updates
1 Sources Cross-Validated

Decentralized code collaboration platform Radicle disclosed two critical protocol flaws that compromise confidentiality across all historical node versions. The core issue involves discarding encryption state immediately after the Noise XK handshake and keeping session keys in plaintext memory, causing Gossip metadata and Git object packs to transmit unencrypted over TCP. Lacking version negotiation for hotfixes, maintainers advise pausing public private repos and migrating to the QUIC/TLS-based Iroh stack.

LATEST/Decentralized code collaboration platform Radicle disclosed two critical protocol flaws that compromise confidentiality across all historical node versions. The core issue involves discarding encryption state immediately after the Noise XK handshake and keeping session keys in plaintext memory, causing Gossip metadata and Git object packs to transmit unencrypted over TCP. Lacking version negotiation for hotfixes, maintainers advise pausing public private repos and migrating to the QUIC/TLS-based Iroh stack.

HEAT TRENDHourly heat curve

4 fully observed hours
Now
11.1
Peak
11.811:00
24h change
–

The line compares only sources observed throughout; gap hours are interpolated to keep the trend continuous.

TIMELINECoverage timeline

Total 1 reports · Latest first
  1. InfoQ 中文T2·68 pts
    • Although Noise XK handshake derives keys via 'Split', radicle-node incorrectly discards encryption state and stores keys in plaintext memory, leaving subsequent traffic unencrypted.
    • Attackers can read private repo data on the network path and impersonate whitelisted nodes, affecting all existing node versions.
    • Lack of version negotiation fields prevents backward-compatible encryption patches, necessitating a breaking migration to Iroh (QUIC+TLS).