Radicle Discloses Critical Flaws Exposing Private Repositories in Plain Text

Radicle, a peer-to-peer code collaboration platform, has revealed two severe security flaws in its core protocol that jeopardize the confidentiality of private repositories. These vulnerabilities, present across all node versions, permit attackers to intercept and read sensitive repository data in plain text, as well as assume the identities of authorized nodes.

The root cause lies in Radicle's implementation of the Noise Protocol Framework, a cryptographic handshake mechanism. Despite initiating a three-message Noise XK handshake pattern over TCP sockets, the daemon fails to retain the resulting session keys in memory. Consequently, all subsequent traffic, encompassing gossip metadata, routing tables, and Git object transmissions, is transmitted in unencrypted form.

Moreover, an authentication validation flaw exists within the connection handshake. Malicious actors can fabricate Node IDs linked to allow-listed peers, enabling them to intercept valid Node IDs transmitted in cleartext and subsequently impersonate authorized peers to steal private repositories directly from seed nodes.

Radicle's architects have acknowledged that rectifying the wire protocol is impractical without causing connection disruptions due to the absence of version negotiation fields. Therefore, the project's maintainers have decided to discontinue the current Noise transport layer in favor of Iroh, a new peer-to-peer networking stack utilizing QUIC and TLS. This transition will render the existing version incompatible, necessitating a complete overhaul of all Radicle deployments.