{
  "clean_slate": {
    "architecture_independent_core": [
      "credential-replay",
      "dos-clogging",
      "key-reinstall",
      "pake-dictionary",
      "roam-replay"
    ],
    "clean_slate_min_cover_K": 5,
    "core_survives_any_architecture": true,
    "n_core": 5,
    "n_surface_specific": 8,
    "retrofit_min_cover_K": 13,
    "sidestep_escapes_entirely": false,
    "surface_specific_avoidable": [
      "beacon-forgery",
      "downgrade",
      "eap-downgrade",
      "fec-downgrade",
      "fragmentation",
      "mlo-crosslink",
      "policy-downgrade",
      "tail-starvation"
    ]
  },
  "fragmentation": {
    "compressed_credential_min_fragments": 3,
    "fragmentation_forced_regardless_of_kem_compression": true,
    "frame_budget_bytes": 2304,
    "kem_compressed_40pct": {
      "ct": 652,
      "pk": 710
    },
    "kem_size_conceded_as_tradeoff": true,
    "mldsa65_sig_bytes": 3309,
    "signature_alone_exceeds_frame": true,
    "signature_alone_min_fragments": 2
  },
  "model_m_crossref": {
    "M_covers_external_surface": true,
    "n_external_attacks": 10,
    "n_mapped_to_modeled_family": 10,
    "rows": [
      {
        "attack": "KRACK CVE-2017-13077/78/80",
        "claimed_family": "krack_retransmission",
        "mapped": true
      },
      {
        "attack": "FragAttacks CVE-2020-24586/87/88",
        "claimed_family": "fragment_splice",
        "mapped": true
      },
      {
        "attack": "Dragonblood CVE-2019-9494/96",
        "claimed_family": "capability_spoof",
        "mapped": true
      },
      {
        "attack": "Kr00k CVE-2019-15126",
        "claimed_family": "krack_retransmission",
        "mapped": true
      },
      {
        "attack": "Terrapin CVE-2023-48795 (downgrade)",
        "claimed_family": "suite_rollback",
        "mapped": true
      },
      {
        "attack": "harvest-now-decrypt-later (OWE)",
        "claimed_family": "owe_quantum_recoverable",
        "mapped": true
      },
      {
        "attack": "hybrid-combiner downgrade",
        "claimed_family": "combiner_downgrade",
        "mapped": true
      },
      {
        "attack": "KEM implicit-auth (no confirm)",
        "claimed_family": "kem_impersonation_no_confirm",
        "mapped": true
      },
      {
        "attack": "cross-protocol confusion",
        "claimed_family": "cross_protocol_confusion",
        "mapped": true
      },
      {
        "attack": "MLO cross-link key confusion",
        "claimed_family": "mlo_key_crosslink",
        "mapped": true
      }
    ],
    "unmapped_candidate_new_families": []
  },
  "verdict": "real"
}