Mix Networks Friday — July 31 2026 Weekly Update

TL;DR — This Week

• I2P: I2P 2.13.0 released July 20, 2026 — landmark post-quantum upgrade: full PQ protection on primary NTCP2 transport (against harvest-now-decrypt-later), constant-time crypto library, legacy SSU1 removal, per-tunnel bandwidth limits, performance/usability fixes. Builds directly on 2.12.0's SSU2-PQ work.
• Nym / NymVPN: v2026.11 (July 14 rollout) introduces Mixnet Tuning (beta) — live controls for cover traffic rate (0.7–2 Mbps) and packet mixing delay (0–200 ms) to dynamically balance latency and anonymity. Also: Server Families for verifiable decentralization, Geo-exclusion (beta), faster connections. Linux repo address change noted July 20. Zcash wallet mixnet integration discussions heating up.
• Tor / Arti: Steady Browser releases — 15.0.18 (July 14), 15.0.19 (July 21), 16.0a9 alpha (July 23). Focus on Firefox ESR security backports, NoScript updates, Android size optimizations, and build-system cleanup. Arti/CGO stabilization continues in background.
• Research & Papers: No blockbuster new academic papers surfaced; emphasis on practical PQ deployment and user-tunable anonymity parameters. Broader interest in composability (wallets, messengers, mesh overlays).
• Ecosystem: Nym Edge integration (prior) + new tuning features demonstrate maturing "privacy by default" tooling. I2P's PQ transport positions it strongly for long-term resistance.
• Freedom-tech takeaway: I2P 2.13.0 is a must-update for forward-looking anonymity. NymVPN now offers the most granular mixnet control in production. Layer Tor for everyday browsing, I2P or tuned Nym for high-threat metadata defense. Monitor Zcash/Nym and post-quantum migration roadmaps.

The Week in Detail

I2P: 2.13.0 — Full Post-Quantum on Main Transport

I2P 2.13.0 (July 20, 2026) marks a significant step in post-quantum readiness:

• NTCP2-PQ fully enabled on the primary transport — protects against future quantum adversaries harvesting traffic today ("harvest now, decrypt later").
• Cryptography library updated with constant-time operations to mitigate timing attacks.
• Legacy SSU1 transport fully removed.
• New per-tunnel bandwidth limits prevent any single tunnel from starving the connection.
• General performance, console usability, and bug fixes.

This release follows 2.12.0 (April 2026, which introduced SSU2-PQ and Sybil mitigations) and 2.11.0 (February, Java 17+ requirement, initial PQ ratchet).

Primary Sources: - Official release: https://i2p.net/en/blog/2026/07/20/i2p-2.13.0-release/ - I2P blog / roadmap: https://i2p.net/en/get-involved/roadmap/ (next target 2.14.0 late Oct 2026) - GitHub releases: https://github.com/i2p/i2p.i2p/releases

Maturity: Production network with ~15k–20k routers. Strong ongoing PQ focus makes I2P one of the most future-proof low-latency anonymity networks. Recommended update for all users.

Nym: v2026.11 Mixnet Tuning & Decentralization Features

NymVPN v2026.11 (live mid-July 2026) gives users direct control over the mixnet's core anonymity knobs for the first time:

• Mixnet Tuning (beta): Adjustable parameters
• Cover traffic rate: 0.7 Mbps – 2 Mbps ("Send traffic continuously")
• Packet mixing profile / delay per mix node: 0 ms – 200 ms
• Changes apply mid-session without reconnect; lets users trade speed for stronger traffic analysis resistance on demand.
• Server Families: New system for verifiable decentralization and fair usage.
• Geo-exclusion (beta): Practical censorship resistance feature.
• UX/performance wins: faster connection times, app icon disguises (iOS), etc.
• Linux users: repository address change announced July 20, 2026.

Ongoing chatter around planned Zcash wallet integrations (mixnet routing on top of on-chain privacy) and Nym Innovation Fund grants.

Primary Sources: - v2026.11 announcement: https://nym.com/blog/nymvpn-v2026.11 - Mixnet Tuning deep-dive: https://nym.com/blog/mixnet-tuning - Nym forum: https://forum.nym.com/ - Nym 2026 Roadmap: https://nym.com/blog/nym-roadmap-2026

Maturity: Production mainnet since 2022 with incentivized nodes. The new tuning feature moves Nym from "set-and-forget" to tunable anonymity — a major usability win for power users while keeping defaults strong.

Tor Project: Security Cadence & Browser Polish

• Tor Browser 15.0.18 (July 14) and 15.0.19 (July 21): Firefox ESR security updates, NoScript refreshes, platform fixes.
• Tor Browser 16.0a9 alpha (July 23): Continued alpha track with similar security backports, Android optimizations, and build refinements.
• No major new Tor daemon or Arti releases highlighted this fortnight; focus remains on CGO stabilization, congestion control, and Rust migration for onion services.

Primary Sources: - Tor Blog releases: https://blog.torproject.org/category/releases/ - Metrics & downloads: https://metrics.torproject.org / https://www.torproject.org/download/

Maturity: Most mature and largest anonymity network (~7k relays, millions of users). Excellent for low-latency use cases; pair with stronger mixnets when global passive adversary is the threat model.

Other Notes & Cross-Project Signals

• Continued mentions of Nym mixnet transports in projects like FIPS (Nostr-related) and experimental OS/mesh work.
• Broader post-quantum interest aligns with I2P and Nym efforts (see also 10-Post-Quantum vault section).
• No major new academic papers on mixnet theory surfaced in this window; engineering focus is on deployable PQ and user controls.

Evidence at a Glance