VANET-PQC reproducibility archive: bandwidth-aware post-quantum authentication for IEEE 802.11p (Falcon vs ML-DSA)

Reproducibility archive accompanying the journal article 'Bandwidth-Aware Post-Quantum Authentication for VANETs: Comparative Analysis of Falcon and ML-DSA with IEEE 802.11p Frame Constraints' (Coruh, 2026). Contents. Two zips: (1) zenodo-deposit-vanet-pqc-1.0.0.zip (~0.44 MB, 80 entries) carries the in-house Python evaluation framework (~6,200 physical lines across 14 authored scripts implementing the IEEE 802.11p MAC/PHY discrete-event simulator, the Bologna BSM driver, the RSU-aggregation header-size calculator, the analytical masked-rejection-sampling harness, the bandwidth budget analyser, the cryptographic timing aggregator, the master orchestrator and supporting utilities), the auxiliary ns-3 WAVE driver (vanet_80211p.cc + run_batch.sh), the canonical JSON measurement snapshots (Bologna PDR / latency, capacity, aggregation bandwidth, statistical analysis, ns-3 cross-check), the tools/strip_metadata_sha.py reproducibility helper, depositor-authored documentation, and the third-party SUMO scenario clone helpers (clone_sumo_scenarios.sh/.bat plus SUMO_SCENARIO_COMMIT.txt). (2) vanet-pqc-documentation.zip (~6.40 MB, 1102 entries) carries the pre-rendered Doxygen HTML site for the simulation framework plus the consolidated VANET-PQC-Documentation.pdf reference, so a reviewer can browse the code documentation without installing Doxygen. The third-party DLR-TS Bologna Acosta SUMO scenarios (~185 MB, EPL-2.0) are NOT bundled — the upstream repository is publicly available on GitHub at the pinned commit, and reviewers fetch the exact scenarios via the clone helper in one command before invoking run_all.py. This keeps both Zenodo zips well under the per-file upload limit and avoids redistributing third-party content. Reproducibility scope. A reviewer who downloads the deposit, installs the Python runtime dependencies declared in requirements.txt, and runs python run_all.py from code/python/ regenerates results/bologna_vanet_simulation.json byte-identically on the canonical Windows 11 / Python 3.12.6 environment, and within a sub-0.05 percentage-point headline-PDR drift envelope on commodity WSL2 / native Linux hosts. The full-file SHA-256 of the canonical Bologna JSON snapshot is 00af8f1dfa69adef135aa5c3dbf7db72f46c17df0a859ed3abc5127e57ec9edc and its _metadata-stripped SHA-256 (which matches across machines) is 76276efafc6ba5d65e96cd191eddccf8f594513792a8544794c64e5e7ea9afd7; both digests are pinned in the manuscript's Abstract, sections 1.4, 5.1, 6 and 7. Access. This record is published under Restricted access. The DOI and landing page are publicly resolvable but the files are gated behind a Zenodo secret access link issued by the corresponding author. During peer review the link is supplied to the journal's editorial office under separate cover (the confidential Zenodo Access Note supplement); the editorial office forwards it to the assigned reviewers. No Zenodo account is needed to follow the secret link, depositor cannot see who downloads (reviewer anonymity preserved), and the link can be rotated on request. After publication, the corresponding author continues to issue secret access links to qualified researchers on reasonable e-mail request ([e-mail]). Licensing (per-component disclosure in LICENSE-NOTES.md). Depositor-authored content (Python evaluation framework, ns-3 driver, build scripts, JSON snapshots, depositor-authored documentation): CC-BY-4.0. Third-party DLR-TS Bologna scenarios fetched at run time by the clone helper: EPL-2.0 (retained verbatim from the upstream DLR-TS/sumo-scenarios repository; the helper does not relicense them). Runtime dependencies (NumPy, SciPy, liboqs, pypdf) are installed by the reviewer and carry permissive licences (BSD-3-Clause / MIT) — they are not bundled. Integrity. SHA-256 manifest in SHA256SUMS.txt at the deposit record level covers the zip and the canonical Bologna JSON inside it. Independent verifiers can recompute the digests on download.