permissionlesstech/bitchat-android
1
0
Fork 0
mirror of https://github.com/permissionlesstech/bitchat-android.git synced 2026-07-24 22:45:20 +00:00
Code Issues Packages Projects Releases Wiki Activity

verift signature only for ANNOUNCE, MESSAGE, and FILE_TRANSFER like ios (#552)

Browse Source
This commit is contained in:
callebtc
2026-01-05 11:22:06 +07:00
committed by GitHub
parent eeaabf487f
commit 95385daaf9
1 changed files with 8 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
app/src/main/java/com/bitchat/android/mesh/SecurityManager.kt
+8
View File
@@ -231,6 +231,14 @@ class SecurityManager(private val encryptionService: EncryptionService, private
*/ */
private fun verifyPacketSignature(packet: BitchatPacket, peerID: String): Boolean { private fun verifyPacketSignature(packet: BitchatPacket, peerID: String): Boolean {
try { try {
// only verify ANNOUNCE, MESSAGE, and FILE_TRANSFER
if (MessageType.fromValue(packet.type) !in setOf(
MessageType.ANNOUNCE,
MessageType.MESSAGE,
MessageType.FILE_TRANSFER
)) {
return true
}
// 1. Mandatory Signature Check // 1. Mandatory Signature Check
if (packet.signature == null) { if (packet.signature == null) {
Log.w(TAG, "❌ Signature check for $peerID: NO_SIGNATURE (packet type ${packet.type})") Log.w(TAG, "❌ Signature check for $peerID: NO_SIGNATURE (packet type ${packet.type})")