bitchat

permissionlesstech/bitchat

Fork 0

mirror of https://github.com/permissionlesstech/bitchat.git synced 2026-07-26 14:05:22 +00:00

Commit Graph

Author	SHA1	Message	Date
jackandGitHub	b96a41054e	Pin announce signing keys to stop mesh identity spoofing (#1349 ) TOFU-pins the Ed25519 signing key per noise key so a self-consistent announce that reuses a victim's peerID+noise key with the attacker's signing key/nickname is rejected instead of overwriting the registry and persisted identity. Complements #1432: that PR's signed-LEAVE verification reads the stored signing key this PR protects from announce-path poisoning. Rebased onto main as a single commit; swift build --build-tests green, 40/40 targeted tests incl. the spoofing e2e cases, and #1432's suites 50/50 unaffected.	2026-07-26 11:38:24 +02:00
jack GitHub jack	3eb4f2bd72	Extract BLE and chat architecture policies (#1324 ) Co-authored-by: jack <jackjackbits@users.noreply.github.com>	2026-06-02 09:01:59 +02:00

Author

SHA1

Message

Date

jackandGitHub

b96a41054e

Pin announce signing keys to stop mesh identity spoofing (#1349 )

TOFU-pins the Ed25519 signing key per noise key so a self-consistent announce that reuses a victim's peerID+noise key with the attacker's signing key/nickname is rejected instead of overwriting the registry and persisted identity. Complements #1432: that PR's signed-LEAVE verification reads the stored signing key this PR protects from announce-path poisoning.

Rebased onto main as a single commit; swift build --build-tests green, 40/40 targeted tests incl. the spoofing e2e cases, and #1432's suites 50/50 unaffected.

2026-07-26 11:38:24 +02:00

3eb4f2bd72

Extract BLE and chat architecture policies (#1324 )

Co-authored-by: jack <jackjackbits@users.noreply.github.com>

2026-06-02 09:01:59 +02:00