[2.8] Server-side XEdDSA signature verification (audit)
Nobody has claimed this yet.
Assessment
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Newbie friendliness
- 25/100
Research direction
The signed-bytes layout to reproduce is in the firmware file CryptoEngine.cpp at lines 106-175, covering version, from, id, to, portnum, request_id, reply_id, emoji, bitfield, flags and payload, in that order. Read the firmware code first, then the 2.8.2 Balanced-policy fixtures the first acceptance criterion names. Done means those fixtures verify and a verification failure is logged without blocking ingest. This depends on pskillen/meshflow-api#446 (SG-2), which is still open.
Written by the indexing model from the issue text.
Description
Part of pskillen/meshflow-api#437 (Meshtastic 2.8.x support). Code: SG-4 · Priority: Nice · Size: M
Summary
Verify signatures server-side for audit, following the signed-bytes layout in firmware CryptoEngine.cpp:106-175 (version, from, id, to, portnum, request_id, reply_id, emoji, bitfield, flags, payload).
Acceptance criteria
- Verifies real 2.8.2 Balanced-policy fixtures
- Never blocks ingest
Depends on: pskillen/meshflow-api#446 (SG-2)
- Dominant language
- Python
- Stars
- 1
- Forks
- 0
- Avg merge
- 1d 20h
- Merged PRs (30d)
- 5
Getting set up
- Ships a Dockerfile or Docker Compose file
- Has a pull request template
- No contributing guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from pskillen/meshflow-api
-
enhancement meshtastic-2.8
Difficulty 2/5 1-3 hours Newbie friendliness 62/100
pskillen/meshflow-api#459 ·
-
enhancement meshtastic-2.8
Difficulty 3/5 1-2 days Newbie friendliness 35/100
pskillen/meshflow-api#465 ·
-
enhancement meshtastic-2.8
Difficulty 4/5 3-5 days Newbie friendliness 22/100
pskillen/meshflow-api#464 ·
-
enhancement meshtastic-2.8
Difficulty 4/5 3-5 days Newbie friendliness 35/100
pskillen/meshflow-api#463 ·
-
enhancement meshtastic-2.8
Difficulty 3/5 1-2 days Newbie friendliness 45/100
pskillen/meshflow-api#462 ·
All issues in pskillen/meshflow-api
Similar issues
-
Difficulty 2/5 1-3 hours Newbie friendliness 72/100
Maintainers usually reply within 1 day
-
enhancement good first issue
Difficulty 2/5 1-3 hours Newbie friendliness 78/100
elviskahoro/sdk-python-attio#144 · 1 comment ·
Maintainers usually reply within 1 day
-
Difficulty 2/5 1-3 hours Newbie friendliness 84/100
Maintainers usually reply within 1 day
-
RenyiELBO raises TypeError when model has no sample sitesPossibly taken @alibb007 claimed this today. Open
Difficulty 1/5 Under an hour Newbie friendliness 85/100
Maintainers usually reply within 1 day
-
[Bug]: Four evaluation scripts unpack init_memmachine_params's five return values into three namesOpen
Difficulty 1/5 Under an hour Newbie friendliness 88/100
MemMachine/MemMachine#1911 ·
Maintainers usually reply within 3 days