38c146c477
- vendor orlp/ed25519 (lib/ed25519, MIT — the exact lib MeshCore uses) for Curve25519 ECDH key exchange; switch identity/advert signing to it (same seed -> same pubkey, so peers still recognise us; sigs are byte-identical) - store pubkeys from heard MeshCore adverts (contacts table) so a DM's 1-byte src_hash can be resolved to a full sender key - decode PAYLOAD_TYPE_TXT_MSG: ECDH shared secret, HMAC-SHA256 MAC check, AES-128-ECB decrypt, parse timestamp+text, drive the message modal - verified end-to-end: real MeshCore node -> "hello from HP Pro Desk" decoded Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
32 lines
828 B
C
32 lines
828 B
C
#include "ed_25519.h"
|
|
#include "sha512.h"
|
|
#include "ge.h"
|
|
#include "sc.h"
|
|
|
|
|
|
void ed25519_sign(unsigned char *signature, const unsigned char *message, size_t message_len, const unsigned char *public_key, const unsigned char *private_key) {
|
|
sha512_context hash;
|
|
unsigned char hram[64];
|
|
unsigned char r[64];
|
|
ge_p3 R;
|
|
|
|
|
|
sha512_init(&hash);
|
|
sha512_update(&hash, private_key + 32, 32);
|
|
sha512_update(&hash, message, message_len);
|
|
sha512_final(&hash, r);
|
|
|
|
sc_reduce(r);
|
|
ge_scalarmult_base(&R, r);
|
|
ge_p3_tobytes(signature, &R);
|
|
|
|
sha512_init(&hash);
|
|
sha512_update(&hash, signature, 32);
|
|
sha512_update(&hash, public_key, 32);
|
|
sha512_update(&hash, message, message_len);
|
|
sha512_final(&hash, hram);
|
|
|
|
sc_reduce(hram);
|
|
sc_muladd(signature + 32, hram, private_key, r);
|
|
}
|