What I noticed about Meshtastic is that you can create your own encrypted channels and the mesh can forward messages for you, even if they can’t read them.
But they forgot to add a MAC to the encryption protocol. It’s AES-CTR, so anyone who forwards your message can just arbitrarily change it!
But they forgot to add a MAC to the encryption protocol. It’s AES-CTR, so anyone who forwards your message can just arbitrarily change it!
January 26, 2025 at 7:03 PM
What I noticed about Meshtastic is that you can create your own encrypted channels and the mesh can forward messages for you, even if they can’t read them.
But they forgot to add a MAC to the encryption protocol. It’s AES-CTR, so anyone who forwards your message can just arbitrarily change it!
But they forgot to add a MAC to the encryption protocol. It’s AES-CTR, so anyone who forwards your message can just arbitrarily change it!
Share the risk, share the exploit? 😂
January 22, 2025 at 1:05 PM
Share the risk, share the exploit? 😂