meshcore-analyzer

mirror of https://github.com/Kpa-clawbot/meshcore-analyzer.git synced 2026-04-25 08:42:08 +00:00

Files

you bcab31bf72 docs: AES-128-ECB security analysis — block-level vulnerability assessment

Formal analysis of MeshCore's ECB encryption for channel and direct messages.
Reviewed by djb and Dijkstra expert personas through 3 revisions.

Key findings:
- Block 0 has accidental nonce (4-byte timestamp) preventing repetition
- Blocks 1+ are pure deterministic ECB with no nonce — vulnerable to
  frequency analysis for repeated message content
- Partial final block attack: zero-padding reduces search space
- HMAC key reuse: AES key is first 16 bytes of HMAC key (same material)
- Recommended fix: switch to AES-128-CTR mode

2026-04-05 00:44:21 +00:00

proposals

docs: AES-128-ECB security analysis — block-level vulnerability assessment

2026-04-05 00:44:21 +00:00

screenshots

readme: lead with GIF, resize iOS screenshot to 400px

2026-03-20 01:05:17 +00:00

specs

feat: customizer v2 — event-driven state management (#502 ) (#503 )

2026-04-02 21:14:38 -07:00

api-spec.md

chore: normalize all files to LF line endings