Skip to content

Conversation

@callebtc
Copy link
Collaborator

@callebtc callebtc commented Jan 4, 2026

Summary

This PR enforces mandatory Ed25519 signature verification for all incoming packets in SecurityManager.

Changes

  • Refactored verifyPacketSignatureWithLogging to verifyPacketSignature with a boolean return type.
  • Updated validatePacket to reject packets that fail signature verification (return false).
  • Added special handling for ANNOUNCE packets to extract the signing public key from the payload, allowing initial announcements to be verified before the peer is known.
  • Packets with missing signatures or invalid signatures are now dropped with a warning log.

Impact

  • Increases network security by ensuring all processed packets are authentically signed by the sender.

@callebtc callebtc merged commit 55b2d68 into main Jan 4, 2026
3 checks passed
@callebtc callebtc deleted the enforce-packet-signatures branch January 4, 2026 11:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants