diff options
Diffstat (limited to 'packages/meshbay-common/src/meshbay_common/crypto.py')
| -rw-r--r-- | packages/meshbay-common/src/meshbay_common/crypto.py | 9 |
1 files changed, 8 insertions, 1 deletions
diff --git a/packages/meshbay-common/src/meshbay_common/crypto.py b/packages/meshbay-common/src/meshbay_common/crypto.py index b2ff3c0..eadb42b 100644 --- a/packages/meshbay-common/src/meshbay_common/crypto.py +++ b/packages/meshbay-common/src/meshbay_common/crypto.py @@ -225,7 +225,14 @@ def decrypt_keystore(iv: bytes, ciphertext: bytes, tag: bytes, key: bytes) -> by def sign_chunk(sk_node: Ed25519PrivateKey, chunk_index: int, nonce: bytes, ct_hash: bytes) -> bytes: - """Sign chunk metadata. Payload: chunk_index || nonce || ct_hash.""" + """ + Sign chunk metadata. Payload: chunk_index || nonce || ct_hash. + + Despite the name, this no longer signs file chunks — Phase 9.15 dropped per-chunk + signatures on the WebRTC path and 2026-09-03 dropped the QUIC copy that had been + left behind. Its one caller is `GroupIndex.serialize()`, which signs a whole index + envelope under the pseudo-index `INDEX_CHUNK`. + """ payload = chunk_index.to_bytes(4, "big") + nonce + ct_hash return sk_node.sign(payload) |