Skip to main content

verify_signed

huddle_core::crypto

Function verify_signed 

Source 
pub fn verify_signed(env: &SignedRoomMessage) -> Result<(RoomMessage, String)>
Expand description

Verify a SignedRoomMessage envelope:

  1. The asserted fingerprint must equal the fingerprint derived from ed25519_pubkey_b64 — closes the “claim someone else’s fingerprint but sign with your own key” attack.
  2. The Ed25519 signature must verify over the decoded payload_b64.
  3. The payload must deserialize as a RoomMessage.

Returns the inner message and the (verified) sender fingerprint on success. Caller should still check that the fingerprint is one they expect for this context (e.g. an owner for BanMember).