Back to matrix

F07-MT: Yes

Rationale

The receiver verifies direct-message AEAD using the previously confirmed sender public key and its own private key. This proves the cryptographic sender under that key binding, not civil identity, freshness or universal trust in discovered NodeInfo.

Assessment method

Documentary and code analysis; no execution

Source context

Meshtastic official documentation / pinned firmware 8e6a88d

Outstanding qualification

Exercise confirmed-key, changed-key, forged-ciphertext and replay cases separately; this documentary decision does not establish freshness.

Public sources