Skip to content

[BUG] MeshCore #channel secret not deterministically derived — random key shown instead #3606

Description

@Pakmel

Version: v4.11.3

Steps to reproduce:

  1. Open MeshMonitor and go to a MeshCore source
  2. Click "Add channel"
  3. Type #bot as the channel name
  4. Note the secret shown
  5. Cancel and repeat 3 times

Expected behavior:
#bot should always produce the same 32-char hex key derived via SHA-256 of the name, and the key should update immediately when the name changes.

Actual behavior:
A different random key is shown each time. The key does not update when the channel name is changed. Three separate attempts produced three completely different keys for the same #bot name:

  • 7d81cd9df13a152506ab1a36b5604b87
  • 1e8fdf3de67a9d01cfcbda1a1961724a
  • e16510550f7c984bea37d0005b28c4a1

This means the useEffect that should derive the key when the name starts with # is either not firing or is being overwritten by the initial random value.

This causes hashtag channels created in MeshMonitor to use a wrong key that does not match the key generated by the MeshCore app or other clients, making the channels incompatible.

Platform: Browser (Windows), MeshMonitor running in Docker on Linux

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions