MeshOS Signer — offline

Private key (hex)

Paste a private key to derive its public key.

Expected public key — optional safety check Channel

custom channel key below (otherwise the public channel is used)

Display name

Your name as the app shows it — used to build the signed line "Ben: hello world".

Message text Timestamp (unix seconds)

—

Message + ending — copy this as your message

The app appends your display name automatically — the signature covers the full line including the name.

Signed ending — paste at the end of your message

Goes right after your text: type hello world [sig1:...] — the app shows it as Ben: hello world [sig1:...].

Full line with name included

For contexts where nothing adds your name — the verifier must see the exact signed text.

packet text — what clients show (the "funny characters")

Stock clients — strict (text stops at the NUL)

Lenient clients — reads past the NUL

Go-style lossy render: invalid-byte runs collapse to one �, NULs dropped — byte-exact match of the UKMesh beacon's display (it splits the name off; the junk is identical). Paste-safe display replica — use the advanced hex for real bytes.

Everything as text — timestamp + name + text + signature

Derived public key

Key id (first 8 bytes — the "short id" shown in messages)

advanced — raw bytes (for injecting into real packets)

Binary signed ending

Full signed plaintext (payload inside the packet)

Full on-air payload (channel hash + MAC + AES)

Raw signature (Ed25519, 64 bytes)

Inline signature format v1: [sig1:<unix-ts>:<pubkey 64 hex>:<signature 128 hex>] appended after the message text.
The signature covers the message as it appears with your name ("<Name>: <text>") — clients like the app append your display name for you, so you only type/paste "<text> [sig1:...]". Ed25519 over "MeshOS signed channel v1" + sha256(channelKey)[0:16] + u32le(ts) + "<Name>: <text>" — deterministic (RFC 8032).
The signer's public key travels inside the signature, so verification is self-contained and offline. When verifying: include the name part exactly as displayed (e.g. Ben: hello world [sig1:...]).

Verify a signed message

Nothing verified yet — paste a message above and hit Verify. (Uses the channel selected on the left.)