vault / bitchat / v1.7.1

bitchat @ v1.7.1

integrity

size: 14.6 MiB
downloaded: 2026-07-31 14:49 UTC
last checked: 2026-07-31 14:49 UTC

source https://github.com/permissionlesstech/bitchat · available · github

release notes

bitchat 1.7.1 is a security and reliability release. Every change below was field-verified on devices before tagging.

Security

Noise sessions are bound to claimed peer identities, and leave messages must be signed (#1432). A peer can no longer complete a handshake claiming someone else's ID and receive DMs encrypted for them.
Private media is encrypted before BLE fragmentation (#1434) — DM photos and voice notes no longer cross the mesh as plaintext; relays never see the bytes.
Announce signing keys are TOFU-pinned against mesh identity spoofing (#1349). Relayed public messages from a claimed sender are rejected until a verified announce is seen — fail closed.
Identity keys are now device-bound (ThisDeviceOnly, never synchronized) (#1431). They cannot be extracted via backup or cloud sync — and consequently an identity no longer survives migrating to a new phone or deleting and reinstalling the app. Existing installs migrate automatically on first unlock; nothing to do on upgrade.
Panic wipe is deterministic and complete (#1431), and what a locked or seized device reveals is reduced across the board (#1484, #1552 — media now carries an explicit file-protection class, chosen so locked-device mesh receive keeps working).
Shared content requires review before import (#1430). Hostile-network resilience plus per-release source verifiability (#1486, #1488) — every tagged release ships a SOURCE-MANIFEST.txt; see docs/VERIFYING-A-BUILD.md.

Reliability

The DM pipeline survives the hard cases: atomic Noise reconnects, early-ciphertext preservation, durable delivery receipts, retry after key replacement, transactional media deletion, conversations kept canonical across transport aliases and alive across Bluetooth toggles (#1460–#1468, #1462).
BLE transport re-architecture into a single engine domain with a deterministic multi-node simulation harness (#1498 series). Peer-ID rotation no longer leaves ghost identities — on either link of a dual-link pair (#1554) or across a reconnect after rotation (#1566).
A restore-path deadlock that could freeze the app on relaunch is fixed (#1425), and a courier-storm amplification with it.

New & fixed

Persian localization (فارسی) and an in-app language picker (#1443).
Nearby notes are tap-to-reveal — the location subscription is consent-gated (#1422).
Verified seal next to names you've verified (#1506); blocked people excluded from @-mention suggestions (#1543).
The composer keeps focus after sending with the return key (#1490); low-precision geohashes resolve at country level (#1044); people-sheet environment hardening (#1567).

What's Changed

Quality pass on the 1.7.0 batch: fix confirmed bugs, bump to 1.7.1 by @jackjackbits in https://github.com/permissionlesstech/bitchat/pull/1418
Bridge dedup: content-derived stable mesh message ID by @jackjackbits in https://github.com/permissionlesstech/bitchat/pull/1419
PTT hardening: per-peer burst keys + live-capture storage quota by @jackjackbits in https://github.com/permissionlesstech/bitchat/pull/1420
Close forged-directness link-rebind DoS on DM routing by @jackjackbits in https://github.com/permissionlesstech/bitchat/pull/1421
Nearby notes: tap-to-reveal (consent-gate the location subscription) + subscription hygiene by @jackjackbits in https://github.com/permissionlesstech/bitchat/pull/1422
Fix restore-path main↔bleQueue deadlock and courier drop amplification by @jackjackbits in https://github.com/permissionlesstech/bitchat/pull/1425
Consolidate duplicate BLE links after restore; duplicate fragment-stream suppression; onChange coalescing by @jackjackbits in https://github.com/permissionlesstech/bitchat/pull/1426
Harden PTT audio and the 1.7.1 release by @jackjackbits in https://github.com/permissionlesstech/bitchat/pull/1423
fix: use country-level resolution for low-precision geohashes by @malkovitc in https://github.com/permissionlesstech/bitchat/pull/1044
Harden public intake bounds against untrusted growth by @Chessing234 in https://github.com/permissionlesstech/bitchat/pull/1451
Add Persian (fa) localization and an in-app language picker by @RodsF1 in https://github.com/permissionlesstech/bitchat/pull/1443
Make panic wipe deterministic and device-bound by @jackjackbits in https://github.com/permissionlesstech/bitchat/pull/1431
Bind Noise sessions to claimed peer identities by @jackjackbits in https://github.com/permissionlesstech/bitchat/pull/1432
Run iOS tests and repair coverage reporting by @jackjackbits in https://github.com/permissionlesstech/bitchat/pull/1429
Make developer cleanup artifact-only by @jackjackbits in https://github.com/permissionlesstech/bitchat/pull/1433
Avoid index rebuilds at conversation cap by @jackjackbits in https://github.com/permissionlesstech/bitchat/pull/1435
Route GeoRelay updates through reviewed data by @jackjackbits in https://github.com/permissionlesstech/bitchat/pull/1436
perf: verify Nostr inbound signatures once, off the main actor by @jackjackbits in https://github.com/permissionlesstech/bitchat/pull/1352
Fix BLE identity state races by @jackjackbits in https://github.com/permissionlesstech/bitchat/pull/1428
Pin announce signing keys to stop mesh identity spoofing by @jackjackbits in https://github.com/permissionlesstech/bitchat/pull/1349
Require review before importing shared content by @jackjackbits in https://github.com/permissionlesstech/bitchat/pull/1430
Deflake GeoRelayDirectoryTests under constrained runners by @jackjackbits in https://github.com/permissionlesstech/bitchat/pull/1479
Encrypt private media before BLE fragmentation by @jackjackbits in https://github.com/permissionlesstech/bitchat/pull/1434
Make nearby notes tests parallel-safe by @jackjackbits in https://github.com/permissionlesstech/bitchat/pull/1471
Relabel private Nostr envelopes honestly in docs; harden legacy envelope validation by @jackjackbits in https://github.com/permissionlesstech/bitchat/pull/1480
Make ordinary Noise reconnects atomic and race-safe by @jackjackbits in https://github.com/permissionlesstech/bitchat/pull/1463
Preserve early Noise ciphertext across reconnect promotion by @jackjackbits in https://github.com/permissionlesstech/bitchat/pull/1464
Deliver live DM transport events synchronously by @jackjackbits in https://github.com/permissionlesstech/bitchat/pull/1465
Persist authenticated private-media delivery receipts by @jackjackbits in https://github.com/permissionlesstech/bitchat/pull/1466
Retry confirmed private media after reconnect by @jackjackbits in https://github.com/permissionlesstech/bitchat/pull/1467
Make private-media deletion transactional by @jackjackbits in https://github.com/permissionlesstech/bitchat/pull/1468
Keep open DMs alive across Bluetooth settings by @jackjackbits in https://github.com/permissionlesstech/bitchat/pull/1460
Keep DMs canonical across transport aliases by @jackjackbits in https://github.com/permissionlesstech/bitchat/pull/1461
Retry unacknowledged DMs after Noise replacement by @jackjackbits in https://github.com/permissionlesstech/bitchat/pull/1462
Harden iOS-sim CI: destination fallback + Noise reconnect test determinism by @jackjackbits in https://github.com/permissionlesstech/bitchat/pull/1483
docs: correct inaccurate privacy and metadata claims by @jackjackbits in https://github.com/permissionlesstech/bitchat/pull/1485
Harden what a locked or seized device gives away by @jackjackbits in https://github.com/permissionlesstech/bitchat/pull/1484
Keep working when the network is hostile, and make the app verifiable by @jackjackbits in https://github.com/permissionlesstech/bitchat/pull/1486
Close the three holes the #1486 review found by @jackjackbits in https://github.com/permissionlesstech/bitchat/pull/1488
Keep the composer focused after sending with the return key by @jackjackbits in https://github.com/permissionlesstech/bitchat/pull/1490
Add a real security policy by @jackjackbits in https://github.com/permissionlesstech/bitchat/pull/1489
Deflake CI, and make the flake class unrepeatable by @jackjackbits in https://github.com/permissionlesstech/bitchat/pull/1491
Add Play Store link to README by @sashko in https://github.com/permissionlesstech/bitchat/pull/1524
BLE transport architecture V3: one engine domain, capability ports, feature-owned state by @jackjackbits in https://github.com/permissionlesstech/bitchat/pull/1498
Defer alert-binding dismissal writes out of the view update by @jackjackbits in https://github.com/permissionlesstech/bitchat/pull/1537
Link layer slice 1: extract the central-role radio policy into BLERadioController by @jackjackbits in https://github.com/permissionlesstech/bitchat/pull/1539
Link layer slice 2: cohere link-auth state and split bindings from the physical store by @jackjackbits in https://github.com/permissionlesstech/bitchat/pull/1540
Link layer slice 3: bindings and link-auth become engine-owned (the option-B domain flip) by @jackjackbits in https://github.com/permissionlesstech/bitchat/pull/1547
Link layer slice 4: deterministic multi-node mesh simulation (and the panic-announce bug it caught) by @jackjackbits in https://github.com/permissionlesstech/bitchat/pull/1548
Link layer slice 5: BLELinkEvent — the port has a name, the delegates have their own files by @jackjackbits in https://github.com/permissionlesstech/bitchat/pull/1551
Fix #1538: release stale bindings on rotation instead of leaving a ghost identity by @jackjackbits in https://github.com/permissionlesstech/bitchat/pull/1554
Fix $$ escaping that broke every Xcode just recipe by @jozanek in https://github.com/permissionlesstech/bitchat/pull/1525
Fix built-in relay actor isolation by @kudala-bharani in https://github.com/permissionlesstech/bitchat/pull/1528
Don't suggest blocked people in @-mentions by @Chessing234 in https://github.com/permissionlesstech/bitchat/pull/1543
Make DeliveryStatus non-optional with an explicit .notSentYet state by @viditkulsh in https://github.com/permissionlesstech/bitchat/pull/1503
Replace try! regex construction with a non-trapping SafeRegex helper by @viditkulsh in https://github.com/permissionlesstech/bitchat/pull/1501
fix: show verified seal next to sender names in chat by @Chessing234 in https://github.com/permissionlesstech/bitchat/pull/1506
chore: fix receive typo and refresh relay count by @Chessing234 in https://github.com/permissionlesstech/bitchat/pull/1510
Normalize nicknames to Unicode NFC at storage and comparison boundaries by @viditkulsh in https://github.com/permissionlesstech/bitchat/pull/1502
fix(ble): don't spend the fragment scheduler's slot budget on blocked requests by @krishrathi1 in https://github.com/permissionlesstech/bitchat/pull/1530
Make the completion-grace restart test deterministic by @jackjackbits in https://github.com/permissionlesstech/bitchat/pull/1563
Fix the SimulatedMesh announce-loss flake by @jackjackbits in https://github.com/permissionlesstech/bitchat/pull/1564
Fix the retire↔reconnect oscillation: redundant-link survivor is the newest connection by @jackjackbits in https://github.com/permissionlesstech/bitchat/pull/1566
fix: stop EnvironmentObject crash in the people sheet by @Chessing234 in https://github.com/permissionlesstech/bitchat/pull/1567
Give media the explicit file-protection class other stores use by @heyaim in https://github.com/permissionlesstech/bitchat/pull/1552
Pin that unknown file TLVs are skipped, not fatal by @vincenzopalazzo in https://github.com/permissionlesstech/bitchat/pull/1550
Deflake VoiceRecorderTests: replace timed semaphores with async events by @jackjackbits in https://github.com/permissionlesstech/bitchat/pull/1572
Silence the four release-build warnings by @jackjackbits in https://github.com/permissionlesstech/bitchat/pull/1583

New Contributors

@Chessing234 made their first contribution in https://github.com/permissionlesstech/bitchat/pull/1451
@RodsF1 made their first contribution in https://github.com/permissionlesstech/bitchat/pull/1443
@sashko made their first contribution in https://github.com/permissionlesstech/bitchat/pull/1524
@jozanek made their first contribution in https://github.com/permissionlesstech/bitchat/pull/1525
@kudala-bharani made their first contribution in https://github.com/permissionlesstech/bitchat/pull/1528
@viditkulsh made their first contribution in https://github.com/permissionlesstech/bitchat/pull/1503
@krishrathi1 made their first contribution in https://github.com/permissionlesstech/bitchat/pull/1530
@heyaim made their first contribution in https://github.com/permissionlesstech/bitchat/pull/1552
@vincenzopalazzo made their first contribution in https://github.com/permissionlesstech/bitchat/pull/1550

Full Changelog: https://github.com/permissionlesstech/bitchat/compare/v1.7.0...v1.7.1

download

unix · zip

curl -fL -o v1.7.1.zip https://ratatoskr.space/pkg/bitchat/v1.7.1.zip
                    printf '%s  %s\n' 'a205a51abc23c08fcf5eaac06b6094d83a217788b4b6b03ca5d46257fe98c2f9' 'v1.7.1.zip' | sha256sum -c -

windows · zip

$url = "https://ratatoskr.space/pkg/bitchat/v1.7.1.zip"
$out = "v1.7.1.zip"
Invoke-WebRequest -Uri $url -OutFile $out
if ((Get-FileHash $out -Algorithm SHA256).Hash.ToLowerInvariant() -ne "a205a51abc23c08fcf5eaac06b6094d83a217788b4b6b03ca5d46257fe98c2f9") { throw "sha256 mismatch" }

unix · tar.gz

curl -fL -o v1.7.1.tar.gz https://ratatoskr.space/pkg/bitchat/v1.7.1.tar.gz
                    printf '%s  %s\n' '53c37dc0c084883f0f1ec9e0b85943f7b31b5e7b3e82e008a6345e980701f7bd' 'v1.7.1.tar.gz' | sha256sum -c -

windows · tar.gz

$url = "https://ratatoskr.space/pkg/bitchat/v1.7.1.tar.gz"
$out = "v1.7.1.tar.gz"
Invoke-WebRequest -Uri $url -OutFile $out
if ((Get-FileHash $out -Algorithm SHA256).Hash.ToLowerInvariant() -ne "53c37dc0c084883f0f1ec9e0b85943f7b31b5e7b3e82e008a6345e980701f7bd") { throw "sha256 mismatch" }

download via yggdrasil mesh

unix · zip

curl -fL -o v1.7.1.zip http://14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg/pkg/bitchat/v1.7.1.zip
                    printf '%s  %s\n' 'a205a51abc23c08fcf5eaac06b6094d83a217788b4b6b03ca5d46257fe98c2f9' 'v1.7.1.zip' | sha256sum -c -

windows · zip

$url = "http://14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg/pkg/bitchat/v1.7.1.zip"
$out = "v1.7.1.zip"
Invoke-WebRequest -Uri $url -OutFile $out
if ((Get-FileHash $out -Algorithm SHA256).Hash.ToLowerInvariant() -ne "a205a51abc23c08fcf5eaac06b6094d83a217788b4b6b03ca5d46257fe98c2f9") { throw "sha256 mismatch" }

unix · tar.gz

curl -fL -o v1.7.1.tar.gz http://14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg/pkg/bitchat/v1.7.1.tar.gz
                    printf '%s  %s\n' '53c37dc0c084883f0f1ec9e0b85943f7b31b5e7b3e82e008a6345e980701f7bd' 'v1.7.1.tar.gz' | sha256sum -c -

windows · tar.gz

$url = "http://14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg/pkg/bitchat/v1.7.1.tar.gz"
$out = "v1.7.1.tar.gz"
Invoke-WebRequest -Uri $url -OutFile $out
if ((Get-FileHash $out -Algorithm SHA256).Hash.ToLowerInvariant() -ne "53c37dc0c084883f0f1ec9e0b85943f7b31b5e7b3e82e008a6345e980701f7bd") { throw "sha256 mismatch" }

artifact	format	size	hashes
v1.7.1.zip	zip	15.3 MiB	blake3-24 7b1c4404a0031f2650bf01720b9ef89a6047ad062eddded7 sha256 a205a51abc23c08fcf5eaac06b6094d83a217788b4b6b03ca5d46257fe98c2f9 sha1 370033cf706abe9a9520d2fb759caba3e553c76f
v1.7.1.tar.gz	tar.gz	14.9 MiB	blake3-24 0bf805e7e0e4356267df82537e50c1ea13a8def95ca61fa6 sha256 53c37dc0c084883f0f1ec9e0b85943f7b31b5e7b3e82e008a6345e980701f7bd sha1 b0624702d22510811f39ad8daf46f049c59c0084

install

bazel

http_archive(
    name = "bitchat",
    urls = ["https://ratatoskr.space/pkg/bitchat/v1.7.1.tar.gz"],
    integrity = "sha256-U8N9wMCEiD8PHsnguFlD97MbXns+guAIpjRemAcB970=",
    strip_prefix = "bitchat-v1.7.1",
)

zig

.url = "https://ratatoskr.space/pkg/bitchat/v1.7.1.tar.gz",

install via yggdrasil mesh

bazel

http_archive(
    name = "bitchat",
    urls = ["http://14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg/pkg/bitchat/v1.7.1.tar.gz"],
    integrity = "sha256-U8N9wMCEiD8PHsnguFlD97MbXns+guAIpjRemAcB970=",
    strip_prefix = "bitchat-v1.7.1",
)

zig

.url = "http://14cc7d57b5e70f679b851fe5b272ce17c70632ff4beb5b35ab64bc706b2485af.pk.ygg/pkg/bitchat/v1.7.1.tar.gz",

v1.7.0 →