I looked into Meshtastic a while ago and they use AES with no authentication tags. Also decryption happens on the LoRa device, which is a lot easier to crack with physical access compared to my phone. Even if you delete the messages it's still possible to decrypt sniffed LoRa traffic if, at some point in the future, one device gets captured.
I'd rather the protocol gets updated so the crypto key can stay on the phone.
I'd rather the protocol gets updated so the crypto key can stay on the phone.