URI: 
       tlnbase: verify commitment tx'es again - electrum - Electrum Bitcoin wallet
  HTML git clone https://git.parazyd.org/electrum
   DIR Log
   DIR Files
   DIR Refs
   DIR Submodules
       ---
   DIR commit 2e23ecb3ca88e4e90d695fc9840f07eb8c65cdce
   DIR parent 73a17c93eec0badb918137c47f2b688c2dc874b8
  HTML Author: Janus <ysangkok@gmail.com>
       Date:   Mon, 14 May 2018 15:41:55 +0200
       
       lnbase: verify commitment tx'es again
       
       Diffstat:
         M lib/lnbase.py                       |      37 +++++++++++++++++--------------
         M lib/tests/test_lnbase_online.py     |       4 ++--
       
       2 files changed, 22 insertions(+), 19 deletions(-)
       ---
   DIR diff --git a/lib/lnbase.py b/lib/lnbase.py
       t@@ -1005,7 +1005,10 @@ class Peer(PrintError):
                    nonlocal chan
                    last_small_num = chan.local_state.ctn
                    next_small_num = last_small_num + 2
       +            this_small_num = last_small_num + 1
                    last_secret = get_per_commitment_secret_from_seed(chan.local_state.per_commitment_secret_seed, 2**48-last_small_num-1)
       +            this_secret = get_per_commitment_secret_from_seed(chan.local_state.per_commitment_secret_seed, 2**48-this_small_num-1)
       +            this_point = secret_to_pubkey(int.from_bytes(this_secret, 'big'))
                    next_secret = get_per_commitment_secret_from_seed(chan.local_state.per_commitment_secret_seed, 2**48-next_small_num-1)
                    next_point = secret_to_pubkey(int.from_bytes(next_secret, 'big'))
                    chan = chan._replace(
       t@@ -1013,7 +1016,7 @@ class Peer(PrintError):
                            ctn=chan.local_state.ctn + 1
                        )
                    )
       -            return last_secret, next_point
       +            return last_secret, this_point, next_point
        
                their_revstore = chan.remote_state.revocation_store
        
       t@@ -1031,12 +1034,12 @@ class Peer(PrintError):
                assert amount_msat // 1000 == expected_received_sat
                payment_hash = htlc["payment_hash"]
        
       -        last_secret, next_point = derive_and_incr()
       +        last_secret, this_point, next_point = derive_and_incr()
        
       -        remote_htlc_pubkey = derive_pubkey(chan.remote_config.htlc_basepoint.pubkey, next_point)
       -        local_htlc_pubkey = derive_pubkey(chan.local_config.htlc_basepoint.pubkey, next_point)
       +        remote_htlc_pubkey = derive_pubkey(chan.remote_config.htlc_basepoint.pubkey, this_point)
       +        local_htlc_pubkey = derive_pubkey(chan.local_config.htlc_basepoint.pubkey, this_point)
        
       -        remote_revocation_pubkey = derive_blinded_pubkey(chan.remote_config.revocation_basepoint.pubkey, next_point)
       +        remote_revocation_pubkey = derive_blinded_pubkey(chan.remote_config.revocation_basepoint.pubkey, this_point)
        
                htlcs_in_local = [
                    (
       t@@ -1045,29 +1048,29 @@ class Peer(PrintError):
                    )
                ]
        
       -        new_commitment = make_commitment_using_open_channel(chan, chan.local_state.ctn, True, next_point,
       +        new_commitment = make_commitment_using_open_channel(chan, chan.local_state.ctn, True, this_point,
                    chan.local_state.amount_sat,
                    chan.remote_state.amount_sat - expected_received_sat,
                    htlcs_in_local)
        
                preimage_hex = new_commitment.serialize_preimage(0)
                pre_hash = bitcoin.Hash(bfh(preimage_hex))
       -        #if not bitcoin.verify_signature(chan.remote_config.multisig_key.pubkey, commitment_signed_msg["signature"], pre_hash):
       -        #    raise Exception('failed verifying signature of our updated commitment transaction')
       +        if not bitcoin.verify_signature(chan.remote_config.multisig_key.pubkey, commitment_signed_msg["signature"], pre_hash):
       +            raise Exception('failed verifying signature of our updated commitment transaction')
        
                htlc_sigs_len = len(commitment_signed_msg["htlc_signature"])
       -        #if htlc_sigs_len != 64:
       -        #    raise Exception("unexpected number of htlc signatures: " + str(htlc_sigs_len))
       +        if htlc_sigs_len != 64:
       +            raise Exception("unexpected number of htlc signatures: " + str(htlc_sigs_len))
        
       -        htlc_tx = make_htlc_tx_with_open_channel(chan, next_point, True, True, amount_msat, cltv_expiry, payment_hash, new_commitment, 0)
       +        htlc_tx = make_htlc_tx_with_open_channel(chan, this_point, True, True, amount_msat, cltv_expiry, payment_hash, new_commitment, 0)
                pre_hash = bitcoin.Hash(bfh(htlc_tx.serialize_preimage(0)))
       -        remote_htlc_pubkey = derive_pubkey(chan.remote_config.htlc_basepoint.pubkey, next_point)
       -        #if not bitcoin.verify_signature(remote_htlc_pubkey, commitment_signed_msg["htlc_signature"], pre_hash):
       -        #    raise Exception("failed verifying signature an HTLC tx spending from one of our commit tx'es HTLC outputs")
       +        remote_htlc_pubkey = derive_pubkey(chan.remote_config.htlc_basepoint.pubkey, this_point)
       +        if not bitcoin.verify_signature(remote_htlc_pubkey, commitment_signed_msg["htlc_signature"], pre_hash):
       +            raise Exception("failed verifying signature an HTLC tx spending from one of our commit tx'es HTLC outputs")
        
                print("SENDING FIRST REVOKE AND ACK")
        
       -        #their_revstore.add_next_entry(last_secret)
       +        their_revstore.add_next_entry(last_secret)
        
                self.send_message(gen_msg("revoke_and_ack",
                    channel_id=channel_id,
       t@@ -1128,9 +1131,9 @@ class Peer(PrintError):
        
                # TODO check commitment_signed results
        
       -        last_secret, next_point = derive_and_incr()
       +        last_secret, _, next_point = derive_and_incr()
        
       -        #their_revstore.add_next_entry(last_secret)
       +        their_revstore.add_next_entry(last_secret)
        
                print("SENDING SECOND REVOKE AND ACK")
                self.send_message(gen_msg("revoke_and_ack",
   DIR diff --git a/lib/tests/test_lnbase_online.py b/lib/tests/test_lnbase_online.py
       t@@ -100,8 +100,8 @@ if __name__ == "__main__":
            peer = Peer(host, port, pubkey, privkey, request_initial_sync=False, network=network)
            network.futures.append(asyncio.run_coroutine_threadsafe(peer.main_loop(), network.asyncio_loop))
        
       -    funding_satoshis = 1000000
       -    push_msat = 610000000
       +    funding_satoshis = 2000000
       +    push_msat = 1000000000
        
            # run blocking test
            async def async_test():