multi: refactor SignDigestCompact into SignMessageCompact
To make it possible to use a remote lnrpc server as a signer for our wallet, we need to change our main interface to sign the message instead of the message's digest. Otherwise we'd need to alter the lnrpc.SignMessage RPC to accept a digest instead of only the message which has security implications.
This commit is contained in:
17 files changed
+2407
-2373
No files matched your search
@@ -310,7 +310,7 @@ func newManagerCfg(t *testing.T, numChannels int,
|
||||
if err != nil {
|
||||
t.Fatalf("unable to generate key pair: %v", err)
|
||||
}
|
||||
privKeySigner := &keychain.PrivKeyDigestSigner{PrivKey: privKey}
|
||||
privKeySigner := &keychain.PrivKeyMessageSigner{PrivKey: privKey}
|
||||
|
||||
graph := newMockGraph(
|
||||
t, numChannels, startEnabled, startEnabled, privKey.PubKey(),
|
||||
|
||||
@@ -32,7 +32,7 @@ var _ lnwallet.MessageSigner = (*mockSigner)(nil)
|
||||
|
||||
var (
|
||||
privKey, _ = btcec.NewPrivateKey(btcec.S256())
|
||||
privKeySigner = &keychain.PrivKeyDigestSigner{PrivKey: privKey}
|
||||
privKeySigner = &keychain.PrivKeyMessageSigner{PrivKey: privKey}
|
||||
|
||||
pubKey = privKey.PubKey()
|
||||
|
||||
|
||||
+8
-25
@@ -4,7 +4,6 @@ import (
|
||||
"fmt"
|
||||
|
||||
"github.com/btcsuite/btcd/btcec"
|
||||
"github.com/btcsuite/btcd/chaincfg/chainhash"
|
||||
"github.com/lightningnetwork/lnd/input"
|
||||
"github.com/lightningnetwork/lnd/keychain"
|
||||
"github.com/lightningnetwork/lnd/lnwallet"
|
||||
@@ -13,12 +12,12 @@ import (
|
||||
// NodeSigner is an implementation of the MessageSigner interface backed by the
|
||||
// identity private key of running lnd node.
|
||||
type NodeSigner struct {
|
||||
keySigner keychain.SingleKeyDigestSigner
|
||||
keySigner keychain.SingleKeyMessageSigner
|
||||
}
|
||||
|
||||
// NewNodeSigner creates a new instance of the NodeSigner backed by the target
|
||||
// private key.
|
||||
func NewNodeSigner(keySigner keychain.SingleKeyDigestSigner) *NodeSigner {
|
||||
func NewNodeSigner(keySigner keychain.SingleKeyMessageSigner) *NodeSigner {
|
||||
return &NodeSigner{
|
||||
keySigner: keySigner,
|
||||
}
|
||||
@@ -45,29 +44,13 @@ func (n *NodeSigner) SignMessage(pubKey *btcec.PublicKey,
|
||||
return sig, nil
|
||||
}
|
||||
|
||||
// SignCompact signs a double-sha256 digest of the msg parameter under the
|
||||
// resident node's private key. The returned signature is a pubkey-recoverable
|
||||
// signature.
|
||||
func (n *NodeSigner) SignCompact(msg []byte) ([]byte, error) {
|
||||
// We'll sign the dsha256 of the target message.
|
||||
digest := chainhash.DoubleHashB(msg)
|
||||
// SignMessageCompact signs a single or double sha256 digest of the msg
|
||||
// parameter under the resident node's private key. The returned signature is a
|
||||
// pubkey-recoverable signature.
|
||||
func (n *NodeSigner) SignMessageCompact(msg []byte, doubleHash bool) ([]byte,
|
||||
error) {
|
||||
|
||||
return n.SignDigestCompact(digest)
|
||||
}
|
||||
|
||||
// SignDigestCompact signs the provided message digest under the resident
|
||||
// node's private key. The returned signature is a pubkey-recoverable signature.
|
||||
func (n *NodeSigner) SignDigestCompact(hash []byte) ([]byte, error) {
|
||||
var digest [32]byte
|
||||
copy(digest[:], hash)
|
||||
|
||||
// keychain.SignDigestCompact returns a pubkey-recoverable signature.
|
||||
sig, err := n.keySigner.SignDigestCompact(digest)
|
||||
if err != nil {
|
||||
return nil, fmt.Errorf("can't sign the hash: %v", err)
|
||||
}
|
||||
|
||||
return sig, nil
|
||||
return n.keySigner.SignMessageCompact(msg, doubleHash)
|
||||
}
|
||||
|
||||
// A compile time check to ensure that NodeSigner implements the MessageSigner
|
||||
|
||||
Reference in new issue
Block a user