lnwallet: make second level sigs using sighash single|anyonecanpay

input/script_utils.go

@@ -343,8 +343,10 @@ func SenderHtlcSpendRedeem(signer Signer, signDesc *SignDescriptor,
 // HTLC to activate the time locked covenant clause of a soon to be expired
 // HTLC.  This script simply spends the multi-sig output using the
 // pre-generated HTLC timeout transaction.
-func SenderHtlcSpendTimeout(receiverSig []byte, signer Signer,
-	signDesc *SignDescriptor, htlcTimeoutTx *wire.MsgTx) (wire.TxWitness, error) {
+func SenderHtlcSpendTimeout(receiverSig []byte,
+	receiverSigHash txscript.SigHashType, signer Signer,
+	signDesc *SignDescriptor, htlcTimeoutTx *wire.MsgTx) (
+	wire.TxWitness, error) {
 
 	sweepSig, err := signer.SignOutputRaw(htlcTimeoutTx, signDesc)
 	if err != nil {
@@ -357,7 +359,7 @@ func SenderHtlcSpendTimeout(receiverSig []byte, signer Signer,
 	// original OP_CHECKMULTISIG.
 	witnessStack := wire.TxWitness(make([][]byte, 5))
 	witnessStack[0] = nil
-	witnessStack[1] = append(receiverSig, byte(txscript.SigHashAll))
+	witnessStack[1] = append(receiverSig, byte(receiverSigHash))
 	witnessStack[2] = append(sweepSig, byte(signDesc.HashType))
 	witnessStack[3] = nil
 	witnessStack[4] = signDesc.WitnessScript
@@ -506,9 +508,10 @@ func ReceiverHTLCScript(cltvExpiry uint32, senderHtlcKey,
 // signed has a relative timelock delay enforced by its sequence number. This
 // delay give the sender of the HTLC enough time to revoke the output if this
 // is a breach commitment transaction.
-func ReceiverHtlcSpendRedeem(senderSig, paymentPreimage []byte,
-	signer Signer, signDesc *SignDescriptor,
-	htlcSuccessTx *wire.MsgTx) (wire.TxWitness, error) {
+func ReceiverHtlcSpendRedeem(senderSig []byte,
+	senderSigHash txscript.SigHashType, paymentPreimage []byte,
+	signer Signer, signDesc *SignDescriptor, htlcSuccessTx *wire.MsgTx) (
+	wire.TxWitness, error) {
 
 	// First, we'll generate a signature for the HTLC success transaction.
 	// The signDesc should be signing with the public key used as the
@@ -524,7 +527,7 @@ func ReceiverHtlcSpendRedeem(senderSig, paymentPreimage []byte,
 	// order to consume the extra pop within OP_CHECKMULTISIG.
 	witnessStack := wire.TxWitness(make([][]byte, 5))
 	witnessStack[0] = nil
-	witnessStack[1] = append(senderSig, byte(txscript.SigHashAll))
+	witnessStack[1] = append(senderSig, byte(senderSigHash))
 	witnessStack[2] = append(sweepSig, byte(signDesc.HashType))
 	witnessStack[3] = paymentPreimage
 	witnessStack[4] = signDesc.WitnessScript

input/script_utils_test.go

@@ -227,6 +227,7 @@ func TestHTLCSenderSpendValidation(t *testing.T) {
 		sweepTxSigHashes                *txscript.TxSigHashes
 		senderCommitTx, sweepTx         *wire.MsgTx
 		bobRecvrSig                     []byte
+		bobSigHash                      txscript.SigHashType
 	)
 
 	// genCommitTx generates a commitment tx where the htlc output requires
@@ -260,7 +261,7 @@ func TestHTLCSenderSpendValidation(t *testing.T) {
 	}
 
 	// genSweepTx generates a sweep of the senderCommitTx, and sets the
-	// sequence if confirmed is true.
+	// sequence and sighash single|anyonecanspend if confirmed is true.
 	genSweepTx := func(confirmed bool) {
 		prevOut := &wire.OutPoint{
 			Hash:  senderCommitTx.TxHash(),
@@ -283,6 +284,11 @@ func TestHTLCSenderSpendValidation(t *testing.T) {
 
 		sweepTxSigHashes = txscript.NewTxSigHashes(sweepTx)
 
+		bobSigHash = txscript.SigHashAll
+		if confirmed {
+			bobSigHash = txscript.SigHashSingle | txscript.SigHashAnyOneCanPay
+		}
+
 		// We'll also generate a signature on the sweep transaction above
 		// that will act as Bob's signature to Alice for the second level HTLC
 		// transaction.
@@ -293,7 +299,7 @@ func TestHTLCSenderSpendValidation(t *testing.T) {
 			SingleTweak:   bobCommitTweak,
 			WitnessScript: htlcWitnessScript,
 			Output:        htlcOutput,
-			HashType:      txscript.SigHashAll,
+			HashType:      bobSigHash,
 			SigHashes:     sweepTxSigHashes,
 			InputIndex:    0,
 		}
@@ -458,8 +464,10 @@ func TestHTLCSenderSpendValidation(t *testing.T) {
 					InputIndex:    0,
 				}
 
-				return SenderHtlcSpendTimeout(bobRecvrSig, aliceSigner,
-					signDesc, sweepTx)
+				return SenderHtlcSpendTimeout(
+					bobRecvrSig, bobSigHash, aliceSigner,
+					signDesc, sweepTx,
+				)
 			}),
 			true,
 		},
@@ -487,8 +495,10 @@ func TestHTLCSenderSpendValidation(t *testing.T) {
 					InputIndex:    0,
 				}
 
-				return SenderHtlcSpendTimeout(bobRecvrSig, aliceSigner,
-					signDesc, sweepTx)
+				return SenderHtlcSpendTimeout(
+					bobRecvrSig, bobSigHash, aliceSigner,
+					signDesc, sweepTx,
+				)
 			}),
 			true,
 		},
@@ -517,8 +527,10 @@ func TestHTLCSenderSpendValidation(t *testing.T) {
 					InputIndex:    0,
 				}
 
-				return SenderHtlcSpendTimeout(bobRecvrSig, aliceSigner,
-					signDesc, sweepTx)
+				return SenderHtlcSpendTimeout(
+					bobRecvrSig, bobSigHash, aliceSigner,
+					signDesc, sweepTx,
+				)
 			}),
 			false,
 		},
@@ -611,6 +623,7 @@ func TestHTLCReceiverSpendValidation(t *testing.T) {
 		receiverCommitTx, sweepTx       *wire.MsgTx
 		sweepTxSigHashes                *txscript.TxSigHashes
 		aliceSenderSig                  []byte
+		aliceSigHash                    txscript.SigHashType
 	)
 
 	genCommitTx := func(confirmed bool) {
@@ -663,6 +676,11 @@ func TestHTLCReceiverSpendValidation(t *testing.T) {
 		)
 		sweepTxSigHashes = txscript.NewTxSigHashes(sweepTx)
 
+		aliceSigHash = txscript.SigHashAll
+		if confirmed {
+			aliceSigHash = txscript.SigHashSingle | txscript.SigHashAnyOneCanPay
+		}
+
 		// We'll also generate a signature on the sweep transaction above
 		// that will act as Alice's signature to Bob for the second level HTLC
 		// transaction.
@@ -673,7 +691,7 @@ func TestHTLCReceiverSpendValidation(t *testing.T) {
 			SingleTweak:   aliceCommitTweak,
 			WitnessScript: htlcWitnessScript,
 			Output:        htlcOutput,
-			HashType:      txscript.SigHashAll,
+			HashType:      aliceSigHash,
 			SigHashes:     sweepTxSigHashes,
 			InputIndex:    0,
 		}
@@ -706,9 +724,11 @@ func TestHTLCReceiverSpendValidation(t *testing.T) {
 					InputIndex:    0,
 				}
 
-				return ReceiverHtlcSpendRedeem(aliceSenderSig,
+				return ReceiverHtlcSpendRedeem(
+					aliceSenderSig, aliceSigHash,
 					bytes.Repeat([]byte{1}, 45), bobSigner,
-					signDesc, sweepTx)
+					signDesc, sweepTx,
+				)
 
 			}),
 			false,
@@ -731,9 +751,11 @@ func TestHTLCReceiverSpendValidation(t *testing.T) {
 					InputIndex:    0,
 				}
 
-				return ReceiverHtlcSpendRedeem(aliceSenderSig,
-					paymentPreimage[:], bobSigner,
-					signDesc, sweepTx)
+				return ReceiverHtlcSpendRedeem(
+					aliceSenderSig, aliceSigHash,
+					paymentPreimage, bobSigner,
+					signDesc, sweepTx,
+				)
 			}),
 			true,
 		},
@@ -783,9 +805,11 @@ func TestHTLCReceiverSpendValidation(t *testing.T) {
 					InputIndex:    0,
 				}
 
-				return ReceiverHtlcSpendRedeem(aliceSenderSig,
+				return ReceiverHtlcSpendRedeem(
+					aliceSenderSig, aliceSigHash,
 					paymentPreimage, bobSigner,
-					signDesc, sweepTx)
+					signDesc, sweepTx,
+				)
 			}),
 			true,
 		},
@@ -813,9 +837,11 @@ func TestHTLCReceiverSpendValidation(t *testing.T) {
 					InputIndex:    0,
 				}
 
-				return ReceiverHtlcSpendRedeem(aliceSenderSig,
-					paymentPreimage, bobSigner,
-					signDesc, sweepTx)
+				return ReceiverHtlcSpendRedeem(
+					aliceSenderSig, aliceSigHash,
+					paymentPreimage, bobSigner, signDesc,
+					sweepTx,
+				)
 			}),
 			false,
 		},