READ THE CODE

Inside Bitcoin

The code behind the network, with room to understand it.

Stable release v32.1bitcoin/bitcoin · f0de87f04062 ↗3,020 source files · 47.5 MB stored on the server340 file guides

Release published 2026-10-28 · Snapshot fetched 2026-11-01. Latest stable release at fetch time; development branches and Git history are excluded. Only the selected code window and visible folders load here.

4,461 bytes · SHA-256 e061cdd8ec3da8df… · View upstream ↗

1// Copyright (c) 2016-present The Bitcoin Core developers
2// Distributed under the MIT software license, see the accompanying
3// file COPYING or http://www.opensource.org/licenses/mit-license.php.
4
5#include <crypto/aes.h>
6#include <support/allocators/secure.h>
7
8#include <cstring>
9
10extern "C" {
11#include <crypto/ctaes/ctaes.c>
12}
13
14AES256Encrypt::AES256Encrypt(const unsigned char key[32])
15{
16    ctx = allocator.allocate(1);
17    AES256_init(ctx, key);
18}
19
20AES256Encrypt::~AES256Encrypt()
21{
22    allocator.deallocate(ctx, 1);
23}
24
25void AES256Encrypt::Encrypt(unsigned char ciphertext[16], const unsigned char plaintext[16]) const
26{
27    AES256_encrypt(ctx, 1, ciphertext, plaintext);
28}
29
30AES256Decrypt::AES256Decrypt(const unsigned char key[32])
31{
32    ctx = allocator.allocate(1);
33    AES256_init(ctx, key);
34}
35
36AES256Decrypt::~AES256Decrypt()
37{
38    allocator.deallocate(ctx, 1);
39}
40
41void AES256Decrypt::Decrypt(unsigned char plaintext[16], const unsigned char ciphertext[16]) const
42{
43    AES256_decrypt(ctx, 1, plaintext, ciphertext);
44}
45
46
47template <typename T>
48static int CBCEncrypt(const T& enc, const unsigned char iv[AES_BLOCKSIZE], const unsigned char* data, int size, bool pad, unsigned char* out)
49{
50    int written = 0;
51    int padsize = size % AES_BLOCKSIZE;
52    unsigned char mixed[AES_BLOCKSIZE];
53
54    if (!data || !size || !out)
55        return 0;
56
57    if (!pad && padsize != 0)
58        return 0;
59
60    memcpy(mixed, iv, AES_BLOCKSIZE);
61
62    // Write all but the last block
63    while (written + AES_BLOCKSIZE <= size) {
64        for (int i = 0; i != AES_BLOCKSIZE; i++)
65            mixed[i] ^= *data++;
66        enc.Encrypt(out + written, mixed);
67        memcpy(mixed, out + written, AES_BLOCKSIZE);
68        written += AES_BLOCKSIZE;
69    }
70    if (pad) {
71        // For all that remains, pad each byte with the value of the remaining
72        // space. If there is none, pad by a full block.
73        for (int i = 0; i != padsize; i++)
74            mixed[i] ^= *data++;
75        for (int i = padsize; i != AES_BLOCKSIZE; i++)
76            mixed[i] ^= AES_BLOCKSIZE - padsize;
77        enc.Encrypt(out + written, mixed);
78        written += AES_BLOCKSIZE;
79    }
80    return written;
81}
82
83template <typename T>
84static int CBCDecrypt(const T& dec, const unsigned char iv[AES_BLOCKSIZE], const unsigned char* data, int size, bool pad, unsigned char* out)
85{
86    int written = 0;
87    bool fail = false;
88    const unsigned char* prev = iv;
89
90    if (!data || !size || !out)
91        return 0;
92
93    if (size % AES_BLOCKSIZE != 0)
94        return 0;
95
96    // Decrypt all data. Padding will be checked in the output.
97    while (written != size) {
98        dec.Decrypt(out, data + written);
99        for (int i = 0; i != AES_BLOCKSIZE; i++)
100            *out++ ^= prev[i];
101        prev = data + written;
102        written += AES_BLOCKSIZE;
103    }
104
105    // When decrypting padding, attempt to run in constant-time
106    if (pad) {
107        // If used, padding size is the value of the last decrypted byte. For
108        // it to be valid, It must be between 1 and AES_BLOCKSIZE.
109        unsigned char padsize = *--out;
110        fail = !padsize | (padsize > AES_BLOCKSIZE);
111
112        // If not well-formed, treat it as though there's no padding.
113        padsize *= !fail;
114
115        // All padding must equal the last byte otherwise it's not well-formed
116        for (int i = AES_BLOCKSIZE; i != 0; i--)
117            fail |= ((i > AES_BLOCKSIZE - padsize) & (*out-- != padsize));
118
119        written -= padsize;
120    }
121    return written * !fail;
122}
123
124AES256CBCEncrypt::AES256CBCEncrypt(const unsigned char key[AES256_KEYSIZE], const unsigned char ivIn[AES_BLOCKSIZE], bool padIn)
125    : enc(key), pad(padIn)
126{
127    iv = allocator.allocate(AES_BLOCKSIZE);
128    memcpy(iv, ivIn, AES_BLOCKSIZE);
129}
130
131int AES256CBCEncrypt::Encrypt(const unsigned char* data, int size, unsigned char* out) const
132{
133    return CBCEncrypt(enc, iv, data, size, pad, out);
134}
135
136AES256CBCEncrypt::~AES256CBCEncrypt()
137{
138    allocator.deallocate(iv, AES_BLOCKSIZE);
139}
140
141AES256CBCDecrypt::AES256CBCDecrypt(const unsigned char key[AES256_KEYSIZE], const unsigned char ivIn[AES_BLOCKSIZE], bool padIn)
142    : dec(key), pad(padIn)
143{
144    iv = allocator.allocate(AES_BLOCKSIZE);
145    memcpy(iv, ivIn, AES_BLOCKSIZE);
146}
147
148
149int AES256CBCDecrypt::Decrypt(const unsigned char* data, int size, unsigned char* out) const
150{
151    return CBCDecrypt(dec, iv, data, size, pad, out);
152}
153
154AES256CBCDecrypt::~AES256CBCDecrypt()
155{
156    allocator.deallocate(iv, AES_BLOCKSIZE);
157}
158

src/wallet/receive.cpp

src/wallet/coinselection.cpp

src/consensus/validation.h

src/primitives/transaction.cpp

src/script/descriptor.cpp

src/bitcoin-cli.cpp

src/rpc/blockchain.cpp

src/rpc/rawtransaction.cpp

src/init.cpp

src/crypto/sha256.cpp

src/consensus/merkle.h

src/consensus/tx_check.h

src/consensus/tx_verify.h

src/policy/feerate.h

src/policy/feerate.cpp

src/primitives/transaction_identifier.h

src/chainparamsbase.h

src/chainparamsbase.cpp

src/util/moneystr.cpp

src/crypto/ripemd160.h

src/crypto/sha1.h

src/crypto/sha512.h

src/crypto/hmac_sha256.h

src/crypto/hmac_sha512.h

src/crypto/hmac_sha256.cpp

src/crypto/hmac_sha512.cpp

src/crypto/hkdf_sha256_32.h

src/crypto/hkdf_sha256_32.cpp

src/support/cleanse.h

src/support/cleanse.cpp

src/crypto/siphash.cpp

src/crypto/muhash.h

src/crypto/chacha20.h

src/crypto/poly1305.h

src/crypto/chacha20poly1305.h

src/crypto/chacha20poly1305.cpp

src/util/chaintype.cpp

src/util/obfuscation.h

src/util/byte_units.h

src/util/overflow.h

src/blockencodings.cpp

src/net_permissions.cpp

src/policy/packages.cpp

src/policy/rbf.cpp

src/policy/truc_policy.cpp

src/policy/ephemeral_policy.cpp

src/policy/settings.cpp

src/policy/policy.cpp

src/node/transaction.cpp

src/node/coin.cpp

src/rpc/client.cpp

src/rpc/external_signer.cpp

src/rpc/request.cpp

src/rpc/server_util.cpp

src/rpc/fees.cpp

src/rpc/output_script.cpp

src/rpc/rawtransaction_util.cpp

src/rpc/rawtransaction_util.h

src/rpc/register.h

src/rpc/request.h

src/rpc/server_util.h

src/rpc/protocol.h

src/rpc/server.h

src/rpc/signmessage.cpp

src/rpc/txoutproof.cpp

src/rpc/util.cpp

src/rpc/util.h

src/wallet/rpc/addresses.cpp

src/wallet/rpc/backup.cpp

src/wallet/rpc/coins.cpp

src/wallet/rpc/encrypt.cpp

src/wallet/rpc/signmessage.cpp

src/wallet/rpc/util.cpp

src/wallet/rpc/util.h

src/wallet/coincontrol.cpp

src/wallet/coincontrol.h

src/wallet/context.cpp

src/wallet/context.h

src/wallet/crypter.cpp

src/wallet/crypter.h

src/wallet/db.cpp

src/wallet/export.cpp

src/wallet/external_signer_scriptpubkeyman.cpp

src/wallet/rpc/spend.cpp

src/wallet/rpc/transactions.cpp

src/wallet/rpc/wallet.cpp

src/wallet/feebumper.cpp

src/wallet/feebumper.h

src/index/base.h

src/index/base.cpp

src/index/txindex.h

src/index/txindex.cpp

src/index/txindex_key.h

src/index/txospenderindex.h

src/index/txospenderindex.cpp

src/index/blockfilterindex.h

src/index/blockfilterindex.cpp

src/index/coinstatsindex.h

src/index/coinstatsindex.cpp

src/index/db_key.h

src/index/disktxpos.h

src/kernel/chain.cpp

src/kernel/chain.h

src/kernel/checks.cpp

src/kernel/checks.h

src/kernel/context.cpp

src/kernel/context.h

src/kernel/cs_main.cpp

src/kernel/cs_main.h

src/kernel/disconnected_transactions.cpp

src/kernel/disconnected_transactions.h

src/kernel/mempool_removal_reason.cpp

src/kernel/mempool_removal_reason.h

src/kernel/coinstats.cpp

src/kernel/coinstats.h

src/kernel/chainparams.cpp

src/kernel/chainparams.h

src/wallet/sqlite.cpp

src/wallet/sqlite.h

src/wallet/transaction.cpp

src/wallet/transaction.h

src/wallet/dump.cpp

src/wallet/dump.h

src/wallet/init.cpp

src/wallet/walletutil.cpp

src/wallet/walletutil.h

src/wallet/wallettool.cpp

src/wallet/wallettool.h

src/wallet/export.h

src/wallet/migrate.cpp

src/wallet/migrate.h

src/wallet/db.h

src/wallet/walletdb.cpp

src/wallet/interfaces.cpp

src/wallet/scriptpubkeyman.cpp

src/wallet/scriptpubkeyman.h

src/kernel/bitcoinkernel.cpp

src/kernel/bitcoinkernel.h

src/kernel/bitcoinkernel_wrapper.h

src/node/chainstate.cpp

src/node/chainstate.h

src/node/blockstorage.cpp

src/node/blockstorage.h

src/node/mempool_persist.cpp

src/node/mempool_persist.h

src/node/utxo_snapshot.cpp

src/node/utxo_snapshot.h

src/node/kernel_notifications.cpp

src/node/kernel_notifications.h

src/node/blockmanager_args.cpp

src/kernel/blockmanager_opts.h

src/util/expected.cpp

src/policy/settings.h

src/util/types.h

src/kernel/messagestartchars.h

src/kernel/warning.h

src/util/exception.h

src/common/license_info.h

src/node/coins_view_args.h

src/node/database_args.h

src/util/batchpriority.h

src/util/ui_change_type.h

src/node/coins_view_args.cpp

src/node/peerman_args.h

src/util/serfloat.h

src/node/blockmanager_args.h

src/node/database_args.cpp

src/util/overloaded.h

src/interfaces/types.h

src/node/chainstatemanager_args.h

src/node/minisketchwrapper.h

src/util/macros.h

src/util/syserror.h

src/common/run_command.h

src/util/bytevectorhash.cpp

src/node/mempool_persist_args.cpp

src/util/exec.h

src/util/rbf.h

src/crypto/hex_base.h

src/node/mempool_persist_args.h

src/interfaces/echo.h

src/util/any.h

src/util/batchpriority.cpp

src/util/threadnames.h

src/node/coin.h

src/node/mempool_args.h

src/util/asmap.h

src/util/bytevectorhash.h

src/node/context.cpp

src/util/insert.h

src/util/readwritefile.h

src/node/peerman_args.cpp

src/node/interface_ui.cpp

src/interfaces/handler.h

src/node/mining_args.h

src/util/hasher.cpp

src/common/init.h

src/kernel/mempool_limits.h

src/common/system.h

src/crypto/sha3.h

src/util/threadinterrupt.cpp

src/node/protocol_version.h

src/util/exception.cpp

src/common/messages.h

src/node/connection_types.cpp

src/util/bip32.h

src/common/license_info.cpp

src/util/stdmutex.h

src/common/run_command.cpp

src/util/check.cpp

src/util/golombrice.h

src/node/types.h

src/node/timeoffsets.h

src/util/readwritefile.cpp

src/util/fastrange.h

src/util/signalinterrupt.h

src/util/task_runner.h

src/util/syserror.cpp

src/common/interfaces.cpp

src/common/types.h

src/util/threadinterrupt.h

src/kernel/chainstatemanager_opts.h

src/node/psbt.h

src/policy/ephemeral_policy.h

src/util/trace.h

src/common/url.cpp

src/kernel/mempool_options.h

src/util/serfloat.cpp

src/kernel/notifications_interface.h

src/node/timeoffsets.cpp

src/node/warnings.cpp

src/util/hash_type.h

src/crypto/hex_base.cpp

src/node/eviction.h

src/util/tokenbucket.h

src/crypto/aes.h

src/common/pcp.h

src/util/feefrac.cpp

src/node/transaction.h

src/util/threadnames.cpp

src/common/signmessage.h

src/util/exec.cpp

src/util/signalinterrupt.cpp

Independent explanations by MyBitcoinExplorer. Not affiliated with or endorsed by Bitcoin Core. Guides are educational and do not replace the source or its tests.

Bitcoin Core source © its contributors, distributed under the MIT license. Original notices and bundled third-party licenses are retained in the source tree.