READ THE CODE

Inside Bitcoin

The code behind the network, with room to understand it.

Stable release v32.1bitcoin/bitcoin · f0de87f04062 ↗3,020 source files · 47.5 MB stored on the server340 file guides

Release published 2026-10-28 · Snapshot fetched 2026-11-01. Latest stable release at fetch time; development branches and Git history are excluded. Only the selected code window and visible folders load here.

33,290 bytes · SHA-256 1189bb86b4b8f60f… · View upstream ↗

1// Copyright (c) 2022-present The Bitcoin Core developers
2// Distributed under the MIT software license, see the accompanying
3// file COPYING or http://www.opensource.org/licenses/mit-license.php.
4//
5// Based on https://github.com/noloader/SHA-Intrinsics/blob/master/sha256-arm.c,
6// Written and placed in public domain by Jeffrey Walton.
7// Based on code from ARM, and by Johannes Schneiders, Skip Hovsmith and
8// Barry O'Rourke for the mbedTLS project.
9// Variant specialized for 64-byte inputs added by Pieter Wuille.
10
11#ifdef ENABLE_ARM_SHANI
12
13#include <array>
14#include <cstdint>
15#include <cstddef>
16#include <arm_neon.h>
17
18namespace {
19alignas(uint32x4_t) static constexpr std::array<uint32_t, 64> K =
20{
21    0x428A2F98, 0x71374491, 0xB5C0FBCF, 0xE9B5DBA5,
22    0x3956C25B, 0x59F111F1, 0x923F82A4, 0xAB1C5ED5,
23    0xD807AA98, 0x12835B01, 0x243185BE, 0x550C7DC3,
24    0x72BE5D74, 0x80DEB1FE, 0x9BDC06A7, 0xC19BF174,
25    0xE49B69C1, 0xEFBE4786, 0x0FC19DC6, 0x240CA1CC,
26    0x2DE92C6F, 0x4A7484AA, 0x5CB0A9DC, 0x76F988DA,
27    0x983E5152, 0xA831C66D, 0xB00327C8, 0xBF597FC7,
28    0xC6E00BF3, 0xD5A79147, 0x06CA6351, 0x14292967,
29    0x27B70A85, 0x2E1B2138, 0x4D2C6DFC, 0x53380D13,
30    0x650A7354, 0x766A0ABB, 0x81C2C92E, 0x92722C85,
31    0xA2BFE8A1, 0xA81A664B, 0xC24B8B70, 0xC76C51A3,
32    0xD192E819, 0xD6990624, 0xF40E3585, 0x106AA070,
33    0x19A4C116, 0x1E376C08, 0x2748774C, 0x34B0BCB5,
34    0x391C0CB3, 0x4ED8AA4A, 0x5B9CCA4F, 0x682E6FF3,
35    0x748F82EE, 0x78A5636F, 0x84C87814, 0x8CC70208,
36    0x90BEFFFA, 0xA4506CEB, 0xBEF9A3F7, 0xC67178F2,
37};
38}
39
40namespace sha256_arm_shani {
41void Transform(uint32_t* s, const unsigned char* chunk, size_t blocks)
42{
43    uint32x4_t STATE0, STATE1, ABCD_SAVE, EFGH_SAVE;
44    uint32x4_t MSG0, MSG1, MSG2, MSG3;
45    uint32x4_t TMP0, TMP2;
46
47    // Load state
48    STATE0 = vld1q_u32(&s[0]);
49    STATE1 = vld1q_u32(&s[4]);
50
51    while (blocks--)
52    {
53        // Save state
54        ABCD_SAVE = STATE0;
55        EFGH_SAVE = STATE1;
56
57        // Load and convert input chunk to Big Endian
58        MSG0 = vreinterpretq_u32_u8(vrev32q_u8(vld1q_u8(chunk + 0)));
59        MSG1 = vreinterpretq_u32_u8(vrev32q_u8(vld1q_u8(chunk + 16)));
60        MSG2 = vreinterpretq_u32_u8(vrev32q_u8(vld1q_u8(chunk + 32)));
61        MSG3 = vreinterpretq_u32_u8(vrev32q_u8(vld1q_u8(chunk + 48)));
62        chunk += 64;
63
64        // Original implementation preloaded message and constant addition which was 1-3% slower.
65        // Now included as first step in quad round code saving one Q Neon register
66        // "TMP0 = vaddq_u32(MSG0, vld1q_u32(&K[0]));"
67
68        // Rounds 1-4
69        TMP0 = vaddq_u32(MSG0, vld1q_u32(&K[0]));
70        TMP2 = STATE0;
71        MSG0 = vsha256su0q_u32(MSG0, MSG1);
72        STATE0 = vsha256hq_u32(STATE0, STATE1, TMP0);
73        STATE1 = vsha256h2q_u32(STATE1, TMP2, TMP0);
74        MSG0 = vsha256su1q_u32(MSG0, MSG2, MSG3);
75
76        // Rounds 5-8
77        TMP0 = vaddq_u32(MSG1, vld1q_u32(&K[4]));
78        TMP2 = STATE0;
79        MSG1 = vsha256su0q_u32(MSG1, MSG2);
80        STATE0 = vsha256hq_u32(STATE0, STATE1, TMP0);
81        STATE1 = vsha256h2q_u32(STATE1, TMP2, TMP0);
82        MSG1 = vsha256su1q_u32(MSG1, MSG3, MSG0);
83
84        // Rounds 9-12
85        TMP0 = vaddq_u32(MSG2, vld1q_u32(&K[8]));
86        TMP2 = STATE0;
87        MSG2 = vsha256su0q_u32(MSG2, MSG3);
88        STATE0 = vsha256hq_u32(STATE0, STATE1, TMP0);
89        STATE1 = vsha256h2q_u32(STATE1, TMP2, TMP0);
90        MSG2 = vsha256su1q_u32(MSG2, MSG0, MSG1);
91
92        // Rounds 13-16
93        TMP0 = vaddq_u32(MSG3, vld1q_u32(&K[12]));
94        TMP2 = STATE0;
95        MSG3 = vsha256su0q_u32(MSG3, MSG0);
96        STATE0 = vsha256hq_u32(STATE0, STATE1, TMP0);
97        STATE1 = vsha256h2q_u32(STATE1, TMP2, TMP0);
98        MSG3 = vsha256su1q_u32(MSG3, MSG1, MSG2);
99
100        // Rounds 17-20
101        TMP0 = vaddq_u32(MSG0, vld1q_u32(&K[16]));
102        TMP2 = STATE0;
103        MSG0 = vsha256su0q_u32(MSG0, MSG1);
104        STATE0 = vsha256hq_u32(STATE0, STATE1, TMP0);
105        STATE1 = vsha256h2q_u32(STATE1, TMP2, TMP0);
106        MSG0 = vsha256su1q_u32(MSG0, MSG2, MSG3);
107
108        // Rounds 21-24
109        TMP0 = vaddq_u32(MSG1, vld1q_u32(&K[20]));
110        TMP2 = STATE0;
111        MSG1 = vsha256su0q_u32(MSG1, MSG2);
112        STATE0 = vsha256hq_u32(STATE0, STATE1, TMP0);
113        STATE1 = vsha256h2q_u32(STATE1, TMP2, TMP0);
114        MSG1 = vsha256su1q_u32(MSG1, MSG3, MSG0);
115
116        // Rounds 25-28
117        TMP0 = vaddq_u32(MSG2, vld1q_u32(&K[24]));
118        TMP2 = STATE0;
119        MSG2 = vsha256su0q_u32(MSG2, MSG3);
120        STATE0 = vsha256hq_u32(STATE0, STATE1, TMP0);
121        STATE1 = vsha256h2q_u32(STATE1, TMP2, TMP0);
122        MSG2 = vsha256su1q_u32(MSG2, MSG0, MSG1);
123
124        // Rounds 29-32
125        TMP0 = vaddq_u32(MSG3, vld1q_u32(&K[28]));
126        TMP2 = STATE0;
127        MSG3 = vsha256su0q_u32(MSG3, MSG0);
128        STATE0 = vsha256hq_u32(STATE0, STATE1, TMP0);
129        STATE1 = vsha256h2q_u32(STATE1, TMP2, TMP0);
130        MSG3 = vsha256su1q_u32(MSG3, MSG1, MSG2);
131
132        // Rounds 33-36
133        TMP0 = vaddq_u32(MSG0, vld1q_u32(&K[32]));
134        TMP2 = STATE0;
135        MSG0 = vsha256su0q_u32(MSG0, MSG1);
136        STATE0 = vsha256hq_u32(STATE0, STATE1, TMP0);
137        STATE1 = vsha256h2q_u32(STATE1, TMP2, TMP0);
138        MSG0 = vsha256su1q_u32(MSG0, MSG2, MSG3);
139
140        // Rounds 37-40
141        TMP0 = vaddq_u32(MSG1, vld1q_u32(&K[36]));
142        TMP2 = STATE0;
143        MSG1 = vsha256su0q_u32(MSG1, MSG2);
144        STATE0 = vsha256hq_u32(STATE0, STATE1, TMP0);
145        STATE1 = vsha256h2q_u32(STATE1, TMP2, TMP0);
146        MSG1 = vsha256su1q_u32(MSG1, MSG3, MSG0);
147
148        // Rounds 41-44
149        TMP0 = vaddq_u32(MSG2, vld1q_u32(&K[40]));
150        TMP2 = STATE0;
151        MSG2 = vsha256su0q_u32(MSG2, MSG3);
152        STATE0 = vsha256hq_u32(STATE0, STATE1, TMP0);
153        STATE1 = vsha256h2q_u32(STATE1, TMP2, TMP0);
154        MSG2 = vsha256su1q_u32(MSG2, MSG0, MSG1);
155
156        // Rounds 45-48
157        TMP0 = vaddq_u32(MSG3, vld1q_u32(&K[44]));
158        TMP2 = STATE0;
159        MSG3 = vsha256su0q_u32(MSG3, MSG0);
160        STATE0 = vsha256hq_u32(STATE0, STATE1, TMP0);
161        STATE1 = vsha256h2q_u32(STATE1, TMP2, TMP0);
162        MSG3 = vsha256su1q_u32(MSG3, MSG1, MSG2);
163
164        // Rounds 49-52
165        TMP0 = vaddq_u32(MSG0, vld1q_u32(&K[48]));
166        TMP2 = STATE0;
167        STATE0 = vsha256hq_u32(STATE0, STATE1, TMP0);
168        STATE1 = vsha256h2q_u32(STATE1, TMP2, TMP0);
169
170        // Rounds 53-56
171        TMP0 = vaddq_u32(MSG1, vld1q_u32(&K[52]));
172        TMP2 = STATE0;
173        STATE0 = vsha256hq_u32(STATE0, STATE1, TMP0);
174        STATE1 = vsha256h2q_u32(STATE1, TMP2, TMP0);
175
176        // Rounds 57-60
177        TMP0 = vaddq_u32(MSG2, vld1q_u32(&K[56]));
178        TMP2 = STATE0;
179        STATE0 = vsha256hq_u32(STATE0, STATE1, TMP0);
180        STATE1 = vsha256h2q_u32(STATE1, TMP2, TMP0);
181
182        // Rounds 61-64
183        TMP0 = vaddq_u32(MSG3, vld1q_u32(&K[60]));
184        TMP2 = STATE0;
185        STATE0 = vsha256hq_u32(STATE0, STATE1, TMP0);
186        STATE1 = vsha256h2q_u32(STATE1, TMP2, TMP0);
187
188        // Update state
189        STATE0 = vaddq_u32(STATE0, ABCD_SAVE);
190        STATE1 = vaddq_u32(STATE1, EFGH_SAVE);
191    }
192
193    // Save final state
194    vst1q_u32(&s[0], STATE0);
195    vst1q_u32(&s[4], STATE1);
196}
197}
198
199namespace sha256d64_arm_shani {
200void Transform_2way(unsigned char* output, const unsigned char* input)
201{
202    /* Initial state. */
203    alignas(uint32x4_t) static constexpr std::array<uint32_t, 8> INIT = {
204        0x6a09e667, 0xbb67ae85, 0x3c6ef372, 0xa54ff53a,
205        0x510e527f, 0x9b05688c, 0x1f83d9ab, 0x5be0cd19
206    };
207
208    /* Precomputed message schedule for the 2nd transform. */
209    alignas(uint32x4_t) static constexpr std::array<uint32_t, 64> MIDS = {
210        0xc28a2f98, 0x71374491, 0xb5c0fbcf, 0xe9b5dba5,
211        0x3956c25b, 0x59f111f1, 0x923f82a4, 0xab1c5ed5,
212        0xd807aa98, 0x12835b01, 0x243185be, 0x550c7dc3,
213        0x72be5d74, 0x80deb1fe, 0x9bdc06a7, 0xc19bf374,
214        0x649b69c1, 0xf0fe4786, 0x0fe1edc6, 0x240cf254,
215        0x4fe9346f, 0x6cc984be, 0x61b9411e, 0x16f988fa,
216        0xf2c65152, 0xa88e5a6d, 0xb019fc65, 0xb9d99ec7,
217        0x9a1231c3, 0xe70eeaa0, 0xfdb1232b, 0xc7353eb0,
218        0x3069bad5, 0xcb976d5f, 0x5a0f118f, 0xdc1eeefd,
219        0x0a35b689, 0xde0b7a04, 0x58f4ca9d, 0xe15d5b16,
220        0x007f3e86, 0x37088980, 0xa507ea32, 0x6fab9537,
221        0x17406110, 0x0d8cd6f1, 0xcdaa3b6d, 0xc0bbbe37,
222        0x83613bda, 0xdb48a363, 0x0b02e931, 0x6fd15ca7,
223        0x521afaca, 0x31338431, 0x6ed41a95, 0x6d437890,
224        0xc39c91f2, 0x9eccabbd, 0xb5c9a0e6, 0x532fb63c,
225        0xd2c741c6, 0x07237ea3, 0xa4954b68, 0x4c191d76
226    };
227
228    /* A few precomputed message schedule values for the 3rd transform. */
229    alignas(uint32x4_t) static constexpr std::array<uint32_t, 12> FINS = {
230        0x5807aa98, 0x12835b01, 0x243185be, 0x550c7dc3,
231        0x80000000, 0x00000000, 0x00000000, 0x00000000,
232        0x72be5d74, 0x80deb1fe, 0x9bdc06a7, 0xc19bf274
233    };
234
235    /* Padding processed in the 3rd transform (byteswapped). */
236    alignas(uint32x4_t) static constexpr std::array<uint32_t, 8> FINAL = {0x80000000, 0, 0, 0, 0, 0, 0, 0x100};
237
238    uint32x4_t STATE0A, STATE0B, STATE1A, STATE1B, ABCD_SAVEA, ABCD_SAVEB, EFGH_SAVEA, EFGH_SAVEB;
239    uint32x4_t MSG0A, MSG0B, MSG1A, MSG1B, MSG2A, MSG2B, MSG3A, MSG3B;
240    uint32x4_t TMP0A, TMP0B, TMP2A, TMP2B, TMP;
241
242    // Transform 1: Load state
243    STATE0A = vld1q_u32(&INIT[0]);
244    STATE0B = STATE0A;
245    STATE1A = vld1q_u32(&INIT[4]);
246    STATE1B = STATE1A;
247
248    // Transform 1: Load and convert input chunk to Big Endian
249    MSG0A = vreinterpretq_u32_u8(vrev32q_u8(vld1q_u8(input + 0)));
250    MSG1A = vreinterpretq_u32_u8(vrev32q_u8(vld1q_u8(input + 16)));

src/wallet/receive.cpp

src/wallet/coinselection.cpp

src/consensus/validation.h

src/primitives/transaction.cpp

src/script/descriptor.cpp

src/bitcoin-cli.cpp

src/rpc/blockchain.cpp

src/rpc/rawtransaction.cpp

src/init.cpp

src/crypto/sha256.cpp

src/consensus/merkle.h

src/consensus/tx_check.h

src/consensus/tx_verify.h

src/policy/feerate.h

src/policy/feerate.cpp

src/primitives/transaction_identifier.h

src/chainparamsbase.h

src/chainparamsbase.cpp

src/util/moneystr.cpp

src/crypto/ripemd160.h

src/crypto/sha1.h

src/crypto/sha512.h

src/crypto/hmac_sha256.h

src/crypto/hmac_sha512.h

src/crypto/hmac_sha256.cpp

src/crypto/hmac_sha512.cpp

src/crypto/hkdf_sha256_32.h

src/crypto/hkdf_sha256_32.cpp

src/support/cleanse.h

src/support/cleanse.cpp

src/crypto/siphash.cpp

src/crypto/muhash.h

src/crypto/chacha20.h

src/crypto/poly1305.h

src/crypto/chacha20poly1305.h

src/crypto/chacha20poly1305.cpp

src/util/chaintype.cpp

src/util/obfuscation.h

src/util/byte_units.h

src/util/overflow.h

src/blockencodings.cpp

src/net_permissions.cpp

src/policy/packages.cpp

src/policy/rbf.cpp

src/policy/truc_policy.cpp

src/policy/ephemeral_policy.cpp

src/policy/settings.cpp

src/policy/policy.cpp

src/node/transaction.cpp

src/node/coin.cpp

src/rpc/client.cpp

src/rpc/external_signer.cpp

src/rpc/request.cpp

src/rpc/server_util.cpp

src/rpc/fees.cpp

src/rpc/output_script.cpp

src/rpc/rawtransaction_util.cpp

src/rpc/rawtransaction_util.h

src/rpc/register.h

src/rpc/request.h

src/rpc/server_util.h

src/rpc/protocol.h

src/rpc/server.h

src/rpc/signmessage.cpp

src/rpc/txoutproof.cpp

src/rpc/util.cpp

src/rpc/util.h

src/wallet/rpc/addresses.cpp

src/wallet/rpc/backup.cpp

src/wallet/rpc/coins.cpp

src/wallet/rpc/encrypt.cpp

src/wallet/rpc/signmessage.cpp

src/wallet/rpc/util.cpp

src/wallet/rpc/util.h

src/wallet/coincontrol.cpp

src/wallet/coincontrol.h

src/wallet/context.cpp

src/wallet/context.h

src/wallet/crypter.cpp

src/wallet/crypter.h

src/wallet/db.cpp

src/wallet/export.cpp

src/wallet/external_signer_scriptpubkeyman.cpp

src/wallet/rpc/spend.cpp

src/wallet/rpc/transactions.cpp

src/wallet/rpc/wallet.cpp

src/wallet/feebumper.cpp

src/wallet/feebumper.h

src/index/base.h

src/index/base.cpp

src/index/txindex.h

src/index/txindex.cpp

src/index/txindex_key.h

src/index/txospenderindex.h

src/index/txospenderindex.cpp

src/index/blockfilterindex.h

src/index/blockfilterindex.cpp

src/index/coinstatsindex.h

src/index/coinstatsindex.cpp

src/index/db_key.h

src/index/disktxpos.h

src/kernel/chain.cpp

src/kernel/chain.h

src/kernel/checks.cpp

src/kernel/checks.h

src/kernel/context.cpp

src/kernel/context.h

src/kernel/cs_main.cpp

src/kernel/cs_main.h

src/kernel/disconnected_transactions.cpp

src/kernel/disconnected_transactions.h

src/kernel/mempool_removal_reason.cpp

src/kernel/mempool_removal_reason.h

src/kernel/coinstats.cpp

src/kernel/coinstats.h

src/kernel/chainparams.cpp

src/kernel/chainparams.h

src/wallet/sqlite.cpp

src/wallet/sqlite.h

src/wallet/transaction.cpp

src/wallet/transaction.h

src/wallet/dump.cpp

src/wallet/dump.h

src/wallet/init.cpp

src/wallet/walletutil.cpp

src/wallet/walletutil.h

src/wallet/wallettool.cpp

src/wallet/wallettool.h

src/wallet/export.h

src/wallet/migrate.cpp

src/wallet/migrate.h

src/wallet/db.h

src/wallet/walletdb.cpp

src/wallet/interfaces.cpp

src/wallet/scriptpubkeyman.cpp

src/wallet/scriptpubkeyman.h

src/kernel/bitcoinkernel.cpp

src/kernel/bitcoinkernel.h

src/kernel/bitcoinkernel_wrapper.h

src/node/chainstate.cpp

src/node/chainstate.h

src/node/blockstorage.cpp

src/node/blockstorage.h

src/node/mempool_persist.cpp

src/node/mempool_persist.h

src/node/utxo_snapshot.cpp

src/node/utxo_snapshot.h

src/node/kernel_notifications.cpp

src/node/kernel_notifications.h

src/node/blockmanager_args.cpp

src/kernel/blockmanager_opts.h

src/util/expected.cpp

src/policy/settings.h

src/util/types.h

src/kernel/messagestartchars.h

src/kernel/warning.h

src/util/exception.h

src/common/license_info.h

src/node/coins_view_args.h

src/node/database_args.h

src/util/batchpriority.h

src/util/ui_change_type.h

src/node/coins_view_args.cpp

src/node/peerman_args.h

src/util/serfloat.h

src/node/blockmanager_args.h

src/node/database_args.cpp

src/util/overloaded.h

src/interfaces/types.h

src/node/chainstatemanager_args.h

src/node/minisketchwrapper.h

src/util/macros.h

src/util/syserror.h

src/common/run_command.h

src/util/bytevectorhash.cpp

src/node/mempool_persist_args.cpp

src/util/exec.h

src/util/rbf.h

src/crypto/hex_base.h

src/node/mempool_persist_args.h

src/interfaces/echo.h

src/util/any.h

src/util/batchpriority.cpp

src/util/threadnames.h

src/node/coin.h

src/node/mempool_args.h

src/util/asmap.h

src/util/bytevectorhash.h

src/node/context.cpp

src/util/insert.h

src/util/readwritefile.h

src/node/peerman_args.cpp

src/node/interface_ui.cpp

src/interfaces/handler.h

src/node/mining_args.h

src/util/hasher.cpp

src/common/init.h

src/kernel/mempool_limits.h

src/common/system.h

src/crypto/sha3.h

src/util/threadinterrupt.cpp

src/node/protocol_version.h

src/util/exception.cpp

src/common/messages.h

src/node/connection_types.cpp

src/util/bip32.h

src/common/license_info.cpp

src/util/stdmutex.h

src/common/run_command.cpp

src/util/check.cpp

src/util/golombrice.h

src/node/types.h

src/node/timeoffsets.h

src/util/readwritefile.cpp

src/util/fastrange.h

src/util/signalinterrupt.h

src/util/task_runner.h

src/util/syserror.cpp

src/common/interfaces.cpp

src/common/types.h

src/util/threadinterrupt.h

src/kernel/chainstatemanager_opts.h

src/node/psbt.h

src/policy/ephemeral_policy.h

src/util/trace.h

src/common/url.cpp

src/kernel/mempool_options.h

src/util/serfloat.cpp

src/kernel/notifications_interface.h

src/node/timeoffsets.cpp

src/node/warnings.cpp

src/util/hash_type.h

src/crypto/hex_base.cpp

src/node/eviction.h

src/util/tokenbucket.h

src/crypto/aes.h

src/common/pcp.h

src/util/feefrac.cpp

src/node/transaction.h

src/util/threadnames.cpp

src/common/signmessage.h

src/util/exec.cpp

src/util/signalinterrupt.cpp

Independent explanations by MyBitcoinExplorer. Not affiliated with or endorsed by Bitcoin Core. Guides are educational and do not replace the source or its tests.

Bitcoin Core source © its contributors, distributed under the MIT license. Original notices and bundled third-party licenses are retained in the source tree.