READ THE CODE

Inside Bitcoin

The code behind the network, with room to understand it.

Stable release v32.1bitcoin/bitcoin · f0de87f04062 ↗3,020 source files · 47.5 MB stored on the server340 file guides

Release published 2026-10-28 · Snapshot fetched 2026-11-01. Latest stable release at fetch time; development branches and Git history are excluded. Only the selected code window and visible folders load here.

6,315 bytes · SHA-256 9c35767f2110d8d0… · View upstream ↗

1// Copyright (c) 2020-present The Bitcoin Core developers
2// Distributed under the MIT software license, see the accompanying
3// file COPYING or http://www.opensource.org/licenses/mit-license.php.
4
5// Based on https://github.com/mjosaarinen/tiny_sha3/blob/master/sha3.c
6// by Markku-Juhani O. Saarinen <[email protected]>
7
8#include <crypto/sha3.h>
9#include <crypto/common.h>
10
11#include <algorithm>
12#include <bit>
13#include <cassert>
14#include <iterator>
15#include <span>
16
17void KeccakF(uint64_t (&st)[25])
18{
19    static constexpr uint64_t RNDC[24] = {
20        0x0000000000000001, 0x0000000000008082, 0x800000000000808a, 0x8000000080008000,
21        0x000000000000808b, 0x0000000080000001, 0x8000000080008081, 0x8000000000008009,
22        0x000000000000008a, 0x0000000000000088, 0x0000000080008009, 0x000000008000000a,
23        0x000000008000808b, 0x800000000000008b, 0x8000000000008089, 0x8000000000008003,
24        0x8000000000008002, 0x8000000000000080, 0x000000000000800a, 0x800000008000000a,
25        0x8000000080008081, 0x8000000000008080, 0x0000000080000001, 0x8000000080008008
26    };
27    static constexpr int ROUNDS = 24;
28
29    for (int round = 0; round < ROUNDS; ++round) {
30        uint64_t bc0, bc1, bc2, bc3, bc4, t;
31
32        // Theta
33        bc0 = st[0] ^ st[5] ^ st[10] ^ st[15] ^ st[20];
34        bc1 = st[1] ^ st[6] ^ st[11] ^ st[16] ^ st[21];
35        bc2 = st[2] ^ st[7] ^ st[12] ^ st[17] ^ st[22];
36        bc3 = st[3] ^ st[8] ^ st[13] ^ st[18] ^ st[23];
37        bc4 = st[4] ^ st[9] ^ st[14] ^ st[19] ^ st[24];
38        t = bc4 ^ std::rotl(bc1, 1); st[0] ^= t; st[5] ^= t; st[10] ^= t; st[15] ^= t; st[20] ^= t;
39        t = bc0 ^ std::rotl(bc2, 1); st[1] ^= t; st[6] ^= t; st[11] ^= t; st[16] ^= t; st[21] ^= t;
40        t = bc1 ^ std::rotl(bc3, 1); st[2] ^= t; st[7] ^= t; st[12] ^= t; st[17] ^= t; st[22] ^= t;
41        t = bc2 ^ std::rotl(bc4, 1); st[3] ^= t; st[8] ^= t; st[13] ^= t; st[18] ^= t; st[23] ^= t;
42        t = bc3 ^ std::rotl(bc0, 1); st[4] ^= t; st[9] ^= t; st[14] ^= t; st[19] ^= t; st[24] ^= t;
43
44        // Rho Pi
45        t = st[1];
46        bc0 = st[10]; st[10] = std::rotl(t, 1); t = bc0;
47        bc0 = st[7]; st[7] = std::rotl(t, 3); t = bc0;
48        bc0 = st[11]; st[11] = std::rotl(t, 6); t = bc0;
49        bc0 = st[17]; st[17] = std::rotl(t, 10); t = bc0;
50        bc0 = st[18]; st[18] = std::rotl(t, 15); t = bc0;
51        bc0 = st[3]; st[3] = std::rotl(t, 21); t = bc0;
52        bc0 = st[5]; st[5] = std::rotl(t, 28); t = bc0;
53        bc0 = st[16]; st[16] = std::rotl(t, 36); t = bc0;
54        bc0 = st[8]; st[8] = std::rotl(t, 45); t = bc0;
55        bc0 = st[21]; st[21] = std::rotl(t, 55); t = bc0;
56        bc0 = st[24]; st[24] = std::rotl(t, 2); t = bc0;
57        bc0 = st[4]; st[4] = std::rotl(t, 14); t = bc0;
58        bc0 = st[15]; st[15] = std::rotl(t, 27); t = bc0;
59        bc0 = st[23]; st[23] = std::rotl(t, 41); t = bc0;
60        bc0 = st[19]; st[19] = std::rotl(t, 56); t = bc0;
61        bc0 = st[13]; st[13] = std::rotl(t, 8); t = bc0;
62        bc0 = st[12]; st[12] = std::rotl(t, 25); t = bc0;
63        bc0 = st[2]; st[2] = std::rotl(t, 43); t = bc0;
64        bc0 = st[20]; st[20] = std::rotl(t, 62); t = bc0;
65        bc0 = st[14]; st[14] = std::rotl(t, 18); t = bc0;
66        bc0 = st[22]; st[22] = std::rotl(t, 39); t = bc0;
67        bc0 = st[9]; st[9] = std::rotl(t, 61); t = bc0;
68        bc0 = st[6]; st[6] = std::rotl(t, 20); t = bc0;
69        st[1] = std::rotl(t, 44);
70
71        // Chi Iota
72        bc0 = st[0]; bc1 = st[1]; bc2 = st[2]; bc3 = st[3]; bc4 = st[4];
73        st[0] = bc0 ^ (~bc1 & bc2) ^ RNDC[round];
74        st[1] = bc1 ^ (~bc2 & bc3);
75        st[2] = bc2 ^ (~bc3 & bc4);
76        st[3] = bc3 ^ (~bc4 & bc0);
77        st[4] = bc4 ^ (~bc0 & bc1);
78        bc0 = st[5]; bc1 = st[6]; bc2 = st[7]; bc3 = st[8]; bc4 = st[9];
79        st[5] = bc0 ^ (~bc1 & bc2);
80        st[6] = bc1 ^ (~bc2 & bc3);
81        st[7] = bc2 ^ (~bc3 & bc4);
82        st[8] = bc3 ^ (~bc4 & bc0);
83        st[9] = bc4 ^ (~bc0 & bc1);
84        bc0 = st[10]; bc1 = st[11]; bc2 = st[12]; bc3 = st[13]; bc4 = st[14];
85        st[10] = bc0 ^ (~bc1 & bc2);
86        st[11] = bc1 ^ (~bc2 & bc3);
87        st[12] = bc2 ^ (~bc3 & bc4);
88        st[13] = bc3 ^ (~bc4 & bc0);
89        st[14] = bc4 ^ (~bc0 & bc1);
90        bc0 = st[15]; bc1 = st[16]; bc2 = st[17]; bc3 = st[18]; bc4 = st[19];
91        st[15] = bc0 ^ (~bc1 & bc2);
92        st[16] = bc1 ^ (~bc2 & bc3);
93        st[17] = bc2 ^ (~bc3 & bc4);
94        st[18] = bc3 ^ (~bc4 & bc0);
95        st[19] = bc4 ^ (~bc0 & bc1);
96        bc0 = st[20]; bc1 = st[21]; bc2 = st[22]; bc3 = st[23]; bc4 = st[24];
97        st[20] = bc0 ^ (~bc1 & bc2);
98        st[21] = bc1 ^ (~bc2 & bc3);
99        st[22] = bc2 ^ (~bc3 & bc4);
100        st[23] = bc3 ^ (~bc4 & bc0);
101        st[24] = bc4 ^ (~bc0 & bc1);
102    }
103}
104
105SHA3_256& SHA3_256::Write(std::span<const unsigned char> data)
106{
107    if (m_bufsize && data.size() >= sizeof(m_buffer) - m_bufsize) {
108        // Fill the buffer and process it.
109        std::copy(data.begin(), data.begin() + (sizeof(m_buffer) - m_bufsize), m_buffer + m_bufsize);
110        data = data.subspan(sizeof(m_buffer) - m_bufsize);
111        m_state[m_pos++] ^= ReadLE64(m_buffer);
112        m_bufsize = 0;
113        if (m_pos == RATE_BUFFERS) {
114            KeccakF(m_state);
115            m_pos = 0;
116        }
117    }
118    while (data.size() >= sizeof(m_buffer)) {
119        // Process chunks directly from the buffer.
120        m_state[m_pos++] ^= ReadLE64(data.data());
121        data = data.subspan(8);
122        if (m_pos == RATE_BUFFERS) {
123            KeccakF(m_state);
124            m_pos = 0;
125        }
126    }
127    if (data.size()) {
128        // Keep the remainder in the buffer.
129        std::copy(data.begin(), data.end(), m_buffer + m_bufsize);
130        m_bufsize += data.size();
131    }
132    return *this;
133}
134
135SHA3_256& SHA3_256::Finalize(std::span<unsigned char> output)
136{
137    assert(output.size() == OUTPUT_SIZE);
138    std::fill(m_buffer + m_bufsize, m_buffer + sizeof(m_buffer), 0);
139    m_buffer[m_bufsize] ^= 0x06;
140    m_state[m_pos] ^= ReadLE64(m_buffer);
141    m_state[RATE_BUFFERS - 1] ^= 0x8000000000000000;
142    KeccakF(m_state);
143    for (unsigned i = 0; i < 4; ++i) {
144        WriteLE64(output.data() + 8 * i, m_state[i]);
145    }
146    return *this;
147}
148
149SHA3_256& SHA3_256::Reset()
150{
151    m_bufsize = 0;
152    m_pos = 0;
153    std::fill(std::begin(m_state), std::end(m_state), 0);
154    return *this;
155}
156

src/wallet/receive.cpp

src/wallet/coinselection.cpp

src/consensus/validation.h

src/primitives/transaction.cpp

src/script/descriptor.cpp

src/bitcoin-cli.cpp

src/rpc/blockchain.cpp

src/rpc/rawtransaction.cpp

src/init.cpp

src/crypto/sha256.cpp

src/consensus/merkle.h

src/consensus/tx_check.h

src/consensus/tx_verify.h

src/policy/feerate.h

src/policy/feerate.cpp

src/primitives/transaction_identifier.h

src/chainparamsbase.h

src/chainparamsbase.cpp

src/util/moneystr.cpp

src/crypto/ripemd160.h

src/crypto/sha1.h

src/crypto/sha512.h

src/crypto/hmac_sha256.h

src/crypto/hmac_sha512.h

src/crypto/hmac_sha256.cpp

src/crypto/hmac_sha512.cpp

src/crypto/hkdf_sha256_32.h

src/crypto/hkdf_sha256_32.cpp

src/support/cleanse.h

src/support/cleanse.cpp

src/crypto/siphash.cpp

src/crypto/muhash.h

src/crypto/chacha20.h

src/crypto/poly1305.h

src/crypto/chacha20poly1305.h

src/crypto/chacha20poly1305.cpp

src/util/chaintype.cpp

src/util/obfuscation.h

src/util/byte_units.h

src/util/overflow.h

src/blockencodings.cpp

src/net_permissions.cpp

src/policy/packages.cpp

src/policy/rbf.cpp

src/policy/truc_policy.cpp

src/policy/ephemeral_policy.cpp

src/policy/settings.cpp

src/policy/policy.cpp

src/node/transaction.cpp

src/node/coin.cpp

src/rpc/client.cpp

src/rpc/external_signer.cpp

src/rpc/request.cpp

src/rpc/server_util.cpp

src/rpc/fees.cpp

src/rpc/output_script.cpp

src/rpc/rawtransaction_util.cpp

src/rpc/rawtransaction_util.h

src/rpc/register.h

src/rpc/request.h

src/rpc/server_util.h

src/rpc/protocol.h

src/rpc/server.h

src/rpc/signmessage.cpp

src/rpc/txoutproof.cpp

src/rpc/util.cpp

src/rpc/util.h

src/wallet/rpc/addresses.cpp

src/wallet/rpc/backup.cpp

src/wallet/rpc/coins.cpp

src/wallet/rpc/encrypt.cpp

src/wallet/rpc/signmessage.cpp

src/wallet/rpc/util.cpp

src/wallet/rpc/util.h

src/wallet/coincontrol.cpp

src/wallet/coincontrol.h

src/wallet/context.cpp

src/wallet/context.h

src/wallet/crypter.cpp

src/wallet/crypter.h

src/wallet/db.cpp

src/wallet/export.cpp

src/wallet/external_signer_scriptpubkeyman.cpp

src/wallet/rpc/spend.cpp

src/wallet/rpc/transactions.cpp

src/wallet/rpc/wallet.cpp

src/wallet/feebumper.cpp

src/wallet/feebumper.h

src/index/base.h

src/index/base.cpp

src/index/txindex.h

src/index/txindex.cpp

src/index/txindex_key.h

src/index/txospenderindex.h

src/index/txospenderindex.cpp

src/index/blockfilterindex.h

src/index/blockfilterindex.cpp

src/index/coinstatsindex.h

src/index/coinstatsindex.cpp

src/index/db_key.h

src/index/disktxpos.h

src/kernel/chain.cpp

src/kernel/chain.h

src/kernel/checks.cpp

src/kernel/checks.h

src/kernel/context.cpp

src/kernel/context.h

src/kernel/cs_main.cpp

src/kernel/cs_main.h

src/kernel/disconnected_transactions.cpp

src/kernel/disconnected_transactions.h

src/kernel/mempool_removal_reason.cpp

src/kernel/mempool_removal_reason.h

src/kernel/coinstats.cpp

src/kernel/coinstats.h

src/kernel/chainparams.cpp

src/kernel/chainparams.h

src/wallet/sqlite.cpp

src/wallet/sqlite.h

src/wallet/transaction.cpp

src/wallet/transaction.h

src/wallet/dump.cpp

src/wallet/dump.h

src/wallet/init.cpp

src/wallet/walletutil.cpp

src/wallet/walletutil.h

src/wallet/wallettool.cpp

src/wallet/wallettool.h

src/wallet/export.h

src/wallet/migrate.cpp

src/wallet/migrate.h

src/wallet/db.h

src/wallet/walletdb.cpp

src/wallet/interfaces.cpp

src/wallet/scriptpubkeyman.cpp

src/wallet/scriptpubkeyman.h

src/kernel/bitcoinkernel.cpp

src/kernel/bitcoinkernel.h

src/kernel/bitcoinkernel_wrapper.h

src/node/chainstate.cpp

src/node/chainstate.h

src/node/blockstorage.cpp

src/node/blockstorage.h

src/node/mempool_persist.cpp

src/node/mempool_persist.h

src/node/utxo_snapshot.cpp

src/node/utxo_snapshot.h

src/node/kernel_notifications.cpp

src/node/kernel_notifications.h

src/node/blockmanager_args.cpp

src/kernel/blockmanager_opts.h

src/util/expected.cpp

src/policy/settings.h

src/util/types.h

src/kernel/messagestartchars.h

src/kernel/warning.h

src/util/exception.h

src/common/license_info.h

src/node/coins_view_args.h

src/node/database_args.h

src/util/batchpriority.h

src/util/ui_change_type.h

src/node/coins_view_args.cpp

src/node/peerman_args.h

src/util/serfloat.h

src/node/blockmanager_args.h

src/node/database_args.cpp

src/util/overloaded.h

src/interfaces/types.h

src/node/chainstatemanager_args.h

src/node/minisketchwrapper.h

src/util/macros.h

src/util/syserror.h

src/common/run_command.h

src/util/bytevectorhash.cpp

src/node/mempool_persist_args.cpp

src/util/exec.h

src/util/rbf.h

src/crypto/hex_base.h

src/node/mempool_persist_args.h

src/interfaces/echo.h

src/util/any.h

src/util/batchpriority.cpp

src/util/threadnames.h

src/node/coin.h

src/node/mempool_args.h

src/util/asmap.h

src/util/bytevectorhash.h

src/node/context.cpp

src/util/insert.h

src/util/readwritefile.h

src/node/peerman_args.cpp

src/node/interface_ui.cpp

src/interfaces/handler.h

src/node/mining_args.h

src/util/hasher.cpp

src/common/init.h

src/kernel/mempool_limits.h

src/common/system.h

src/crypto/sha3.h

src/util/threadinterrupt.cpp

src/node/protocol_version.h

src/util/exception.cpp

src/common/messages.h

src/node/connection_types.cpp

src/util/bip32.h

src/common/license_info.cpp

src/util/stdmutex.h

src/common/run_command.cpp

src/util/check.cpp

src/util/golombrice.h

src/node/types.h

src/node/timeoffsets.h

src/util/readwritefile.cpp

src/util/fastrange.h

src/util/signalinterrupt.h

src/util/task_runner.h

src/util/syserror.cpp

src/common/interfaces.cpp

src/common/types.h

src/util/threadinterrupt.h

src/kernel/chainstatemanager_opts.h

src/node/psbt.h

src/policy/ephemeral_policy.h

src/util/trace.h

src/common/url.cpp

src/kernel/mempool_options.h

src/util/serfloat.cpp

src/kernel/notifications_interface.h

src/node/timeoffsets.cpp

src/node/warnings.cpp

src/util/hash_type.h

src/crypto/hex_base.cpp

src/node/eviction.h

src/util/tokenbucket.h

src/crypto/aes.h

src/common/pcp.h

src/util/feefrac.cpp

src/node/transaction.h

src/util/threadnames.cpp

src/common/signmessage.h

src/util/exec.cpp

src/util/signalinterrupt.cpp

Independent explanations by MyBitcoinExplorer. Not affiliated with or endorsed by Bitcoin Core. Guides are educational and do not replace the source or its tests.

Bitcoin Core source © its contributors, distributed under the MIT license. Original notices and bundled third-party licenses are retained in the source tree.