BITCOIN MAINNETLive explorer status

Explorer Mempool Feed Forum Visualizer Receipts Tools Learn Code

Inside Bitcoin

Opening the selected file…

₿MyBitcoinExplorer

Bitcoin, in focus.
Explore the network. Understand the connections.

Explore Bitcoin with clarity.

READ THE CODE

Inside Bitcoin

The code behind the network, with room to understand it.

Stable release v32.1bitcoin/bitcoin · f0de87f04062 ↗3,020 source files · 47.5 MB stored on the server440 file guides

Release published 2026-10-28 · Snapshot fetched 2026-11-01. Latest stable release at fetch time; development branches and Git history are excluded. Only the selected code window and visible folders load here.

bitcoin / bitcoinstable

Find a file

▤ arith_uint256.hGuide

▤ bitcoin-chainstate.cpp

▤ bitcoin-cli-res.rc

▤ bitcoin-cli.cppGuide

▤ bitcoin-res.rc

▤ bitcoin-tx-res.rc

▤ bitcoin-tx.cpp

▤ bitcoin-util-res.rc

▤ bitcoin-util.cpp

▤ bitcoin-wallet-res.rc

▤ blockencodings.cppGuide

▤ blockencodings.hGuide

▤ blockfilter.cppGuide

▤ blockfilter.hGuide

▤ chain.cppGuide

▤ chain.h

▤ chainparams.cppGuide

▤ chainparams.hGuide

▤ chainparamsbase.cppGuide

▤ chainparamsbase.hGuide

▤ chainparamsseeds.h

▤ checkqueue.hGuide

▤ clientversion.cppGuide

▤ clientversion.hGuide

▤ cluster_linearize.h

▤ CMakeLists.txt

▤ coins.cppGuide

▤ coins.hGuide

▤ compressor.cppGuide

▤ compressor.hGuide

▤ core_io.cpp

▤ core_io.hGuide

▤ core_memusage.hGuide

▤ cuckoocache.h

▤ dbwrapper.cpp

▤ dbwrapper.hGuide

▤ deploymentinfo.cppGuide

▤ deploymentinfo.hGuide

▤ deploymentstatus.cppGuide

▤ deploymentstatus.hGuide

▤ dummywallet.cppGuide

▤ external_signer.cpp

▤ external_signer.hGuide

▤ merkleblock.cppGuide

▤ merkleblock.hGuide

▤ musig.cpp

▤ musig.hGuide

▤ net_permissions.cppGuide

▤ net_permissions.hGuide

▤ net_processing.cppGuide

▤ netaddress.cppGuide

▤ netmessagemaker.hGuide

▤ noui.cppGuide

▤ noui.hGuide

▤ outputtype.cppGuide

▤ private_broadcast.cpp

▤ private_broadcast.h

▤ semaphore_grant.hGuide

▤ threadsafety.hGuide

▤ tinyformat.h

▤ torcontrol.cppGuide

▤ validation.cppGuide

▤ validation.h

▤ validationinterface.cpp

▤ validationinterface.h

▤ versionbits_impl.hGuide

▤ versionbits.cpp

▤ versionbits.hGuide

▤ walletinitinterface.hGuide

▤ CMakeLists.txtGuide

▤ libbitcoinkernel.pc.in

bitcoin / src / pubkey.cpp

Download source ↓

14,060 bytes · SHA-256 0586a3a92f31d6df… · View upstream ↗

251        return (HashWriter{HASHER_TAPTWEAK} << m_keydata).GetSHA256();
252    } else {
253        return (HashWriter{HASHER_TAPTWEAK} << m_keydata << *merkle_root).GetSHA256();
254    }
255}
256
257bool XOnlyPubKey::CheckTapTweak(const XOnlyPubKey& internal, const uint256& merkle_root, bool parity) const
258{
259    secp256k1_xonly_pubkey internal_key;
260    if (!secp256k1_xonly_pubkey_parse(secp256k1_context_static, &internal_key, internal.data())) return false;
261    uint256 tweak = internal.ComputeTapTweakHash(&merkle_root);
262    return secp256k1_xonly_pubkey_tweak_add_check(secp256k1_context_static, m_keydata.begin(), parity, &internal_key, tweak.begin());
263}
264
265std::optional<std::pair<XOnlyPubKey, bool>> XOnlyPubKey::CreateTapTweak(const uint256* merkle_root) const
266{
267    secp256k1_xonly_pubkey base_point;
268    if (!secp256k1_xonly_pubkey_parse(secp256k1_context_static, &base_point, data())) return std::nullopt;
269    secp256k1_pubkey out;
270    uint256 tweak = ComputeTapTweakHash(merkle_root);
271    if (!secp256k1_xonly_pubkey_tweak_add(secp256k1_context_static, &out, &base_point, tweak.data())) return std::nullopt;
272    int parity = -1;
273    std::pair<XOnlyPubKey, bool> ret;
274    secp256k1_xonly_pubkey out_xonly;
275    if (!secp256k1_xonly_pubkey_from_pubkey(secp256k1_context_static, &out_xonly, &parity, &out)) return std::nullopt;
276    secp256k1_xonly_pubkey_serialize(secp256k1_context_static, ret.first.begin(), &out_xonly);
277    assert(parity == 0 || parity == 1);
278    ret.second = parity;
279    return ret;
280}
281
282
283bool CPubKey::Verify(const uint256 &hash, const std::vector<unsigned char>& vchSig) const {
284    if (!IsValid())
285        return false;
286    secp256k1_pubkey pubkey;
287    secp256k1_ecdsa_signature sig;
288    if (!secp256k1_ec_pubkey_parse(secp256k1_context_static, &pubkey, vch, size())) {
289        return false;
290    }
291    if (!ecdsa_signature_parse_der_lax(&sig, vchSig.data(), vchSig.size())) {
292        return false;
293    }
294    /* libsecp256k1's ECDSA verification requires lower-S signatures, which have
295     * not historically been enforced in Bitcoin, so normalize them first. */
296    secp256k1_ecdsa_signature_normalize(secp256k1_context_static, &sig, &sig);
297    return secp256k1_ecdsa_verify(secp256k1_context_static, &sig, hash.begin(), &pubkey);
298}
299
300bool CPubKey::RecoverCompact(const uint256 &hash, const std::vector<unsigned char>& vchSig) {
301    if (vchSig.size() != COMPACT_SIGNATURE_SIZE)
302        return false;
303    int recid = (vchSig[0] - 27) & 3;
304    bool fComp = ((vchSig[0] - 27) & 4) != 0;
305    secp256k1_pubkey pubkey;
306    secp256k1_ecdsa_recoverable_signature sig;
307    if (!secp256k1_ecdsa_recoverable_signature_parse_compact(secp256k1_context_static, &sig, &vchSig[1], recid)) {
308        return false;
309    }
310    if (!secp256k1_ecdsa_recover(secp256k1_context_static, &pubkey, &sig, hash.begin())) {
311        return false;
312    }
313    unsigned char pub[SIZE];
314    size_t publen = SIZE;
315    secp256k1_ec_pubkey_serialize(secp256k1_context_static, pub, &publen, &pubkey, fComp ? SECP256K1_EC_COMPRESSED : SECP256K1_EC_UNCOMPRESSED);
316    Set(pub, pub + publen);
317    return true;
318}
319
320bool CPubKey::IsFullyValid() const {
321    if (!IsValid())
322        return false;
323    secp256k1_pubkey pubkey;
324    return secp256k1_ec_pubkey_parse(secp256k1_context_static, &pubkey, vch, size());
325}
326
327bool CPubKey::Decompress() {
328    if (!IsValid())
329        return false;
330    secp256k1_pubkey pubkey;
331    if (!secp256k1_ec_pubkey_parse(secp256k1_context_static, &pubkey, vch, size())) {
332        return false;
333    }
334    unsigned char pub[SIZE];
335    size_t publen = SIZE;
336    secp256k1_ec_pubkey_serialize(secp256k1_context_static, pub, &publen, &pubkey, SECP256K1_EC_UNCOMPRESSED);
337    Set(pub, pub + publen);
338    return true;
339}
340
341bool CPubKey::Derive(CPubKey& pubkeyChild, ChainCode &ccChild, unsigned int nChild, const ChainCode& cc, uint256* bip32_tweak_out) const {
342    assert(IsValid());
343    assert((nChild >> 31) == 0);
344    assert(size() == COMPRESSED_SIZE);
345    unsigned char out[64];
346    BIP32Hash(cc, nChild, *begin(), begin()+1, out);
347    memcpy(ccChild.begin(), out+32, 32);
348    if (bip32_tweak_out) {
349        memcpy(bip32_tweak_out->begin(), out, 32);
350    }
351    secp256k1_pubkey pubkey;
352    if (!secp256k1_ec_pubkey_parse(secp256k1_context_static, &pubkey, vch, size())) {
353        return false;
354    }
355    if (!secp256k1_ec_pubkey_tweak_add(secp256k1_context_static, &pubkey, out)) {
356        return false;
357    }
358    unsigned char pub[COMPRESSED_SIZE];
359    size_t publen = COMPRESSED_SIZE;
360    secp256k1_ec_pubkey_serialize(secp256k1_context_static, pub, &publen, &pubkey, SECP256K1_EC_COMPRESSED);
361    pubkeyChild.Set(pub, pub + publen);
362    return true;
363}
364
365EllSwiftPubKey::EllSwiftPubKey(std::span<const std::byte> ellswift) noexcept
366{
367    assert(ellswift.size() == SIZE);
368    std::copy(ellswift.begin(), ellswift.end(), m_pubkey.begin());
369}
370
371CPubKey EllSwiftPubKey::Decode() const
372{
373    secp256k1_pubkey pubkey;
374    secp256k1_ellswift_decode(secp256k1_context_static, &pubkey, UCharCast(m_pubkey.data()));
375
376    size_t sz = CPubKey::COMPRESSED_SIZE;
377    std::array<uint8_t, CPubKey::COMPRESSED_SIZE> vch_bytes;
378
379    secp256k1_ec_pubkey_serialize(secp256k1_context_static, vch_bytes.data(), &sz, &pubkey, SECP256K1_EC_COMPRESSED);
380    assert(sz == vch_bytes.size());
381
382    return CPubKey{vch_bytes.begin(), vch_bytes.end()};
383}
384
385void CExtPubKey::Encode(unsigned char code[BIP32_EXTKEY_SIZE]) const {
386    code[0] = nDepth;
387    std::ranges::copy(fingerprint, code+1);
388    WriteBE32(code+5, nChild);
389    memcpy(code+9, chaincode.begin(), 32);
390    assert(pubkey.size() == CPubKey::COMPRESSED_SIZE);
391    memcpy(code+41, pubkey.begin(), CPubKey::COMPRESSED_SIZE);
392}
393
394void CExtPubKey::Decode(const unsigned char code[BIP32_EXTKEY_SIZE]) {
395    nDepth = code[0];
396    std::copy_n(code + 1, fingerprint.size(), fingerprint.begin());
397    nChild = ReadBE32(code+5);
398    memcpy(chaincode.begin(), code+9, 32);
399    pubkey.Set(code+41, code+BIP32_EXTKEY_SIZE);
400    if ((nDepth == 0 && (nChild != 0 || ReadLE32(fingerprint.data()) != 0)) || !pubkey.IsFullyValid()) pubkey = CPubKey();
401}
402
403void CExtPubKey::EncodeWithVersion(unsigned char code[BIP32_EXTKEY_WITH_VERSION_SIZE]) const
404{
405    memcpy(code, version, 4);
406    Encode(&code[4]);
407}
408
409void CExtPubKey::DecodeWithVersion(const unsigned char code[BIP32_EXTKEY_WITH_VERSION_SIZE])
410{
411    memcpy(version, code, 4);
412    Decode(&code[4]);
413}
414
415bool CExtPubKey::Derive(CExtPubKey &out, unsigned int _nChild, uint256* bip32_tweak_out) const {
416    if (nDepth == std::numeric_limits<unsigned char>::max()) return false;
417    out.nDepth = nDepth + 1;
418    out.fingerprint = id_key_fingerprint();
419    out.nChild = _nChild;
420    return pubkey.Derive(out.pubkey, out.chaincode, _nChild, chaincode, bip32_tweak_out);
421}
422
423/* static */ bool CPubKey::CheckLowS(const std::vector<unsigned char>& vchSig) {
424    secp256k1_ecdsa_signature sig;
425    if (!ecdsa_signature_parse_der_lax(&sig, vchSig.data(), vchSig.size())) {
426        return false;
427    }
428    return (!secp256k1_ecdsa_signature_normalize(secp256k1_context_static, nullptr, &sig));
429}
430

A READING COMPANION

Source available. Guide coming next.

This file is included in the stable source snapshot. A file-specific guide has not been published yet.

440 guided files · 2,580 pending. Guides cover key sections, not every line.

cmake/bitcoin-build-config.h.in src/consensus/amount.h src/consensus/consensus.h src/primitives/block.h src/primitives/transaction.h src/crypto/sha256.h src/util/moneystr.h src/clientversion.h src/uint256.h src/script/script.h src/policy/policy.h CMakeLists.txt README.md COPYING src/consensus/tx_check.cpp src/consensus/tx_verify.cpp src/consensus/merkle.cpp src/pow.cpp src/validation.cpp src/script/interpreter.cpp src/script/solver.cpp src/script/sign.cpp src/key_io.cpp src/net.cpp src/net_processing.cpp src/netaddress.cpp src/protocol.h src/wallet/wallet.cpp src/wallet/spend.cpp

← Previous 250 linesCode page 2

src/wallet/receive.cpp

src/wallet/coinselection.cpp

src/consensus/validation.h

src/primitives/transaction.cpp

src/script/descriptor.cpp

src/bitcoin-cli.cpp

src/rpc/blockchain.cpp

src/rpc/rawtransaction.cpp

src/init.cpp

src/crypto/sha256.cpp

src/consensus/merkle.h

src/consensus/tx_check.h

src/consensus/tx_verify.h

src/policy/feerate.h

src/policy/feerate.cpp

src/primitives/transaction_identifier.h

src/chainparamsbase.h

src/chainparamsbase.cpp

src/util/moneystr.cpp

src/crypto/ripemd160.h

src/crypto/sha1.h

src/crypto/sha512.h

src/crypto/hmac_sha256.h

src/crypto/hmac_sha512.h

src/crypto/hmac_sha256.cpp

src/crypto/hmac_sha512.cpp

src/crypto/hkdf_sha256_32.h

src/crypto/hkdf_sha256_32.cpp

src/support/cleanse.h

src/support/cleanse.cpp

src/crypto/siphash.cpp

src/crypto/muhash.h

src/crypto/chacha20.h

src/crypto/poly1305.h

src/crypto/chacha20poly1305.h

src/crypto/chacha20poly1305.cpp

src/util/chaintype.cpp

src/util/obfuscation.h

src/util/byte_units.h

src/util/overflow.h

src/blockencodings.cpp

src/net_permissions.cpp

src/policy/packages.cpp

src/policy/rbf.cpp

src/policy/truc_policy.cpp

src/policy/ephemeral_policy.cpp

src/policy/settings.cpp

src/policy/policy.cpp

src/node/transaction.cpp

src/node/coin.cpp

src/rpc/client.cpp

src/rpc/external_signer.cpp

src/rpc/request.cpp

src/rpc/server_util.cpp

src/rpc/fees.cpp

src/rpc/output_script.cpp

src/rpc/rawtransaction_util.cpp

src/rpc/rawtransaction_util.h

src/rpc/register.h

src/rpc/request.h

src/rpc/server_util.h

src/rpc/protocol.h

src/rpc/server.h

src/rpc/signmessage.cpp

src/rpc/txoutproof.cpp

src/rpc/util.cpp

src/rpc/util.h

src/wallet/rpc/addresses.cpp

src/wallet/rpc/backup.cpp

src/wallet/rpc/coins.cpp

src/wallet/rpc/encrypt.cpp

src/wallet/rpc/signmessage.cpp

src/wallet/rpc/util.cpp

src/wallet/rpc/util.h

src/wallet/coincontrol.cpp

src/wallet/coincontrol.h

src/wallet/context.cpp

src/wallet/context.h

src/wallet/crypter.cpp

src/wallet/crypter.h

src/wallet/db.cpp

src/wallet/export.cpp

src/wallet/external_signer_scriptpubkeyman.cpp

src/wallet/rpc/spend.cpp

src/wallet/rpc/transactions.cpp

src/wallet/rpc/wallet.cpp

src/wallet/feebumper.cpp

src/wallet/feebumper.h

src/index/base.h

src/index/base.cpp

src/index/txindex.h

src/index/txindex.cpp

src/index/txindex_key.h

src/index/txospenderindex.h

src/index/txospenderindex.cpp

src/index/blockfilterindex.h

src/index/blockfilterindex.cpp

src/index/coinstatsindex.h

src/index/coinstatsindex.cpp

src/index/db_key.h

src/index/disktxpos.h

src/kernel/chain.cpp

src/kernel/chain.h

src/kernel/checks.cpp

src/kernel/checks.h

src/kernel/context.cpp

src/kernel/context.h

src/kernel/cs_main.cpp

src/kernel/cs_main.h

src/kernel/disconnected_transactions.cpp

src/kernel/disconnected_transactions.h

src/kernel/mempool_removal_reason.cpp

src/kernel/mempool_removal_reason.h

src/kernel/coinstats.cpp

src/kernel/coinstats.h

src/kernel/chainparams.cpp

src/kernel/chainparams.h

src/wallet/sqlite.cpp

src/wallet/sqlite.h

src/wallet/transaction.cpp

src/wallet/transaction.h

src/wallet/dump.cpp

src/wallet/dump.h

src/wallet/init.cpp

src/wallet/walletutil.cpp

src/wallet/walletutil.h

src/wallet/wallettool.cpp

src/wallet/wallettool.h

src/wallet/export.h

src/wallet/migrate.cpp

src/wallet/migrate.h

src/wallet/db.h

src/wallet/walletdb.cpp

src/wallet/interfaces.cpp

src/wallet/scriptpubkeyman.cpp

src/wallet/scriptpubkeyman.h

src/kernel/bitcoinkernel.cpp

src/kernel/bitcoinkernel.h

src/kernel/bitcoinkernel_wrapper.h

src/node/chainstate.cpp

src/node/chainstate.h

src/node/blockstorage.cpp

src/node/blockstorage.h

src/node/mempool_persist.cpp

src/node/mempool_persist.h

src/node/utxo_snapshot.cpp

src/node/utxo_snapshot.h

src/node/kernel_notifications.cpp

src/node/kernel_notifications.h

src/node/blockmanager_args.cpp

src/kernel/blockmanager_opts.h

src/util/expected.cpp

src/policy/settings.h

src/util/types.h

src/kernel/messagestartchars.h

src/kernel/warning.h

src/util/exception.h

src/common/license_info.h

src/node/coins_view_args.h

src/node/database_args.h

src/util/batchpriority.h

src/util/ui_change_type.h

src/node/coins_view_args.cpp

src/node/peerman_args.h

src/util/serfloat.h

src/node/blockmanager_args.h

src/node/database_args.cpp

src/util/overloaded.h

src/interfaces/types.h

src/node/chainstatemanager_args.h

src/node/minisketchwrapper.h

src/util/macros.h

src/util/syserror.h

src/common/run_command.h

src/util/bytevectorhash.cpp

src/node/mempool_persist_args.cpp

src/util/exec.h

src/util/rbf.h

src/crypto/hex_base.h

src/node/mempool_persist_args.h

src/interfaces/echo.h

src/util/any.h

src/util/batchpriority.cpp

src/util/threadnames.h

src/node/coin.h

src/node/mempool_args.h

src/util/asmap.h

src/util/bytevectorhash.h

src/node/context.cpp

src/util/insert.h

src/util/readwritefile.h

src/node/peerman_args.cpp

src/node/interface_ui.cpp

src/interfaces/handler.h

src/node/mining_args.h

src/util/hasher.cpp

src/common/init.h

src/kernel/mempool_limits.h

src/common/system.h

src/crypto/sha3.h

src/util/threadinterrupt.cpp

src/node/protocol_version.h

src/util/exception.cpp

src/common/messages.h

src/node/connection_types.cpp

src/util/bip32.h

src/common/license_info.cpp

src/util/stdmutex.h

src/common/run_command.cpp

src/util/check.cpp

src/util/golombrice.h

src/node/types.h

src/node/timeoffsets.h

src/util/readwritefile.cpp

src/util/fastrange.h

src/util/signalinterrupt.h

src/util/task_runner.h

src/util/syserror.cpp

src/common/interfaces.cpp

src/common/types.h

src/util/threadinterrupt.h

src/kernel/chainstatemanager_opts.h

src/node/psbt.h

src/policy/ephemeral_policy.h

src/util/trace.h

src/common/url.cpp

src/kernel/mempool_options.h

src/util/serfloat.cpp

src/kernel/notifications_interface.h

src/node/timeoffsets.cpp

src/node/warnings.cpp

src/util/hash_type.h

src/crypto/hex_base.cpp

src/node/eviction.h

src/util/tokenbucket.h

src/crypto/aes.h

src/common/pcp.h

src/util/feefrac.cpp

src/node/transaction.h

src/util/threadnames.cpp

src/common/signmessage.h

src/util/exec.cpp

src/util/signalinterrupt.cpp

src/clientversion.cpp

src/common/signmessage.cpp

src/compat/assumptions.h

src/compat/byteswap.h

src/deploymentinfo.cpp

src/deploymentinfo.h

src/deploymentstatus.cpp

src/deploymentstatus.h

src/dummywallet.cpp

src/external_signer.h

src/init/bitcoin-gui.cpp

src/init/bitcoin-node.cpp

src/init/bitcoin-qt.cpp

src/init/bitcoin-wallet.cpp

src/init/bitcoind.cpp

src/init/common.h

src/interfaces/init.h

src/interfaces/ipc.h

src/key_io.h

src/logging/categories.h

src/logging/timer.h

src/mapport.h

src/musig.h

src/net_permissions.h

src/netgroup.h

src/netmessagemaker.h

src/node/chainstatemanager_args.cpp

src/node/connection_types.h

src/node/context.h

src/node/interface_ui.h

src/node/mempool_args.cpp

src/node/mining_args.cpp

src/node/minisketchwrapper.cpp

src/node/txreconciliation.h

src/policy/fees/estimator_args.cpp

src/policy/fees/estimator_args.h

src/policy/fees/estimator_man.cpp

src/policy/fees/estimator_man.h

src/policy/packages.h

src/policy/rbf.h

src/policy/truc_policy.h

src/pow.h

src/primitives/block.cpp

src/randomenv.h

src/rest.h

src/script/keyorigin.h

src/script/parsing.cpp

src/script/parsing.h

src/script/script_error.h

src/script/sigcache.cpp

src/script/sigcache.h

src/script/solver.h

src/script/verify_flags.h

src/semaphore_grant.h

src/signet.h

src/span.h

src/support/allocators/secure.h

src/support/allocators/zeroafterfree.h

src/util/tokenpipe.cpp

src/util/translation.h

src/util/vector.h

src/versionbits.h

src/versionbits_impl.h

src/wallet/external_signer_scriptpubkeyman.h

src/wallet/fees.h

src/wallet/load.h

src/wallet/receive.h

src/wallet/rpc/wallet.h

src/wallet/types.h

src/walletinitinterface.h

src/zmq/zmqabstractnotifier.cpp

Independent explanations by MyBitcoinExplorer. Not affiliated with or endorsed by Bitcoin Core. Guides are educational and do not replace the source or its tests.

Bitcoin Core source © its contributors, distributed under the MIT license. Original notices and bundled third-party licenses are retained in the source tree.