READ THE CODE

Inside Bitcoin

The code behind the network, with room to understand it.

Stable release v32.1bitcoin/bitcoin · f0de87f04062 ↗3,020 source files · 47.5 MB stored on the server340 file guides

Release published 2026-10-28 · Snapshot fetched 2026-11-01. Latest stable release at fetch time; development branches and Git history are excluded. Only the selected code window and visible folders load here.

25,588 bytes · SHA-256 065d642ce06c980c… · View upstream ↗

1// Copyright (c) 2009-2010 Satoshi Nakamoto
2// Copyright (c) 2009-present The Bitcoin Core developers
3// Distributed under the MIT software license, see the accompanying
4// file COPYING or http://www.opensource.org/licenses/mit-license.php.
5
6#include <script/signingprovider.h>
7
8#include <musig.h>
9#include <script/interpreter.h>
10#include <script/keyorigin.h>
11#include <util/check.h>
12#include <util/log.h>
13
14#include <algorithm>
15#include <cstddef>
16#include <variant>
17
18const SigningProvider& DUMMY_SIGNING_PROVIDER = SigningProvider();
19
20template<typename M, typename K, typename V>
21bool LookupHelper(const M& map, const K& key, V& value)
22{
23    auto it = map.find(key);
24    if (it != map.end()) {
25        value = it->second;
26        return true;
27    }
28    return false;
29}
30
31bool HidingSigningProvider::GetCScript(const CScriptID& scriptid, CScript& script) const
32{
33    return m_provider->GetCScript(scriptid, script);
34}
35
36bool HidingSigningProvider::GetPubKey(const CKeyID& keyid, CPubKey& pubkey) const
37{
38    return m_provider->GetPubKey(keyid, pubkey);
39}
40
41bool HidingSigningProvider::GetKey(const CKeyID& keyid, CKey& key) const
42{
43    if (m_hide_secret) return false;
44    return m_provider->GetKey(keyid, key);
45}
46
47bool HidingSigningProvider::GetKeyOrigin(const CKeyID& keyid, KeyOriginInfo& info) const
48{
49    if (m_hide_origin) return false;
50    return m_provider->GetKeyOrigin(keyid, info);
51}
52
53bool HidingSigningProvider::GetTaprootSpendData(const XOnlyPubKey& output_key, TaprootSpendData& spenddata) const
54{
55    return m_provider->GetTaprootSpendData(output_key, spenddata);
56}
57bool HidingSigningProvider::GetTaprootBuilder(const XOnlyPubKey& output_key, TaprootBuilder& builder) const
58{
59    return m_provider->GetTaprootBuilder(output_key, builder);
60}
61std::vector<CPubKey> HidingSigningProvider::GetMuSig2ParticipantPubkeys(const CPubKey& pubkey) const
62{
63    if (m_hide_origin) return {};
64    return m_provider->GetMuSig2ParticipantPubkeys(pubkey);
65}
66
67std::map<CPubKey, std::vector<CPubKey>> HidingSigningProvider::GetAllMuSig2ParticipantPubkeys() const
68{
69    return m_provider->GetAllMuSig2ParticipantPubkeys();
70}
71
72void HidingSigningProvider::SetMuSig2SecNonce(const uint256& id, MuSig2SecNonce&& nonce) const
73{
74    m_provider->SetMuSig2SecNonce(id, std::move(nonce));
75}
76
77std::optional<std::reference_wrapper<MuSig2SecNonce>> HidingSigningProvider::GetMuSig2SecNonce(const uint256& session_id) const
78{
79    return m_provider->GetMuSig2SecNonce(session_id);
80}
81
82void HidingSigningProvider::DeleteMuSig2Session(const uint256& session_id) const
83{
84    m_provider->DeleteMuSig2Session(session_id);
85}
86
87bool FlatSigningProvider::GetCScript(const CScriptID& scriptid, CScript& script) const { return LookupHelper(scripts, scriptid, script); }
88bool FlatSigningProvider::GetPubKey(const CKeyID& keyid, CPubKey& pubkey) const { return LookupHelper(pubkeys, keyid, pubkey); }
89bool FlatSigningProvider::GetKeyOrigin(const CKeyID& keyid, KeyOriginInfo& info) const
90{
91    std::pair<CPubKey, KeyOriginInfo> out;
92    bool ret = LookupHelper(origins, keyid, out);
93    if (ret) info = std::move(out.second);
94    return ret;
95}
96bool FlatSigningProvider::HaveKey(const CKeyID &keyid) const
97{
98    CKey key;
99    return LookupHelper(keys, keyid, key);
100}
101bool FlatSigningProvider::GetKey(const CKeyID& keyid, CKey& key) const { return LookupHelper(keys, keyid, key); }
102bool FlatSigningProvider::GetTaprootSpendData(const XOnlyPubKey& output_key, TaprootSpendData& spenddata) const
103{
104    TaprootBuilder builder;
105    if (LookupHelper(tr_trees, output_key, builder)) {
106        spenddata = builder.GetSpendData();
107        return true;
108    }
109    return false;
110}
111bool FlatSigningProvider::GetTaprootBuilder(const XOnlyPubKey& output_key, TaprootBuilder& builder) const
112{
113    return LookupHelper(tr_trees, output_key, builder);
114}
115
116std::vector<CPubKey> FlatSigningProvider::GetMuSig2ParticipantPubkeys(const CPubKey& pubkey) const
117{
118    std::vector<CPubKey> participant_pubkeys;
119    LookupHelper(aggregate_pubkeys, pubkey, participant_pubkeys);
120    return participant_pubkeys;
121}
122
123std::map<CPubKey, std::vector<CPubKey>> FlatSigningProvider::GetAllMuSig2ParticipantPubkeys() const
124{
125    return aggregate_pubkeys;
126}
127
128void FlatSigningProvider::SetMuSig2SecNonce(const uint256& session_id, MuSig2SecNonce&& nonce) const
129{
130    if (!Assume(musig2_secnonces)) return;
131    auto [it, inserted] = musig2_secnonces->try_emplace(session_id, std::move(nonce));
132    // No secnonce should exist for this session yet.
133    Assert(inserted);
134}
135
136std::optional<std::reference_wrapper<MuSig2SecNonce>> FlatSigningProvider::GetMuSig2SecNonce(const uint256& session_id) const
137{
138    if (!Assume(musig2_secnonces)) return std::nullopt;
139    const auto& it = musig2_secnonces->find(session_id);
140    if (it == musig2_secnonces->end()) return std::nullopt;
141    return it->second;
142}
143
144void FlatSigningProvider::DeleteMuSig2Session(const uint256& session_id) const
145{
146    if (!Assume(musig2_secnonces)) return;
147    musig2_secnonces->erase(session_id);
148}
149
150FlatSigningProvider& FlatSigningProvider::Merge(FlatSigningProvider&& b)
151{
152    scripts.merge(b.scripts);
153    pubkeys.merge(b.pubkeys);
154    keys.merge(b.keys);
155    origins.merge(b.origins);
156    tr_trees.merge(b.tr_trees);
157    aggregate_pubkeys.merge(b.aggregate_pubkeys);
158    // We shouldn't be merging 2 different sessions, just overwrite with b's sessions.
159    if (!musig2_secnonces) musig2_secnonces = b.musig2_secnonces;
160    return *this;
161}
162
163void FillableSigningProvider::ImplicitlyLearnRelatedKeyScripts(const CPubKey& pubkey)
164{
165    AssertLockHeld(cs_KeyStore);
166    CKeyID key_id = pubkey.GetID();
167    // This adds the redeemscripts necessary to detect P2WPKH and P2SH-P2WPKH
168    // outputs. Technically P2WPKH outputs don't have a redeemscript to be
169    // spent. However, our current IsMine logic requires the corresponding
170    // P2SH-P2WPKH redeemscript to be present in the wallet in order to accept
171    // payment even to P2WPKH outputs.
172    // Also note that having superfluous scripts in the keystore never hurts.
173    // They're only used to guide recursion in signing and IsMine logic - if
174    // a script is present but we can't do anything with it, it has no effect.
175    // "Implicitly" refers to fact that scripts are derived automatically from
176    // existing keys, and are present in memory, even without being explicitly
177    // loaded (e.g. from a file).
178    if (pubkey.IsCompressed()) {
179        CScript script = GetScriptForDestination(WitnessV0KeyHash(key_id));
180        // This does not use AddCScript, as it may be overridden.
181        CScriptID id(script);
182        mapScripts[id] = std::move(script);
183    }
184}
185
186bool FillableSigningProvider::GetPubKey(const CKeyID &address, CPubKey &vchPubKeyOut) const
187{
188    CKey key;
189    if (!GetKey(address, key)) {
190        return false;
191    }
192    vchPubKeyOut = key.GetPubKey();
193    return true;
194}
195
196bool FillableSigningProvider::AddKeyPubKey(const CKey& key, const CPubKey &pubkey)
197{
198    LOCK(cs_KeyStore);
199    mapKeys[pubkey.GetID()] = key;
200    ImplicitlyLearnRelatedKeyScripts(pubkey);
201    return true;
202}
203
204bool FillableSigningProvider::HaveKey(const CKeyID &address) const
205{
206    LOCK(cs_KeyStore);
207    return mapKeys.contains(address);
208}
209
210std::set<CKeyID> FillableSigningProvider::GetKeys() const
211{
212    LOCK(cs_KeyStore);
213    std::set<CKeyID> set_address;
214    for (const auto& mi : mapKeys) {
215        set_address.insert(mi.first);
216    }
217    return set_address;
218}
219
220bool FillableSigningProvider::GetKey(const CKeyID &address, CKey &keyOut) const
221{
222    LOCK(cs_KeyStore);
223    KeyMap::const_iterator mi = mapKeys.find(address);
224    if (mi != mapKeys.end()) {
225        keyOut = mi->second;
226        return true;
227    }
228    return false;
229}
230
231bool FillableSigningProvider::AddCScript(const CScript& redeemScript)
232{
233    if (redeemScript.size() > MAX_SCRIPT_ELEMENT_SIZE) {
234        LogError("FillableSigningProvider::AddCScript(): redeemScripts > %i bytes are invalid\n", MAX_SCRIPT_ELEMENT_SIZE);
235        return false;
236    }
237
238    LOCK(cs_KeyStore);
239    mapScripts[CScriptID(redeemScript)] = redeemScript;
240    return true;
241}
242
243bool FillableSigningProvider::HaveCScript(const CScriptID& hash) const
244{
245    LOCK(cs_KeyStore);
246    return mapScripts.contains(hash);
247}
248
249std::set<CScriptID> FillableSigningProvider::GetCScripts() const
250{

src/wallet/receive.cpp

src/wallet/coinselection.cpp

src/consensus/validation.h

src/primitives/transaction.cpp

src/script/descriptor.cpp

src/bitcoin-cli.cpp

src/rpc/blockchain.cpp

src/rpc/rawtransaction.cpp

src/init.cpp

src/crypto/sha256.cpp

src/consensus/merkle.h

src/consensus/tx_check.h

src/consensus/tx_verify.h

src/policy/feerate.h

src/policy/feerate.cpp

src/primitives/transaction_identifier.h

src/chainparamsbase.h

src/chainparamsbase.cpp

src/util/moneystr.cpp

src/crypto/ripemd160.h

src/crypto/sha1.h

src/crypto/sha512.h

src/crypto/hmac_sha256.h

src/crypto/hmac_sha512.h

src/crypto/hmac_sha256.cpp

src/crypto/hmac_sha512.cpp

src/crypto/hkdf_sha256_32.h

src/crypto/hkdf_sha256_32.cpp

src/support/cleanse.h

src/support/cleanse.cpp

src/crypto/siphash.cpp

src/crypto/muhash.h

src/crypto/chacha20.h

src/crypto/poly1305.h

src/crypto/chacha20poly1305.h

src/crypto/chacha20poly1305.cpp

src/util/chaintype.cpp

src/util/obfuscation.h

src/util/byte_units.h

src/util/overflow.h

src/blockencodings.cpp

src/net_permissions.cpp

src/policy/packages.cpp

src/policy/rbf.cpp

src/policy/truc_policy.cpp

src/policy/ephemeral_policy.cpp

src/policy/settings.cpp

src/policy/policy.cpp

src/node/transaction.cpp

src/node/coin.cpp

src/rpc/client.cpp

src/rpc/external_signer.cpp

src/rpc/request.cpp

src/rpc/server_util.cpp

src/rpc/fees.cpp

src/rpc/output_script.cpp

src/rpc/rawtransaction_util.cpp

src/rpc/rawtransaction_util.h

src/rpc/register.h

src/rpc/request.h

src/rpc/server_util.h

src/rpc/protocol.h

src/rpc/server.h

src/rpc/signmessage.cpp

src/rpc/txoutproof.cpp

src/rpc/util.cpp

src/rpc/util.h

src/wallet/rpc/addresses.cpp

src/wallet/rpc/backup.cpp

src/wallet/rpc/coins.cpp

src/wallet/rpc/encrypt.cpp

src/wallet/rpc/signmessage.cpp

src/wallet/rpc/util.cpp

src/wallet/rpc/util.h

src/wallet/coincontrol.cpp

src/wallet/coincontrol.h

src/wallet/context.cpp

src/wallet/context.h

src/wallet/crypter.cpp

src/wallet/crypter.h

src/wallet/db.cpp

src/wallet/export.cpp

src/wallet/external_signer_scriptpubkeyman.cpp

src/wallet/rpc/spend.cpp

src/wallet/rpc/transactions.cpp

src/wallet/rpc/wallet.cpp

src/wallet/feebumper.cpp

src/wallet/feebumper.h

src/index/base.h

src/index/base.cpp

src/index/txindex.h

src/index/txindex.cpp

src/index/txindex_key.h

src/index/txospenderindex.h

src/index/txospenderindex.cpp

src/index/blockfilterindex.h

src/index/blockfilterindex.cpp

src/index/coinstatsindex.h

src/index/coinstatsindex.cpp

src/index/db_key.h

src/index/disktxpos.h

src/kernel/chain.cpp

src/kernel/chain.h

src/kernel/checks.cpp

src/kernel/checks.h

src/kernel/context.cpp

src/kernel/context.h

src/kernel/cs_main.cpp

src/kernel/cs_main.h

src/kernel/disconnected_transactions.cpp

src/kernel/disconnected_transactions.h

src/kernel/mempool_removal_reason.cpp

src/kernel/mempool_removal_reason.h

src/kernel/coinstats.cpp

src/kernel/coinstats.h

src/kernel/chainparams.cpp

src/kernel/chainparams.h

src/wallet/sqlite.cpp

src/wallet/sqlite.h

src/wallet/transaction.cpp

src/wallet/transaction.h

src/wallet/dump.cpp

src/wallet/dump.h

src/wallet/init.cpp

src/wallet/walletutil.cpp

src/wallet/walletutil.h

src/wallet/wallettool.cpp

src/wallet/wallettool.h

src/wallet/export.h

src/wallet/migrate.cpp

src/wallet/migrate.h

src/wallet/db.h

src/wallet/walletdb.cpp

src/wallet/interfaces.cpp

src/wallet/scriptpubkeyman.cpp

src/wallet/scriptpubkeyman.h

src/kernel/bitcoinkernel.cpp

src/kernel/bitcoinkernel.h

src/kernel/bitcoinkernel_wrapper.h

src/node/chainstate.cpp

src/node/chainstate.h

src/node/blockstorage.cpp

src/node/blockstorage.h

src/node/mempool_persist.cpp

src/node/mempool_persist.h

src/node/utxo_snapshot.cpp

src/node/utxo_snapshot.h

src/node/kernel_notifications.cpp

src/node/kernel_notifications.h

src/node/blockmanager_args.cpp

src/kernel/blockmanager_opts.h

src/util/expected.cpp

src/policy/settings.h

src/util/types.h

src/kernel/messagestartchars.h

src/kernel/warning.h

src/util/exception.h

src/common/license_info.h

src/node/coins_view_args.h

src/node/database_args.h

src/util/batchpriority.h

src/util/ui_change_type.h

src/node/coins_view_args.cpp

src/node/peerman_args.h

src/util/serfloat.h

src/node/blockmanager_args.h

src/node/database_args.cpp

src/util/overloaded.h

src/interfaces/types.h

src/node/chainstatemanager_args.h

src/node/minisketchwrapper.h

src/util/macros.h

src/util/syserror.h

src/common/run_command.h

src/util/bytevectorhash.cpp

src/node/mempool_persist_args.cpp

src/util/exec.h

src/util/rbf.h

src/crypto/hex_base.h

src/node/mempool_persist_args.h

src/interfaces/echo.h

src/util/any.h

src/util/batchpriority.cpp

src/util/threadnames.h

src/node/coin.h

src/node/mempool_args.h

src/util/asmap.h

src/util/bytevectorhash.h

src/node/context.cpp

src/util/insert.h

src/util/readwritefile.h

src/node/peerman_args.cpp

src/node/interface_ui.cpp

src/interfaces/handler.h

src/node/mining_args.h

src/util/hasher.cpp

src/common/init.h

src/kernel/mempool_limits.h

src/common/system.h

src/crypto/sha3.h

src/util/threadinterrupt.cpp

src/node/protocol_version.h

src/util/exception.cpp

src/common/messages.h

src/node/connection_types.cpp

src/util/bip32.h

src/common/license_info.cpp

src/util/stdmutex.h

src/common/run_command.cpp

src/util/check.cpp

src/util/golombrice.h

src/node/types.h

src/node/timeoffsets.h

src/util/readwritefile.cpp

src/util/fastrange.h

src/util/signalinterrupt.h

src/util/task_runner.h

src/util/syserror.cpp

src/common/interfaces.cpp

src/common/types.h

src/util/threadinterrupt.h

src/kernel/chainstatemanager_opts.h

src/node/psbt.h

src/policy/ephemeral_policy.h

src/util/trace.h

src/common/url.cpp

src/kernel/mempool_options.h

src/util/serfloat.cpp

src/kernel/notifications_interface.h

src/node/timeoffsets.cpp

src/node/warnings.cpp

src/util/hash_type.h

src/crypto/hex_base.cpp

src/node/eviction.h

src/util/tokenbucket.h

src/crypto/aes.h

src/common/pcp.h

src/util/feefrac.cpp

src/node/transaction.h

src/util/threadnames.cpp

src/common/signmessage.h

src/util/exec.cpp

src/util/signalinterrupt.cpp

Independent explanations by MyBitcoinExplorer. Not affiliated with or endorsed by Bitcoin Core. Guides are educational and do not replace the source or its tests.

Bitcoin Core source © its contributors, distributed under the MIT license. Original notices and bundled third-party licenses are retained in the source tree.