READ THE CODE

Inside Bitcoin

The code behind the network, with room to understand it.

Stable release v32.1bitcoin/bitcoin · f0de87f04062 ↗3,020 source files · 47.5 MB stored on the server440 file guides

Release published 2026-10-28 · Snapshot fetched 2026-11-01. Latest stable release at fetch time; development branches and Git history are excluded. Only the selected code window and visible folders load here.

109,835 bytes · SHA-256 ef6bcaa46d60fa0e… · View upstream ↗

1// Copyright (c) 2014-present The Bitcoin Core developers
2// Distributed under the MIT software license, see the accompanying
3// file COPYING or http://www.opensource.org/licenses/mit-license.php.
4
5#include <crypto/aes.h>
6#include <crypto/chacha20.h>
7#include <crypto/chacha20poly1305.h>
8#include <crypto/hkdf_sha256_32.h>
9#include <crypto/hmac_sha256.h>
10#include <crypto/hmac_sha512.h>
11#include <crypto/poly1305.h>
12#include <crypto/ripemd160.h>
13#include <crypto/sha1.h>
14#include <crypto/sha256.h>
15#include <crypto/sha3.h>
16#include <crypto/sha512.h>
17#include <crypto/muhash.h>
18#include <random.h>
19#include <streams.h>
20#include <test/util/common.h>
21#include <test/util/random.h>
22#include <test/util/setup_common.h>
23#include <util/strencodings.h>
24
25#include <algorithm>
26#include <vector>
27
28#include <boost/test/unit_test.hpp>
29
30using namespace util::hex_literals;
31
32namespace crypto_tests {
33struct CryptoTest : BasicTestingSetup {
34
35template<typename Hasher, typename In, typename Out>
36void TestVector(const Hasher &h, const In &in, const Out &out) {
37    Out hash;
38    BOOST_CHECK(out.size() == h.OUTPUT_SIZE);
39    hash.resize(out.size());
40    {
41        // Test that writing the whole input string at once works.
42        Hasher(h).Write((const uint8_t*)in.data(), in.size()).Finalize(hash.data());
43        BOOST_CHECK(hash == out);
44    }
45    for (int i=0; i<32; i++) {
46        // Test that writing the string broken up in random pieces works.
47        Hasher hasher(h);
48        size_t pos = 0;
49        while (pos < in.size()) {
50            size_t len = m_rng.randrange((in.size() - pos + 1) / 2 + 1);
51            hasher.Write((const uint8_t*)in.data() + pos, len);
52            pos += len;
53            if (pos > 0 && pos + 2 * out.size() > in.size() && pos < in.size()) {
54                // Test that writing the rest at once to a copy of a hasher works.
55                Hasher(hasher).Write((const uint8_t*)in.data() + pos, in.size() - pos).Finalize(hash.data());
56                BOOST_CHECK(hash == out);
57            }
58        }
59        hasher.Finalize(hash.data());
60        BOOST_CHECK(hash == out);
61    }
62}
63
64void TestSHA1(const std::string &in, const std::string &hexout) { TestVector(CSHA1(), in, ParseHex(hexout));}
65void TestSHA256(const std::string &in, const std::string &hexout) { TestVector(CSHA256(), in, ParseHex(hexout));}
66void TestSHA512(const std::string &in, const std::string &hexout) { TestVector(CSHA512(), in, ParseHex(hexout));}
67void TestRIPEMD160(const std::string &in, const std::string &hexout) { TestVector(CRIPEMD160(), in, ParseHex(hexout));}
68
69void TestHMACSHA256(const std::string &hexkey, const std::string &hexin, const std::string &hexout) {
70    std::vector<unsigned char> key = ParseHex(hexkey);
71    TestVector(CHMAC_SHA256(key.data(), key.size()), ParseHex(hexin), ParseHex(hexout));
72}
73
74void TestHMACSHA512(const std::string &hexkey, const std::string &hexin, const std::string &hexout) {
75    std::vector<unsigned char> key = ParseHex(hexkey);
76    TestVector(CHMAC_SHA512(key.data(), key.size()), ParseHex(hexin), ParseHex(hexout));
77}
78
79void TestAES256(const std::string &hexkey, const std::string &hexin, const std::string &hexout)
80{
81    std::vector<unsigned char> key = ParseHex(hexkey);
82    std::vector<unsigned char> in = ParseHex(hexin);
83    std::vector<unsigned char> correctout = ParseHex(hexout);
84    std::vector<unsigned char> buf;
85
86    assert(key.size() == 32);
87    assert(in.size() == 16);
88    assert(correctout.size() == 16);
89    AES256Encrypt enc(key.data());
90    buf.resize(correctout.size());
91    enc.Encrypt(buf.data(), in.data());
92    BOOST_CHECK(buf == correctout);
93    AES256Decrypt dec(key.data());
94    dec.Decrypt(buf.data(), buf.data());
95    BOOST_CHECK(buf == in);
96}
97
98void TestAES256CBC(const std::string &hexkey, const std::string &hexiv, bool pad, const std::string &hexin, const std::string &hexout)
99{
100    std::vector<unsigned char> key = ParseHex(hexkey);
101    std::vector<unsigned char> iv = ParseHex(hexiv);
102    std::vector<unsigned char> in = ParseHex(hexin);
103    std::vector<unsigned char> correctout = ParseHex(hexout);
104    std::vector<unsigned char> realout(in.size() + AES_BLOCKSIZE);
105
106    // Encrypt the plaintext and verify that it equals the cipher
107    AES256CBCEncrypt enc(key.data(), iv.data(), pad);
108    int size = enc.Encrypt(in.data(), in.size(), realout.data());
109    realout.resize(size);
110    BOOST_CHECK(realout.size() == correctout.size());
111    BOOST_CHECK_MESSAGE(realout == correctout, HexStr(realout) + std::string(" != ") + hexout);
112
113    // Decrypt the cipher and verify that it equals the plaintext
114    std::vector<unsigned char> decrypted(correctout.size());
115    AES256CBCDecrypt dec(key.data(), iv.data(), pad);
116    size = dec.Decrypt(correctout.data(), correctout.size(), decrypted.data());
117    decrypted.resize(size);
118    BOOST_CHECK(decrypted.size() == in.size());
119    BOOST_CHECK_MESSAGE(decrypted == in, HexStr(decrypted) + std::string(" != ") + hexin);
120
121    // Encrypt and re-decrypt substrings of the plaintext and verify that they equal each-other
122    for(std::vector<unsigned char>::iterator i(in.begin()); i != in.end(); ++i)
123    {
124        std::vector<unsigned char> sub(i, in.end());
125        std::vector<unsigned char> subout(sub.size() + AES_BLOCKSIZE);
126        int _size = enc.Encrypt(sub.data(), sub.size(), subout.data());
127        if (_size != 0)
128        {
129            subout.resize(_size);
130            std::vector<unsigned char> subdecrypted(subout.size());
131            _size = dec.Decrypt(subout.data(), subout.size(), subdecrypted.data());
132            subdecrypted.resize(_size);
133            BOOST_CHECK(decrypted.size() == in.size());
134            BOOST_CHECK_MESSAGE(subdecrypted == sub, HexStr(subdecrypted) + std::string(" != ") + HexStr(sub));
135        }
136    }
137}
138
139void TestChaCha20(const std::string &hex_message, const std::string &hexkey, ChaCha20::Nonce96 nonce, uint32_t seek, const std::string& hexout)
140{
141    auto key = ParseHex<std::byte>(hexkey);
142    assert(key.size() == 32);
143    auto m = ParseHex<std::byte>(hex_message);
144    ChaCha20 rng{key};
145    rng.Seek(nonce, seek);
146    std::vector<std::byte> outres;
147    outres.resize(hexout.size() / 2);
148    assert(hex_message.empty() || m.size() * 2 == hexout.size());
149
150    // perform the ChaCha20 round(s), if message is provided it will output the encrypted ciphertext otherwise the keystream
151    if (!hex_message.empty()) {
152        rng.Crypt(m, outres);
153    } else {
154        rng.Keystream(outres);
155    }
156    BOOST_CHECK_EQUAL(hexout, HexStr(outres));
157    if (!hex_message.empty()) {
158        // Manually XOR with the keystream and compare the output
159        rng.Seek(nonce, seek);
160        std::vector<std::byte> only_keystream(outres.size());
161        rng.Keystream(only_keystream);
162        for (size_t i = 0; i != m.size(); i++) {
163            outres[i] = m[i] ^ only_keystream[i];
164        }
165        BOOST_CHECK_EQUAL(hexout, HexStr(outres));
166    }
167
168    // Repeat 10x, but fragmented into 3 chunks, to exercise the ChaCha20 class's caching.
169    for (int i = 0; i < 10; ++i) {
170        size_t lens[3];
171        lens[0] = m_rng.randrange(hexout.size() / 2U + 1U);
172        lens[1] = m_rng.randrange(hexout.size() / 2U + 1U - lens[0]);
173        lens[2] = hexout.size() / 2U - lens[0] - lens[1];
174
175        rng.Seek(nonce, seek);
176        outres.assign(hexout.size() / 2U, {});
177        size_t pos = 0;
178        for (int j = 0; j < 3; ++j) {
179            if (!hex_message.empty()) {
180                rng.Crypt(std::span{m}.subspan(pos, lens[j]), std::span{outres}.subspan(pos, lens[j]));
181            } else {
182                rng.Keystream(std::span{outres}.subspan(pos, lens[j]));
183            }
184            pos += lens[j];
185        }
186        BOOST_CHECK_EQUAL(hexout, HexStr(outres));
187    }
188}
189
190void TestFSChaCha20(const std::string& hex_plaintext, const std::string& hexkey, uint32_t rekey_interval, const std::string& ciphertext_after_rotation)
191{
192    auto key = ParseHex<std::byte>(hexkey);
193    BOOST_CHECK_EQUAL(FSChaCha20::KEYLEN, key.size());
194
195    auto plaintext = ParseHex<std::byte>(hex_plaintext);
196
197    auto fsc20 = FSChaCha20{key, rekey_interval};
198    auto c20 = ChaCha20{key};
199
200    std::vector<std::byte> fsc20_output;
201    fsc20_output.resize(plaintext.size());
202
203    std::vector<std::byte> c20_output;
204    c20_output.resize(plaintext.size());
205
206    for (size_t i = 0; i < rekey_interval; i++) {
207        fsc20.Crypt(plaintext, fsc20_output);
208        c20.Crypt(plaintext, c20_output);
209        BOOST_CHECK(c20_output == fsc20_output);
210    }
211
212    // At the rotation interval, the outputs will no longer match
213    fsc20.Crypt(plaintext, fsc20_output);
214    auto c20_copy = c20;
215    c20.Crypt(plaintext, c20_output);
216    BOOST_CHECK(c20_output != fsc20_output);
217
218    std::byte new_key[FSChaCha20::KEYLEN];
219    c20_copy.Keystream(new_key);
220    c20.SetKey(new_key);
221    c20.Seek({0, 1}, 0);
222
223    // Outputs should match again after simulating key rotation
224    c20.Crypt(plaintext, c20_output);
225    BOOST_CHECK(c20_output == fsc20_output);
226
227    BOOST_CHECK_EQUAL(HexStr(fsc20_output), ciphertext_after_rotation);
228}
229
230void TestPoly1305(const std::string &hexmessage, const std::string &hexkey, const std::string& hextag)
231{
232    auto key = ParseHex<std::byte>(hexkey);
233    auto m = ParseHex<std::byte>(hexmessage);
234    std::vector<std::byte> tagres(Poly1305::TAGLEN);
235    Poly1305{key}.Update(m).Finalize(tagres);
236    BOOST_CHECK_EQUAL(HexStr(tagres), hextag);
237
238    // Test incremental interface
239    for (int splits = 0; splits < 10; ++splits) {
240        for (int iter = 0; iter < 10; ++iter) {
241            auto data = std::span{m};
242            Poly1305 poly1305{key};
243            for (int chunk = 0; chunk < splits; ++chunk) {
244                size_t now = m_rng.randrange(data.size() + 1);
245                poly1305.Update(data.first(now));
246                data = data.subspan(now);
247            }
248            tagres.assign(Poly1305::TAGLEN, std::byte{});
249            poly1305.Update(data).Finalize(tagres);
250            BOOST_CHECK_EQUAL(HexStr(tagres), hextag);

src/wallet/receive.cpp

src/wallet/coinselection.cpp

src/consensus/validation.h

src/primitives/transaction.cpp

src/script/descriptor.cpp

src/bitcoin-cli.cpp

src/rpc/blockchain.cpp

src/rpc/rawtransaction.cpp

src/init.cpp

src/crypto/sha256.cpp

src/consensus/merkle.h

src/consensus/tx_check.h

src/consensus/tx_verify.h

src/policy/feerate.h

src/policy/feerate.cpp

src/primitives/transaction_identifier.h

src/chainparamsbase.h

src/chainparamsbase.cpp

src/util/moneystr.cpp

src/crypto/ripemd160.h

src/crypto/sha1.h

src/crypto/sha512.h

src/crypto/hmac_sha256.h

src/crypto/hmac_sha512.h

src/crypto/hmac_sha256.cpp

src/crypto/hmac_sha512.cpp

src/crypto/hkdf_sha256_32.h

src/crypto/hkdf_sha256_32.cpp

src/support/cleanse.h

src/support/cleanse.cpp

src/crypto/siphash.cpp

src/crypto/muhash.h

src/crypto/chacha20.h

src/crypto/poly1305.h

src/crypto/chacha20poly1305.h

src/crypto/chacha20poly1305.cpp

src/util/chaintype.cpp

src/util/obfuscation.h

src/util/byte_units.h

src/util/overflow.h

src/blockencodings.cpp

src/net_permissions.cpp

src/policy/packages.cpp

src/policy/rbf.cpp

src/policy/truc_policy.cpp

src/policy/ephemeral_policy.cpp

src/policy/settings.cpp

src/policy/policy.cpp

src/node/transaction.cpp

src/node/coin.cpp

src/rpc/client.cpp

src/rpc/external_signer.cpp

src/rpc/request.cpp

src/rpc/server_util.cpp

src/rpc/fees.cpp

src/rpc/output_script.cpp

src/rpc/rawtransaction_util.cpp

src/rpc/rawtransaction_util.h

src/rpc/register.h

src/rpc/request.h

src/rpc/server_util.h

src/rpc/protocol.h

src/rpc/server.h

src/rpc/signmessage.cpp

src/rpc/txoutproof.cpp

src/rpc/util.cpp

src/rpc/util.h

src/wallet/rpc/addresses.cpp

src/wallet/rpc/backup.cpp

src/wallet/rpc/coins.cpp

src/wallet/rpc/encrypt.cpp

src/wallet/rpc/signmessage.cpp

src/wallet/rpc/util.cpp

src/wallet/rpc/util.h

src/wallet/coincontrol.cpp

src/wallet/coincontrol.h

src/wallet/context.cpp

src/wallet/context.h

src/wallet/crypter.cpp

src/wallet/crypter.h

src/wallet/db.cpp

src/wallet/export.cpp

src/wallet/external_signer_scriptpubkeyman.cpp

src/wallet/rpc/spend.cpp

src/wallet/rpc/transactions.cpp

src/wallet/rpc/wallet.cpp

src/wallet/feebumper.cpp

src/wallet/feebumper.h

src/index/base.h

src/index/base.cpp

src/index/txindex.h

src/index/txindex.cpp

src/index/txindex_key.h

src/index/txospenderindex.h

src/index/txospenderindex.cpp

src/index/blockfilterindex.h

src/index/blockfilterindex.cpp

src/index/coinstatsindex.h

src/index/coinstatsindex.cpp

src/index/db_key.h

src/index/disktxpos.h

src/kernel/chain.cpp

src/kernel/chain.h

src/kernel/checks.cpp

src/kernel/checks.h

src/kernel/context.cpp

src/kernel/context.h

src/kernel/cs_main.cpp

src/kernel/cs_main.h

src/kernel/disconnected_transactions.cpp

src/kernel/disconnected_transactions.h

src/kernel/mempool_removal_reason.cpp

src/kernel/mempool_removal_reason.h

src/kernel/coinstats.cpp

src/kernel/coinstats.h

src/kernel/chainparams.cpp

src/kernel/chainparams.h

src/wallet/sqlite.cpp

src/wallet/sqlite.h

src/wallet/transaction.cpp

src/wallet/transaction.h

src/wallet/dump.cpp

src/wallet/dump.h

src/wallet/init.cpp

src/wallet/walletutil.cpp

src/wallet/walletutil.h

src/wallet/wallettool.cpp

src/wallet/wallettool.h

src/wallet/export.h

src/wallet/migrate.cpp

src/wallet/migrate.h

src/wallet/db.h

src/wallet/walletdb.cpp

src/wallet/interfaces.cpp

src/wallet/scriptpubkeyman.cpp

src/wallet/scriptpubkeyman.h

src/kernel/bitcoinkernel.cpp

src/kernel/bitcoinkernel.h

src/kernel/bitcoinkernel_wrapper.h

src/node/chainstate.cpp

src/node/chainstate.h

src/node/blockstorage.cpp

src/node/blockstorage.h

src/node/mempool_persist.cpp

src/node/mempool_persist.h

src/node/utxo_snapshot.cpp

src/node/utxo_snapshot.h

src/node/kernel_notifications.cpp

src/node/kernel_notifications.h

src/node/blockmanager_args.cpp

src/kernel/blockmanager_opts.h

src/util/expected.cpp

src/policy/settings.h

src/util/types.h

src/kernel/messagestartchars.h

src/kernel/warning.h

src/util/exception.h

src/common/license_info.h

src/node/coins_view_args.h

src/node/database_args.h

src/util/batchpriority.h

src/util/ui_change_type.h

src/node/coins_view_args.cpp

src/node/peerman_args.h

src/util/serfloat.h

src/node/blockmanager_args.h

src/node/database_args.cpp

src/util/overloaded.h

src/interfaces/types.h

src/node/chainstatemanager_args.h

src/node/minisketchwrapper.h

src/util/macros.h

src/util/syserror.h

src/common/run_command.h

src/util/bytevectorhash.cpp

src/node/mempool_persist_args.cpp

src/util/exec.h

src/util/rbf.h

src/crypto/hex_base.h

src/node/mempool_persist_args.h

src/interfaces/echo.h

src/util/any.h

src/util/batchpriority.cpp

src/util/threadnames.h

src/node/coin.h

src/node/mempool_args.h

src/util/asmap.h

src/util/bytevectorhash.h

src/node/context.cpp

src/util/insert.h

src/util/readwritefile.h

src/node/peerman_args.cpp

src/node/interface_ui.cpp

src/interfaces/handler.h

src/node/mining_args.h

src/util/hasher.cpp

src/common/init.h

src/kernel/mempool_limits.h

src/common/system.h

src/crypto/sha3.h

src/util/threadinterrupt.cpp

src/node/protocol_version.h

src/util/exception.cpp

src/common/messages.h

src/node/connection_types.cpp

src/util/bip32.h

src/common/license_info.cpp

src/util/stdmutex.h

src/common/run_command.cpp

src/util/check.cpp

src/util/golombrice.h

src/node/types.h

src/node/timeoffsets.h

src/util/readwritefile.cpp

src/util/fastrange.h

src/util/signalinterrupt.h

src/util/task_runner.h

src/util/syserror.cpp

src/common/interfaces.cpp

src/common/types.h

src/util/threadinterrupt.h

src/kernel/chainstatemanager_opts.h

src/node/psbt.h

src/policy/ephemeral_policy.h

src/util/trace.h

src/common/url.cpp

src/kernel/mempool_options.h

src/util/serfloat.cpp

src/kernel/notifications_interface.h

src/node/timeoffsets.cpp

src/node/warnings.cpp

src/util/hash_type.h

src/crypto/hex_base.cpp

src/node/eviction.h

src/util/tokenbucket.h

src/crypto/aes.h

src/common/pcp.h

src/util/feefrac.cpp

src/node/transaction.h

src/util/threadnames.cpp

src/common/signmessage.h

src/util/exec.cpp

src/util/signalinterrupt.cpp

src/clientversion.cpp

src/common/signmessage.cpp

src/compat/assumptions.h

src/compat/byteswap.h

src/deploymentinfo.cpp

src/deploymentinfo.h

src/deploymentstatus.cpp

src/deploymentstatus.h

src/dummywallet.cpp

src/external_signer.h

src/init/bitcoin-gui.cpp

src/init/bitcoin-node.cpp

src/init/bitcoin-qt.cpp

src/init/bitcoin-wallet.cpp

src/init/bitcoind.cpp

src/init/common.h

src/interfaces/init.h

src/interfaces/ipc.h

src/key_io.h

src/logging/categories.h

src/logging/timer.h

src/mapport.h

src/musig.h

src/net_permissions.h

src/netgroup.h

src/netmessagemaker.h

src/node/chainstatemanager_args.cpp

src/node/connection_types.h

src/node/context.h

src/node/interface_ui.h

src/node/mempool_args.cpp

src/node/mining_args.cpp

src/node/minisketchwrapper.cpp

src/node/txreconciliation.h

src/policy/fees/estimator_args.cpp

src/policy/fees/estimator_args.h

src/policy/fees/estimator_man.cpp

src/policy/fees/estimator_man.h

src/policy/packages.h

src/policy/rbf.h

src/policy/truc_policy.h

src/pow.h

src/primitives/block.cpp

src/randomenv.h

src/rest.h

src/script/keyorigin.h

src/script/parsing.cpp

src/script/parsing.h

src/script/script_error.h

src/script/sigcache.cpp

src/script/sigcache.h

src/script/solver.h

src/script/verify_flags.h

src/semaphore_grant.h

src/signet.h

src/span.h

src/support/allocators/secure.h

src/support/allocators/zeroafterfree.h

src/util/tokenpipe.cpp

src/util/translation.h

src/util/vector.h

src/versionbits.h

src/versionbits_impl.h

src/wallet/external_signer_scriptpubkeyman.h

src/wallet/fees.h

src/wallet/load.h

src/wallet/receive.h

src/wallet/rpc/wallet.h

src/wallet/types.h

src/walletinitinterface.h

src/zmq/zmqabstractnotifier.cpp

Independent explanations by MyBitcoinExplorer. Not affiliated with or endorsed by Bitcoin Core. Guides are educational and do not replace the source or its tests.

Bitcoin Core source © its contributors, distributed under the MIT license. Original notices and bundled third-party licenses are retained in the source tree.