READ THE CODE

Inside Bitcoin

The code behind the network, with room to understand it.

Stable release v32.1bitcoin/bitcoin · f0de87f04062 ↗3,020 source files · 47.5 MB stored on the server440 file guides

Release published 2026-10-28 · Snapshot fetched 2026-11-01. Latest stable release at fetch time; development branches and Git history are excluded. Only the selected code window and visible folders load here.

11,095 bytes · SHA-256 4d38fd7b741d06fc… · View upstream ↗

1// Copyright (c) 2020-present The Bitcoin Core developers
2// Distributed under the MIT software license, see the accompanying
3// file COPYING or http://www.opensource.org/licenses/mit-license.php.
4
5#include <crypto/chacha20.h>
6#include <test/fuzz/FuzzedDataProvider.h>
7#include <test/fuzz/fuzz.h>
8#include <test/fuzz/util.h>
9
10#include <cstdint>
11#include <vector>
12
13/*
14From https://cr.yp.to/chacha.html
15chacha-merged.c version 20080118
16D. J. Bernstein
17Public domain.
18*/
19
20typedef unsigned int u32;
21typedef unsigned char u8;
22
23#define U8C(v) (v##U)
24#define U32C(v) (v##U)
25
26#define U8V(v) ((u8)(v)&U8C(0xFF))
27#define U32V(v) ((u32)(v)&U32C(0xFFFFFFFF))
28
29#define ROTL32(v, n) (U32V((v) << (n)) | ((v) >> (32 - (n))))
30
31#define U8TO32_LITTLE(p)                                              \
32    (((u32)((p)[0])) | ((u32)((p)[1]) << 8) | ((u32)((p)[2]) << 16) | \
33     ((u32)((p)[3]) << 24))
34
35#define U32TO8_LITTLE(p, v)      \
36    do {                         \
37        (p)[0] = U8V((v));       \
38        (p)[1] = U8V((v) >> 8);  \
39        (p)[2] = U8V((v) >> 16); \
40        (p)[3] = U8V((v) >> 24); \
41    } while (0)
42
43/* ------------------------------------------------------------------------- */
44/* Data structures */
45
46typedef struct
47{
48    u32 input[16];
49} ECRYPT_ctx;
50
51/* ------------------------------------------------------------------------- */
52/* Mandatory functions */
53
54void ECRYPT_keysetup(
55    ECRYPT_ctx* ctx,
56    const u8* key,
57    u32 keysize, /* Key size in bits. */
58    u32 ivsize); /* IV size in bits. */
59
60void ECRYPT_ivsetup(
61    ECRYPT_ctx* ctx,
62    const u8* iv);
63
64void ECRYPT_encrypt_bytes(
65    ECRYPT_ctx* ctx,
66    const u8* plaintext,
67    u8* ciphertext,
68    u32 msglen); /* Message length in bytes. */
69
70/* ------------------------------------------------------------------------- */
71
72/* Optional features */
73
74void ECRYPT_keystream_bytes(
75    ECRYPT_ctx* ctx,
76    u8* keystream,
77    u32 length); /* Length of keystream in bytes. */
78
79/* ------------------------------------------------------------------------- */
80
81#define ROTATE(v, c) (ROTL32(v, c))
82#define XOR(v, w) ((v) ^ (w))
83#define PLUS(v, w) (U32V((v) + (w)))
84#define PLUSONE(v) (PLUS((v), 1))
85
86#define QUARTERROUND(a, b, c, d) \
87    a = PLUS(a, b); d = ROTATE(XOR(d, a), 16);   \
88    c = PLUS(c, d); b = ROTATE(XOR(b, c), 12);   \
89    a = PLUS(a, b); d = ROTATE(XOR(d, a), 8);    \
90    c = PLUS(c, d); b = ROTATE(XOR(b, c), 7);
91
92static const char sigma[] = "expand 32-byte k";
93static const char tau[] = "expand 16-byte k";
94
95void ECRYPT_keysetup(ECRYPT_ctx* x, const u8* k, u32 kbits, u32 ivbits)
96{
97    const char* constants;
98
99    x->input[4] = U8TO32_LITTLE(k + 0);
100    x->input[5] = U8TO32_LITTLE(k + 4);
101    x->input[6] = U8TO32_LITTLE(k + 8);
102    x->input[7] = U8TO32_LITTLE(k + 12);
103    if (kbits == 256) { /* recommended */
104        k += 16;
105        constants = sigma;
106    } else { /* kbits == 128 */
107        constants = tau;
108    }
109    x->input[8] = U8TO32_LITTLE(k + 0);
110    x->input[9] = U8TO32_LITTLE(k + 4);
111    x->input[10] = U8TO32_LITTLE(k + 8);
112    x->input[11] = U8TO32_LITTLE(k + 12);
113    x->input[0] = U8TO32_LITTLE(constants + 0);
114    x->input[1] = U8TO32_LITTLE(constants + 4);
115    x->input[2] = U8TO32_LITTLE(constants + 8);
116    x->input[3] = U8TO32_LITTLE(constants + 12);
117}
118
119void ECRYPT_ivsetup(ECRYPT_ctx* x, const u8* iv)
120{
121    x->input[12] = 0;
122    x->input[13] = 0;
123    x->input[14] = U8TO32_LITTLE(iv + 0);
124    x->input[15] = U8TO32_LITTLE(iv + 4);
125}
126
127void ECRYPT_encrypt_bytes(ECRYPT_ctx* x, const u8* m, u8* c, u32 bytes)
128{
129    u32 x0, x1, x2, x3, x4, x5, x6, x7, x8, x9, x10, x11, x12, x13, x14, x15;
130    u32 j0, j1, j2, j3, j4, j5, j6, j7, j8, j9, j10, j11, j12, j13, j14, j15;
131    u8* ctarget = nullptr;
132    u8 tmp[64];
133    uint32_t i;
134
135    if (!bytes) return;
136
137    j0 = x->input[0];
138    j1 = x->input[1];
139    j2 = x->input[2];
140    j3 = x->input[3];
141    j4 = x->input[4];
142    j5 = x->input[5];
143    j6 = x->input[6];
144    j7 = x->input[7];
145    j8 = x->input[8];
146    j9 = x->input[9];
147    j10 = x->input[10];
148    j11 = x->input[11];
149    j12 = x->input[12];
150    j13 = x->input[13];
151    j14 = x->input[14];
152    j15 = x->input[15];
153
154    for (;;) {
155        if (bytes < 64) {
156            for (i = 0; i < bytes; ++i)
157                tmp[i] = m[i];
158            m = tmp;
159            ctarget = c;
160            c = tmp;
161        }
162        x0 = j0;
163        x1 = j1;
164        x2 = j2;
165        x3 = j3;
166        x4 = j4;
167        x5 = j5;
168        x6 = j6;
169        x7 = j7;
170        x8 = j8;
171        x9 = j9;
172        x10 = j10;
173        x11 = j11;
174        x12 = j12;
175        x13 = j13;
176        x14 = j14;
177        x15 = j15;
178        for (i = 20; i > 0; i -= 2) {
179            QUARTERROUND(x0, x4, x8, x12)
180            QUARTERROUND(x1, x5, x9, x13)
181            QUARTERROUND(x2, x6, x10, x14)
182            QUARTERROUND(x3, x7, x11, x15)
183            QUARTERROUND(x0, x5, x10, x15)
184            QUARTERROUND(x1, x6, x11, x12)
185            QUARTERROUND(x2, x7, x8, x13)
186            QUARTERROUND(x3, x4, x9, x14)
187        }
188        x0 = PLUS(x0, j0);
189        x1 = PLUS(x1, j1);
190        x2 = PLUS(x2, j2);
191        x3 = PLUS(x3, j3);
192        x4 = PLUS(x4, j4);
193        x5 = PLUS(x5, j5);
194        x6 = PLUS(x6, j6);
195        x7 = PLUS(x7, j7);
196        x8 = PLUS(x8, j8);
197        x9 = PLUS(x9, j9);
198        x10 = PLUS(x10, j10);
199        x11 = PLUS(x11, j11);
200        x12 = PLUS(x12, j12);
201        x13 = PLUS(x13, j13);
202        x14 = PLUS(x14, j14);
203        x15 = PLUS(x15, j15);
204
205        x0 = XOR(x0, U8TO32_LITTLE(m + 0));
206        x1 = XOR(x1, U8TO32_LITTLE(m + 4));
207        x2 = XOR(x2, U8TO32_LITTLE(m + 8));
208        x3 = XOR(x3, U8TO32_LITTLE(m + 12));
209        x4 = XOR(x4, U8TO32_LITTLE(m + 16));
210        x5 = XOR(x5, U8TO32_LITTLE(m + 20));
211        x6 = XOR(x6, U8TO32_LITTLE(m + 24));
212        x7 = XOR(x7, U8TO32_LITTLE(m + 28));
213        x8 = XOR(x8, U8TO32_LITTLE(m + 32));
214        x9 = XOR(x9, U8TO32_LITTLE(m + 36));
215        x10 = XOR(x10, U8TO32_LITTLE(m + 40));
216        x11 = XOR(x11, U8TO32_LITTLE(m + 44));
217        x12 = XOR(x12, U8TO32_LITTLE(m + 48));
218        x13 = XOR(x13, U8TO32_LITTLE(m + 52));
219        x14 = XOR(x14, U8TO32_LITTLE(m + 56));
220        x15 = XOR(x15, U8TO32_LITTLE(m + 60));
221
222        j12 = PLUSONE(j12);
223        if (!j12) {
224            j13 = PLUSONE(j13);
225            /* stopping at 2^70 bytes per nonce is user's responsibility */
226        }
227
228        U32TO8_LITTLE(c + 0, x0);
229        U32TO8_LITTLE(c + 4, x1);
230        U32TO8_LITTLE(c + 8, x2);
231        U32TO8_LITTLE(c + 12, x3);
232        U32TO8_LITTLE(c + 16, x4);
233        U32TO8_LITTLE(c + 20, x5);
234        U32TO8_LITTLE(c + 24, x6);
235        U32TO8_LITTLE(c + 28, x7);
236        U32TO8_LITTLE(c + 32, x8);
237        U32TO8_LITTLE(c + 36, x9);
238        U32TO8_LITTLE(c + 40, x10);
239        U32TO8_LITTLE(c + 44, x11);
240        U32TO8_LITTLE(c + 48, x12);
241        U32TO8_LITTLE(c + 52, x13);
242        U32TO8_LITTLE(c + 56, x14);
243        U32TO8_LITTLE(c + 60, x15);
244
245        if (bytes <= 64) {
246            if (bytes < 64) {
247                for (i = 0; i < bytes; ++i)
248                    ctarget[i] = c[i];
249            }
250            x->input[12] = j12;

src/wallet/receive.cpp

src/wallet/coinselection.cpp

src/consensus/validation.h

src/primitives/transaction.cpp

src/script/descriptor.cpp

src/bitcoin-cli.cpp

src/rpc/blockchain.cpp

src/rpc/rawtransaction.cpp

src/init.cpp

src/crypto/sha256.cpp

src/consensus/merkle.h

src/consensus/tx_check.h

src/consensus/tx_verify.h

src/policy/feerate.h

src/policy/feerate.cpp

src/primitives/transaction_identifier.h

src/chainparamsbase.h

src/chainparamsbase.cpp

src/util/moneystr.cpp

src/crypto/ripemd160.h

src/crypto/sha1.h

src/crypto/sha512.h

src/crypto/hmac_sha256.h

src/crypto/hmac_sha512.h

src/crypto/hmac_sha256.cpp

src/crypto/hmac_sha512.cpp

src/crypto/hkdf_sha256_32.h

src/crypto/hkdf_sha256_32.cpp

src/support/cleanse.h

src/support/cleanse.cpp

src/crypto/siphash.cpp

src/crypto/muhash.h

src/crypto/chacha20.h

src/crypto/poly1305.h

src/crypto/chacha20poly1305.h

src/crypto/chacha20poly1305.cpp

src/util/chaintype.cpp

src/util/obfuscation.h

src/util/byte_units.h

src/util/overflow.h

src/blockencodings.cpp

src/net_permissions.cpp

src/policy/packages.cpp

src/policy/rbf.cpp

src/policy/truc_policy.cpp

src/policy/ephemeral_policy.cpp

src/policy/settings.cpp

src/policy/policy.cpp

src/node/transaction.cpp

src/node/coin.cpp

src/rpc/client.cpp

src/rpc/external_signer.cpp

src/rpc/request.cpp

src/rpc/server_util.cpp

src/rpc/fees.cpp

src/rpc/output_script.cpp

src/rpc/rawtransaction_util.cpp

src/rpc/rawtransaction_util.h

src/rpc/register.h

src/rpc/request.h

src/rpc/server_util.h

src/rpc/protocol.h

src/rpc/server.h

src/rpc/signmessage.cpp

src/rpc/txoutproof.cpp

src/rpc/util.cpp

src/rpc/util.h

src/wallet/rpc/addresses.cpp

src/wallet/rpc/backup.cpp

src/wallet/rpc/coins.cpp

src/wallet/rpc/encrypt.cpp

src/wallet/rpc/signmessage.cpp

src/wallet/rpc/util.cpp

src/wallet/rpc/util.h

src/wallet/coincontrol.cpp

src/wallet/coincontrol.h

src/wallet/context.cpp

src/wallet/context.h

src/wallet/crypter.cpp

src/wallet/crypter.h

src/wallet/db.cpp

src/wallet/export.cpp

src/wallet/external_signer_scriptpubkeyman.cpp

src/wallet/rpc/spend.cpp

src/wallet/rpc/transactions.cpp

src/wallet/rpc/wallet.cpp

src/wallet/feebumper.cpp

src/wallet/feebumper.h

src/index/base.h

src/index/base.cpp

src/index/txindex.h

src/index/txindex.cpp

src/index/txindex_key.h

src/index/txospenderindex.h

src/index/txospenderindex.cpp

src/index/blockfilterindex.h

src/index/blockfilterindex.cpp

src/index/coinstatsindex.h

src/index/coinstatsindex.cpp

src/index/db_key.h

src/index/disktxpos.h

src/kernel/chain.cpp

src/kernel/chain.h

src/kernel/checks.cpp

src/kernel/checks.h

src/kernel/context.cpp

src/kernel/context.h

src/kernel/cs_main.cpp

src/kernel/cs_main.h

src/kernel/disconnected_transactions.cpp

src/kernel/disconnected_transactions.h

src/kernel/mempool_removal_reason.cpp

src/kernel/mempool_removal_reason.h

src/kernel/coinstats.cpp

src/kernel/coinstats.h

src/kernel/chainparams.cpp

src/kernel/chainparams.h

src/wallet/sqlite.cpp

src/wallet/sqlite.h

src/wallet/transaction.cpp

src/wallet/transaction.h

src/wallet/dump.cpp

src/wallet/dump.h

src/wallet/init.cpp

src/wallet/walletutil.cpp

src/wallet/walletutil.h

src/wallet/wallettool.cpp

src/wallet/wallettool.h

src/wallet/export.h

src/wallet/migrate.cpp

src/wallet/migrate.h

src/wallet/db.h

src/wallet/walletdb.cpp

src/wallet/interfaces.cpp

src/wallet/scriptpubkeyman.cpp

src/wallet/scriptpubkeyman.h

src/kernel/bitcoinkernel.cpp

src/kernel/bitcoinkernel.h

src/kernel/bitcoinkernel_wrapper.h

src/node/chainstate.cpp

src/node/chainstate.h

src/node/blockstorage.cpp

src/node/blockstorage.h

src/node/mempool_persist.cpp

src/node/mempool_persist.h

src/node/utxo_snapshot.cpp

src/node/utxo_snapshot.h

src/node/kernel_notifications.cpp

src/node/kernel_notifications.h

src/node/blockmanager_args.cpp

src/kernel/blockmanager_opts.h

src/util/expected.cpp

src/policy/settings.h

src/util/types.h

src/kernel/messagestartchars.h

src/kernel/warning.h

src/util/exception.h

src/common/license_info.h

src/node/coins_view_args.h

src/node/database_args.h

src/util/batchpriority.h

src/util/ui_change_type.h

src/node/coins_view_args.cpp

src/node/peerman_args.h

src/util/serfloat.h

src/node/blockmanager_args.h

src/node/database_args.cpp

src/util/overloaded.h

src/interfaces/types.h

src/node/chainstatemanager_args.h

src/node/minisketchwrapper.h

src/util/macros.h

src/util/syserror.h

src/common/run_command.h

src/util/bytevectorhash.cpp

src/node/mempool_persist_args.cpp

src/util/exec.h

src/util/rbf.h

src/crypto/hex_base.h

src/node/mempool_persist_args.h

src/interfaces/echo.h

src/util/any.h

src/util/batchpriority.cpp

src/util/threadnames.h

src/node/coin.h

src/node/mempool_args.h

src/util/asmap.h

src/util/bytevectorhash.h

src/node/context.cpp

src/util/insert.h

src/util/readwritefile.h

src/node/peerman_args.cpp

src/node/interface_ui.cpp

src/interfaces/handler.h

src/node/mining_args.h

src/util/hasher.cpp

src/common/init.h

src/kernel/mempool_limits.h

src/common/system.h

src/crypto/sha3.h

src/util/threadinterrupt.cpp

src/node/protocol_version.h

src/util/exception.cpp

src/common/messages.h

src/node/connection_types.cpp

src/util/bip32.h

src/common/license_info.cpp

src/util/stdmutex.h

src/common/run_command.cpp

src/util/check.cpp

src/util/golombrice.h

src/node/types.h

src/node/timeoffsets.h

src/util/readwritefile.cpp

src/util/fastrange.h

src/util/signalinterrupt.h

src/util/task_runner.h

src/util/syserror.cpp

src/common/interfaces.cpp

src/common/types.h

src/util/threadinterrupt.h

src/kernel/chainstatemanager_opts.h

src/node/psbt.h

src/policy/ephemeral_policy.h

src/util/trace.h

src/common/url.cpp

src/kernel/mempool_options.h

src/util/serfloat.cpp

src/kernel/notifications_interface.h

src/node/timeoffsets.cpp

src/node/warnings.cpp

src/util/hash_type.h

src/crypto/hex_base.cpp

src/node/eviction.h

src/util/tokenbucket.h

src/crypto/aes.h

src/common/pcp.h

src/util/feefrac.cpp

src/node/transaction.h

src/util/threadnames.cpp

src/common/signmessage.h

src/util/exec.cpp

src/util/signalinterrupt.cpp

src/clientversion.cpp

src/common/signmessage.cpp

src/compat/assumptions.h

src/compat/byteswap.h

src/deploymentinfo.cpp

src/deploymentinfo.h

src/deploymentstatus.cpp

src/deploymentstatus.h

src/dummywallet.cpp

src/external_signer.h

src/init/bitcoin-gui.cpp

src/init/bitcoin-node.cpp

src/init/bitcoin-qt.cpp

src/init/bitcoin-wallet.cpp

src/init/bitcoind.cpp

src/init/common.h

src/interfaces/init.h

src/interfaces/ipc.h

src/key_io.h

src/logging/categories.h

src/logging/timer.h

src/mapport.h

src/musig.h

src/net_permissions.h

src/netgroup.h

src/netmessagemaker.h

src/node/chainstatemanager_args.cpp

src/node/connection_types.h

src/node/context.h

src/node/interface_ui.h

src/node/mempool_args.cpp

src/node/mining_args.cpp

src/node/minisketchwrapper.cpp

src/node/txreconciliation.h

src/policy/fees/estimator_args.cpp

src/policy/fees/estimator_args.h

src/policy/fees/estimator_man.cpp

src/policy/fees/estimator_man.h

src/policy/packages.h

src/policy/rbf.h

src/policy/truc_policy.h

src/pow.h

src/primitives/block.cpp

src/randomenv.h

src/rest.h

src/script/keyorigin.h

src/script/parsing.cpp

src/script/parsing.h

src/script/script_error.h

src/script/sigcache.cpp

src/script/sigcache.h

src/script/solver.h

src/script/verify_flags.h

src/semaphore_grant.h

src/signet.h

src/span.h

src/support/allocators/secure.h

src/support/allocators/zeroafterfree.h

src/util/tokenpipe.cpp

src/util/translation.h

src/util/vector.h

src/versionbits.h

src/versionbits_impl.h

src/wallet/external_signer_scriptpubkeyman.h

src/wallet/fees.h

src/wallet/load.h

src/wallet/receive.h

src/wallet/rpc/wallet.h

src/wallet/types.h

src/walletinitinterface.h

src/zmq/zmqabstractnotifier.cpp

Independent explanations by MyBitcoinExplorer. Not affiliated with or endorsed by Bitcoin Core. Guides are educational and do not replace the source or its tests.

Bitcoin Core source © its contributors, distributed under the MIT license. Original notices and bundled third-party licenses are retained in the source tree.