READ THE CODE

Inside Bitcoin

The code behind the network, with room to understand it.

Stable release v32.1bitcoin/bitcoin · f0de87f04062 ↗3,020 source files · 47.5 MB stored on the server440 file guides

Release published 2026-10-28 · Snapshot fetched 2026-11-01. Latest stable release at fetch time; development branches and Git history are excluded. Only the selected code window and visible folders load here.

9,011 bytes · SHA-256 c567bcc5c403b709… · View upstream ↗

1// Copyright (c) 2013-present The Bitcoin Core developers
2// Distributed under the MIT software license, see the accompanying
3// file COPYING or http://www.opensource.org/licenses/mit-license.php.
4
5#include <crypto/common.h>
6#include <crypto/siphash.h>
7#include <hash.h>
8#include <test/data/siphash.json.h>
9#include <test/util/json.h>
10#include <test/util/setup_common.h>
11#include <uint256.h>
12#include <util/strencodings.h>
13
14#include <boost/test/unit_test.hpp>
15
16BOOST_FIXTURE_TEST_SUITE(hash_tests, BasicTestingSetup)
17
18static uint64_t FromHex64(const UniValue& value) { return ToIntegral<uint64_t>(value.get_str(), /*base=*/16).value(); }
19static uint256 FromHex256(const UniValue& value) { return uint256{ParseHex(value.get_str())}; }
20static bool HasByteLength(const UniValue& value, size_t length) { return value.get_str().size() == 2 * length; }
21
22static uint64_t CalculateSipHash24(const UniValue& input, uint64_t k0, uint64_t k1)
23{
24    CSipHasher hasher{k0, k1};
25    for (auto& block : input.getValues()) {
26        hasher.Write(ParseHex(block.get_str()));
27    }
28    const uint64_t result{hasher.Finalize()};
29    BOOST_CHECK_EQUAL(hasher.Finalize(), result);
30    return result;
31}
32
33static uint64_t CalculateSipHash13UJ(const UniValue& input, uint64_t k0, uint64_t k1, bool normal_as_jumbo)
34{
35    SipHasher13UJ hasher{k0, k1};
36    for (auto& value : input.getValues()) {
37        const auto block{ParseHex(value.get_str())};
38        if (block.size() == sizeof(uint64_t)) {
39            if (!normal_as_jumbo) {
40                hasher.Write(ReadLE64(block.data()));
41            } else {
42                uint256 data256{};
43                WriteLE64(data256.data(), ReadLE64(block.data()));
44                hasher.WriteJumbo(data256);
45            }
46        } else {
47            BOOST_REQUIRE_EQUAL(block.size(), uint256::size());
48            hasher.WriteJumbo(uint256{block});
49        }
50    }
51    const uint64_t result{hasher.Finalize()};
52    BOOST_CHECK_EQUAL(hasher.Finalize(), result);
53    return result;
54}
55
56BOOST_AUTO_TEST_CASE(murmurhash3)
57{
58
59#define T(expected, seed, data) BOOST_CHECK_EQUAL(MurmurHash3(seed, ParseHex(data)), expected)
60
61    // Test MurmurHash3 with various inputs. Of course this is retested in the
62    // bloom filter tests - they would fail if MurmurHash3() had any problems -
63    // but is useful for those trying to implement Bitcoin libraries as a
64    // source of test data for their MurmurHash3() primitive during
65    // development.
66    //
67    // The magic number 0xFBA4C795 comes from CBloomFilter::Hash()
68
69    T(0x00000000U, 0x00000000, "");
70    T(0x6a396f08U, 0xFBA4C795, "");
71    T(0x81f16f39U, 0xffffffff, "");
72
73    T(0x514e28b7U, 0x00000000, "00");
74    T(0xea3f0b17U, 0xFBA4C795, "00");
75    T(0xfd6cf10dU, 0x00000000, "ff");
76
77    T(0x16c6b7abU, 0x00000000, "0011");
78    T(0x8eb51c3dU, 0x00000000, "001122");
79    T(0xb4471bf8U, 0x00000000, "00112233");
80    T(0xe2301fa8U, 0x00000000, "0011223344");
81    T(0xfc2e4a15U, 0x00000000, "001122334455");
82    T(0xb074502cU, 0x00000000, "00112233445566");
83    T(0x8034d2a0U, 0x00000000, "0011223344556677");
84    T(0xb4698defU, 0x00000000, "001122334455667788");
85
86#undef T
87}
88
89/*
90   SipHash-2-4 output with
91   k = 00 01 02 ...
92   and
93   in = (empty string)
94   in = 00 (1 byte)
95   in = 00 01 (2 bytes)
96   in = 00 01 02 (3 bytes)
97   ...
98   in = 00 01 02 ... 3e (63 bytes)
99
100   from: https://github.com/veorq/SipHash/blob/master/vectors.h
101*/
102uint64_t siphash_4_2_testvec[] = {
103    0x726fdb47dd0e0e31, 0x74f839c593dc67fd, 0x0d6c8009d9a94f5a, 0x85676696d7fb7e2d,
104    0xcf2794e0277187b7, 0x18765564cd99a68d, 0xcbc9466e58fee3ce, 0xab0200f58b01d137,
105    0x93f5f5799a932462, 0x9e0082df0ba9e4b0, 0x7a5dbbc594ddb9f3, 0xf4b32f46226bada7,
106    0x751e8fbc860ee5fb, 0x14ea5627c0843d90, 0xf723ca908e7af2ee, 0xa129ca6149be45e5,
107    0x3f2acc7f57c29bdb, 0x699ae9f52cbe4794, 0x4bc1b3f0968dd39c, 0xbb6dc91da77961bd,
108    0xbed65cf21aa2ee98, 0xd0f2cbb02e3b67c7, 0x93536795e3a33e88, 0xa80c038ccd5ccec8,
109    0xb8ad50c6f649af94, 0xbce192de8a85b8ea, 0x17d835b85bbb15f3, 0x2f2e6163076bcfad,
110    0xde4daaaca71dc9a5, 0xa6a2506687956571, 0xad87a3535c49ef28, 0x32d892fad841c342,
111    0x7127512f72f27cce, 0xa7f32346f95978e3, 0x12e0b01abb051238, 0x15e034d40fa197ae,
112    0x314dffbe0815a3b4, 0x027990f029623981, 0xcadcd4e59ef40c4d, 0x9abfd8766a33735c,
113    0x0e3ea96b5304a7d0, 0xad0c42d6fc585992, 0x187306c89bc215a9, 0xd4a60abcf3792b95,
114    0xf935451de4f21df2, 0xa9538f0419755787, 0xdb9acddff56ca510, 0xd06c98cd5c0975eb,
115    0xe612a3cb9ecba951, 0xc766e62cfcadaf96, 0xee64435a9752fe72, 0xa192d576b245165a,
116    0x0a8787bf8ecb74b2, 0x81b3e73d20b49b6f, 0x7fa8220ba3b2ecea, 0x245731c13ca42499,
117    0xb78dbfaf3a8d83bd, 0xea1ad565322a1a0b, 0x60e61c23a3795013, 0x6606d7e446282b93,
118    0x6ca4ecb15c5f91e1, 0x9f626da15c9625f3, 0xe51b38608ef25f57, 0x958a324ceb064572
119};
120
121BOOST_AUTO_TEST_CASE(siphash)
122{
123    CSipHasher hasher(0x0706050403020100ULL, 0x0F0E0D0C0B0A0908ULL);
124    BOOST_CHECK_EQUAL(hasher.Finalize(),  0x726fdb47dd0e0e31ull);
125    static const unsigned char t0[1] = {0};
126    hasher.Write(t0);
127    BOOST_CHECK_EQUAL(hasher.Finalize(),  0x74f839c593dc67fdull);
128    static const unsigned char t1[7] = {1,2,3,4,5,6,7};
129    hasher.Write(t1);
130    BOOST_CHECK_EQUAL(hasher.Finalize(),  0x93f5f5799a932462ull);
131    hasher.Write(0x0F0E0D0C0B0A0908ULL);
132    BOOST_CHECK_EQUAL(hasher.Finalize(),  0x3f2acc7f57c29bdbull);
133    static const unsigned char t2[2] = {16,17};
134    hasher.Write(t2);
135    BOOST_CHECK_EQUAL(hasher.Finalize(),  0x4bc1b3f0968dd39cull);
136    static const unsigned char t3[9] = {18,19,20,21,22,23,24,25,26};
137    hasher.Write(t3);
138    BOOST_CHECK_EQUAL(hasher.Finalize(),  0x2f2e6163076bcfadull);
139    static const unsigned char t4[5] = {27,28,29,30,31};
140    hasher.Write(t4);
141    BOOST_CHECK_EQUAL(hasher.Finalize(),  0x7127512f72f27cceull);
142    hasher.Write(0x2726252423222120ULL);
143    BOOST_CHECK_EQUAL(hasher.Finalize(),  0x0e3ea96b5304a7d0ull);
144    hasher.Write(0x2F2E2D2C2B2A2928ULL);
145    BOOST_CHECK_EQUAL(hasher.Finalize(),  0xe612a3cb9ecba951ull);
146
147    // Check test vectors from spec, one byte at a time
148    CSipHasher hasher2(0x0706050403020100ULL, 0x0F0E0D0C0B0A0908ULL);
149    for (uint8_t x=0; x<std::size(siphash_4_2_testvec); ++x)
150    {
151        BOOST_CHECK_EQUAL(hasher2.Finalize(), siphash_4_2_testvec[x]);
152        hasher2.Write(std::span{&x, 1});
153    }
154    // Check test vectors from spec, eight bytes at a time
155    CSipHasher hasher3(0x0706050403020100ULL, 0x0F0E0D0C0B0A0908ULL);
156    for (uint8_t x=0; x<std::size(siphash_4_2_testvec); x+=8)
157    {
158        BOOST_CHECK_EQUAL(hasher3.Finalize(), siphash_4_2_testvec[x]);
159        hasher3.Write(uint64_t(x)|(uint64_t(x+1)<<8)|(uint64_t(x+2)<<16)|(uint64_t(x+3)<<24)|
160                     (uint64_t(x+4)<<32)|(uint64_t(x+5)<<40)|(uint64_t(x+6)<<48)|(uint64_t(x+7)<<56));
161    }
162
163    HashWriter ss{};
164    CMutableTransaction tx;
165    // Note these tests were originally written with tx.version=1
166    // and the test would be affected by default tx version bumps if not fixed.
167    tx.version = 1;
168    ss << TX_WITH_WITNESS(tx);
169    BOOST_CHECK_EQUAL(PresaltedSipHasher(1, 2)(ss.GetHash()), 0x79751e980c2a0a35ULL);
170}
171
172BOOST_AUTO_TEST_CASE(siphash_test_vectors)
173{
174    for (UniValue tests{read_json(json_tests::siphash)}; auto& test : tests.getValues()) {
175        const uint64_t k0{FromHex64(test["key"][0])}, k1{FromHex64(test["key"][1])};
176        auto& input{test["input"]};
177        const bool starts_with_hash{!input.empty() && HasByteLength(input[0], uint256::size())};
178        const bool hash_only{starts_with_hash && input.size() == 1};
179        const bool hash_extra{starts_with_hash && input.size() == 2};
180        const uint64_t expected24{FromHex64(test["expected"]["siphash24"])};
181        BOOST_CHECK_EQUAL(CalculateSipHash24(input, k0, k1), expected24);
182        if (hash_only) {
183            BOOST_CHECK_EQUAL(PresaltedSipHasher(k0, k1)(FromHex256(input[0])), expected24);
184        } else if (hash_extra && HasByteLength(input[1], sizeof(uint32_t))) {
185            const auto extra{ParseHex(input[1].get_str())};
186            BOOST_CHECK_EQUAL(PresaltedSipHasher(k0, k1)(FromHex256(input[0]), ReadLE32(extra.data())), expected24);
187        }
188        if (auto& expected_value{test["expected"]["siphash13uj"]}; !expected_value.isNull()) {
189            const uint64_t expected13uj{FromHex64(expected_value)};
190            BOOST_CHECK_EQUAL(CalculateSipHash13UJ(input, k0, k1, /*normal_as_jumbo=*/false), expected13uj);
191            BOOST_CHECK_EQUAL(CalculateSipHash13UJ(input, k0, k1, /*normal_as_jumbo=*/true), expected13uj);
192            const SipHasher13UJ fixed_hasher{k0, k1};
193            if (hash_only) {
194                BOOST_CHECK_EQUAL(fixed_hasher.Hash(FromHex256(input[0])), expected13uj);
195            } else if (hash_extra && HasByteLength(input[1], sizeof(uint64_t))) {
196                const auto extra{ParseHex(input[1].get_str())};
197                BOOST_CHECK_EQUAL(fixed_hasher.Hash(FromHex256(input[0]), ReadLE64(extra.data())), expected13uj);
198            }
199        }
200    }
201}
202
203BOOST_AUTO_TEST_SUITE_END()
204

src/wallet/receive.cpp

src/wallet/coinselection.cpp

src/consensus/validation.h

src/primitives/transaction.cpp

src/script/descriptor.cpp

src/bitcoin-cli.cpp

src/rpc/blockchain.cpp

src/rpc/rawtransaction.cpp

src/init.cpp

src/crypto/sha256.cpp

src/consensus/merkle.h

src/consensus/tx_check.h

src/consensus/tx_verify.h

src/policy/feerate.h

src/policy/feerate.cpp

src/primitives/transaction_identifier.h

src/chainparamsbase.h

src/chainparamsbase.cpp

src/util/moneystr.cpp

src/crypto/ripemd160.h

src/crypto/sha1.h

src/crypto/sha512.h

src/crypto/hmac_sha256.h

src/crypto/hmac_sha512.h

src/crypto/hmac_sha256.cpp

src/crypto/hmac_sha512.cpp

src/crypto/hkdf_sha256_32.h

src/crypto/hkdf_sha256_32.cpp

src/support/cleanse.h

src/support/cleanse.cpp

src/crypto/siphash.cpp

src/crypto/muhash.h

src/crypto/chacha20.h

src/crypto/poly1305.h

src/crypto/chacha20poly1305.h

src/crypto/chacha20poly1305.cpp

src/util/chaintype.cpp

src/util/obfuscation.h

src/util/byte_units.h

src/util/overflow.h

src/blockencodings.cpp

src/net_permissions.cpp

src/policy/packages.cpp

src/policy/rbf.cpp

src/policy/truc_policy.cpp

src/policy/ephemeral_policy.cpp

src/policy/settings.cpp

src/policy/policy.cpp

src/node/transaction.cpp

src/node/coin.cpp

src/rpc/client.cpp

src/rpc/external_signer.cpp

src/rpc/request.cpp

src/rpc/server_util.cpp

src/rpc/fees.cpp

src/rpc/output_script.cpp

src/rpc/rawtransaction_util.cpp

src/rpc/rawtransaction_util.h

src/rpc/register.h

src/rpc/request.h

src/rpc/server_util.h

src/rpc/protocol.h

src/rpc/server.h

src/rpc/signmessage.cpp

src/rpc/txoutproof.cpp

src/rpc/util.cpp

src/rpc/util.h

src/wallet/rpc/addresses.cpp

src/wallet/rpc/backup.cpp

src/wallet/rpc/coins.cpp

src/wallet/rpc/encrypt.cpp

src/wallet/rpc/signmessage.cpp

src/wallet/rpc/util.cpp

src/wallet/rpc/util.h

src/wallet/coincontrol.cpp

src/wallet/coincontrol.h

src/wallet/context.cpp

src/wallet/context.h

src/wallet/crypter.cpp

src/wallet/crypter.h

src/wallet/db.cpp

src/wallet/export.cpp

src/wallet/external_signer_scriptpubkeyman.cpp

src/wallet/rpc/spend.cpp

src/wallet/rpc/transactions.cpp

src/wallet/rpc/wallet.cpp

src/wallet/feebumper.cpp

src/wallet/feebumper.h

src/index/base.h

src/index/base.cpp

src/index/txindex.h

src/index/txindex.cpp

src/index/txindex_key.h

src/index/txospenderindex.h

src/index/txospenderindex.cpp

src/index/blockfilterindex.h

src/index/blockfilterindex.cpp

src/index/coinstatsindex.h

src/index/coinstatsindex.cpp

src/index/db_key.h

src/index/disktxpos.h

src/kernel/chain.cpp

src/kernel/chain.h

src/kernel/checks.cpp

src/kernel/checks.h

src/kernel/context.cpp

src/kernel/context.h

src/kernel/cs_main.cpp

src/kernel/cs_main.h

src/kernel/disconnected_transactions.cpp

src/kernel/disconnected_transactions.h

src/kernel/mempool_removal_reason.cpp

src/kernel/mempool_removal_reason.h

src/kernel/coinstats.cpp

src/kernel/coinstats.h

src/kernel/chainparams.cpp

src/kernel/chainparams.h

src/wallet/sqlite.cpp

src/wallet/sqlite.h

src/wallet/transaction.cpp

src/wallet/transaction.h

src/wallet/dump.cpp

src/wallet/dump.h

src/wallet/init.cpp

src/wallet/walletutil.cpp

src/wallet/walletutil.h

src/wallet/wallettool.cpp

src/wallet/wallettool.h

src/wallet/export.h

src/wallet/migrate.cpp

src/wallet/migrate.h

src/wallet/db.h

src/wallet/walletdb.cpp

src/wallet/interfaces.cpp

src/wallet/scriptpubkeyman.cpp

src/wallet/scriptpubkeyman.h

src/kernel/bitcoinkernel.cpp

src/kernel/bitcoinkernel.h

src/kernel/bitcoinkernel_wrapper.h

src/node/chainstate.cpp

src/node/chainstate.h

src/node/blockstorage.cpp

src/node/blockstorage.h

src/node/mempool_persist.cpp

src/node/mempool_persist.h

src/node/utxo_snapshot.cpp

src/node/utxo_snapshot.h

src/node/kernel_notifications.cpp

src/node/kernel_notifications.h

src/node/blockmanager_args.cpp

src/kernel/blockmanager_opts.h

src/util/expected.cpp

src/policy/settings.h

src/util/types.h

src/kernel/messagestartchars.h

src/kernel/warning.h

src/util/exception.h

src/common/license_info.h

src/node/coins_view_args.h

src/node/database_args.h

src/util/batchpriority.h

src/util/ui_change_type.h

src/node/coins_view_args.cpp

src/node/peerman_args.h

src/util/serfloat.h

src/node/blockmanager_args.h

src/node/database_args.cpp

src/util/overloaded.h

src/interfaces/types.h

src/node/chainstatemanager_args.h

src/node/minisketchwrapper.h

src/util/macros.h

src/util/syserror.h

src/common/run_command.h

src/util/bytevectorhash.cpp

src/node/mempool_persist_args.cpp

src/util/exec.h

src/util/rbf.h

src/crypto/hex_base.h

src/node/mempool_persist_args.h

src/interfaces/echo.h

src/util/any.h

src/util/batchpriority.cpp

src/util/threadnames.h

src/node/coin.h

src/node/mempool_args.h

src/util/asmap.h

src/util/bytevectorhash.h

src/node/context.cpp

src/util/insert.h

src/util/readwritefile.h

src/node/peerman_args.cpp

src/node/interface_ui.cpp

src/interfaces/handler.h

src/node/mining_args.h

src/util/hasher.cpp

src/common/init.h

src/kernel/mempool_limits.h

src/common/system.h

src/crypto/sha3.h

src/util/threadinterrupt.cpp

src/node/protocol_version.h

src/util/exception.cpp

src/common/messages.h

src/node/connection_types.cpp

src/util/bip32.h

src/common/license_info.cpp

src/util/stdmutex.h

src/common/run_command.cpp

src/util/check.cpp

src/util/golombrice.h

src/node/types.h

src/node/timeoffsets.h

src/util/readwritefile.cpp

src/util/fastrange.h

src/util/signalinterrupt.h

src/util/task_runner.h

src/util/syserror.cpp

src/common/interfaces.cpp

src/common/types.h

src/util/threadinterrupt.h

src/kernel/chainstatemanager_opts.h

src/node/psbt.h

src/policy/ephemeral_policy.h

src/util/trace.h

src/common/url.cpp

src/kernel/mempool_options.h

src/util/serfloat.cpp

src/kernel/notifications_interface.h

src/node/timeoffsets.cpp

src/node/warnings.cpp

src/util/hash_type.h

src/crypto/hex_base.cpp

src/node/eviction.h

src/util/tokenbucket.h

src/crypto/aes.h

src/common/pcp.h

src/util/feefrac.cpp

src/node/transaction.h

src/util/threadnames.cpp

src/common/signmessage.h

src/util/exec.cpp

src/util/signalinterrupt.cpp

src/clientversion.cpp

src/common/signmessage.cpp

src/compat/assumptions.h

src/compat/byteswap.h

src/deploymentinfo.cpp

src/deploymentinfo.h

src/deploymentstatus.cpp

src/deploymentstatus.h

src/dummywallet.cpp

src/external_signer.h

src/init/bitcoin-gui.cpp

src/init/bitcoin-node.cpp

src/init/bitcoin-qt.cpp

src/init/bitcoin-wallet.cpp

src/init/bitcoind.cpp

src/init/common.h

src/interfaces/init.h

src/interfaces/ipc.h

src/key_io.h

src/logging/categories.h

src/logging/timer.h

src/mapport.h

src/musig.h

src/net_permissions.h

src/netgroup.h

src/netmessagemaker.h

src/node/chainstatemanager_args.cpp

src/node/connection_types.h

src/node/context.h

src/node/interface_ui.h

src/node/mempool_args.cpp

src/node/mining_args.cpp

src/node/minisketchwrapper.cpp

src/node/txreconciliation.h

src/policy/fees/estimator_args.cpp

src/policy/fees/estimator_args.h

src/policy/fees/estimator_man.cpp

src/policy/fees/estimator_man.h

src/policy/packages.h

src/policy/rbf.h

src/policy/truc_policy.h

src/pow.h

src/primitives/block.cpp

src/randomenv.h

src/rest.h

src/script/keyorigin.h

src/script/parsing.cpp

src/script/parsing.h

src/script/script_error.h

src/script/sigcache.cpp

src/script/sigcache.h

src/script/solver.h

src/script/verify_flags.h

src/semaphore_grant.h

src/signet.h

src/span.h

src/support/allocators/secure.h

src/support/allocators/zeroafterfree.h

src/util/tokenpipe.cpp

src/util/translation.h

src/util/vector.h

src/versionbits.h

src/versionbits_impl.h

src/wallet/external_signer_scriptpubkeyman.h

src/wallet/fees.h

src/wallet/load.h

src/wallet/receive.h

src/wallet/rpc/wallet.h

src/wallet/types.h

src/walletinitinterface.h

src/zmq/zmqabstractnotifier.cpp

Independent explanations by MyBitcoinExplorer. Not affiliated with or endorsed by Bitcoin Core. Guides are educational and do not replace the source or its tests.

Bitcoin Core source © its contributors, distributed under the MIT license. Original notices and bundled third-party licenses are retained in the source tree.