Inside Bitcoin

251                utxo = wallet.listunspent()[0]
252            else:
253                assert_equal(utxo, wallet.listunspent()[0])
254        psbt = wallets[0].walletcreatefundedpsbt(outputs=[{self.def_wallet.getnewaddress(): 5}], inputs=[utxo], change_type="bech32m", changePosition=1, locktime=self.nodes[0].getblockcount())["psbt"]
255
256        dec_psbt = self.nodes[0].decodepsbt(psbt)
257        assert_equal(len(dec_psbt["inputs"]), 1)
258        assert_equal(len(dec_psbt["inputs"][0]["musig2_participant_pubkeys"]), expected_participant_maps)
259        if has_internal:
260            assert_equal(len(dec_psbt["outputs"][1]["musig2_participant_pubkeys"]), expected_participant_maps)
261
262        # Check all participant pubkeys in the input and change output
263        psbt_maps = [dec_psbt["inputs"][0]]
264        if has_internal:
265            psbt_maps.append(dec_psbt["outputs"][1])
266        origin_paths = {ORIGIN_PATH_RE.search(pub).group(1) for _, pub in keys}
267        for psbt_map in psbt_maps:
268            part_pks = set()
269            for agg in psbt_map["musig2_participant_pubkeys"]:
270                for part_pub in agg["participant_pubkeys"]:
271                    part_pks.add(part_pub[2:])
272            # Check that there are as many participants as we expected
273            assert_equal(len(part_pks), len(keys))
274            # Check that each participant has a derivation path, and that its origin appears in
275            # that path just once no matter how many musig() expressions the participant is in
276            for deriv_path in psbt_map["taproot_bip32_derivs"]:
277                if deriv_path["pubkey"] in part_pks:
278                    origin = next((o for o in origin_paths if deriv_path["path"].startswith(f"m{o}")), None)
279                    assert origin is not None, deriv_path["path"]
280                    assert_equal(deriv_path["path"].count(origin), 1)
281                    part_pks.remove(deriv_path["pubkey"])
282            assert_equal(len(part_pks), 0)
283
284        # Run 2 signing sessions simultaneously to verify no nonce reuse
285        # Add pubnonces
286        nonce_psbts = []
287        nonce_psbts2 = []
288        for i, wallet in enumerate(wallets):
289            if nosign_wallets and i in nosign_wallets:
290                continue
291            for psbt_list in [nonce_psbts, nonce_psbts2]:
292                proc = wallet.walletprocesspsbt(psbt=psbt, sighashtype=sighash_type)
293                assert_equal(proc["complete"], False)
294                psbt_list.append(proc["psbt"])
295
296        comb_nonce_psbt = self.nodes[0].combinepsbt(nonce_psbts)
297        comb_nonce_psbt2 = self.nodes[0].combinepsbt(nonce_psbts2)
298
299        dec_psbt = self.nodes[0].decodepsbt(comb_nonce_psbt)
300        dec_psbt2 = self.nodes[0].decodepsbt(comb_nonce_psbt2)
301        assert_equal(len(dec_psbt["inputs"][0]["musig2_pubnonces"]), len(dec_psbt2["inputs"][0]["musig2_pubnonces"]), expected_pubnonces)
302        for pn, pn2 in zip(dec_psbt["inputs"][0]["musig2_pubnonces"], dec_psbt2["inputs"][0]["musig2_pubnonces"]):
303            self.assert_musig_signer_data(pn, pn2, "pubnonce")
304            self.assert_musig_aggregate_in_script(pn, pattern, dec_psbt["inputs"][0])
305
306        # Add partial sigs
307        psig_psbts = []
308        psig_psbts2 = []
309        for i, wallet in enumerate(wallets):
310            if nosign_wallets and i in nosign_wallets:
311                continue
312            for psbt, psbt_list in [(comb_nonce_psbt, psig_psbts), (comb_nonce_psbt2, psig_psbts2)]:
313                proc = wallet.walletprocesspsbt(psbt=psbt, sighashtype=sighash_type)
314                assert_equal(proc["complete"], False)
315                psbt_list.append(proc["psbt"])
316
317        comb_psig_psbt = self.nodes[0].combinepsbt(psig_psbts)
318        comb_psig_psbt2 = self.nodes[0].combinepsbt(psig_psbts2)
319
320        dec_psbt = self.nodes[0].decodepsbt(comb_psig_psbt)
321        dec_psbt2 = self.nodes[0].decodepsbt(comb_psig_psbt2)
322        assert_equal(len(dec_psbt["inputs"][0]["musig2_partial_sigs"]), len(dec_psbt2["inputs"][0]["musig2_partial_sigs"]), expected_partial_sigs)
323        for ps, ps2 in zip(dec_psbt["inputs"][0]["musig2_partial_sigs"], dec_psbt2["inputs"][0]["musig2_partial_sigs"]):
324            self.assert_musig_signer_data(ps, ps2, "partial_sig")
325            self.assert_musig_aggregate_in_script(ps, pattern, dec_psbt["inputs"][0])
326
327        # Non-participant aggregates partial sigs and send
328        finalized = self.nodes[0].finalizepsbt(psbt=comb_psig_psbt, extract=False)
329        finalized2 = self.nodes[0].finalizepsbt(psbt=comb_psig_psbt2, extract=False)
330        assert_equal(finalized["complete"], finalized2["complete"], True)
331        witness = self.nodes[0].decodepsbt(finalized["psbt"])["inputs"][0]["final_scriptwitness"]
332        assert_not_equal(witness, self.nodes[0].decodepsbt(finalized2["psbt"])["inputs"][0]["final_scriptwitness"])
333        if scriptpath:
334            assert_greater_than(len(witness), 1)
335        else:
336            assert_equal(len(witness), 1)
337        finalized = self.nodes[0].finalizepsbt(comb_psig_psbt)
338        assert "hex" in finalized
339        self.nodes[0].sendrawtransaction(finalized["hex"])
340
341    def run_test(self):
342        self.def_wallet = self.nodes[0].get_wallet_rpc(self.default_wallet_name)
343
344        self.test_success_case("rawtr(musig(keys/*))", "rawtr(musig($0/<0;1>/*,$1/<1;2>/*,$2/<2;3>/*))")
345        self.test_success_case("rawtr(musig(keys/*)) with ALL|ANYONECANPAY", "rawtr(musig($0/<0;1>/*,$1/<1;2>/*,$2/<2;3>/*))", "ALL|ANYONECANPAY")
346        self.test_success_case("tr(musig(keys/*)) no multipath", "tr(musig($0/0/*,$1/1/*,$2/2/*))")
347        self.test_success_case("tr(musig(keys/*)) 2 index multipath", "tr(musig($0/<0;1>/*,$1/<1;2>/*,$2/<2;3>/*))")
348        self.test_success_case("tr(musig(keys/*)) 3 index multipath", "tr(musig($0/<0;1;2>/*,$1/<1;2;3>/*,$2/<2;3;4>/*))")
349        self.test_success_case("rawtr(musig/*)", "rawtr(musig($0,$1,$2)/<0;1>/*)")
350        self.test_success_case("tr(musig/*)", "tr(musig($0,$1,$2)/<0;1>/*)")
351        self.test_success_case("rawtr(musig(keys/*)) without all wallets importing", "rawtr(musig($0/<0;1>/*,$1/<0;1>/*,$2/<0;1>/*))", only_one_musig_wallet=True)
352        self.test_success_case("tr(musig(keys/*)) without all wallets importing", "tr(musig($0/<0;1>/*,$1/<0;1>/*,$2/<0;1>/*))", only_one_musig_wallet=True)
353        self.test_success_case("tr(H, pk(musig(keys/*)))", "tr($H,pk(musig($0/<0;1>/*,$1/<1;2>/*,$2/<2;3>/*)))", scriptpath=True)
354        self.test_success_case("tr(H,pk(musig/*))", "tr($H,pk(musig($0,$1,$2)/<0;1>/*))", scriptpath=True)
355        self.test_success_case("tr(H,{pk(musig/*), pk(musig/*)})", "tr($H,{pk(musig($0,$1,$2)/<0;1>/*),pk(musig($3,$4,$5)/0/*)})", scriptpath=True)
356        self.test_success_case("tr(H,{pk(musig/*), pk(same keys different musig/*)})", "tr($H,{pk(musig($0,$1,$2)/<0;1>/*),pk(musig($1,$2)/0/*)})", scriptpath=True)
357        self.test_success_case("tr(H,and(pk(musig/*),pk(same musig, other derivation/*)))", "tr($H,and_v(v:pk(musig($0,$1,$2)/<0;1>/*),pk(musig($0,$1,$2)/<2;3>/*)))", scriptpath=True)
358        self.test_success_case("tr(musig/*,{pk(partial keys diff musig-1/*),pk(partial keys diff musig-2/*)})}", "tr(musig($0,$1,$2)/<3;4>/*,{pk(musig($0,$1)/<5;6>/*),pk(musig($1,$2)/7/*)})")
359        self.test_success_case("tr(musig/*,{pk(partial keys diff musig-1/*),pk(partial keys diff musig-2/*)})} script-path", "tr(musig($0,$1,$2)/<3;4>/*,{pk(musig($0,$1)/<5;6>/*),pk(musig($1,$2)/7/*)})", scriptpath=True, nosign_wallets=[0])
360        self.test_success_case("tr(H,and(pk(musig/*),after(1)))", "tr($H,and_v(v:pk(musig($0,$1,$2)/<0;1>/*),after(1)))", scriptpath=True)
361        self.test_success_case("tr(H,and(pk_k(musig/*),after(1)))", "tr($H,and_v(vc:pk_k(musig($0,$1,$2)/<0;1>/*),after(1)))", scriptpath=True)
362        self.test_success_case("tr(H,and(pkh(musig/*),after(1)))", "tr($H,and_v(v:pkh(musig($0,$1,$2)/<0;1>/*),after(1)))", scriptpath=True)
363        self.test_success_case("tr(H,and(pk_h(musig/*),after(1)))", "tr($H,and_v(vc:pk_h(musig($0,$1,$2)/<0;1>/*),after(1)))", scriptpath=True)
364        self.test_success_case("tr(H,{and(pk(musig/*),after(1)),and(pk(musig/*),after(1))})", "tr($H,{and_v(v:pk(musig($0,$2)/0/*),after(1)),and_v(v:pk(musig($1,$2)/0/*),after(1))})", scriptpath=True)
365
366        self.test_failure_case_1("missing participant nonce", "tr(musig($0/<0;1>/*,$1/<1;2>/*,$2/<2;3>/*))")
367        self.test_failure_case_2("insufficient partial signatures", "rawtr(musig($0/<0;1>/*,$1/<1;2>/*,$2/<2;3>/*))")
368        self.test_failure_case_3("finalize without partial sigs", "rawtr(musig($0/<0;1>/*,$1/<1;2>/*))")
369
370if __name__ == '__main__':
371    WalletMuSigTest(__file__).main()
372