haskoin-core 1.4.0 → 1.5.0

raw patch · 65 files changed

+13701/−4259 lines, 65 filesdep +unicode-transformsdep ~base64dep ~secp256k1-haskellPVP ok

version bump matches the API change (PVP)

Dependencies added: unicode-transforms

Dependency ranges changed: base64, secp256k1-haskell

API changes (from Hackage documentation)

Files

• CHANGELOG.md +129/−0
• data/block_100000.hex +1/−0
• data/psbt_bip174.json +236/−0
• data/psbt_bip370.json +258/−0
• data/psbt_bip371.json +93/−0
• data/psbt_core32.json +8/−0
• haskoin-core.cabal +15/−5
• src/Haskoin/Address.hs +296/−184
• src/Haskoin/Address/Base58.hs +37/−26
• src/Haskoin/Address/Bech32.hs +45/−21
• src/Haskoin/Address/CashAddr.hs +56/−30
• src/Haskoin/Block/Common.hs +43/−35
• src/Haskoin/Block/Headers.hs +305/−247
• src/Haskoin/Block/Merkle.hs +121/−98
• src/Haskoin/Crypto/Hash.hs +16/−24
• src/Haskoin/Crypto/Keys/Common.hs +67/−14
• src/Haskoin/Crypto/Keys/Extended.hs +137/−52
• src/Haskoin/Crypto/Keys/Extended/Internal.hs +10/−16
• src/Haskoin/Crypto/Keys/Mnemonic.hs +34/−19
• src/Haskoin/Crypto/Signature.hs +8/−7
• src/Haskoin/Network.hs +4/−0
• src/Haskoin/Network/BlockFilter.hs +215/−0
• src/Haskoin/Network/Bloom.hs +112/−80
• src/Haskoin/Network/Common.hs +425/−48
• src/Haskoin/Network/CompactBlock.hs +218/−0
• src/Haskoin/Network/Constants.hs +63/−35
• src/Haskoin/Network/Data.hs +12/−2
• src/Haskoin/Network/Message.hs +110/−46
• src/Haskoin/Script/Common.hs +90/−46
• src/Haskoin/Script/SigHash.hs +84/−17
• src/Haskoin/Script/Standard.hs +182/−115
• src/Haskoin/Transaction.hs +2/−2
• src/Haskoin/Transaction/Builder.hs +335/−245
• src/Haskoin/Transaction/Builder/Sign.hs +112/−21
• src/Haskoin/Transaction/Common.hs +106/−62
• src/Haskoin/Transaction/Genesis.hs +55/−26
• src/Haskoin/Transaction/Partial.hs +0/−949
• src/Haskoin/Transaction/Psbt.hs +1903/−0
• src/Haskoin/Transaction/Segwit.hs +8/−8
• src/Haskoin/Transaction/Taproot.hs +320/−77
• src/Haskoin/Util/Arbitrary/Address.hs +1/−1
• src/Haskoin/Util/Arbitrary/Keys.hs +7/−8
• src/Haskoin/Util/Arbitrary/Message.hs +79/−2
• src/Haskoin/Util/Arbitrary/Network.hs +139/−55
• src/Haskoin/Util/Arbitrary/Script.hs +53/−17
• src/Haskoin/Util/Arbitrary/Transaction.hs +170/−20
• src/Haskoin/Util/Arbitrary/Util.hs +1/−1
• src/Haskoin/Util/Helpers.hs +32/−17
• src/Haskoin/Util/Marshal.hs +2/−2
• test/Haskoin/Address/Bech32Spec.hs +43/−6
• test/Haskoin/Address/CashAddrSpec.hs +115/−0
• test/Haskoin/AddressSpec.hs +464/−1
• test/Haskoin/BlockSpec.hs +1352/−498
• test/Haskoin/Crypto/HashSpec.hs +57/−0
• test/Haskoin/Crypto/Keys/ExtendedSpec.hs +326/−3
• test/Haskoin/Crypto/Keys/MnemonicSpec.hs +99/−81
• test/Haskoin/Crypto/KeysSpec.hs +129/−4
• test/Haskoin/Crypto/SignatureSpec.hs +79/−4
• test/Haskoin/NetworkSpec.hs +1125/−189
• test/Haskoin/ScriptSpec.hs +750/−87
• test/Haskoin/Transaction/PartialSpec.hs +0/−615
• test/Haskoin/Transaction/PsbtSpec.hs +1234/−0
• test/Haskoin/Transaction/TaprootSpec.hs +321/−22
• test/Haskoin/TransactionSpec.hs +627/−55
• test/Haskoin/UtilSpec.hs +225/−14

@@ -5,6 +5,135 @@ The format is based on [Keep a Changelog](http://keepachangelog.com/en/1.0.0/) and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.html). +## [1.5.0] - 2026-11-03++### Added++- Taproot signing and verification, BIP 341 and BIP 342: `taprootSigHash` computes the digest a Taproot signature signs, for the key path and for a leaf of a script path; `taprootOutputSecKey` tweaks a secret key as `taprootOutputKey` tweaks its public key; `signTx` signs a `SigInput` of a Taproot output by its key path, with a key whose x-only public key is the output key or whose tweak without a script tree is, as a BIP 86 wallet spends, and `signTaprootInput` signs one input; `verifyStdTx` verifies key path spends, and script path spends whose leaf is a single key check. `TaprootSignature`, `encodeTaprootSig` and `decodeTaprootSig` are a Schnorr signature with its hash type, `isTaprootSigHash` tells the hash types a Taproot signature may use, and `sigHashDefault` is the default one. The key path vectors of BIP 341 and the BIP 86 vectors check them.+- The Taproot fields of PSBTs, BIP 371, in `Haskoin.Transaction.Psbt`: `tapKeySig`, `tapScriptSigs`, `tapLeafScripts`, `inputTapDerivations`, `inputTapInternalKey`, `inputTapMerkleRoot`, `outputTapInternalKey`, `outputTapTree` and `outputTapDerivations`, with their inserts. They are checked against the spec when a PSBT is read. `signPsbt` signs a Taproot coin by its key path when the input has its internal key, and by each leaf script that is a single key check; `finalizePsbt` finalizes both. The test vectors of BIP 371 check them.+- `tapTreeLeaves` and `tapTreeFromLeaves` in `Haskoin.Transaction.Taproot` convert a script tree to and from its leaves with their depth, the form of `PSBT_OUT_TAP_TREE`. `encodeControlBlock` and `decodeControlBlock` build and read a control block, which must be 33 bytes plus 32 per node with at most `maxControlBlockNodes` (128) nodes. `leafHash`, `keyParity` and `tapscriptLeafVersion` are exported.+- `txWitnessHash` in `Haskoin.Transaction.Common` is the witness transaction id of BIP 141. `txWeight` and `txVirtualSize` give the weight and the virtual size of a transaction, and `hasWitness` tells whether it has a witness.+- `InputKind` and `OutputKind` in `Haskoin.Transaction.Builder` name the kinds of inputs and outputs: pay-to-public-key, pay-to-public-key-hash with a compressed or an uncompressed key, pay-to-script-hash multisig, the native and nested SegWit kinds, Taproot, pay-to-script-hash of a 256-bit hash, and any other output script by its size. `guessTxWeight`, `guessTxSize` and `guessTxFee` estimate the weight, the virtual size and the fee of a transaction of those kinds, with `inputWeight` and `outputSize` per kind. The guess is an upper bound: it counts 72 bytes per signature, the one-byte empty witness stack of a legacy input in a transaction with a witness, and two bytes for each count of a multisig script above 16.+- `Signer` in `Haskoin.Transaction.Psbt` is a record: `keyOfRecord` gives the key a derivation record names, as before, and `keyOfHash` the key of a public key hash, so that `signPsbt` signs the coins whose keys it holds when the input has no derivation record. `keySigner` provides both, `xPrvSigner` the first.+- Tests for every function of the `Haskoin.Transaction` and `Haskoin.Util` modules, with the key path vectors of BIP 341, the vectors of BIP 86 and BIP 371, and literal sizes, ids and fee estimates.+- `connectBlock` and `connectBlocks` now check that a header carries the difficulty bits the chain requires, as `ContextualCheckBlockHeader` does in Bitcoin Core. `validBlock` takes the required bits as a new argument. Without this check a chain of headers mined at the minimum difficulty was accepted.+- `asertAnchor` finds the anchor block of the aserti3-2d algorithm for the chain that ends at a given block. `mtp` is now the median time past of the block itself, as in Bitcoin Core, instead of its parent's.+- `getVarIntList` and `putVarIntList` in `Haskoin.Network.Common` read and write lists with their `VarInt` count. A count above `maxListSize` (32 MiB, the `MAX_SIZE` of Bitcoin Core) fails the parse instead of wrapping around and reading an empty list. Blocks, Merkle blocks, `getblocks`, `getheaders`, `headers`, `inv`, `getdata`, `notfound` and `addr` messages use them.+- `genesisTx` in `Network` holds the coinbase transaction of the genesis block. `Haskoin.Transaction.Genesis` exports `mainnetGenesisTx`, `testnet4GenesisTx` and `genesisCoinbase`.+- `skipHeight` and `medianTime` are exported from `Haskoin.Block.Headers`.+- Tests for every function of the `Haskoin.Block` modules, with vectors from Bitcoin Core and from mainnet block 100000.++- PSBT version 2 (BIP 370) in `Haskoin.Transaction.Psbt`: a PSBT of version 2 is read and written as its maps, with the unsigned transaction its fields describe and the lock time they determine. The roles take both versions, and version 2 has its constructor (`addInput`, `addOutput`), its updater (`setInputSequence`), the flags of `PSBT_GLOBAL_TX_MODIFIABLE`, which the signer and the combiner keep as the spec and Bitcoin Core do, and conversion between the versions (`withVersion`). The test vectors of BIP 370 and files of Bitcoin Core 32.1 check it.+- `addrToBase58`, `addrToBech32` and `addrToCash` encode an address in one chosen format. `addrToBase58` gives the legacy form of a Bitcoin Cash address.+- Token-aware CashAddr addresses (types 2 and 3) can be paid. `addressToOutput`, `addressHash160` and `addressHash256` treat them like their plain P2PKH, P2SH and P2SH32 counterparts.+- `decodeSecKey` in `Haskoin.Crypto.Keys.Common` builds a secret key from 32 bytes and refuses zero and values at or above the curve order. `fromWif`, `fromMiniKey`, `xPrvImport`, `makeXPrvKey` and the binary form of `PrivateKey` use it. The `secKey` of secp256k1-haskell 1.7.0 only checks the length, so such keys used to import and then crash `derivePubKey` and `signMsg` with an error call.+- Derivation paths accept `h` and `H` as hardened markers, as Bitcoin Core does, so `m/84h/0h/0h` parses.+- Tests for BIP32 test vectors 4 and 5, for a BIP39 passphrase with accented letters, and for every function of the `Haskoin.Crypto` modules.+- The P2P messages added since 2016: `addrv2` and `sendaddrv2` (BIP 155) with `AddrV2`, `NetworkAddressV2` and conversions from and to `addr` entries; `feefilter` (BIP 133); `sendcmpct`, `cmpctblock`, `getblocktxn` and `blocktxn` (BIP 152) in `Haskoin.Network.CompactBlock`; `getcfilters`, `cfilter`, `getcfheaders`, `cfheaders`, `getcfcheckpt` and `cfcheckpt` (BIP 157) in `Haskoin.Network.BlockFilter`; `wtxidrelay` (BIP 339) and `sendtxrcncl` (BIP 330). The inventory types `InvCompactBlock` and `InvWTx`, and the service bits `nodeCompactFilters`, `nodeNetworkLimited` and `nodeP2PV2`.+- `maxMessageSize` in `Network` bounds the payload `getMessage` reads: 4,000,000 bytes on Bitcoin, as in Bitcoin Core, and twice the block size on Bitcoin Cash.+- `scriptPushData` lists the data elements a script pushes, as `GetOp` does in Bitcoin Core.+- `getVarIntBytes` and `putVarIntBytes` read and write bytes with their count, under the same limit as lists.+- Tests with fixed wire bytes for every message type, the sample `version`, `verack` and `addr` messages of the protocol documentation, and every function of the `Haskoin.Network` modules.+- `pushOpData` gives the data that a push opcode puts on the stack, and `isMinimalPush` tells whether a push is in its shortest encoding, the rule of `CheckMinimalPush` in Bitcoin Core.+- `OP_CHECKSIGADD` is a pattern synonym for opcode 0xba, which `OP_CHECKDATASIG` also names, so a Tapscript can be written with the name of BIP 342.+- `NestedWitnessInput` is the input script of a P2SH-P2WPKH or P2SH-P2WSH output: a push of the witness output script. `decodeInput`, `encodeInput`, `inputAddress` and the signer use it, and `isNestedWitnessInput` tests for it. Such an input used to fail to decode.+- `maxMultisigKeys` is 20, the `MAX_PUBKEYS_PER_MULTISIG` of Bitcoin Core. `decodeOutput` reads a multisig output with 17 to 20 keys, whose counts are one-byte pushes, and `encodeOutput` writes one. Only 16 keys used to be supported.+- `decodePubKey` in `Haskoin.Crypto.Keys.Common` reads a public key from bytes that must hold the key and nothing else.+- Tests for every function of the `Haskoin.Script` modules, with literal vectors from BIP 67, BIP 143, BIP 173 and BIP 341.++### Changed++- `makeSignature`, and with it `signTx`, `signInput` and `signPsbt`, refuse to sign a legacy input with `SIGHASH_SINGLE` when the input has no output at its index. The digest of that case is the constant 1, which commits to nothing, so the signature would spend any other coin of the key wherever the same case comes up. `txSigHash` still computes that digest, as a node must to verify such signatures, and `verifyStdInput` still accepts them. A SegWit input is signed in that case, since the BIP 143 digest commits to the coin.+- `Signer` has a new field, `acceptedSigHashes`: the sighash types it signs with. `keySigner` and `xPrvSigner` set it to `defaultSigHashes`, which are `SIGHASH_DEFAULT` and `SIGHASH_ALL`. `signPsbt` refuses an input that asks for another type, as BIP 174 asks of a signer: the other types leave part of the transaction unsigned, and the PSBT comes from someone else. A PSBT asking for `SIGHASH_NONE` or `SIGHASH_SINGLE` used to be signed as asked. The fork id flag is not compared, since the network decides it.+- `PrivateKey` and `XPrvKey` show their secret as `<redacted>`, and no longer have a `Read` instance; nor does `XKey`. The derived instances printed the key, and for `XPrvKey` the chain code, so a value in a log or an error message gave the coins away. `toWif` and `xPrvExport` write a key out.+- `prvSubKey`, `pubSubKey`, `hardSubKey` and `cycleIndex` throw `DerivationException` for a child index with the hard bit set, like every other failure of a derivation. They used to call `error`.+- A transaction with no inputs whose next byte, the flags of BIP 144, is neither 0x00 nor 0x01 fails to parse with "Unknown transaction optional data", as in Bitcoin Core. Such bytes used to parse as a legacy transaction with no inputs that did not serialize back to the same bytes. A `Tx` string literal must hold the transaction and nothing else, as `DecodeHexTx` requires in Bitcoin Core.+- The documentation of `decodeBase58` and `decodeBase58Check` says that their cost grows with the square of the length and that callers must bound untrusted input. The decoders of the library bound it already.+- `taprootOutputKey` and `taprootScriptOutput` tweak the x-only internal key, as BIP 341 defines the output key. An internal key with an odd y coordinate used to be tweaked as a full point, which gave an output key and an address no other wallet derives from that key, and that a BIP 341 signer could not spend.+- `viewTaprootWitness` reads a witness in the order of BIP 341: the annex last, then the control block, then the script, then the stack. It used to read the control block and the script in the other order, and so decoded no real script path witness. `encodeTaprootWitness` writes the annex only when there is one; it used to append an empty item, which made the witness invalid. The control block of a `ScriptPathData` is a list of digests, and a control block of a wrong length is refused. `KeyPathSpend` carries the annex of a key path spend.+- `signPsbt` applies the checks of the BIP 174 signer. A coin known from `PSBT_IN_WITNESS_UTXO` alone is signed only with a witness signature, since the legacy digest does not commit to the amount; the previous transaction is used first, and a witness output that is not its output is refused. A sighash type no node accepts, or whose fork id flag does not fit the network, is refused instead of signed. A redeem script that does not hash to the coin, or a witness script that does not hash to the witness program, is refused. An input whose coin script is not standard is left alone instead of failing the PSBT.+- `finalizePsbt` takes the `Network` and verifies every signature it uses, against the digest of the coin and the sighash type of the input when it has one, as `PSBTInputSignedAndVerified` does in Bitcoin Core. A signature that does not verify, is not a signature, or uses another sighash type is refused. It used to finalize any bytes stored as a signature.+- `mergeTxs` leaves an input that no transaction signed as it is. It used to crash with `Prelude.head: empty list`.+- `chooseCoins` takes the kinds of the outputs and a fee rate per virtual byte, and estimates the fee from the `coinInputKind` of each coin, a new method of `Coin`. `chooseMSCoins`, `chooseMSCoinsSink`, `guessMSTxFee` and `guessMSSize` are gone, since the kind of input lives on the coin. The old estimate counted every input as pay-to-public-key-hash and charged bytes rather than virtual bytes, so a SegWit wallet overpaid fees by about 60 %.+- `hexToTxHash`, and the `Read`, string and JSON forms of `TxHash` and `OutPoint`, refuse hex that is not exactly 32 bytes. Longer hex used to be accepted with its leading bytes dropped.+- Transaction parsing bounds the counts of inputs, outputs, witness stacks and witness items by `maxListSize`, as `ReadCompactSize` does in Bitcoin Core; a count of 2^64 - 1 used to wrap around and read as zero. A transaction with the witness marker but no witness item is refused ("Superfluous witness record"), as Bitcoin Core refuses it. A transaction whose witness stacks are all empty is serialized without the marker, and `hasWitness` is false for it.+- `verifyStdTx` and `verifyStdInput` take the coins of every input, matched by outpoint, so that Taproot inputs can be verified. A witness on an input whose coin is not a witness program is refused, as `VerifyScript` refuses it in Bitcoin Core, and `verifyStdTx` refuses outputs that spend more than the coins hold.+- `nosigTxHash` removes the witness as well as the input scripts, so that it is the same before and after signing a SegWit input.+- `getBits` raises an error for input shorter than the bits asked, `getList` and `getLengthBytes` refuse a count that does not fit an `Int`, and `unmarshalLazy` returns `Either String a` instead of throwing.+- `setInputSequence` refuses to change the sequence of an input that is signed, since every signature commits to it.+- `WitnessProgram`, `WitnessProgramPKH`, `MAST`, `TaprootWitness` and `ScriptPathData` have `Show` and `Eq` instances.+- The package requires secp256k1-haskell 2.0.0, whose `normalizeSig` is total. `verifyHashSig` normalises the signature with it, and `isCanonicalHalfOrder` is its `isLowS`.+- `buildMerkleRoot` returns `Either String MerkleRoot`. It fails for an empty list, which used to crash, and for a mutated tree in which two sibling nodes are identical (CVE-2012-2459). `extractMatches` rejects such a tree too, as `CPartialMerkleTree::TraverseAndExtract` does in Bitcoin Core, and reports why a partial tree is malformed.+- `buildMerkleRoot`, `buildPartialMerkle` and `calcHash` build the tree in linear time instead of quadratic. `decodeMerkleFlags` is linear too; it took a minute for 100 KB of flags, which a peer could send in a `merkleblock` message.+- `genesisBlock` no longer takes a `Ctx` and returns the right coinbase for every network. Bitcoin testnet4 has its own genesis coinbase, so `genesisBlock btcTest4` used to return a block whose transactions did not match its header.+- The `merkleroot` field of the JSON form of `BlockHeader` is in display order, like `prevblock` and the `getblockheader` RPC call of Bitcoin Core. It was in internal byte order.+- `hexToBlockHash` and the JSON parser of `BlockHeader` reject a hash that is not exactly 32 bytes. They used to accept longer input and drop the leading bytes.+- `computeAsertBits` takes the proof-of-work limit of the network as its first argument instead of using the mainnet limit.+- `connectBlocks` adds each header to the store as it passes, so a batch with a bad header keeps the headers before it and makes the last of them the best block when it has the most work.+- `Ord BlockNode` compares the height and then the header, so that it agrees with `Eq`, which compares the header.+- `appendBlocks` dates every block one target spacing after its parent, so the chains it mines pass the median time past rule.+- `blockLocatorNodes` steps back like `LocatorEntries` in Bitcoin Core and lists the genesis block once.+- `encodeCompact` raises an error for a number wider than 255 bytes instead of wrapping the exponent.+- `traverseAndBuild` and `traverseAndExtract` are no longer exported.+- `getMessage` consumes exactly one message. It used to leave the payload in the stream and let the payload parser read past the declared length, so bytes outside the checksum could end up in a message. It now checks the magic before reading the payload, refuses a payload above `maxMessageSize`, and accepts a payload on message types that carry none, as Bitcoin Core does.+- `VarInt` refuses an encoding longer than the value needs, as `ReadCompactSize` does in Bitcoin Core. A transaction with such an encoding used to parse and re-serialize to different bytes. `VarString` refuses a count above `maxListSize`.+- `MessageCommand` refuses a name with a byte outside printable ASCII or with a byte other than NUL after it, as Bitcoin Core does, and serializing a name longer than twelve bytes is an error instead of a silent truncation.+- The `extra` field of `Reject` is a `Maybe Hash256`. It was a `ByteString` that only round-tripped when empty or 32 bytes long.+- `Version` refuses a user agent longer than 256 bytes, as Bitcoin Core does.+- `BloomFilter` refuses a filter above 36000 bytes or 50 hash functions when parsing, as Bitcoin Core refuses such a `filterload`, and reads its bytes in one go instead of one at a time. `FilterAdd` refuses an element above 520 bytes. `BloomFlags` reads only the two low bits of its byte, as Bitcoin Core does.+- `bloomRelevantUpdate` matches the data pushed by every output script, standard or not, and inserts outpoints according to the flags, as `IsRelevantAndUpdate` does in Bitcoin Core. It used to raise an error for any transaction with a non-standard output, and for a matching output that was not pay-to-pubkey or pay-to-multisig under `BloomUpdateP2PubKeyOnly`. It returns `Just` the filter whenever an output matches, unchanged under `BloomUpdateNone`.+- `bloomInsert` and `bloomContains` treat a filter with zero hash functions as matching everything, as Bitcoin Core does. `bloomInsert` used to loop over 2^32 hash functions and `bloomContains` used to answer `False`. `bloomCreate` gives zero hash functions for zero elements.+- `bip34Block` in `Network` is split into `bip34Height` and `bip34Hash`, the hash being optional. `btcRegTest` activates BIP34, BIP65 and BIP66 at height 1, as Bitcoin Core regtest does; it had the heights of Bitcoin Cash Node regtest. `bchRegTest` has the 32 MB block size of Bitcoin Cash Node.+- `arbitraryBloomFilter` generates a `BloomFilter` with random bits instead of a tuple.+- Replace the PSBT module with `Haskoin.Transaction.Psbt`, which keeps every field of a PSBT, known or not, writes maps with their keys in order as Bitcoin Core does, refuses what breaks BIP 174 (duplicate keys, keys out of shape, bytes after the last map, other versions), and reads and writes the global xpub and proprietary fields. It still creates, combines, signs, finalizes and extracts. The `Haskoin.Transaction.Partial` module and its types are gone.+- `pubKeyWitnessAddr` and `pubKeyCompatWitnessAddr` now return `Maybe Address` and refuse uncompressed keys. BIP 143 makes witness spends with uncompressed keys non-standard, so coins sent to such an address could not be spent through the normal network.+- The `WitnessAddress` and `CashAddress` constructors are now patterns that can only match. Build these addresses with `witnessAddress` and `cashAddress`, which validate the version and payload and return the dedicated constructor when one exists. Every address now has a single representation, so equal addresses compare equal.+- `outputAddress` and `scriptToAddress` no longer report the P2PKH address of the key for a pay-to-public-key output. Such coins cannot be spent with the P2PKH input script, so the address was misleading.+- `convertBits` in `Haskoin.Util.Helpers` returns `Maybe [Word]` and fails on padding bits that are not zero, or that are wide enough to hold a whole input digit, when padding is not allowed.+- JSON encoding of an address that has no text form on the given network now fails with an error instead of writing `null`.+- `mnemonicToSeed` NFKD-normalises the sentence and the passphrase, as BIP39 requires and as Trezor, Electrum, python-mnemonic and bitcoinjs do. A passphrase with accented letters used to give a seed that no other wallet derives, so the funds could not be restored elsewhere. `fromMnemonic` normalises the sentence before looking up its words. This adds a dependency on `unicode-transforms`.+- `toMnemonic` accepts 16 to 32 bytes of entropy and `fromMnemonic` accepts sentences of 12, 15, 18, 21 or 24 words, the sizes BIP39 allows. Entropy of 4 to 12 bytes and of 36 to 64 bytes, and sentences of 3 to 9 and 27 to 48 words, were accepted before, and no other wallet reads them. A word that is not in the list is reported with the `fromMnemonic:` prefix.+- `xPrvImport` and `xPubImport` require a payload of exactly 78 bytes, as Bitcoin Core does. Trailing bytes and an uncompressed public key used to be accepted. They also refuse a key at depth 0 whose parent fingerprint or index is not zero, as BIP32 test vector 5 requires.+- `fromWif` refuses strings longer than 52 characters, and `xPrvImport` and `xPubImport` strings longer than 112, before decoding them. No valid key is longer, and the time to decode Base58 grows with the square of the length.+- `prvSubKey`, `pubSubKey` and `hardSubKey` throw `DerivationException` when the parent is at depth 255. The depth of the child used to wrap around to 0.+- Parsing a derivation path reads each index as an unbounded integer and accepts decimal digits only. `m/4294967296` used to wrap around to `m/0`, and hex, parenthesised and signed numbers were accepted.+- The JSON form of `Sig` is decoded with `decodeStrictSig`, like the binary form, so a high-S signature is refused by both.+- The `Read` instances of `Hash160`, `Hash256` and `Hash512`, and `textToFingerprint`, refuse hex of the wrong length, as the string literal instances already did. A two-byte hash could be read and then crash `signHash`.+- `encodeOutput` returns `Either String Script`. It fails for a `PayMulSig` whose required count is not between 1 and its number of keys or that has more than 20 keys, and for a `PayWitness` whose version is 0 or above 16 or whose program is not 2 to 40 bytes long. Those values used to crash with an `error` call. `marshalPut` still fails with an `error` call for them, since it cannot report a failure.+- `txSigHash` and `txSigHashForkId` return `Either String Hash256`. They fail for an input index the transaction does not have. With `SIGHASH_ALL`, `txSigHash` used to return a digest over the transaction without any script code for such an index, and crash for the other hash types. `makeSignature` and `makeSigHash` return `Either` too.+- On a network with a fork id, `txSigHash` requires the `SIGHASH_FORKID` flag and `decodeTxSig` rejects a signature without it. `makeSignature` sets the flag, so `signTx bch` with a plain `sigHashAll` produces a signature the network accepts. It used to sign the legacy digest, which Bitcoin Cash has rejected since 2017.+- `isSigHashUnknown` is the test of `IsDefinedHashtypeSignature` in Bitcoin Core: after masking the `SIGHASH_ANYONECANPAY` and `SIGHASH_FORKID` bits, the hash type byte must be 1, 2 or 3. A byte such as 0x21 used to pass and be signed, although every node rejects it under `STRICTENC`.+- `opPushData` gives the minimal encoding of BIP 62: `OP_0` for the empty string, `OP_1` to `OP_16` for one byte from 1 to 16 and `OP_1NEGATE` for the byte 0x81. The empty push used to be an `OP_PUSHDATA` that serialized to the byte of `OP_0` but was not equal to it.+- `DataCarrier` holds the data of every push after `OP_RETURN`, as a list, since `TxoutType::NULL_DATA` of Bitcoin Core is `OP_RETURN` followed by any pushes. A bare `OP_RETURN`, several pushes and an empty push used to be "Non-standard output".+- `intToScriptOp` returns `Either String ScriptOp` instead of crashing outside 1 to 16. `scriptOpToInt` no longer serializes its argument, so it cannot crash on an `OP_PUSHDATA` whose payload does not fit its type.+- `sortMulSig` returns any output that is not a multisig unchanged instead of crashing.+- `decodeInput` reads the input of a pay-to-script-hash output as its redeem script requires. A multisig template with the redeem script and no signature yet, `OP_0 <redeem>`, is a `SpendMulSig []`, which `mergeTxs` used to reject. An input that does not fit its redeem script fails.+- The generators of `Haskoin.Util.Arbitrary.Script` produce pushes of every `PushDataType`, pushes that are not minimal, multisig outputs of up to 20 keys, data carriers with any number of pushes, nested witness inputs, and, on networks with a fork id, only hash types with the flag.++### Fixed++- A block whose timestamp equals the median time past of its parent is rejected, as in Bitcoin Core. It used to be accepted.+- `connectBlocks` keeps the block that was seen first as the best block when a competing block has the same work and height, as `connectBlock` and Bitcoin Core do. It used to switch the best block to every competitor.+- `calcNextWork` and `computeTarget` measure the time span of a retarget period as a signed number. A period whose last block is dated before its first block used to wrap around to four times the target timespan instead of being limited to a quarter.+- `headerWork` returns zero for bits that are negative, overflow or encode a zero target, like `GetBlockProof` in Bitcoin Core. It used to divide by zero for bits `0x03800001`.+- The block version is compared as a signed number, as in Bitcoin Core, so versions with the top bit set are rejected once BIP34 is active.+- The Bitcoin Cash difficulty algorithms follow Bitcoin Cash Node: the minimum-difficulty rule of test networks applies to the ASERT algorithm and no longer applies to the EDA and DAA algorithms on mainnet, the EDA returns the bits of the last block without minimum difficulty on test networks, `getSuitableBlock` picks the same block as Bitcoin Cash Node when timestamps are equal, `computeTarget` no longer overshoots by one, the ASERT anchor is the first block whose own median time past reaches the activation time, and regtest never retargets.+- A PSBT of another version is refused by its version. The unsigned transaction was looked for first, and a PSBT of version 2 holds none.+- `addressBytes` returned a length-prefixed value for a generic CashAddr instead of the raw hash.+- Base58, Bech32 and CashAddr decoders accepted non-ASCII look-alike characters. Base58 truncated code points to one byte and Bech32 used Unicode case folding. All three now accept ASCII only, as the specifications require.+- `cashAddrDecode` accepted mixed-case strings, which the CashAddr specification rejects.+- CashAddr decoding accepted non-canonical strings whose padding bits were not zero, or that carried an extra group of padding, so several strings could stand for the same address.+- `textToAddr` decoded Base58 input of any length, with a cost growing with the square of the length. Strings longer than any valid address are now rejected first.+- Binary deserialization of an address now validates the witness version, the CashAddr type and the payload length, and checks the length prefix before converting it to an `Int`. Previously an invalid value could be read and later crash `addressToScript`.+- The Bech32 and bit conversion accumulators are masked so that they cannot overflow on long inputs.+- `encodeOutput` had no case for `PayScript32Hash` and crashed on it, so a P2SH32 address could not be turned into a script.+- The P2WSH test generator produced P2WPKH addresses.+- `fromWif` threw an exception on a Base58Check string with an empty payload, such as `3QJmnh`, also through the JSON parser of `PrivateKey`. It returns `Nothing` now.+- The JSON parser of `PublicKey` accepted bytes after the key.+- `decodeOutput` matches the output templates on their exact bytes, as Bitcoin Core does. A script that wrote the hash of a P2PKH, P2SH, P2SH32 or witness output with `OP_PUSHDATA1` or a longer push used to decode as that output and give its address. By consensus such a script is not a P2SH or witness output at all, and anyone can spend it, so a wallet could credit a payment to its address that was not one.+- A public key pushed in a script or a witness must fill its push. A 65-byte item that starts with 0x02 or 0x03 used to parse as the 33-byte key it starts with, so `decodeOutput`, `decodeInput` and the witness decoders reported a key the script did not hold, and `verifyStdTx` accepted a P2PKH or P2WPKH spend whose key item carried 32 extra bytes, which no node accepts.+- `verifyStdInput` returns `False` for an input index the transaction does not have, and `parseExistingSigs` reads no witness signatures when the witness list is shorter than the input index. Both used to crash.+ ## [1.4.0] - 2026-10-31  ### Added

@@ -0,0 +1,1 @@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

@@ -0,0 +1,236 @@+{+ "description": "The test vectors of BIP 174: the invalid PSBTs, which hw must refuse, the valid ones, which hw must read and write back byte for byte, and the PSBTs of the walk-through of the roles (creator, updater, signer, combiner, finalizer). Copied from the BIP, which is BSD-2-Clause.",+ "source": "https://github.com/bitcoin/bips/blob/master/bip-0174.mediawiki",+ "invalid": [+  {+   "case": "Network transaction, not PSBT format",+   "hex": "0200000001268171371edff285e937adeea4b37b78000c0566cbb3ad64641713ca42171bf6000000006a473044022070b2245123e6bf474d60c5b50c043d4c691a5d2435f09a34a7662a9dc251790a022001329ca9dacf280bdf30740ec0390422422c81cb45839457aeb76fc12edd95b3012102657d118d3357b8e0f4c2cd46db7b39f6d9c38d9a70abcb9b2de5dc8dbfe4ce31feffffff02d3dff505000000001976a914d0c59903c5bac2868760e90fd521a4665aa7652088ac00e1f5050000000017a9143545e6e33b832c47050f24d3eeb93c9c03948bc787b32e1300",+   "base64": "AgAAAAEmgXE3Ht/yhek3re6ks3t4AAwFZsuzrWRkFxPKQhcb9gAAAABqRzBEAiBwsiRRI+a/R01gxbUMBD1MaRpdJDXwmjSnZiqdwlF5CgIgATKcqdrPKAvfMHQOwDkEIkIsgctFg5RXrrdvwS7dlbMBIQJlfRGNM1e44PTCzUbbezn22cONmnCry5st5dyNv+TOMf7///8C09/1BQAAAAAZdqkU0MWZA8W6woaHYOkP1SGkZlqnZSCIrADh9QUAAAAAF6kUNUXm4zuDLEcFDyTT7rk8nAOUi8eHsy4TAA=="+  },+  {+   "case": "PSBT missing outputs",+   "hex": "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",+   "base64": "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"+  },+  {+   "case": "PSBT where one input has a filled scriptSig in the unsigned tx",+   "hex": "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",+   "base64": "cHNidP8BAP0KAQIAAAACqwlJoIxa98SbghL0F+LxWrP1wz3PFTghqBOfh3pbe+QAAAAAakcwRAIgR1lmF5fAGwNrJZKJSGhiGDR9iYZLcZ4ff89X0eURZYcCIFMJ6r9Wqk2Ikf/REf3xM286KdqGbX+EhtdVRs7tr5MZASEDXNxh/HupccC1AaZGoqg7ECy0OIEhfKaC3Ibi1z+ogpL+////qwlJoIxa98SbghL0F+LxWrP1wz3PFTghqBOfh3pbe+QBAAAAAP7///8CYDvqCwAAAAAZdqkUdopAu9dAy+gdmI5x3ipNXHE5ax2IrI4kAAAAAAAAGXapFG9GILVT+glechue4O/p+gOcykWXiKwAAAAAAAABASAA4fUFAAAAABepFDVF5uM7gyxHBQ8k0+65PJwDlIvHhwEEFgAUhdE1N/LiZUBaNNuvqePdoB+4IwgAAAA="+  },+  {+   "case": "PSBT where inputs and outputs are provided but without an unsigned tx",+   "hex": "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",+   "base64": "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"+  },+  {+   "case": "PSBT with duplicate keys in an input",+   "hex": "70736274ff0100750200000001268171371edff285e937adeea4b37b78000c0566cbb3ad64641713ca42171bf60000000000feffffff02d3dff505000000001976a914d0c59903c5bac2868760e90fd521a4665aa7652088ac00e1f5050000000017a9143545e6e33b832c47050f24d3eeb93c9c03948bc787b32e1300000100fda5010100000000010289a3c71eab4d20e0371bbba4cc698fa295c9463afa2e397f8533ccb62f9567e50100000017160014be18d152a9b012039daf3da7de4f53349eecb985ffffffff86f8aa43a71dff1448893a530a7237ef6b4608bbb2dd2d0171e63aec6a4890b40100000017160014fe3e9ef1a745e974d902c4355943abcb34bd5353ffffffff0200c2eb0b000000001976a91485cff1097fd9e008bb34af709c62197b38978a4888ac72fef84e2c00000017a914339725ba21efd62ac753a9bcd067d6c7a6a39d05870247304402202712be22e0270f394f568311dc7ca9a68970b8025fdd3b240229f07f8a5f3a240220018b38d7dcd314e734c9276bd6fb40f673325bc4baa144c800d2f2f02db2765c012103d2e15674941bad4a996372cb87e1856d3652606d98562fe39c5e9e7e413f210502483045022100d12b852d85dcd961d2f5f4ab660654df6eedcc794c0c33ce5cc309ffb5fce58d022067338a8e0e1725c197fb1a88af59f51e44e4255b20167c8684031c05d1f2592a01210223b72beef0965d10be0778efecd61fcac6f79a4ea169393380734464f84f2ab30000000001003f0200000001ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000ffffffff010000000000000000036a010000000000000000",+   "base64": "cHNidP8BAHUCAAAAASaBcTce3/KF6Tet7qSze3gADAVmy7OtZGQXE8pCFxv2AAAAAAD+////AtPf9QUAAAAAGXapFNDFmQPFusKGh2DpD9UhpGZap2UgiKwA4fUFAAAAABepFDVF5uM7gyxHBQ8k0+65PJwDlIvHh7MuEwAAAQD9pQEBAAAAAAECiaPHHqtNIOA3G7ukzGmPopXJRjr6Ljl/hTPMti+VZ+UBAAAAFxYAFL4Y0VKpsBIDna89p95PUzSe7LmF/////4b4qkOnHf8USIk6UwpyN+9rRgi7st0tAXHmOuxqSJC0AQAAABcWABT+Pp7xp0XpdNkCxDVZQ6vLNL1TU/////8CAMLrCwAAAAAZdqkUhc/xCX/Z4Ai7NK9wnGIZeziXikiIrHL++E4sAAAAF6kUM5cluiHv1irHU6m80GfWx6ajnQWHAkcwRAIgJxK+IuAnDzlPVoMR3HyppolwuAJf3TskAinwf4pfOiQCIAGLONfc0xTnNMkna9b7QPZzMlvEuqFEyADS8vAtsnZcASED0uFWdJQbrUqZY3LLh+GFbTZSYG2YVi/jnF6efkE/IQUCSDBFAiEA0SuFLYXc2WHS9fSrZgZU327tzHlMDDPOXMMJ/7X85Y0CIGczio4OFyXBl/saiK9Z9R5E5CVbIBZ8hoQDHAXR8lkqASECI7cr7vCWXRC+B3jv7NYfysb3mk6haTkzgHNEZPhPKrMAAAAAAQA/AgAAAAH//////////////////////////////////////////wAAAAAA/////wEAAAAAAAAAAANqAQAAAAAAAAAA"+  },+  {+   "case": "PSBT with invalid global transaction typed key",+   "hex": "70736274ff020001550200000001279a2323a5dfb51fc45f220fa58b0fc13e1e3342792a85d7e36cd6333b5cbc390000000000ffffffff01a05aea0b000000001976a914ffe9c0061097cc3b636f2cb0460fa4fc427d2b4588ac0000000000010120955eea0b0000000017a9146345200f68d189e1adc0df1c4d16ea8f14c0dbeb87220203b1341ccba7683b6af4f1238cd6e97e7167d569fac47f1e48d47541844355bd4646304302200424b58effaaa694e1559ea5c93bbfd4a89064224055cdf070b6771469442d07021f5c8eb0fea6516d60b8acb33ad64ede60e8785bfb3aa94b99bdf86151db9a9a010104220020771fd18ad459666dd49f3d564e3dbc42f4c84774e360ada16816a8ed488d5681010547522103b1341ccba7683b6af4f1238cd6e97e7167d569fac47f1e48d47541844355bd462103de55d1e1dac805e3f8a58c1fbf9b94c02f3dbaafe127fefca4995f26f82083bd52ae220603b1341ccba7683b6af4f1238cd6e97e7167d569fac47f1e48d47541844355bd4610b4a6ba67000000800000008004000080220603de55d1e1dac805e3f8a58c1fbf9b94c02f3dbaafe127fefca4995f26f82083bd10b4a6ba670000008000000080050000800000",+   "base64": "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"+  },+  {+   "case": "PSBT with invalid input witness utxo typed key",+   "hex": "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",+   "base64": "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"+  },+  {+   "case": "PSBT with invalid pubkey length for input partial signature typed key",+   "hex": "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",+   "base64": "cHNidP8BAFUCAAAAASeaIyOl37UfxF8iD6WLD8E+HjNCeSqF1+Ns1jM7XLw5AAAAAAD/////AaBa6gsAAAAAGXapFP/pwAYQl8w7Y28ssEYPpPxCfStFiKwAAAAAAAEBIJVe6gsAAAAAF6kUY0UgD2jRieGtwN8cTRbqjxTA2+uHIQIDsTQcy6doO2r08SOM1ul+cWfVafrEfx5I1HVBhENVvUYwQwIgBCS1jv+qppThVZ6lyTu/1KiQZCJAVc3wcLZ3FGlELQcCH1yOsP6mUW1guKyzOtZO3mDoeFv7OqlLmb34YVHbmpoBAQQiACB3H9GK1FlmbdSfPVZOPbxC9MhHdONgraFoFqjtSI1WgQEFR1IhA7E0HMunaDtq9PEjjNbpfnFn1Wn6xH8eSNR1QYRDVb1GIQPeVdHh2sgF4/iljB+/m5TALz26r+En/vykmV8m+CCDvVKuIgYDsTQcy6doO2r08SOM1ul+cWfVafrEfx5I1HVBhENVvUYQtKa6ZwAAAIAAAACABAAAgCIGA95V0eHayAXj+KWMH7+blMAvPbqv4Sf+/KSZXyb4IIO9ELSmumcAAACAAAAAgAUAAIAAAA=="+  },+  {+   "case": "PSBT with invalid redeemscript typed key",+   "hex": "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",+   "base64": "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"+  },+  {+   "case": "PSBT with invalid witnessscript typed key",+   "hex": "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",+   "base64": "cHNidP8BAFUCAAAAASeaIyOl37UfxF8iD6WLD8E+HjNCeSqF1+Ns1jM7XLw5AAAAAAD/////AaBa6gsAAAAAGXapFP/pwAYQl8w7Y28ssEYPpPxCfStFiKwAAAAAAAEBIJVe6gsAAAAAF6kUY0UgD2jRieGtwN8cTRbqjxTA2+uHIgIDsTQcy6doO2r08SOM1ul+cWfVafrEfx5I1HVBhENVvUZGMEMCIAQktY7/qqaU4VWepck7v9SokGQiQFXN8HC2dxRpRC0HAh9cjrD+plFtYLisszrWTt5g6Hhb+zqpS5m9+GFR25qaAQEEIgAgdx/RitRZZm3Unz1WTj28QvTIR3TjYK2haBao7UiNVoECBQBHUiEDsTQcy6doO2r08SOM1ul+cWfVafrEfx5I1HVBhENVvUYhA95V0eHayAXj+KWMH7+blMAvPbqv4Sf+/KSZXyb4IIO9Uq4iBgOxNBzLp2g7avTxI4zW6X5xZ9Vp+sR/HkjUdUGEQ1W9RhC0prpnAAAAgAAAAIAEAACAIgYD3lXR4drIBeP4pYwfv5uUwC89uq/hJ/78pJlfJvggg70QtKa6ZwAAAIAAAACABQAAgAAA"+  },+  {+   "case": "PSBT with invalid pubkey in input BIP 32 derivation paths typed key",+   "hex": "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",+   "base64": "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"+  },+  {+   "case": "PSBT with invalid non-witness utxo typed key",+   "hex": "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",+   "base64": "cHNidP8BAJoCAAAAAljoeiG1ba8MI76OcHBFbDNvfLqlyHV5JPVFiHuyq911AAAAAAD/////g40EJ9DsZQpoqka7CwmK6kQiwHGyyng1Kgd5WdB86h0BAAAAAP////8CcKrwCAAAAAAWABTYXCtx0AYLCcmIauuBXlCZHdoSTQDh9QUAAAAAFgAUAK6pouXw+HaliN9VRuh0LR2HAI8AAAAAAAIAALsCAAAAAarXOTEBi9JfhK5AC2iEi+CdtwbqwqwYKYur7nGrZW+LAAAAAEhHMEQCIFj2/HxqM+GzFUjUgcgmwBW9MBNarULNZ3kNq2bSrSQ7AiBKHO0mBMZzW2OT5bQWkd14sA8MWUL7n3UYVvqpOBV9ugH+////AoDw+gIAAAAAF6kUD7lGNCFpa4LIM68kHHjBfdveSTSH0PIKJwEAAAAXqRQpynT4oI+BmZQoGFyXtdhS5AY/YYdlAAAAAQfaAEcwRAIgdAGK1BgAl7hzMjwAFXILNoTMgSOJEEjn282bVa1nnJkCIHPTabdA4+tT3O+jOCPIBwUUylWn3ZVE8VfBZ5EyYRGMAUgwRQIhAPYQOLMI3B2oZaNIUnRvAVdyk0IIxtJEVDk82ZvfIhd3AiAFbmdaZ1ptCgK4WxTl4pB02KJam1dgvqKBb2YZEKAG6gFHUiEClYO/Oa4KYJdHrRma3dY0+mEIVZ1sXNObTCGD8auW4H8hAtq2H/SaFNtqfQKwzR+7ePxLGDErW05U2uTbovv+9TbXUq4AAQEgAMLrCwAAAAAXqRS39fr0Dj1ApaRZsds1NfK3L6kh6IcBByMiACCMI1MXN0O1ld+0oHtyuo5C43l9p06H/n2ddJfjsgKJAwEI2gQARzBEAiBi63pVYQenxz9FrEq1od3fb3B1+xJ1lpp/OD7/94S8sgIgDAXbt0cNvy8IVX3TVscyXB7TCRPpls04QJRdsSIo2l8BRzBEAiBl9FulmYtZon/+GnvtAWrx8fkNVLOqj3RQql9WolEDvQIgf3JHA60e25ZoCyhLVtT/y4j3+3Weq74IqjDym4UTg9IBR1IhAwidwQx6xttU+RMpr2FzM9s4jOrQwjH3IzedG5kDCwLcIQI63ZBPPW3PWd25BrDe4jUpt/+57VDl6GFRkmhgIh8Oc1KuACICA6mkw39ZltOqJdusa1cK8GUDlEkpQkYLNUdT7Z7spYdxENkMak8AAACAAAAAgAQAAIAAIgICf2OZdX0u/1WhNq0CxoSxg4tlVuXxtrNCgqlLa1AFEJYQ2QxqTwAAAIAAAACABQAAgAA="+  },+  {+   "case": "PSBT with invalid final scriptsig typed key",+   "hex": "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",+   "base64": "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"+  },+  {+   "case": "PSBT with invalid final script witness typed key",+   "hex": "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",+   "base64": "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"+  },+  {+   "case": "PSBT with invalid pubkey in output BIP 32 derivation paths typed key",+   "hex": "70736274ff01009a020000000258e87a21b56daf0c23be8e7070456c336f7cbaa5c8757924f545887bb2abdd750000000000ffffffff838d0427d0ec650a68aa46bb0b098aea4422c071b2ca78352a077959d07cea1d0100000000ffffffff0270aaf00800000000160014d85c2b71d0060b09c9886aeb815e50991dda124d00e1f5050000000016001400aea9a2e5f0f876a588df5546e8742d1d87008f00000000000100bb0200000001aad73931018bd25f84ae400b68848be09db706eac2ac18298babee71ab656f8b0000000048473044022058f6fc7c6a33e1b31548d481c826c015bd30135aad42cd67790dab66d2ad243b02204a1ced2604c6735b6393e5b41691dd78b00f0c5942fb9f751856faa938157dba01feffffff0280f0fa020000000017a9140fb9463421696b82c833af241c78c17ddbde493487d0f20a270100000017a91429ca74f8a08f81999428185c97b5d852e4063f6187650000000107da00473044022074018ad4180097b873323c0015720b3684cc8123891048e7dbcd9b55ad679c99022073d369b740e3eb53dcefa33823c8070514ca55a7dd9544f157c167913261118c01483045022100f61038b308dc1da865a34852746f015772934208c6d24454393cd99bdf2217770220056e675a675a6d0a02b85b14e5e29074d8a25a9b5760bea2816f661910a006ea01475221029583bf39ae0a609747ad199addd634fa6108559d6c5cd39b4c2183f1ab96e07f2102dab61ff49a14db6a7d02b0cd1fbb78fc4b18312b5b4e54dae4dba2fbfef536d752ae0001012000c2eb0b0000000017a914b7f5faf40e3d40a5a459b1db3535f2b72fa921e8870107232200208c2353173743b595dfb4a07b72ba8e42e3797da74e87fe7d9d7497e3b20289030108da0400473044022062eb7a556107a7c73f45ac4ab5a1dddf6f7075fb1275969a7f383efff784bcb202200c05dbb7470dbf2f08557dd356c7325c1ed30913e996cd3840945db12228da5f01473044022065f45ba5998b59a27ffe1a7bed016af1f1f90d54b3aa8f7450aa5f56a25103bd02207f724703ad1edb96680b284b56d4ffcb88f7fb759eabbe08aa30f29b851383d20147522103089dc10c7ac6db54f91329af617333db388cead0c231f723379d1b99030b02dc21023add904f3d6dcf59ddb906b0dee23529b7ffb9ed50e5e86151926860221f0e7352ae00210203a9a4c37f5996d3aa25dbac6b570af0650394492942460b354753ed9eeca58710d90c6a4f000000800000008004000080002202027f6399757d2eff55a136ad02c684b1838b6556e5f1b6b34282a94b6b5005109610d90c6a4f00000080000000800500008000",+   "base64": "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"+  },+  {+   "case": "PSBT with invalid input sighash type typed key",+   "hex": "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",+   "base64": "cHNidP8BAHMCAAAAATAa6YblFqHsisW0vGVz0y+DtGXiOtdhZ9aLOOcwtNvbAAAAAAD/////AnR7AQAAAAAAF6kUA6oXrogrXQ1Usl1jEE5P/s57nqKHYEOZOwAAAAAXqRS5IbG6b3IuS/qDtlV6MTmYakLsg4cAAAAAAAEBHwDKmjsAAAAAFgAU0tlLZK4IWH7vyO6xh8YB6Tn5A3wCAwABAAAAAAEAFgAUYunpgv/zTdgjlhAxawkM0qO3R8sAAQAiACCHa62DLx0WgBXtQSMqnqZaGBXZ7xPA74dZ9ktbKyeKZQEBJVEhA7fOI6AcW0vwCmQlN836uzFbZoMyhnR471EwnSvVf4qHUa4A"+  },+  {+   "case": "PSBT with invalid output redeemScript typed key",+   "hex": "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",+   "base64": "cHNidP8BAHMCAAAAATAa6YblFqHsisW0vGVz0y+DtGXiOtdhZ9aLOOcwtNvbAAAAAAD/////AnR7AQAAAAAAF6kUA6oXrogrXQ1Usl1jEE5P/s57nqKHYEOZOwAAAAAXqRS5IbG6b3IuS/qDtlV6MTmYakLsg4cAAAAAAAEBHwDKmjsAAAAAFgAU0tlLZK4IWH7vyO6xh8YB6Tn5A3wAAgAAFgAUYunpgv/zTdgjlhAxawkM0qO3R8sAAQAiACCHa62DLx0WgBXtQSMqnqZaGBXZ7xPA74dZ9ktbKyeKZQEBJVEhA7fOI6AcW0vwCmQlN836uzFbZoMyhnR471EwnSvVf4qHUa4A"+  },+  {+   "case": "PSBT with invalid output witnessScript typed key",+   "hex": "70736274ff0100730200000001301ae986e516a1ec8ac5b4bc6573d32f83b465e23ad76167d68b38e730b4dbdb0000000000ffffffff02747b01000000000017a91403aa17ae882b5d0d54b25d63104e4ffece7b9ea2876043993b0000000017a914b921b1ba6f722e4bfa83b6557a3139986a42ec8387000000000001011f00ca9a3b00000000160014d2d94b64ae08587eefc8eeb187c601e939f9037c00010016001462e9e982fff34dd8239610316b090cd2a3b747cb000100220020876bad832f1d168015ed41232a9ea65a1815d9ef13c0ef8759f64b5b2b278a6521010025512103b7ce23a01c5b4bf00a642537cdfabb315b668332867478ef51309d06d57f8a8751ae00",+   "base64": "cHNidP8BAHMCAAAAATAa6YblFqHsisW0vGVz0y+DtGXiOtdhZ9aLOOcwtNvbAAAAAAD/////AnR7AQAAAAAAF6kUA6oXrogrXQ1Usl1jEE5P/s57nqKHYEOZOwAAAAAXqRS5IbG6b3IuS/qDtlV6MTmYakLsg4cAAAAAAAEBHwDKmjsAAAAAFgAU0tlLZK4IWH7vyO6xh8YB6Tn5A3wAAQAWABRi6emC//NN2COWEDFrCQzSo7dHywABACIAIIdrrYMvHRaAFe1BIyqeploYFdnvE8Dvh1n2S1srJ4plIQEAJVEhA7fOI6AcW0vwCmQlN836uzFbZoMyhnR471EwnQbVf4qHUa4A"+  },+  {+   "case": "PSBT with unsigned tx serialized with witness serialization format",+   "hex": "70736274ff01007802000000000101268171371edff285e937adeea4b37b78000c0566cbb3ad64641713ca42171bf60000000000feffffff02d3dff505000000001976a914d0c59903c5bac2868760e90fd521a4665aa7652088ac00e1f5050000000017a9143545e6e33b832c47050f24d3eeb93c9c03948bc78700b32e1300000100fda5010100000000010289a3c71eab4d20e0371bbba4cc698fa295c9463afa2e397f8533ccb62f9567e50100000017160014be18d152a9b012039daf3da7de4f53349eecb985ffffffff86f8aa43a71dff1448893a530a7237ef6b4608bbb2dd2d0171e63aec6a4890b40100000017160014fe3e9ef1a745e974d902c4355943abcb34bd5353ffffffff0200c2eb0b000000001976a91485cff1097fd9e008bb34af709c62197b38978a4888ac72fef84e2c00000017a914339725ba21efd62ac753a9bcd067d6c7a6a39d05870247304402202712be22e0270f394f568311dc7ca9a68970b8025fdd3b240229f07f8a5f3a240220018b38d7dcd314e734c9276bd6fb40f673325bc4baa144c800d2f2f02db2765c012103d2e15674941bad4a996372cb87e1856d3652606d98562fe39c5e9e7e413f210502483045022100d12b852d85dcd961d2f5f4ab660654df6eedcc794c0c33ce5cc309ffb5fce58d022067338a8e0e1725c197fb1a88af59f51e44e4255b20167c8684031c05d1f2592a01210223b72beef0965d10be0778efecd61fcac6f79a4ea169393380734464f84f2ab300000000000000",+   "base64": "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"+  },+  {+   "case": "PSBT with an invalid value data due to its size being not the stated size",+   "hex": "70736274ff0100337401ff0700010000000100ff01000a73317428ff0000000001ff010301000001000000000000000076010000004100090000000000",+   "base64": "cHNidP8BADN0Af8HAAEAAAABAP8BAApzMXQo/wAAAAAB/wEDAQAAAQAAAAAAAAAAdgEAAABBAAkAAAAAAA=="+  }+ ],+ "valid": [+  {+   "case": "PSBT with one P2PKH input. Outputs are empty",+   "hex": "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",+   "base64": "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"+  },+  {+   "case": "PSBT with one P2PKH input and one P2SH-P2WPKH input. First input is signed and finalized. Outputs are empty",+   "hex": "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",+   "base64": "cHNidP8BAKACAAAAAqsJSaCMWvfEm4IS9Bfi8Vqz9cM9zxU4IagTn4d6W3vkAAAAAAD+////qwlJoIxa98SbghL0F+LxWrP1wz3PFTghqBOfh3pbe+QBAAAAAP7///8CYDvqCwAAAAAZdqkUdopAu9dAy+gdmI5x3ipNXHE5ax2IrI4kAAAAAAAAGXapFG9GILVT+glechue4O/p+gOcykWXiKwAAAAAAAEHakcwRAIgR1lmF5fAGwNrJZKJSGhiGDR9iYZLcZ4ff89X0eURZYcCIFMJ6r9Wqk2Ikf/REf3xM286KdqGbX+EhtdVRs7tr5MZASEDXNxh/HupccC1AaZGoqg7ECy0OIEhfKaC3Ibi1z+ogpIAAQEgAOH1BQAAAAAXqRQ1RebjO4MsRwUPJNPuuTycA5SLx4cBBBYAFIXRNTfy4mVAWjTbr6nj3aAfuCMIAAAA"+  },+  {+   "case": "PSBT with one P2PKH input which has a non-final scriptSig and has a sighash type specified. Outputs are empty",+   "hex": "70736274ff0100750200000001268171371edff285e937adeea4b37b78000c0566cbb3ad64641713ca42171bf60000000000feffffff02d3dff505000000001976a914d0c59903c5bac2868760e90fd521a4665aa7652088ac00e1f5050000000017a9143545e6e33b832c47050f24d3eeb93c9c03948bc787b32e1300000100fda5010100000000010289a3c71eab4d20e0371bbba4cc698fa295c9463afa2e397f8533ccb62f9567e50100000017160014be18d152a9b012039daf3da7de4f53349eecb985ffffffff86f8aa43a71dff1448893a530a7237ef6b4608bbb2dd2d0171e63aec6a4890b40100000017160014fe3e9ef1a745e974d902c4355943abcb34bd5353ffffffff0200c2eb0b000000001976a91485cff1097fd9e008bb34af709c62197b38978a4888ac72fef84e2c00000017a914339725ba21efd62ac753a9bcd067d6c7a6a39d05870247304402202712be22e0270f394f568311dc7ca9a68970b8025fdd3b240229f07f8a5f3a240220018b38d7dcd314e734c9276bd6fb40f673325bc4baa144c800d2f2f02db2765c012103d2e15674941bad4a996372cb87e1856d3652606d98562fe39c5e9e7e413f210502483045022100d12b852d85dcd961d2f5f4ab660654df6eedcc794c0c33ce5cc309ffb5fce58d022067338a8e0e1725c197fb1a88af59f51e44e4255b20167c8684031c05d1f2592a01210223b72beef0965d10be0778efecd61fcac6f79a4ea169393380734464f84f2ab30000000001030401000000000000",+   "base64": "cHNidP8BAHUCAAAAASaBcTce3/KF6Tet7qSze3gADAVmy7OtZGQXE8pCFxv2AAAAAAD+////AtPf9QUAAAAAGXapFNDFmQPFusKGh2DpD9UhpGZap2UgiKwA4fUFAAAAABepFDVF5uM7gyxHBQ8k0+65PJwDlIvHh7MuEwAAAQD9pQEBAAAAAAECiaPHHqtNIOA3G7ukzGmPopXJRjr6Ljl/hTPMti+VZ+UBAAAAFxYAFL4Y0VKpsBIDna89p95PUzSe7LmF/////4b4qkOnHf8USIk6UwpyN+9rRgi7st0tAXHmOuxqSJC0AQAAABcWABT+Pp7xp0XpdNkCxDVZQ6vLNL1TU/////8CAMLrCwAAAAAZdqkUhc/xCX/Z4Ai7NK9wnGIZeziXikiIrHL++E4sAAAAF6kUM5cluiHv1irHU6m80GfWx6ajnQWHAkcwRAIgJxK+IuAnDzlPVoMR3HyppolwuAJf3TskAinwf4pfOiQCIAGLONfc0xTnNMkna9b7QPZzMlvEuqFEyADS8vAtsnZcASED0uFWdJQbrUqZY3LLh+GFbTZSYG2YVi/jnF6efkE/IQUCSDBFAiEA0SuFLYXc2WHS9fSrZgZU327tzHlMDDPOXMMJ/7X85Y0CIGczio4OFyXBl/saiK9Z9R5E5CVbIBZ8hoQDHAXR8lkqASECI7cr7vCWXRC+B3jv7NYfysb3mk6haTkzgHNEZPhPKrMAAAAAAQMEAQAAAAAAAA=="+  },+  {+   "case": "PSBT with one P2PKH input and one P2SH-P2WPKH input both with non-final scriptSigs. P2SH-P2WPKH input's redeemScript is available. Outputs filled.",+   "hex": "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",+   "base64": "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"+  },+  {+   "case": "PSBT with one P2SH-P2WSH input of a 2-of-2 multisig, redeemScript, witnessScript, and keypaths are available. Contains one signature.",+   "hex": "70736274ff0100550200000001279a2323a5dfb51fc45f220fa58b0fc13e1e3342792a85d7e36cd6333b5cbc390000000000ffffffff01a05aea0b000000001976a914ffe9c0061097cc3b636f2cb0460fa4fc427d2b4588ac0000000000010120955eea0b0000000017a9146345200f68d189e1adc0df1c4d16ea8f14c0dbeb87220203b1341ccba7683b6af4f1238cd6e97e7167d569fac47f1e48d47541844355bd4646304302200424b58effaaa694e1559ea5c93bbfd4a89064224055cdf070b6771469442d07021f5c8eb0fea6516d60b8acb33ad64ede60e8785bfb3aa94b99bdf86151db9a9a010104220020771fd18ad459666dd49f3d564e3dbc42f4c84774e360ada16816a8ed488d5681010547522103b1341ccba7683b6af4f1238cd6e97e7167d569fac47f1e48d47541844355bd462103de55d1e1dac805e3f8a58c1fbf9b94c02f3dbaafe127fefca4995f26f82083bd52ae220603b1341ccba7683b6af4f1238cd6e97e7167d569fac47f1e48d47541844355bd4610b4a6ba67000000800000008004000080220603de55d1e1dac805e3f8a58c1fbf9b94c02f3dbaafe127fefca4995f26f82083bd10b4a6ba670000008000000080050000800000",+   "base64": "cHNidP8BAFUCAAAAASeaIyOl37UfxF8iD6WLD8E+HjNCeSqF1+Ns1jM7XLw5AAAAAAD/////AaBa6gsAAAAAGXapFP/pwAYQl8w7Y28ssEYPpPxCfStFiKwAAAAAAAEBIJVe6gsAAAAAF6kUY0UgD2jRieGtwN8cTRbqjxTA2+uHIgIDsTQcy6doO2r08SOM1ul+cWfVafrEfx5I1HVBhENVvUZGMEMCIAQktY7/qqaU4VWepck7v9SokGQiQFXN8HC2dxRpRC0HAh9cjrD+plFtYLisszrWTt5g6Hhb+zqpS5m9+GFR25qaAQEEIgAgdx/RitRZZm3Unz1WTj28QvTIR3TjYK2haBao7UiNVoEBBUdSIQOxNBzLp2g7avTxI4zW6X5xZ9Vp+sR/HkjUdUGEQ1W9RiED3lXR4drIBeP4pYwfv5uUwC89uq/hJ/78pJlfJvggg71SriIGA7E0HMunaDtq9PEjjNbpfnFn1Wn6xH8eSNR1QYRDVb1GELSmumcAAACAAAAAgAQAAIAiBgPeVdHh2sgF4/iljB+/m5TALz26r+En/vykmV8m+CCDvRC0prpnAAAAgAAAAIAFAACAAAA="+  },+  {+   "case": "PSBT with one P2WSH input of a 2-of-2 multisig. witnessScript, keypaths, and global xpubs are available. Contains no signatures. Outputs filled.",+   "hex": "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",+   "base64": "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"+  },+  {+   "case": "PSBT with unknown types in the inputs.",+   "hex": "70736274ff01003f0200000001ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000ffffffff010000000000000000036a010000000000000af00102030405060708090f0102030405060708090a0b0c0d0e0f0000",+   "base64": "cHNidP8BAD8CAAAAAf//////////////////////////////////////////AAAAAAD/////AQAAAAAAAAAAA2oBAAAAAAAACvABAgMEBQYHCAkPAQIDBAUGBwgJCgsMDQ4PAAA="+  },+  {+   "case": "PSBT with `PSBT_GLOBAL_XPUB`.",+   "hex": "70736274ff01009d0100000002710ea76ab45c5cb6438e607e59cc037626981805ae9e0dfd9089012abb0be5350100000000ffffffff190994d6a8b3c8c82ccbcfb2fba4106aa06639b872a8d447465c0d42588d6d670000000000ffffffff0200e1f505000000001976a914b6bc2c0ee5655a843d79afedd0ccc3f7dd64340988ac605af405000000001600141188ef8e4ce0449eaac8fb141cbf5a1176e6a088000000004f010488b21e039e530cac800000003dbc8a5c9769f031b17e77fea1518603221a18fd18f2b9a54c6c8c1ac75cbc3502f230584b155d1c7f1cd45120a653c48d650b431b67c5b2c13f27d7142037c1691027569c503100008000000080000000800001011f00e1f5050000000016001433b982f91b28f160c920b4ab95e58ce50dda3a4a220203309680f33c7de38ea6a47cd4ecd66f1f5a49747c6ffb8808ed09039243e3ad5c47304402202d704ced830c56a909344bd742b6852dccd103e963bae92d38e75254d2bb424502202d86c437195df46c0ceda084f2a291c3da2d64070f76bf9b90b195e7ef28f77201220603309680f33c7de38ea6a47cd4ecd66f1f5a49747c6ffb8808ed09039243e3ad5c1827569c5031000080000000800000008000000000010000000001011f00e1f50500000000160014388fb944307eb77ef45197d0b0b245e079f011de220202c777161f73d0b7c72b9ee7bde650293d13f095bc7656ad1f525da5fd2e10b11047304402204cb1fb5f869c942e0e26100576125439179ae88dca8a9dc3ba08f7953988faa60220521f49ca791c27d70e273c9b14616985909361e25be274ea200d7e08827e514d01220602c777161f73d0b7c72b9ee7bde650293d13f095bc7656ad1f525da5fd2e10b1101827569c5031000080000000800000008000000000000000000000220202d20ca502ee289686d21815bd43a80637b0698e1fbcdbe4caed445f6c1a0a90ef1827569c50310000800000008000000080000000000400000000",+   "base64": "cHNidP8BAJ0BAAAAAnEOp2q0XFy2Q45gflnMA3YmmBgFrp4N/ZCJASq7C+U1AQAAAAD/////GQmU1qizyMgsy8+y+6QQaqBmObhyqNRHRlwNQliNbWcAAAAAAP////8CAOH1BQAAAAAZdqkUtrwsDuVlWoQ9ea/t0MzD991kNAmIrGBa9AUAAAAAFgAUEYjvjkzgRJ6qyPsUHL9aEXbmoIgAAAAATwEEiLIeA55TDKyAAAAAPbyKXJdp8DGxfnf+oVGGAyIaGP0Y8rmlTGyMGsdcvDUC8jBYSxVdHH8c1FEgplPEjWULQxtnxbLBPyfXFCA3wWkQJ1acUDEAAIAAAACAAAAAgAABAR8A4fUFAAAAABYAFDO5gvkbKPFgySC0q5XljOUN2jpKIgIDMJaA8zx9446mpHzU7NZvH1pJdHxv+4gI7QkDkkPjrVxHMEQCIC1wTO2DDFapCTRL10K2hS3M0QPpY7rpLTjnUlTSu0JFAiAthsQ3GV30bAztoITyopHD2i1kBw92v5uQsZXn7yj3cgEiBgMwloDzPH3jjqakfNTs1m8fWkl0fG/7iAjtCQOSQ+OtXBgnVpxQMQAAgAAAAIAAAACAAAAAAAEAAAAAAQEfAOH1BQAAAAAWABQ4j7lEMH63fvRRl9CwskXgefAR3iICAsd3Fh9z0LfHK57nveZQKT0T8JW8dlatH1Jdpf0uELEQRzBEAiBMsftfhpyULg4mEAV2ElQ5F5rojcqKncO6CPeVOYj6pgIgUh9JynkcJ9cOJzybFGFphZCTYeJb4nTqIA1+CIJ+UU0BIgYCx3cWH3PQt8crnue95lApPRPwlbx2Vq0fUl2l/S4QsRAYJ1acUDEAAIAAAACAAAAAgAAAAAAAAAAAAAAiAgLSDKUC7iiWhtIYFb1DqAY3sGmOH7zb5MrtRF9sGgqQ7xgnVpxQMQAAgAAAAIAAAACAAAAAAAQAAAAA"+  },+  {+   "case": "PSBT with global unsigned tx that has 0 inputs and 0 outputs",+   "hex": "70736274ff01000a0000000000000000000000",+   "base64": "cHNidP8BAAoAAAAAAAAAAAAAAA=="+  },+  {+   "case": "PSBT with 0 inputs",+   "hex": "70736274ff01004c020000000002d3dff505000000001976a914d0c59903c5bac2868760e90fd521a4665aa7652088ac00e1f5050000000017a9143545e6e33b832c47050f24d3eeb93c9c03948bc787b32e1300000000",+   "base64": "cHNidP8BAEwCAAAAAALT3/UFAAAAABl2qRTQxZkDxbrChodg6Q/VIaRmWqdlIIisAOH1BQAAAAAXqRQ1RebjO4MsRwUPJNPuuTycA5SLx4ezLhMAAAAA"+  },+  {+   "case": "A Witness UTXO is provided for a non-witness input",+   "hex": "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",+   "base64": "cHNidP8BAKACAAAAAqsJSaCMWvfEm4IS9Bfi8Vqz9cM9zxU4IagTn4d6W3vkAAAAAAD+////qwlJoIxa98SbghL0F+LxWrP1wz3PFTghqBOfh3pbe+QBAAAAAP7///8CYDvqCwAAAAAZdqkUdopAu9dAy+gdmI5x3ipNXHE5ax2IrI4kAAAAAAAAGXapFG9GILVT+glechue4O/p+gOcykWXiKwAAAAAAAEBItPf9QUAAAAAGXapFNSO0xELlAFMsRS9Mtb00GbcdCVriKwAAQEgAOH1BQAAAAAXqRQ1RebjO4MsRwUPJNPuuTycA5SLx4cBBBYAFIXRNTfy4mVAWjTbr6nj3aAfuCMIACICAurVlmh8qAYEPtw94RbN8p1eklfBls0FXPaYyNAr8k6ZELSmumcAAACAAAAAgAIAAIAAIgIDlPYr6d8ZlSxVh3aK63aYBhrSxKJciU9H2MFitNchPQUQtKa6ZwAAAIABAACAAgAAgAA="+  },+  {+   "case": "redeemScript with non-witness UTXO does not match the scriptPubKey",+   "hex": "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",+   "base64": "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"+  },+  {+   "case": "redeemScript with witness UTXO does not match the scriptPubKey",+   "hex": "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",+   "base64": "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"+  },+  {+   "case": "witnessScript with witness UTXO does not match the redeemScript",+   "hex": "70736274ff01009a020000000258e87a21b56daf0c23be8e7070456c336f7cbaa5c8757924f545887bb2abdd750000000000ffffffff838d0427d0ec650a68aa46bb0b098aea4422c071b2ca78352a077959d07cea1d0100000000ffffffff0270aaf00800000000160014d85c2b71d0060b09c9886aeb815e50991dda124d00e1f5050000000016001400aea9a2e5f0f876a588df5546e8742d1d87008f00000000000100bb0200000001aad73931018bd25f84ae400b68848be09db706eac2ac18298babee71ab656f8b0000000048473044022058f6fc7c6a33e1b31548d481c826c015bd30135aad42cd67790dab66d2ad243b02204a1ced2604c6735b6393e5b41691dd78b00f0c5942fb9f751856faa938157dba01feffffff0280f0fa020000000017a9140fb9463421696b82c833af241c78c17ddbde493487d0f20a270100000017a91429ca74f8a08f81999428185c97b5d852e4063f618765000000220202dab61ff49a14db6a7d02b0cd1fbb78fc4b18312b5b4e54dae4dba2fbfef536d7483045022100f61038b308dc1da865a34852746f015772934208c6d24454393cd99bdf2217770220056e675a675a6d0a02b85b14e5e29074d8a25a9b5760bea2816f661910a006ea01010304010000000104475221029583bf39ae0a609747ad199addd634fa6108559d6c5cd39b4c2183f1ab96e07f2102dab61ff49a14db6a7d02b0cd1fbb78fc4b18312b5b4e54dae4dba2fbfef536d752ae2206029583bf39ae0a609747ad199addd634fa6108559d6c5cd39b4c2183f1ab96e07f10d90c6a4f000000800000008000000080220602dab61ff49a14db6a7d02b0cd1fbb78fc4b18312b5b4e54dae4dba2fbfef536d710d90c6a4f0000008000000080010000800001012000c2eb0b0000000017a914b7f5faf40e3d40a5a459b1db3535f2b72fa921e8872202023add904f3d6dcf59ddb906b0dee23529b7ffb9ed50e5e86151926860221f0e73473044022065f45ba5998b59a27ffe1a7bed016af1f1f90d54b3aa8f7450aa5f56a25103bd02207f724703ad1edb96680b284b56d4ffcb88f7fb759eabbe08aa30f29b851383d2010103040100000001042200208c2353173743b595dfb4a07b72ba8e42e3797da74e87fe7d9d7497e3b2028903010547522103089dc10c7ac6db54f91329af617333db388cead0c231f723379d1b99030b02dc21023add904f3d6dcf59ddb906b0dee23529b7ffb9ed50e5e86151926860221f0e7352ad2206023add904f3d6dcf59ddb906b0dee23529b7ffb9ed50e5e86151926860221f0e7310d90c6a4f000000800000008003000080220603089dc10c7ac6db54f91329af617333db388cead0c231f723379d1b99030b02dc10d90c6a4f00000080000000800200008000220203a9a4c37f5996d3aa25dbac6b570af0650394492942460b354753ed9eeca5877110d90c6a4f000000800000008004000080002202027f6399757d2eff55a136ad02c684b1838b6556e5f1b6b34282a94b6b5005109610d90c6a4f00000080000000800500008000",+   "base64": "cHNidP8BAJoCAAAAAljoeiG1ba8MI76OcHBFbDNvfLqlyHV5JPVFiHuyq911AAAAAAD/////g40EJ9DsZQpoqka7CwmK6kQiwHGyyng1Kgd5WdB86h0BAAAAAP////8CcKrwCAAAAAAWABTYXCtx0AYLCcmIauuBXlCZHdoSTQDh9QUAAAAAFgAUAK6pouXw+HaliN9VRuh0LR2HAI8AAAAAAAEAuwIAAAABqtc5MQGL0l+ErkALaISL4J23BurCrBgpi6vucatlb4sAAAAASEcwRAIgWPb8fGoz4bMVSNSByCbAFb0wE1qtQs1neQ2rZtKtJDsCIEoc7SYExnNbY5PltBaR3XiwDwxZQvufdRhW+qk4FX26Af7///8CgPD6AgAAAAAXqRQPuUY0IWlrgsgzryQceMF9295JNIfQ8gonAQAAABepFCnKdPigj4GZlCgYXJe12FLkBj9hh2UAAAAiAgLath/0mhTban0CsM0fu3j8SxgxK1tOVNrk26L7/vU210gwRQIhAPYQOLMI3B2oZaNIUnRvAVdyk0IIxtJEVDk82ZvfIhd3AiAFbmdaZ1ptCgK4WxTl4pB02KJam1dgvqKBb2YZEKAG6gEBAwQBAAAAAQRHUiEClYO/Oa4KYJdHrRma3dY0+mEIVZ1sXNObTCGD8auW4H8hAtq2H/SaFNtqfQKwzR+7ePxLGDErW05U2uTbovv+9TbXUq4iBgKVg785rgpgl0etGZrd1jT6YQhVnWxc05tMIYPxq5bgfxDZDGpPAAAAgAAAAIAAAACAIgYC2rYf9JoU22p9ArDNH7t4/EsYMStbTlTa5Nui+/71NtcQ2QxqTwAAAIAAAACAAQAAgAABASAAwusLAAAAABepFLf1+vQOPUClpFmx2zU18rcvqSHohyICAjrdkE89bc9Z3bkGsN7iNSm3/7ntUOXoYVGSaGAiHw5zRzBEAiBl9FulmYtZon/+GnvtAWrx8fkNVLOqj3RQql9WolEDvQIgf3JHA60e25ZoCyhLVtT/y4j3+3Weq74IqjDym4UTg9IBAQMEAQAAAAEEIgAgjCNTFzdDtZXftKB7crqOQuN5fadOh/59nXSX47ICiQMBBUdSIQMIncEMesbbVPkTKa9hczPbOIzq0MIx9yM3nRuZAwsC3CECOt2QTz1tz1nduQaw3uI1Kbf/ue1Q5ehhUZJoYCIfDnNSrSIGAjrdkE89bc9Z3bkGsN7iNSm3/7ntUOXoYVGSaGAiHw5zENkMak8AAACAAAAAgAMAAIAiBgMIncEMesbbVPkTKa9hczPbOIzq0MIx9yM3nRuZAwsC3BDZDGpPAAAAgAAAAIACAACAACICA6mkw39ZltOqJdusa1cK8GUDlEkpQkYLNUdT7Z7spYdxENkMak8AAACAAAAAgAQAAIAAIgICf2OZdX0u/1WhNq0CxoSxg4tlVuXxtrNCgqlLa1AFEJYQ2QxqTwAAAIAAAACABQAAgAA="+  }+ ],+ "roles": [+  {+   "case": "The creator's PSBT",+   "hex": "70736274ff01009a020000000258e87a21b56daf0c23be8e7070456c336f7cbaa5c8757924f545887bb2abdd750000000000ffffffff838d0427d0ec650a68aa46bb0b098aea4422c071b2ca78352a077959d07cea1d0100000000ffffffff0270aaf00800000000160014d85c2b71d0060b09c9886aeb815e50991dda124d00e1f5050000000016001400aea9a2e5f0f876a588df5546e8742d1d87008f000000000000000000"+  },+  {+   "case": "The updater's PSBT, with the previous transactions, scripts and derivations",+   "hex": "70736274ff01009a020000000258e87a21b56daf0c23be8e7070456c336f7cbaa5c8757924f545887bb2abdd750000000000ffffffff838d0427d0ec650a68aa46bb0b098aea4422c071b2ca78352a077959d07cea1d0100000000ffffffff0270aaf00800000000160014d85c2b71d0060b09c9886aeb815e50991dda124d00e1f5050000000016001400aea9a2e5f0f876a588df5546e8742d1d87008f00000000000100bb0200000001aad73931018bd25f84ae400b68848be09db706eac2ac18298babee71ab656f8b0000000048473044022058f6fc7c6a33e1b31548d481c826c015bd30135aad42cd67790dab66d2ad243b02204a1ced2604c6735b6393e5b41691dd78b00f0c5942fb9f751856faa938157dba01feffffff0280f0fa020000000017a9140fb9463421696b82c833af241c78c17ddbde493487d0f20a270100000017a91429ca74f8a08f81999428185c97b5d852e4063f6187650000000104475221029583bf39ae0a609747ad199addd634fa6108559d6c5cd39b4c2183f1ab96e07f2102dab61ff49a14db6a7d02b0cd1fbb78fc4b18312b5b4e54dae4dba2fbfef536d752ae2206029583bf39ae0a609747ad199addd634fa6108559d6c5cd39b4c2183f1ab96e07f10d90c6a4f000000800000008000000080220602dab61ff49a14db6a7d02b0cd1fbb78fc4b18312b5b4e54dae4dba2fbfef536d710d90c6a4f0000008000000080010000800001012000c2eb0b0000000017a914b7f5faf40e3d40a5a459b1db3535f2b72fa921e88701042200208c2353173743b595dfb4a07b72ba8e42e3797da74e87fe7d9d7497e3b2028903010547522103089dc10c7ac6db54f91329af617333db388cead0c231f723379d1b99030b02dc21023add904f3d6dcf59ddb906b0dee23529b7ffb9ed50e5e86151926860221f0e7352ae2206023add904f3d6dcf59ddb906b0dee23529b7ffb9ed50e5e86151926860221f0e7310d90c6a4f000000800000008003000080220603089dc10c7ac6db54f91329af617333db388cead0c231f723379d1b99030b02dc10d90c6a4f00000080000000800200008000220203a9a4c37f5996d3aa25dbac6b570af0650394492942460b354753ed9eeca5877110d90c6a4f000000800000008004000080002202027f6399757d2eff55a136ad02c684b1838b6556e5f1b6b34282a94b6b5005109610d90c6a4f00000080000000800500008000"+  },+  {+   "case": "The updater's PSBT with SIGHASH_ALL on every input",+   "hex": "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"+  },+  {+   "case": "The PSBT signed with the keys m/0'/0'/0' and m/0'/0'/2'",+   "hex": "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"+  },+  {+   "case": "The PSBT signed with the keys m/0'/0'/1' and m/0'/0'/3'",+   "hex": "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"+  },+  {+   "case": "The combiner's PSBT of the two signed ones",+   "hex": "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"+  },+  {+   "case": "The finalizer's PSBT",+   "hex": "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"+  },+  {+   "case": "A PSBT with unknown key-value pairs, the first",+   "hex": "70736274ff01003f0200000001ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000ffffffff010000000000000000036a0100000000000af00102030405060708090f0102030405060708090a0b0c0d0e0f000af00102030405060708090f0102030405060708090a0b0c0d0e0f000af00102030405060708090f0102030405060708090a0b0c0d0e0f00"+  },+  {+   "case": "A PSBT with unknown key-value pairs, the second",+   "hex": "70736274ff01003f0200000001ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000ffffffff010000000000000000036a0100000000000af00102030405060708100f0102030405060708090a0b0c0d0e0f000af00102030405060708100f0102030405060708090a0b0c0d0e0f000af00102030405060708100f0102030405060708090a0b0c0d0e0f00"+  },+  {+   "case": "The combiner's PSBT of the two with unknown pairs, its keys in lexicographic order",+   "hex": "70736274ff01003f0200000001ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000ffffffff010000000000000000036a0100000000000af00102030405060708090f0102030405060708090a0b0c0d0e0f0af00102030405060708100f0102030405060708090a0b0c0d0e0f000af00102030405060708090f0102030405060708090a0b0c0d0e0f0af00102030405060708100f0102030405060708090a0b0c0d0e0f000af00102030405060708090f0102030405060708090a0b0c0d0e0f0af00102030405060708100f0102030405060708090a0b0c0d0e0f00"+  },+  {+   "case": "A PSBT to combine, the first",+   "hex": "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"+  },+  {+   "case": "A PSBT to combine, the second",+   "hex": "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"+  },+  {+   "case": "The combiner's PSBT of those two",+   "hex": "70736274ff01009a020000000258e87a21b56daf0c23be8e7070456c336f7cbaa5c8757924f545887bb2abdd750000000000ffffffff838d0427d0ec650a68aa46bb0b098aea4422c071b2ca78352a077959d07cea1d0100000000ffffffff0270aaf00800000000160014d85c2b71d0060b09c9886aeb815e50991dda124d00e1f5050000000016001400aea9a2e5f0f876a588df5546e8742d1d87008f00000000000100bb0200000001aad73931018bd25f84ae400b68848be09db706eac2ac18298babee71ab656f8b0000000048473044022058f6fc7c6a33e1b31548d481c826c015bd30135aad42cd67790dab66d2ad243b02204a1ced2604c6735b6393e5b41691dd78b00f0c5942fb9f751856faa938157dba01feffffff0280f0fa020000000017a9140fb9463421696b82c833af241c78c17ddbde493487d0f20a270100000017a91429ca74f8a08f81999428185c97b5d852e4063f6187650000002202029583bf39ae0a609747ad199addd634fa6108559d6c5cd39b4c2183f1ab96e07f473044022038bf34353f6c65bd4043eab7eac2fdd3c14cc7b62dad6c28bfa9989526ab375a0220097bcc5719f9aa7e3354a69f6839631b1c594f88c8bb119dcda68ec310159cec81010304810000000104475221029583bf39ae0a609747ad199addd634fa6108559d6c5cd39b4c2183f1ab96e07f2102dab61ff49a14db6a7d02b0cd1fbb78fc4b18312b5b4e54dae4dba2fbfef536d752ae2206029583bf39ae0a609747ad199addd634fa6108559d6c5cd39b4c2183f1ab96e07f10d90c6a4f000000800000008000000080220602dab61ff49a14db6a7d02b0cd1fbb78fc4b18312b5b4e54dae4dba2fbfef536d710d90c6a4f0000008000000080010000800001012000c2eb0b0000000017a914b7f5faf40e3d40a5a459b1db3535f2b72fa921e887220203089dc10c7ac6db54f91329af617333db388cead0c231f723379d1b99030b02dc473044022001cb78fed0c015af295785eddd0fcf7f2145d1f580164820e61cb568f8fe843f02205bcf90d39fc9224477422e9c2f96aca8f566915cefa4ecd4e5c52a99b5889291810103048100000001042200208c2353173743b595dfb4a07b72ba8e42e3797da74e87fe7d9d7497e3b2028903010547522103089dc10c7ac6db54f91329af617333db388cead0c231f723379d1b99030b02dc21023add904f3d6dcf59ddb906b0dee23529b7ffb9ed50e5e86151926860221f0e7352ae2206023add904f3d6dcf59ddb906b0dee23529b7ffb9ed50e5e86151926860221f0e7310d90c6a4f000000800000008003000080220603089dc10c7ac6db54f91329af617333db388cead0c231f723379d1b99030b02dc10d90c6a4f00000080000000800200008000220203a9a4c37f5996d3aa25dbac6b570af0650394492942460b354753ed9eeca5877110d90c6a4f000000800000008004000080002202027f6399757d2eff55a136ad02c684b1838b6556e5f1b6b34282a94b6b5005109610d90c6a4f00000080000000800500008000"+  }+ ],+ "extracted": {+  "case": "The transaction the extractor gives for the finalizer's PSBT",+  "hex": "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"+ }+}

@@ -0,0 +1,258 @@+{+ "invalid": [+  {+   "case": "PSBTv0 but with PSBT_GLOBAL_VERSION set to 2",+   "hex": "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",+   "base64": "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"+  },+  {+   "case": "PSBTv0 but with PSBT_GLOBAL_TX_VERSION",+   "hex": "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",+   "base64": "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"+  },+  {+   "case": "PSBTv0 but with PSBT_GLOBAL_FALLBACK_LOCKTIME",+   "hex": "70736274ff01007102000000010b0ad921419c1c8719735d72dc739f9ea9e0638d1fe4c1eef0f9944084815fc80000000000feffffff020008af2f00000000160014c430f64c4756da310dbd1a085572ef299926272c8bbdeb0b00000000160014a07dac8ab6ca942d379ed795f835ba71c9cc68850000000001030402000000000100520200000001c1aa256e214b96a1822f93de42bff3b5f3ff8d0519306e3515d7515a5e805b120000000000ffffffff0118c69a3b00000000160014b0a3af144208412693ca7d166852b52db0aef06e0000000001011f18c69a3b00000000160014b0a3af144208412693ca7d166852b52db0aef06e01086b02473044022005275a485734e0ae1f3b971237586f0e72dc85833d278c0e474cd23112c0fa5e02206b048c83cebc3c41d0b93cc7da76185cedbd030d005b08018be2b98bbacbdf7b012103760dcca05f3997dc65b293060f7f29f1514c8c527048e12802b041d4fc340a2700220202d601f84846a6755f776be00e3d9de8fb10acc935fb83c45fb0162d4cad5ab79218f69d873e540000800100008000000080000000002a000000002202036efe2c255621986553ba9d65c3ddc64165ca1436e05aa35a4c6eb02451cf796d18f69d873e540000800100008000000080010000006200000000",+   "base64": "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"+  },+  {+   "case": "PSBTv0 but with PSBT_GLOBAL_INPUT_COUNT",+   "hex": "70736274ff01007102000000010b0ad921419c1c8719735d72dc739f9ea9e0638d1fe4c1eef0f9944084815fc80000000000feffffff020008af2f00000000160014c430f64c4756da310dbd1a085572ef299926272c8bbdeb0b00000000160014a07dac8ab6ca942d379ed795f835ba71c9cc68850000000001040102000100520200000001c1aa256e214b96a1822f93de42bff3b5f3ff8d0519306e3515d7515a5e805b120000000000ffffffff0118c69a3b00000000160014b0a3af144208412693ca7d166852b52db0aef06e0000000001011f18c69a3b00000000160014b0a3af144208412693ca7d166852b52db0aef06e01086b02473044022005275a485734e0ae1f3b971237586f0e72dc85833d278c0e474cd23112c0fa5e02206b048c83cebc3c41d0b93cc7da76185cedbd030d005b08018be2b98bbacbdf7b012103760dcca05f3997dc65b293060f7f29f1514c8c527048e12802b041d4fc340a2700220202d601f84846a6755f776be00e3d9de8fb10acc935fb83c45fb0162d4cad5ab79218f69d873e540000800100008000000080000000002a000000002202036efe2c255621986553ba9d65c3ddc64165ca1436e05aa35a4c6eb02451cf796d18f69d873e540000800100008000000080010000006200000000",+   "base64": "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"+  },+  {+   "case": "PSBTv0 but with PSBT_GLOBAL_OUTPUT_COUNT",+   "hex": "70736274ff01007102000000010b0ad921419c1c8719735d72dc739f9ea9e0638d1fe4c1eef0f9944084815fc80000000000feffffff020008af2f00000000160014c430f64c4756da310dbd1a085572ef299926272c8bbdeb0b00000000160014a07dac8ab6ca942d379ed795f835ba71c9cc68850000000001050102000100520200000001c1aa256e214b96a1822f93de42bff3b5f3ff8d0519306e3515d7515a5e805b120000000000ffffffff0118c69a3b00000000160014b0a3af144208412693ca7d166852b52db0aef06e0000000001011f18c69a3b00000000160014b0a3af144208412693ca7d166852b52db0aef06e01086b02473044022005275a485734e0ae1f3b971237586f0e72dc85833d278c0e474cd23112c0fa5e02206b048c83cebc3c41d0b93cc7da76185cedbd030d005b08018be2b98bbacbdf7b012103760dcca05f3997dc65b293060f7f29f1514c8c527048e12802b041d4fc340a2700220202d601f84846a6755f776be00e3d9de8fb10acc935fb83c45fb0162d4cad5ab79218f69d873e540000800100008000000080000000002a000000002202036efe2c255621986553ba9d65c3ddc64165ca1436e05aa35a4c6eb02451cf796d18f69d873e540000800100008000000080010000006200000000",+   "base64": "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"+  },+  {+   "case": "PSBTv0 but with PSBT_GLOBAL_TX_MODIFIABLE",+   "hex": "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",+   "base64": "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"+  },+  {+   "case": "PSBTv0 but with PSBT_IN_PREVIOUS_TXID",+   "hex": "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",+   "base64": "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"+  },+  {+   "case": "PSBTv0 but with PSBT_IN_OUTPUT_INDEX",+   "hex": "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",+   "base64": "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"+  },+  {+   "case": "PSBTv0 but with PSBT_IN_SEQUENCE",+   "hex": "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",+   "base64": "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"+  },+  {+   "case": "PSBTv0 but with PSBT_IN_REQUIRED_TIME_LOCKTIME",+   "hex": "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",+   "base64": "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"+  },+  {+   "case": "PSBTv0 but with PSBT_IN_REQUIRED_HEIGHT_LOCKTIME",+   "hex": "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",+   "base64": "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"+  },+  {+   "case": "PSBTv0 but with PSBT_OUT_AMOUNT",+   "hex": "70736274ff01007102000000010b0ad921419c1c8719735d72dc739f9ea9e0638d1fe4c1eef0f9944084815fc80000000000feffffff020008af2f00000000160014c430f64c4756da310dbd1a085572ef299926272c8bbdeb0b00000000160014a07dac8ab6ca942d379ed795f835ba71c9cc688500000000000100520200000001c1aa256e214b96a1822f93de42bff3b5f3ff8d0519306e3515d7515a5e805b120000000000ffffffff0118c69a3b00000000160014b0a3af144208412693ca7d166852b52db0aef06e0000000001011f18c69a3b00000000160014b0a3af144208412693ca7d166852b52db0aef06e01086b02473044022005275a485734e0ae1f3b971237586f0e72dc85833d278c0e474cd23112c0fa5e02206b048c83cebc3c41d0b93cc7da76185cedbd030d005b08018be2b98bbacbdf7b012103760dcca05f3997dc65b293060f7f29f1514c8c527048e12802b041d4fc340a2700220202d601f84846a6755f776be00e3d9de8fb10acc935fb83c45fb0162d4cad5ab79218f69d873e540000800100008000000080000000002a0000000103080008af2f00000000002202036efe2c255621986553ba9d65c3ddc64165ca1436e05aa35a4c6eb02451cf796d18f69d873e540000800100008000000080010000006200000000",+   "base64": "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"+  },+  {+   "case": "PSBTv0 but with PSBT_OUT_SCRIPT",+   "hex": "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",+   "base64": "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"+  },+  {+   "case": "PSBTv2 but with PSBT_GLOBAL_UNSIGNED_TX",+   "hex": "70736274ff0100520200000001c1aa256e214b96a1822f93de42bff3b5f3ff8d0519306e3515d7515a5e805b120000000000ffffffff0118c69a3b00000000160014b0a3af144208412693ca7d166852b52db0aef06e00000000010204020000000103040000000001040101010501020106010701fb0402000000000100520200000001c1aa256e214b96a1822f93de42bff3b5f3ff8d0519306e3515d7515a5e805b120000000000ffffffff0118c69a3b00000000160014b0a3af144208412693ca7d166852b52db0aef06e0000000001011f18c69a3b00000000160014b0a3af144208412693ca7d166852b52db0aef06e010e200b0ad921419c1c8719735d72dc739f9ea9e0638d1fe4c1eef0f9944084815fc8010f0400000000011004feffffff0111048c8dc4620112041027000000220202d601f84846a6755f776be00e3d9de8fb10acc935fb83c45fb0162d4cad5ab79218f69d873e540000800100008000000080000000002a0000000103080008af2f000000000104160014c430f64c4756da310dbd1a085572ef299926272c00220202e36fbff53dd534070cf8fd396614680f357a9b85db7340bf1cfa745d2ad7b34018f69d873e54000080010000800000008001000000640000000103088bbdeb0b0000000001041600144dd193ac964a56ac1b9e1cca8454fe2f474f851300",+   "base64": "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"+  },+  {+   "case": "PSBTv2 missing PSBT_GLOBAL_INPUT_COUNT",+   "hex": "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",+   "base64": "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"+  },+  {+   "case": "PSBTv2 missing PSBT_GLOBAL_OUTPUT_COUNT",+   "hex": "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",+   "base64": "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"+  },+  {+   "case": "PSBTv2 missing PSBT_GLOBAL_TX_VERSION",+   "hex": "70736274ff010401010105010201fb040200000000010e200b0ad921419c1c8719735d72dc739f9ea9e0638d1fe4c1eef0f9944084815fc8010f0400000000000103080008af2f000000000104160014c430f64c4756da310dbd1a085572ef299926272c000103088bbdeb0b0000000001041600144dd193ac964a56ac1b9e1cca8454fe2f474f851300",+   "base64": "cHNidP8BBAEBAQUBAgH7BAIAAAAAAQ4gCwrZIUGcHIcZc11y3HOfnqngY40f5MHu8PmUQISBX8gBDwQAAAAAAAEDCAAIry8AAAAAAQQWABTEMPZMR1baMQ29GghVcu8pmSYnLAABAwiLvesLAAAAAAEEFgAUTdGTrJZKVqwbnhzKhFT+L0dPhRMA"+  },+  {+   "case": "PSBTv2 missing PSBT_IN_PREVIOUS_TXID",+   "hex": "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",+   "base64": "cHNidP8BAgQCAAAAAQMEAAAAAAEEAQEBBQECAfsEAgAAAAABAFICAAAAAcGqJW4hS5ahgi+T3kK/87Xz/40FGTBuNRXXUVpegFsSAAAAAAD/////ARjGmjsAAAAAFgAUsKOvFEIIQSaTyn0WaFK1LbCu8G4AAAAAAQEfGMaaOwAAAAAWABSwo68UQghBJpPKfRZoUrUtsK7wbgEPBAAAAAABEAT+////ACICAtYB+EhGpnVfd2vgDj2d6PsQrMk1+4PEX7AWLUytWreSGPadhz5UAACAAQAAgAAAAIAAAAAAKgAAAAEDCAAIry8AAAAAAQQWABTEMPZMR1baMQ29GghVcu8pmSYnLAAiAgLjb7/1PdU0Bwz4/TlmFGgPNXqbhdtzQL8c+nRdKtezQBj2nYc+VAAAgAEAAIAAAACAAQAAAGQAAAABAwiLvesLAAAAAAEEFgAUTdGTrJZKVqwbnhzKhFT+L0dPhRMA"+  },+  {+   "case": "PSBTv2 missing PSBT_IN_OUTPUT_INDEX",+   "hex": "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",+   "base64": "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"+  },+  {+   "case": "PSBTv2 missing PSBT_OUT_AMOUNT",+   "hex": "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",+   "base64": "cHNidP8BAgQCAAAAAQMEAAAAAAEEAQEBBQECAfsEAgAAAAABAFICAAAAAcGqJW4hS5ahgi+T3kK/87Xz/40FGTBuNRXXUVpegFsSAAAAAAD/////ARjGmjsAAAAAFgAUsKOvFEIIQSaTyn0WaFK1LbCu8G4AAAAAAQEfGMaaOwAAAAAWABSwo68UQghBJpPKfRZoUrUtsK7wbgEOIAsK2SFBnByHGXNdctxzn56p4GONH+TB7vD5lECEgV/IAQ8EAAAAAAEQBP7///8AIgIC1gH4SEamdV93a+AOPZ3o+xCsyTX7g8RfsBYtTK1at5IY9p2HPlQAAIABAACAAAAAgAAAAAAqAAAAAQQWABTEMPZMR1baMQ29GghVcu8pmSYnLAAiAgLjb7/1PdU0Bwz4/TlmFGgPNXqbhdtzQL8c+nRdKtezQBj2nYc+VAAAgAEAAIAAAACAAQAAAGQAAAABAwiLvesLAAAAAAEEFgAUTdGTrJZKVqwbnhzKhFT+L0dPhRMA"+  },+  {+   "case": "PSBTv2 missing PSBT_OUT_SCRIPT",+   "hex": "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",+   "base64": "cHNidP8BAgQCAAAAAQMEAAAAAAEEAQEBBQECAfsEAgAAAAABAFICAAAAAcGqJW4hS5ahgi+T3kK/87Xz/40FGTBuNRXXUVpegFsSAAAAAAD/////ARjGmjsAAAAAFgAUsKOvFEIIQSaTyn0WaFK1LbCu8G4AAAAAAQEfGMaaOwAAAAAWABSwo68UQghBJpPKfRZoUrUtsK7wbgEOIAsK2SFBnByHGXNdctxzn56p4GONH+TB7vD5lECEgV/IAQ8EAAAAAAEQBP7///8AIgIC1gH4SEamdV93a+AOPZ3o+xCsyTX7g8RfsBYtTK1at5IY9p2HPlQAAIABAACAAAAAgAAAAAAqAAAAAQMIAAivLwAAAAAAIgIC42+/9T3VNAcM+P05ZhRoDzV6m4Xbc0C/HPp0XSrXs0AY9p2HPlQAAIABAACAAAAAgAEAAABkAAAAAQMIi73rCwAAAAABBBYAFE3Rk6yWSlasG54cyoRU/i9HT4UTAA=="+  },+  {+   "case": "PSBTv2 with PSBT_IN_REQUIRED_TIME_LOCKTIME less than 500000000",+   "hex": "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",+   "base64": "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"+  },+  {+   "case": "PSBTv2 with PSBT_IN_REQUIRED_HEIGHT_LOCKTIME greater than or equal to 500000000",+   "hex": "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",+   "base64": "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"+  },+  {+   "case": "PSBTv2 with PSBT_IN_REQUIRED_HEIGHT_LOCKTIME of 0",+   "hex": "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",+   "base64": "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"+  }+ ],+ "valid": [+  {+   "case": "1 input, 2 output PSBTv2, required fields only",+   "hex": "70736274ff01020402000000010401010105010201fb040200000000010e200b0ad921419c1c8719735d72dc739f9ea9e0638d1fe4c1eef0f9944084815fc8010f0400000000000103080008af2f000000000104160014c430f64c4756da310dbd1a085572ef299926272c000103088bbdeb0b0000000001041600144dd193ac964a56ac1b9e1cca8454fe2f474f851300",+   "base64": "cHNidP8BAgQCAAAAAQQBAQEFAQIB+wQCAAAAAAEOIAsK2SFBnByHGXNdctxzn56p4GONH+TB7vD5lECEgV/IAQ8EAAAAAAABAwgACK8vAAAAAAEEFgAUxDD2TEdW2jENvRoIVXLvKZkmJywAAQMIi73rCwAAAAABBBYAFE3Rk6yWSlasG54cyoRU/i9HT4UTAA=="+  },+  {+   "case": "1 input, 2 output updated PSBTv2",+   "hex": "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",+   "base64": "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"+  },+  {+   "case": "1 input, 2 output updated PSBTv2, with PSBT_IN_SEQUENCE",+   "hex": "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",+   "base64": "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"+  },+  {+   "case": "1 input, 2 output updated PSBTv2, with PSBT_IN_SEQUENCE, and all locktime fields",+   "hex": "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",+   "base64": "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"+  },+  {+   "case": "1 input, 2 output updated PSBTv2, with Inputs Modifiable Flag (bit 0) of PSBT_GLOBAL_TX_MODIFIABLE set",+   "hex": "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",+   "base64": "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"+  },+  {+   "case": "1 input, 2 output updated PSBTv2, with Outputs Modifiable Flag (bit 1) of PSBT_GLOBAL_TX_MODIFIABLE set",+   "hex": "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",+   "base64": "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"+  },+  {+   "case": "1 input, 2 output updated PSBTv2, with Has SIGHASH_SINGLE Flag (bit 2) of PSBT_GLOBAL_TX_MODIFIABLE set",+   "hex": "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",+   "base64": "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"+  },+  {+   "case": "1 input, 2 output updated PSBTv2, with an undefined flag (bit 3) of PSBT_GLOBAL_TX_MODIFIABLE set",+   "hex": "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",+   "base64": "cHNidP8BAgQCAAAAAQQBAQEFAQIBBgEIAfsEAgAAAAABAFICAAAAAcGqJW4hS5ahgi+T3kK/87Xz/40FGTBuNRXXUVpegFsSAAAAAAD/////ARjGmjsAAAAAFgAUsKOvFEIIQSaTyn0WaFK1LbCu8G4AAAAAAQEfGMaaOwAAAAAWABSwo68UQghBJpPKfRZoUrUtsK7wbgEOIAsK2SFBnByHGXNdctxzn56p4GONH+TB7vD5lECEgV/IAQ8EAAAAAAAiAgLWAfhIRqZ1X3dr4A49nej7EKzJNfuDxF+wFi1MrVq3khj2nYc+VAAAgAEAAIAAAACAAAAAACoAAAABAwgACK8vAAAAAAEEFgAUxDD2TEdW2jENvRoIVXLvKZkmJywAIgIC42+/9T3VNAcM+P05ZhRoDzV6m4Xbc0C/HPp0XSrXs0AY9p2HPlQAAIABAACAAAAAgAEAAABkAAAAAQMIi73rCwAAAAABBBYAFE3Rk6yWSlasG54cyoRU/i9HT4UTAA=="+  },+  {+   "case": "1 input, 2 output updated PSBTv2, with both Inputs Modifiable Flag (bit 0) and Outputs Modifiable Flag (bit 1) of PSBT_GLOBAL_TX_MODIFIABLE set",+   "hex": "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",+   "base64": "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"+  },+  {+   "case": "1 input, 2 output updated PSBTv2, with both Inputs Modifiable Flag (bit 0) and Has SIGHASH_SINGLE Flag (bit 2) of PSBT_GLOBAL_TX_MODIFIABLE set",+   "hex": "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",+   "base64": "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"+  },+  {+   "case": "1 input, 2 output updated PSBTv2, with both Outputs Modifiable Flag (bit 1) and Has SIGHASH_SINGLE FLag (bit 2) of PSBT_GLOBAL_TX_MODIFIABLE set",+   "hex": "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",+   "base64": "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"+  },+  {+   "case": "1 input, 2 output updated PSBTv2, with all defined PSBT_GLOBAL_TX_MODIFIABLE flags set",+   "hex": "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",+   "base64": "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"+  },+  {+   "case": "1 input, 2 output updated PSBTv2, with all possible PSBT_GLOBAL_TX_MODIFIABLE flags set",+   "hex": "70736274ff010204020000000104010101050102010601ff01fb0402000000000100520200000001c1aa256e214b96a1822f93de42bff3b5f3ff8d0519306e3515d7515a5e805b120000000000ffffffff0118c69a3b00000000160014b0a3af144208412693ca7d166852b52db0aef06e0000000001011f18c69a3b00000000160014b0a3af144208412693ca7d166852b52db0aef06e010e200b0ad921419c1c8719735d72dc739f9ea9e0638d1fe4c1eef0f9944084815fc8010f040000000000220202d601f84846a6755f776be00e3d9de8fb10acc935fb83c45fb0162d4cad5ab79218f69d873e540000800100008000000080000000002a0000000103080008af2f000000000104160014c430f64c4756da310dbd1a085572ef299926272c00220202e36fbff53dd534070cf8fd396614680f357a9b85db7340bf1cfa745d2ad7b34018f69d873e54000080010000800000008001000000640000000103088bbdeb0b0000000001041600144dd193ac964a56ac1b9e1cca8454fe2f474f851300",+   "base64": "cHNidP8BAgQCAAAAAQQBAQEFAQIBBgH/AfsEAgAAAAABAFICAAAAAcGqJW4hS5ahgi+T3kK/87Xz/40FGTBuNRXXUVpegFsSAAAAAAD/////ARjGmjsAAAAAFgAUsKOvFEIIQSaTyn0WaFK1LbCu8G4AAAAAAQEfGMaaOwAAAAAWABSwo68UQghBJpPKfRZoUrUtsK7wbgEOIAsK2SFBnByHGXNdctxzn56p4GONH+TB7vD5lECEgV/IAQ8EAAAAAAAiAgLWAfhIRqZ1X3dr4A49nej7EKzJNfuDxF+wFi1MrVq3khj2nYc+VAAAgAEAAIAAAACAAAAAACoAAAABAwgACK8vAAAAAAEEFgAUxDD2TEdW2jENvRoIVXLvKZkmJywAIgIC42+/9T3VNAcM+P05ZhRoDzV6m4Xbc0C/HPp0XSrXs0AY9p2HPlQAAIABAACAAAAAgAEAAABkAAAAAQMIi73rCwAAAAABBBYAFE3Rk6yWSlasG54cyoRU/i9HT4UTAA=="+  },+  {+   "case": "1 input, 2 output updated PSBTv2, with all PSBTv2 fields",+   "hex": "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",+   "base64": "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"+  }+ ],+ "locktime": [+  {+   "case": "No locktimes specified",+   "hex": "70736274ff01020402000000010401010105010201fb040200000000010e200b0ad921419c1c8719735d72dc739f9ea9e0638d1fe4c1eef0f9944084815fc8010f0400000000000103080008af2f000000000104160014c430f64c4756da310dbd1a085572ef299926272c000103088bbdeb0b0000000001041600144dd193ac964a56ac1b9e1cca8454fe2f474f851300",+   "locktime": 0,+   "base64": "cHNidP8BAgQCAAAAAQQBAQEFAQIB+wQCAAAAAAEOIAsK2SFBnByHGXNdctxzn56p4GONH+TB7vD5lECEgV/IAQ8EAAAAAAABAwgACK8vAAAAAAEEFgAUxDD2TEdW2jENvRoIVXLvKZkmJywAAQMIi73rCwAAAAABBBYAFE3Rk6yWSlasG54cyoRU/i9HT4UTAA=="+  },+  {+   "case": "Fallback locktime of 0",+   "hex": "70736274ff0102040200000001030400000000010401020105010101fb040200000000010e200f758dbfbd4da7c16c8a3309c3c81e1100f561ea646db5b01752c485e1bdde9f010f040100000000010e203a1b3b3c837d6489ea7a31d8e6c7dd503c001bef3e06958e7574808d68ca78a5010f0400000000000103084f9335770000000001041600140b1352cacd03cf6aa1b7f3c8d6388671b34a5e1100",+   "locktime": 0,+   "base64": "cHNidP8BAgQCAAAAAQMEAAAAAAEEAQIBBQEBAfsEAgAAAAABDiAPdY2/vU2nwWyKMwnDyB4RAPVh6mRttbAXUsSF4b3enwEPBAEAAAAAAQ4gOhs7PIN9ZInqejHY5sfdUDwAG+8+BpWOdXSAjWjKeKUBDwQAAAAAAAEDCE+TNXcAAAAAAQQWABQLE1LKzQPPaqG388jWOIZxs0peEQA="+  },+  {+   "case": "Input 1 has PSBT_IN_REQUIRED_HEIGHT_LOCKTIME of 10000, Input 2 has no locktime fields",+   "hex": "70736274ff0102040200000001030400000000010401020105010101fb040200000000010e200f758dbfbd4da7c16c8a3309c3c81e1100f561ea646db5b01752c485e1bdde9f010f04010000000112041027000000010e203a1b3b3c837d6489ea7a31d8e6c7dd503c001bef3e06958e7574808d68ca78a5010f0400000000000103084f9335770000000001041600140b1352cacd03cf6aa1b7f3c8d6388671b34a5e1100",+   "locktime": 10000,+   "base64": "cHNidP8BAgQCAAAAAQMEAAAAAAEEAQIBBQEBAfsEAgAAAAABDiAPdY2/vU2nwWyKMwnDyB4RAPVh6mRttbAXUsSF4b3enwEPBAEAAAABEgQQJwAAAAEOIDobOzyDfWSJ6nox2ObH3VA8ABvvPgaVjnV0gI1oynilAQ8EAAAAAAABAwhPkzV3AAAAAAEEFgAUCxNSys0Dz2qht/PI1jiGcbNKXhEA"+  },+  {+   "case": "Input 1 has PSBT_IN_REQUIRED_HEIGHT_LOCKTIME of 10000, Input 2 has PSBT_IN_REQUIRED_HEIGHT_LOCKTIME of 9000",+   "hex": "70736274ff0102040200000001030400000000010401020105010101fb040200000000010e200f758dbfbd4da7c16c8a3309c3c81e1100f561ea646db5b01752c485e1bdde9f010f04010000000112041027000000010e203a1b3b3c837d6489ea7a31d8e6c7dd503c001bef3e06958e7574808d68ca78a5010f040000000001120428230000000103084f9335770000000001041600140b1352cacd03cf6aa1b7f3c8d6388671b34a5e1100",+   "locktime": 10000,+   "base64": "cHNidP8BAgQCAAAAAQMEAAAAAAEEAQIBBQEBAfsEAgAAAAABDiAPdY2/vU2nwWyKMwnDyB4RAPVh6mRttbAXUsSF4b3enwEPBAEAAAABEgQQJwAAAAEOIDobOzyDfWSJ6nox2ObH3VA8ABvvPgaVjnV0gI1oynilAQ8EAAAAAAESBCgjAAAAAQMIT5M1dwAAAAABBBYAFAsTUsrNA89qobfzyNY4hnGzSl4RAA=="+  },+  {+   "case": "Input 1 has PSBT_IN_REQUIRED_HEIGHT_LOCKTIME of 10000, Input 2 has PSBT_IN_REQUIRED_HEIGHT_LOCKTIME of 9000 and PSBT_IN_REQUIRED_TIME_LOCKTIME of 1657048460",+   "hex": "70736274ff0102040200000001030400000000010401020105010101fb040200000000010e200f758dbfbd4da7c16c8a3309c3c81e1100f561ea646db5b01752c485e1bdde9f010f04010000000112041027000000010e203a1b3b3c837d6489ea7a31d8e6c7dd503c001bef3e06958e7574808d68ca78a5010f04000000000111048c8dc46201120428230000000103084f9335770000000001041600140b1352cacd03cf6aa1b7f3c8d6388671b34a5e1100",+   "locktime": 10000,+   "base64": "cHNidP8BAgQCAAAAAQMEAAAAAAEEAQIBBQEBAfsEAgAAAAABDiAPdY2/vU2nwWyKMwnDyB4RAPVh6mRttbAXUsSF4b3enwEPBAEAAAABEgQQJwAAAAEOIDobOzyDfWSJ6nox2ObH3VA8ABvvPgaVjnV0gI1oynilAQ8EAAAAAAERBIyNxGIBEgQoIwAAAAEDCE+TNXcAAAAAAQQWABQLE1LKzQPPaqG388jWOIZxs0peEQA="+  },+  {+   "case": "Input 1 has PSBT_IN_REQUIRED_HEIGHT_LOCKTIME of 10000 and PSBT_IN_REQUIRED_TIME_LOCKTIME of 1657048459, Input 2 has PSBT_IN_REQUIRED_HEIGHT_LOCKTIME of 9000 and PSBT_IN_REQUIRED_TIME_LOCKTIME of 1657048460",+   "hex": "70736274ff0102040200000001030400000000010401020105010101fb040200000000010e200f758dbfbd4da7c16c8a3309c3c81e1100f561ea646db5b01752c485e1bdde9f010f04010000000111048b8dc4620112041027000000010e203a1b3b3c837d6489ea7a31d8e6c7dd503c001bef3e06958e7574808d68ca78a5010f04000000000111048c8dc46201120428230000000103084f9335770000000001041600140b1352cacd03cf6aa1b7f3c8d6388671b34a5e1100",+   "locktime": 10000,+   "base64": "cHNidP8BAgQCAAAAAQMEAAAAAAEEAQIBBQEBAfsEAgAAAAABDiAPdY2/vU2nwWyKMwnDyB4RAPVh6mRttbAXUsSF4b3enwEPBAEAAAABEQSLjcRiARIEECcAAAABDiA6Gzs8g31kiep6Mdjmx91QPAAb7z4GlY51dICNaMp4pQEPBAAAAAABEQSMjcRiARIEKCMAAAABAwhPkzV3AAAAAAEEFgAUCxNSys0Dz2qht/PI1jiGcbNKXhEA"+  },+  {+   "case": "Input 1 has PSBT_IN_REQUIRED_TIME_LOCKTIME of 1657048459, Input 2 has PSBT_IN_REQUIRED_HEIGHT_LOCKTIME of 9000 and PSBT_IN_REQUIRED_TIME_LOCKTIME of 1657048460",+   "hex": "70736274ff0102040200000001030400000000010401020105010101fb040200000000010e200f758dbfbd4da7c16c8a3309c3c81e1100f561ea646db5b01752c485e1bdde9f010f04010000000111048b8dc46200010e203a1b3b3c837d6489ea7a31d8e6c7dd503c001bef3e06958e7574808d68ca78a5010f04000000000111048c8dc46201120428230000000103084f9335770000000001041600140b1352cacd03cf6aa1b7f3c8d6388671b34a5e1100",+   "locktime": 1657048460,+   "base64": "cHNidP8BAgQCAAAAAQMEAAAAAAEEAQIBBQEBAfsEAgAAAAABDiAPdY2/vU2nwWyKMwnDyB4RAPVh6mRttbAXUsSF4b3enwEPBAEAAAABEQSLjcRiAAEOIDobOzyDfWSJ6nox2ObH3VA8ABvvPgaVjnV0gI1oynilAQ8EAAAAAAERBIyNxGIBEgQoIwAAAAEDCE+TNXcAAAAAAQQWABQLE1LKzQPPaqG388jWOIZxs0peEQA="+  },+  {+   "case": "Input 1 has PSBT_IN_REQUIRED_HEIGHT_LOCKTIME of 10000 and PSBT_IN_REQUIRED_TIME_LOCKTIME of 1657048459, Input 2 has PSBT_IN_REQUIRED_TIME_LOCKTIME of 1657048460",+   "hex": "70736274ff0102040200000001030400000000010401020105010101fb040200000000010e200f758dbfbd4da7c16c8a3309c3c81e1100f561ea646db5b01752c485e1bdde9f010f04010000000111048b8dc4620112041027000000010e203a1b3b3c837d6489ea7a31d8e6c7dd503c001bef3e06958e7574808d68ca78a5010f04000000000111048c8dc462000103084f9335770000000001041600140b1352cacd03cf6aa1b7f3c8d6388671b34a5e1100",+   "locktime": 1657048460,+   "base64": "cHNidP8BAgQCAAAAAQMEAAAAAAEEAQIBBQEBAfsEAgAAAAABDiAPdY2/vU2nwWyKMwnDyB4RAPVh6mRttbAXUsSF4b3enwEPBAEAAAABEQSLjcRiARIEECcAAAABDiA6Gzs8g31kiep6Mdjmx91QPAAb7z4GlY51dICNaMp4pQEPBAAAAAABEQSMjcRiAAEDCE+TNXcAAAAAAQQWABQLE1LKzQPPaqG388jWOIZxs0peEQA="+  },+  {+   "case": "Input 1 has no locktime fields, Input 2 has PSBT_IN_REQUIRED_TIME_LOCKTIME of 1657048460",+   "hex": "70736274ff0102040200000001030400000000010401020105010101fb040200000000010e200f758dbfbd4da7c16c8a3309c3c81e1100f561ea646db5b01752c485e1bdde9f010f040100000000010e203a1b3b3c837d6489ea7a31d8e6c7dd503c001bef3e06958e7574808d68ca78a5010f04000000000111048c8dc462000103084f9335770000000001041600140b1352cacd03cf6aa1b7f3c8d6388671b34a5e1100",+   "locktime": 1657048460,+   "base64": "cHNidP8BAgQCAAAAAQMEAAAAAAEEAQIBBQEBAfsEAgAAAAABDiAPdY2/vU2nwWyKMwnDyB4RAPVh6mRttbAXUsSF4b3enwEPBAEAAAAAAQ4gOhs7PIN9ZInqejHY5sfdUDwAG+8+BpWOdXSAjWjKeKUBDwQAAAAAAREEjI3EYgABAwhPkzV3AAAAAAEEFgAUCxNSys0Dz2qht/PI1jiGcbNKXhEA"+  },+  {+   "case": "Input 1 has PSBT_IN_REQUIRED_HEIGHT_LOCKTIME of 10000, Input 2 has PSBT_IN_REQUIRED_TIME_LOCKTIME of 1657048460",+   "hex": "70736274ff0102040200000001030400000000010401020105010101fb040200000000010e200f758dbfbd4da7c16c8a3309c3c81e1100f561ea646db5b01752c485e1bdde9f010f04010000000112041027000000010e203a1b3b3c837d6489ea7a31d8e6c7dd503c001bef3e06958e7574808d68ca78a5010f04000000000111048c8dc462000103084f9335770000000001041600140b1352cacd03cf6aa1b7f3c8d6388671b34a5e1100",+   "locktime": null,+   "base64": "cHNidP8BAgQCAAAAAQMEAAAAAAEEAQIBBQEBAfsEAgAAAAABDiAPdY2/vU2nwWyKMwnDyB4RAPVh6mRttbAXUsSF4b3enwEPBAEAAAABEgQQJwAAAAEOIDobOzyDfWSJ6nox2ObH3VA8ABvvPgaVjnV0gI1oynilAQ8EAAAAAAERBIyNxGIAAQMIT5M1dwAAAAABBBYAFAsTUsrNA89qobfzyNY4hnGzSl4RAA=="+  }+ ]+}

@@ -0,0 +1,93 @@+{+  "description": "Test vectors of BIP 371, Taproot fields in PSBT",+  "source": "https://github.com/bitcoin/bips/blob/master/bip-0371.mediawiki",+  "invalid": [+    {+      "case": "PSBT With PSBT_IN_TAP_INTERNAL_KEY key that is too long (incorrectly serialized as compressed DER)",+      "hex": "70736274ff010071020000000127744ababf3027fe0d6cf23a96eee2efb188ef52301954585883e69b6624b2420000000000ffffffff02787c01000000000016001483a7e34bd99ff03a4962ef8a1a101bb295461ece606b042a010000001600147ac369df1b20e033d6116623957b0ac49f3c52e8000000000001012b00f2052a010000002251205a2c2cf5b52cf31f83ad2e8da63ff03183ecd8f609c7510ae8a48e03910a075701172102fe349064c98d6e2a853fa3c9b12bd8b304a19c195c60efa7ee2393046d3fa232000000",+      "base64": "cHNidP8BAHECAAAAASd0Srq/MCf+DWzyOpbu4u+xiO9SMBlUWFiD5ptmJLJCAAAAAAD/////Anh8AQAAAAAAFgAUg6fjS9mf8DpJYu+KGhAbspVGHs5gawQqAQAAABYAFHrDad8bIOAz1hFmI5V7CsSfPFLoAAAAAAABASsA8gUqAQAAACJRIFosLPW1LPMfg60ujaY/8DGD7Nj2CcdRCuikjgORCgdXARchAv40kGTJjW4qhT+jybEr2LMEoZwZXGDvp+4jkwRtP6IyAAAA"+    },+    {+      "case": "PSBT With PSBT_IN_TAP_KEY_SIG signature that is too short",+      "hex": "70736274ff010071020000000127744ababf3027fe0d6cf23a96eee2efb188ef52301954585883e69b6624b2420000000000ffffffff02787c01000000000016001483a7e34bd99ff03a4962ef8a1a101bb295461ece606b042a010000001600147ac369df1b20e033d6116623957b0ac49f3c52e8000000000001012b00f2052a010000002251205a2c2cf5b52cf31f83ad2e8da63ff03183ecd8f609c7510ae8a48e03910a075701133f173bb3d36c074afb716fec6307a069a2e450b995f3c82785945ab8df0e24260dcd703b0cbf34de399184a9481ac2b3586db6601f026a77f7e4938481bc3475000000",+      "base64": "cHNidP8BAHECAAAAASd0Srq/MCf+DWzyOpbu4u+xiO9SMBlUWFiD5ptmJLJCAAAAAAD/////Anh8AQAAAAAAFgAUg6fjS9mf8DpJYu+KGhAbspVGHs5gawQqAQAAABYAFHrDad8bIOAz1hFmI5V7CsSfPFLoAAAAAAABASsA8gUqAQAAACJRIFosLPW1LPMfg60ujaY/8DGD7Nj2CcdRCuikjgORCgdXARM/Fzuz02wHSvtxb+xjB6BpouRQuZXzyCeFlFq43w4kJg3NcDsMvzTeOZGEqUgawrNYbbZgHwJqd/fkk4SBvDR1AAAA"+    },+    {+      "case": "PSBT With PSBT_IN_TAP_KEY_SIG signature that is too long",+      "hex": "70736274ff010071020000000127744ababf3027fe0d6cf23a96eee2efb188ef52301954585883e69b6624b2420000000000ffffffff02787c01000000000016001483a7e34bd99ff03a4962ef8a1a101bb295461ece606b042a010000001600147ac369df1b20e033d6116623957b0ac49f3c52e8000000000001012b00f2052a010000002251205a2c2cf5b52cf31f83ad2e8da63ff03183ecd8f609c7510ae8a48e03910a0757011342173bb3d36c074afb716fec6307a069a2e450b995f3c82785945ab8df0e24260dcd703b0cbf34de399184a9481ac2b3586db6601f026a77f7e4938481bc34751701aa000000",+      "base64": "cHNidP8BAHECAAAAASd0Srq/MCf+DWzyOpbu4u+xiO9SMBlUWFiD5ptmJLJCAAAAAAD/////Anh8AQAAAAAAFgAUg6fjS9mf8DpJYu+KGhAbspVGHs5gawQqAQAAABYAFHrDad8bIOAz1hFmI5V7CsSfPFLoAAAAAAABASsA8gUqAQAAACJRIFosLPW1LPMfg60ujaY/8DGD7Nj2CcdRCuikjgORCgdXARNCFzuz02wHSvtxb+xjB6BpouRQuZXzyCeFlFq43w4kJg3NcDsMvzTeOZGEqUgawrNYbbZgHwJqd/fkk4SBvDR1FwGqAAAA"+    },+    {+      "case": "PSBT With PSBT_IN_TAP_BIP32_DERIVATION key that is too long (incorrectly serialized as compressed DER)",+      "hex": "70736274ff010071020000000127744ababf3027fe0d6cf23a96eee2efb188ef52301954585883e69b6624b2420000000000ffffffff02787c01000000000016001483a7e34bd99ff03a4962ef8a1a101bb295461ece606b042a010000001600147ac369df1b20e033d6116623957b0ac49f3c52e8000000000001012b00f2052a010000002251205a2c2cf5b52cf31f83ad2e8da63ff03183ecd8f609c7510ae8a48e03910a0757221602fe349064c98d6e2a853fa3c9b12bd8b304a19c195c60efa7ee2393046d3fa2321900772b2da75600008001000080000000800100000000000000000000",+      "base64": "cHNidP8BAHECAAAAASd0Srq/MCf+DWzyOpbu4u+xiO9SMBlUWFiD5ptmJLJCAAAAAAD/////Anh8AQAAAAAAFgAUg6fjS9mf8DpJYu+KGhAbspVGHs5gawQqAQAAABYAFHrDad8bIOAz1hFmI5V7CsSfPFLoAAAAAAABASsA8gUqAQAAACJRIFosLPW1LPMfg60ujaY/8DGD7Nj2CcdRCuikjgORCgdXIhYC/jSQZMmNbiqFP6PJsSvYswShnBlcYO+n7iOTBG0/ojIZAHcrLadWAACAAQAAgAAAAIABAAAAAAAAAAAAAA=="+    },+    {+      "case": "PSBT With PSBT_OUT_TAP_INTERNAL_KEY key that is too long (incorrectly serialized as compressed DER)",+      "hex": "70736274ff01007d020000000127744ababf3027fe0d6cf23a96eee2efb188ef52301954585883e69b6624b2420000000000ffffffff02887b0100000000001600142382871c7e8421a00093f754d91281e675874b9f606b042a010000002251205a2c2cf5b52cf31f83ad2e8da63ff03183ecd8f609c7510ae8a48e03910a0757000000000001012b00f2052a010000002251205a2c2cf5b52cf31f83ad2e8da63ff03183ecd8f609c7510ae8a48e03910a0757000001052102fe349064c98d6e2a853fa3c9b12bd8b304a19c195c60efa7ee2393046d3fa23200",+      "base64": "cHNidP8BAH0CAAAAASd0Srq/MCf+DWzyOpbu4u+xiO9SMBlUWFiD5ptmJLJCAAAAAAD/////Aoh7AQAAAAAAFgAUI4KHHH6EIaAAk/dU2RKB5nWHS59gawQqAQAAACJRIFosLPW1LPMfg60ujaY/8DGD7Nj2CcdRCuikjgORCgdXAAAAAAABASsA8gUqAQAAACJRIFosLPW1LPMfg60ujaY/8DGD7Nj2CcdRCuikjgORCgdXAAABBSEC/jSQZMmNbiqFP6PJsSvYswShnBlcYO+n7iOTBG0/ojIA"+    },+    {+      "case": "PSBT With PSBT_OUT_TAP_BIP32_DERIVATION key that is too long (incorrectly serialized as compressed DER)",+      "hex": "70736274ff01007d020000000127744ababf3027fe0d6cf23a96eee2efb188ef52301954585883e69b6624b2420000000000ffffffff02887b0100000000001600142382871c7e8421a00093f754d91281e675874b9f606b042a010000002251205a2c2cf5b52cf31f83ad2e8da63ff03183ecd8f609c7510ae8a48e03910a0757000000000001012b00f2052a010000002251205a2c2cf5b52cf31f83ad2e8da63ff03183ecd8f609c7510ae8a48e03910a07570000220702fe349064c98d6e2a853fa3c9b12bd8b304a19c195c60efa7ee2393046d3fa2321900772b2da7560000800100008000000080010000000000000000",+      "base64": "cHNidP8BAH0CAAAAASd0Srq/MCf+DWzyOpbu4u+xiO9SMBlUWFiD5ptmJLJCAAAAAAD/////Aoh7AQAAAAAAFgAUI4KHHH6EIaAAk/dU2RKB5nWHS59gawQqAQAAACJRIFosLPW1LPMfg60ujaY/8DGD7Nj2CcdRCuikjgORCgdXAAAAAAABASsA8gUqAQAAACJRIFosLPW1LPMfg60ujaY/8DGD7Nj2CcdRCuikjgORCgdXAAAiBwL+NJBkyY1uKoU/o8mxK9izBKGcGVxg76fuI5MEbT+iMhkAdystp1YAAIABAACAAAAAgAEAAAAAAAAAAA=="+    },+    {+      "case": "PSBT With PSBT_IN_TAP_SCRIPT_SIG key that is too long (incorrectly serialized as compressed DER)",+      "hex": "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",+      "base64": "cHNidP8BAF4CAAAAAZvUh2UjC/mnLmYgAflyVW5U8Mb5f+tWvLVgDYF/aZUmAQAAAAD/////AUjmBSoBAAAAIlEgAw2k/OT32yjCyylRYx4ANxOFZZf+ljiCy1AOaBEsymMAAAAAAAEBKwDyBSoBAAAAIlEgwiR++/2SrEf29AuNQtFpF1oZ+p+hDkol1/NetN2FtpJCFAIssTrGgkjegGqmo2Wc88A+toIdCcgRSk6Gj+vehlu20s2XDhX1P8DIL5UP1WD/qRm3YXK+AXNoqJkTrwdPQAsJQIl1aqNznMxonsD886NgvjLMC1mxbpOh6LtGBXJrLKej/3BsQXZkljKyzGjh+RK4pXjjcZzncQiFx6lm9JvNQ8sAAA=="+    },+    {+      "case": "PSBT With PSBT_IN_TAP_SCRIPT_SIG signature that is too long",+      "hex": "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",+      "base64": "cHNidP8BAF4CAAAAAZvUh2UjC/mnLmYgAflyVW5U8Mb5f+tWvLVgDYF/aZUmAQAAAAD/////AUjmBSoBAAAAIlEgAw2k/OT32yjCyylRYx4ANxOFZZf+ljiCy1AOaBEsymMAAAAAAAEBKwDyBSoBAAAAIlEgwiR++/2SrEf29AuNQtFpF1oZ+p+hDkol1/NetN2FtpJBFCyxOsaCSN6AaqajZZzzwD62gh0JyBFKToaP696GW7bSzZcOFfU/wMgvlQ/VYP+pGbdhcr4Bc2iomROvB09ACwlCiXVqo3OczGiewPzzo2C+MswLWbFuk6Hou0YFcmssp6P/cGxBdmSWMrLMaOH5ErileONxnOdxCIXHqWb0m81DywEBAAA="+    },+    {+      "case": "PSBT With PSBT_IN_TAP_SCRIPT_SIG signature that is too short",+      "hex": "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",+      "base64": "cHNidP8BAF4CAAAAAZvUh2UjC/mnLmYgAflyVW5U8Mb5f+tWvLVgDYF/aZUmAQAAAAD/////AUjmBSoBAAAAIlEgAw2k/OT32yjCyylRYx4ANxOFZZf+ljiCy1AOaBEsymMAAAAAAAEBKwDyBSoBAAAAIlEgwiR++/2SrEf29AuNQtFpF1oZ+p+hDkol1/NetN2FtpJBFCyxOsaCSN6AaqajZZzzwD62gh0JyBFKToaP696GW7bSzZcOFfU/wMgvlQ/VYP+pGbdhcr4Bc2iomROvB09ACwk/iXVqo3OczGiewPzzo2C+MswLWbFuk6Hou0YFcmssp6P/cGxBdmSWMrLMaOH5ErileONxnOdxCIXHqWb0m81DAAA="+    },+    {+      "case": "PSBT With PSBT_IN_TAP_LEAF_SCRIPT Control block that is too long",+      "hex": "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",+      "base64": "cHNidP8BAF4CAAAAAZvUh2UjC/mnLmYgAflyVW5U8Mb5f+tWvLVgDYF/aZUmAQAAAAD/////AUjmBSoBAAAAIlEgAw2k/OT32yjCyylRYx4ANxOFZZf+ljiCy1AOaBEsymMAAAAAAAEBKwDyBSoBAAAAIlEgwiR++/2SrEf29AuNQtFpF1oZ+p+hDkol1/NetN2FtpJjFcFQkpt0waBJVLeLS2A16XpeB4paDyjsltVHv+6azoA6wG99YgWelJehpKJnVp2YdtpgEBr/OONSm5uTnOf5GulwEV8uSQr3zEXE94UR82BXzlxaXFYyWin7RN/CA/NW4fgAIyAssTrGgkjegGqmo2Wc88A+toIdCcgRSk6Gj+vehlu20qzAAAA="+    },+    {+      "case": "PSBT With PSBT_IN_TAP_LEAF_SCRIPT Control block that is too short",+      "hex": "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",+      "base64": "cHNidP8BAF4CAAAAAZvUh2UjC/mnLmYgAflyVW5U8Mb5f+tWvLVgDYF/aZUmAQAAAAD/////AUjmBSoBAAAAIlEgAw2k/OT32yjCyylRYx4ANxOFZZf+ljiCy1AOaBEsymMAAAAAAAEBKwDyBSoBAAAAIlEgwiR++/2SrEf29AuNQtFpF1oZ+p+hDkol1/NetN2FtpJhFcFQkpt0waBJVLeLS2A16XpeB4paDyjsltVHv+6azoA6wG99YgWelJehpKJnVp2YdtpgEBr/OONSm5uTnOf5GulwEV8uSQr3zEXE94UR82BXzlxaXFYyWin7RN/CA/NW4SMgLLE6xoJI3oBqpqNlnPPAPraCHQnIEUpOho/r3oZbttKswAAA"+    }+  ],+  "valid": [+    {+      "case": "PSBT with one P2TR key only input with internal key and its derivation path",+      "hex": "70736274ff010052020000000127744ababf3027fe0d6cf23a96eee2efb188ef52301954585883e69b6624b2420000000000ffffffff0148e6052a01000000160014768e1eeb4cf420866033f80aceff0f9720744969000000000001012b00f2052a010000002251205a2c2cf5b52cf31f83ad2e8da63ff03183ecd8f609c7510ae8a48e03910a07572116fe349064c98d6e2a853fa3c9b12bd8b304a19c195c60efa7ee2393046d3fa2321900772b2da75600008001000080000000800100000000000000011720fe349064c98d6e2a853fa3c9b12bd8b304a19c195c60efa7ee2393046d3fa232002202036b772a6db74d8753c98a827958de6c78ab3312109f37d3e0304484242ece73d818772b2da7540000800100008000000080000000000000000000",+      "base64": "cHNidP8BAFICAAAAASd0Srq/MCf+DWzyOpbu4u+xiO9SMBlUWFiD5ptmJLJCAAAAAAD/////AUjmBSoBAAAAFgAUdo4e60z0IIZgM/gKzv8PlyB0SWkAAAAAAAEBKwDyBSoBAAAAIlEgWiws9bUs8x+DrS6Npj/wMYPs2PYJx1EK6KSOA5EKB1chFv40kGTJjW4qhT+jybEr2LMEoZwZXGDvp+4jkwRtP6IyGQB3Ky2nVgAAgAEAAIAAAACAAQAAAAAAAAABFyD+NJBkyY1uKoU/o8mxK9izBKGcGVxg76fuI5MEbT+iMgAiAgNrdyptt02HU8mKgnlY3mx4qzMSEJ830+AwRIQkLs5z2Bh3Ky2nVAAAgAEAAIAAAACAAAAAAAAAAAAA"+    },+    {+      "case": "PSBT with one P2TR key only input with internal key, its derivation path, and signature",+      "hex": "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",+      "base64": "cHNidP8BAFICAAAAASd0Srq/MCf+DWzyOpbu4u+xiO9SMBlUWFiD5ptmJLJCAAAAAAD/////AUjmBSoBAAAAFgAUdo4e60z0IIZgM/gKzv8PlyB0SWkAAAAAAAEBKwDyBSoBAAAAIlEgWiws9bUs8x+DrS6Npj/wMYPs2PYJx1EK6KSOA5EKB1cBE0C7U+yRe62dkGrxuocYHEi4as5aritTYFpyXKdGJWMUdvxvW67a9PLuD0d/NvWPOXDVuCc7fkl7l68uPxJcl680IRb+NJBkyY1uKoU/o8mxK9izBKGcGVxg76fuI5MEbT+iMhkAdystp1YAAIABAACAAAAAgAEAAAAAAAAAARcg/jSQZMmNbiqFP6PJsSvYswShnBlcYO+n7iOTBG0/ojIAIgIDa3cqbbdNh1PJioJ5WN5seKszEhCfN9PgMESEJC7Oc9gYdystp1QAAIABAACAAAAAgAAAAAAAAAAAAA=="+    },+    {+      "case": "PSBT with one P2TR key only output with internal key and its derivation path",+      "hex": "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",+      "base64": "cHNidP8BAF4CAAAAASd0Srq/MCf+DWzyOpbu4u+xiO9SMBlUWFiD5ptmJLJCAAAAAAD/////AUjmBSoBAAAAIlEgg2mORYxmZOFZXXXaJZfeHiLul9eY5wbEwKS1qYI810MAAAAAAAEBKwDyBSoBAAAAIlEgWiws9bUs8x+DrS6Npj/wMYPs2PYJx1EK6KSOA5EKB1chFv40kGTJjW4qhT+jybEr2LMEoZwZXGDvp+4jkwRtP6IyGQB3Ky2nVgAAgAEAAIAAAACAAQAAAAAAAAABFyD+NJBkyY1uKoU/o8mxK9izBKGcGVxg76fuI5MEbT+iMgABBSARJNp67JLM0GyVRWJkf0N7E4uVchqEvivyJ2u92rPmcSEHESTaeuySzNBslUViZH9DexOLlXIahL4r8idrvdqz5nEZAHcrLadWAACAAQAAgAAAAIAAAAAABQAAAAA="+    },+    {+      "case": "PSBT with one P2TR script path only input with dummy internal key, scripts, derivation paths for keys in the scripts, and merkle root",+      "hex": "70736274ff01005e02000000019bd48765230bf9a72e662001f972556e54f0c6f97feb56bcb5600d817f6995260100000000ffffffff0148e6052a0100000022512083698e458c6664e1595d75da2597de1e22ee97d798e706c4c0a4b5a9823cd743000000000001012b00f2052a01000000225120c2247efbfd92ac47f6f40b8d42d169175a19fa9fa10e4a25d7f35eb4dd85b6926215c150929b74c1a04954b78b4b6035e97a5e078a5a0f28ec96d547bfee9ace803ac06f7d62059e9497a1a4a267569d9876da60101aff38e3529b9b939ce7f91ae970115f2e490af7cc45c4f78511f36057ce5c5a5c56325a29fb44dfc203f356e1f823202cb13ac68248de806aa6a3659cf3c03eb6821d09c8114a4e868febde865bb6d2acc04215c150929b74c1a04954b78b4b6035e97a5e078a5a0f28ec96d547bfee9ace803ac097c6e6fea5ff714ff5724499990810e406e98aa10f5bf7e5f6784bc1d0a9a6ce23204320b0bf16f011b53ea7be615924aa7f27e5d29ad20ea1155d848676c3bad1b2acc06215c150929b74c1a04954b78b4b6035e97a5e078a5a0f28ec96d547bfee9ace803ac0cd970e15f53fc0c82f950fd560ffa919b76172be017368a89913af074f400b09115f2e490af7cc45c4f78511f36057ce5c5a5c56325a29fb44dfc203f356e1f82320fa0f7a3cef3b1d0c0a6ce7d26e17ada0b2e5c92d19efad48b41859cb8a451ca9acc021162cb13ac68248de806aa6a3659cf3c03eb6821d09c8114a4e868febde865bb6d23901cd970e15f53fc0c82f950fd560ffa919b76172be017368a89913af074f400b09772b2da7560000800100008002000080000000000000000021164320b0bf16f011b53ea7be615924aa7f27e5d29ad20ea1155d848676c3bad1b23901115f2e490af7cc45c4f78511f36057ce5c5a5c56325a29fb44dfc203f356e1f8772b2da75600008001000080010000800000000000000000211650929b74c1a04954b78b4b6035e97a5e078a5a0f28ec96d547bfee9ace803ac005007c461e5d2116fa0f7a3cef3b1d0c0a6ce7d26e17ada0b2e5c92d19efad48b41859cb8a451ca939016f7d62059e9497a1a4a267569d9876da60101aff38e3529b9b939ce7f91ae970772b2da7560000800100008003000080000000000000000001172050929b74c1a04954b78b4b6035e97a5e078a5a0f28ec96d547bfee9ace803ac0011820f0362e2f75a6f420a5bde3eb221d96ae6720cf25f81890c95b1d775acb515e65000105201124da7aec92ccd06c954562647f437b138b95721a84be2bf2276bbddab3e67121071124da7aec92ccd06c954562647f437b138b95721a84be2bf2276bbddab3e6711900772b2da7560000800100008000000080000000000500000000",+      "base64": "cHNidP8BAF4CAAAAAZvUh2UjC/mnLmYgAflyVW5U8Mb5f+tWvLVgDYF/aZUmAQAAAAD/////AUjmBSoBAAAAIlEgg2mORYxmZOFZXXXaJZfeHiLul9eY5wbEwKS1qYI810MAAAAAAAEBKwDyBSoBAAAAIlEgwiR++/2SrEf29AuNQtFpF1oZ+p+hDkol1/NetN2FtpJiFcFQkpt0waBJVLeLS2A16XpeB4paDyjsltVHv+6azoA6wG99YgWelJehpKJnVp2YdtpgEBr/OONSm5uTnOf5GulwEV8uSQr3zEXE94UR82BXzlxaXFYyWin7RN/CA/NW4fgjICyxOsaCSN6AaqajZZzzwD62gh0JyBFKToaP696GW7bSrMBCFcFQkpt0waBJVLeLS2A16XpeB4paDyjsltVHv+6azoA6wJfG5v6l/3FP9XJEmZkIEOQG6YqhD1v35fZ4S8HQqabOIyBDILC/FvARtT6nvmFZJKp/J+XSmtIOoRVdhIZ2w7rRsqzAYhXBUJKbdMGgSVS3i0tgNel6XgeKWg8o7JbVR7/ums6AOsDNlw4V9T/AyC+VD9Vg/6kZt2FyvgFzaKiZE68HT0ALCRFfLkkK98xFxPeFEfNgV85cWlxWMlop+0TfwgPzVuH4IyD6D3o87zsdDAps59JuF62gsuXJLRnvrUi0GFnLikUcqazAIRYssTrGgkjegGqmo2Wc88A+toIdCcgRSk6Gj+vehlu20jkBzZcOFfU/wMgvlQ/VYP+pGbdhcr4Bc2iomROvB09ACwl3Ky2nVgAAgAEAAIACAACAAAAAAAAAAAAhFkMgsL8W8BG1Pqe+YVkkqn8n5dKa0g6hFV2EhnbDutGyOQERXy5JCvfMRcT3hRHzYFfOXFpcVjJaKftE38ID81bh+HcrLadWAACAAQAAgAEAAIAAAAAAAAAAACEWUJKbdMGgSVS3i0tgNel6XgeKWg8o7JbVR7/ums6AOsAFAHxGHl0hFvoPejzvOx0MCmzn0m4XraCy5cktGe+tSLQYWcuKRRypOQFvfWIFnpSXoaSiZ1admHbaYBAa/zjjUpubk5zn+RrpcHcrLadWAACAAQAAgAMAAIAAAAAAAAAAAAEXIFCSm3TBoElUt4tLYDXpel4HiloPKOyW1Ue/7prOgDrAARgg8DYuL3Wm9CClvePrIh2WrmcgzyX4GJDJWx13WstRXmUAAQUgESTaeuySzNBslUViZH9DexOLlXIahL4r8idrvdqz5nEhBxEk2nrskszQbJVFYmR/Q3sTi5VyGoS+K/Ina73as+ZxGQB3Ky2nVgAAgAEAAIAAAACAAAAAAAUAAAAA"+    },+    {+      "case": "PSBT with one P2TR script path only output with dummy internal key, taproot tree, and script key derivation paths",+      "hex": "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",+      "base64": "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"+    },+    {+      "case": "PSBT with one P2TR script path only input with dummy internal key, scripts, script key derivation paths, merkle root, and script path signatures",+      "hex": "70736274ff01005e02000000019bd48765230bf9a72e662001f972556e54f0c6f97feb56bcb5600d817f6995260100000000ffffffff0148e6052a0100000022512083698e458c6664e1595d75da2597de1e22ee97d798e706c4c0a4b5a9823cd743000000000001012b00f2052a01000000225120c2247efbfd92ac47f6f40b8d42d169175a19fa9fa10e4a25d7f35eb4dd85b69241142cb13ac68248de806aa6a3659cf3c03eb6821d09c8114a4e868febde865bb6d2cd970e15f53fc0c82f950fd560ffa919b76172be017368a89913af074f400b0940bf818d9757d6ffeb538ba057fb4c1fc4e0f5ef186e765beb564791e02af5fd3d5e2551d4e34e33d86f276b82c99c79aed3f0395a081efcd2cc2c65dd7e693d7941144320b0bf16f011b53ea7be615924aa7f27e5d29ad20ea1155d848676c3bad1b2115f2e490af7cc45c4f78511f36057ce5c5a5c56325a29fb44dfc203f356e1f840e1f1ab6fabfa26b236f21833719dc1d428ab768d80f91f9988d8abef47bfb863bb1f2a529f768c15f00ce34ec283cdc07e88f8428be28f6ef64043c32911811a4114fa0f7a3cef3b1d0c0a6ce7d26e17ada0b2e5c92d19efad48b41859cb8a451ca96f7d62059e9497a1a4a267569d9876da60101aff38e3529b9b939ce7f91ae97040ec1f0379206461c83342285423326708ab031f0da4a253ee45aafa5b8c92034d8b605490f8cd13e00f989989b97e215faa36f12dee3693d2daccf3781c1757f66215c150929b74c1a04954b78b4b6035e97a5e078a5a0f28ec96d547bfee9ace803ac06f7d62059e9497a1a4a267569d9876da60101aff38e3529b9b939ce7f91ae970115f2e490af7cc45c4f78511f36057ce5c5a5c56325a29fb44dfc203f356e1f823202cb13ac68248de806aa6a3659cf3c03eb6821d09c8114a4e868febde865bb6d2acc04215c150929b74c1a04954b78b4b6035e97a5e078a5a0f28ec96d547bfee9ace803ac097c6e6fea5ff714ff5724499990810e406e98aa10f5bf7e5f6784bc1d0a9a6ce23204320b0bf16f011b53ea7be615924aa7f27e5d29ad20ea1155d848676c3bad1b2acc06215c150929b74c1a04954b78b4b6035e97a5e078a5a0f28ec96d547bfee9ace803ac0cd970e15f53fc0c82f950fd560ffa919b76172be017368a89913af074f400b09115f2e490af7cc45c4f78511f36057ce5c5a5c56325a29fb44dfc203f356e1f82320fa0f7a3cef3b1d0c0a6ce7d26e17ada0b2e5c92d19efad48b41859cb8a451ca9acc021162cb13ac68248de806aa6a3659cf3c03eb6821d09c8114a4e868febde865bb6d23901cd970e15f53fc0c82f950fd560ffa919b76172be017368a89913af074f400b09772b2da7560000800100008002000080000000000000000021164320b0bf16f011b53ea7be615924aa7f27e5d29ad20ea1155d848676c3bad1b23901115f2e490af7cc45c4f78511f36057ce5c5a5c56325a29fb44dfc203f356e1f8772b2da75600008001000080010000800000000000000000211650929b74c1a04954b78b4b6035e97a5e078a5a0f28ec96d547bfee9ace803ac005007c461e5d2116fa0f7a3cef3b1d0c0a6ce7d26e17ada0b2e5c92d19efad48b41859cb8a451ca939016f7d62059e9497a1a4a267569d9876da60101aff38e3529b9b939ce7f91ae970772b2da7560000800100008003000080000000000000000001172050929b74c1a04954b78b4b6035e97a5e078a5a0f28ec96d547bfee9ace803ac0011820f0362e2f75a6f420a5bde3eb221d96ae6720cf25f81890c95b1d775acb515e65000105201124da7aec92ccd06c954562647f437b138b95721a84be2bf2276bbddab3e67121071124da7aec92ccd06c954562647f437b138b95721a84be2bf2276bbddab3e6711900772b2da7560000800100008000000080000000000500000000",+      "base64": "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"+    }+  ]+}

@@ -0,0 +1,8 @@+{+ "description": "Files Bitcoin Core 32.1 wrote on a regtest chain for a payment of 1 BTC from a coin of 50 BTC: the PSBT walletcreatefundedpsbt gives in version 0 and in version 2, the version 2 one signed by walletprocesspsbt without finalizing, then finalized, and the transaction finalizepsbt extracts. See the README of the haskoin-wallet vectors in test/data/psbt.",+ "prepared_v0": "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",+ "prepared_v2": "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",+ "signed_v2": "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",+ "finalized_v2": "cHNidP8BAgQCAAAAAQMEAAAAAAEEAQEBBQECAfsEAgAAAAABAIcCAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/////wMBZgD/////AgDyBSoBAAAAGXapFMgNVSI+LxBhNjrdKnsDY8KFvymNiKwAAAAAAAAAACZqJKohqe3i9hw/cdHe/T+pmd+jaVN1XGkGiXmZYrSL69g2l06M+QAAAAABB2pHMEQCIC3jDk4scD6m90PwRyHb8dlGjGUnkRAR10BXePMQ97q0AiAaGdag9E+xcBPiU1qiyeIZ4txycDOj76TAfnQCi9T2ngEhAy9kNwIiVshU4AkOfWyLZelmBu9/QFOZ4PAYfJMJesD5AQ4gnOiVWs/0JquU+NRIe6MmBWaweIUH4yb4Fp+/rcxy3v4BDwQAAAAAARAE/f///wABAwgA4fUFAAAAAAEEGXapFKvIhl67bbYllWAxY5ddm6o2RjLKiKwAIgIDdvLnBkWN11Zzuhm479hC793ZvArkHjEznf/PkXtttusYvFYPlSwAAIAAAACAAAAAgAEAAAAAAAAAAQMINggQJAEAAAABBBl2qRRFWqUMJmMUF3HrrCCW43gzkRIn1oisAA==",+ "final_tx": "02000000019ce8955acff426ab94f8d4487ba3260566b0788507e326f8169fbfadcc72defe000000006a47304402202de30e4e2c703ea6f743f04721dbf1d9468c6527911011d7405778f310f7bab402201a19d6a0f44fb17013e2535aa2c9e219e2dc727033a3efa4c07e74028bd4f69e0121032f6437022256c854e0090e7d6c8b65e96606ef7f405399e0f0187c93097ac0f9fdffffff0200e1f505000000001976a914abc8865ebb6db62595603163975d9baa364632ca88ac36081024010000001976a914455aa50c2663141771ebac2096e37833911227d688ac00000000"+}

@@ -5,7 +5,7 @@ -- see: https://github.com/sol/hpack  name:           haskoin-core-version:        1.4.0+version:        1.5.0 synopsis:       Bitcoin & Bitcoin Cash library for Haskell description:    Please see the README on GitHub at <https://github.com/jprupp/haskoin-core#readme> category:       Bitcoin, Finance, Network@@ -17,12 +17,17 @@ license-file:   LICENSE build-type:     Simple extra-source-files:+    data/block_100000.hex     data/bip341.json     data/complex_psbt.json     data/forkid_script_tests.json     data/forkid_sighash.json     data/key_io_invalid.json     data/key_io_valid.json+    data/psbt_bip174.json+    data/psbt_bip370.json+    data/psbt_bip371.json+    data/psbt_core32.json     data/rfc6979cash.json     data/rfc6979core.json     data/rfc6979DERcash.json@@ -69,8 +74,10 @@       Haskoin.Crypto.Keys.Mnemonic       Haskoin.Crypto.Signature       Haskoin.Network+      Haskoin.Network.BlockFilter       Haskoin.Network.Bloom       Haskoin.Network.Common+      Haskoin.Network.CompactBlock       Haskoin.Network.Constants       Haskoin.Network.Data       Haskoin.Network.Message@@ -83,7 +90,7 @@       Haskoin.Transaction.Builder.Sign       Haskoin.Transaction.Common       Haskoin.Transaction.Genesis-      Haskoin.Transaction.Partial+      Haskoin.Transaction.Psbt       Haskoin.Transaction.Segwit       Haskoin.Transaction.Taproot       Haskoin.Util@@ -109,6 +116,7 @@     , array >=0.5.4.0     , base >=4.9 && <5     , base16 >=2.0+    , base64 >=1.0     , binary >=0.8.8     , bytes >=0.17     , bytestring >=0.10.10.0@@ -127,12 +135,13 @@     , ram >=0.22.0     , safe >=0.3.18     , scientific >=0.3.6.2-    , secp256k1-haskell >=1.7.0+    , secp256k1-haskell >=2.0.0     , split >=0.2.3.3     , string-conversions >=0.4.0.1     , text >=1.2.3.0     , time >=1.9.3     , transformers >=0.5.6.2+    , unicode-transforms >=0.4     , unordered-containers >=0.2.10.0     , vector >=0.12.1.2   default-language: Haskell2010@@ -152,7 +161,7 @@       Haskoin.Crypto.SignatureSpec       Haskoin.NetworkSpec       Haskoin.ScriptSpec-      Haskoin.Transaction.PartialSpec+      Haskoin.Transaction.PsbtSpec       Haskoin.Transaction.TaprootSpec       Haskoin.TransactionSpec       Haskoin.UtilSpec@@ -188,12 +197,13 @@     , ram >=0.22.0     , safe >=0.3.18     , scientific >=0.3.6.2-    , secp256k1-haskell >=1.7.0+    , secp256k1-haskell >=2.0.0     , split >=0.2.3.3     , string-conversions >=0.4.0.1     , text >=1.2.3.0     , time >=1.9.3     , transformers >=0.5.6.2+    , unicode-transforms >=0.4     , unordered-containers >=0.2.10.0     , vector >=0.12.1.2   default-language: Haskell2010

@@ -8,6 +8,7 @@ {-# LANGUAGE MultiParamTypeClasses #-} {-# LANGUAGE OverloadedRecordDot #-} {-# LANGUAGE OverloadedStrings #-}+{-# LANGUAGE PatternSynonyms #-} {-# LANGUAGE NoFieldSelectors #-}  -- |@@ -18,15 +19,15 @@ -- Stability   : experimental -- Portability : POSIX ----- Base58, CashAddr, Bech32 address and WIF private key serialization support.+-- Base58, CashAddr and Bech32 address serialization support. module Haskoin.Address   ( -- * Addresses     Address       ( PubKeyAddress,         ScriptAddress,-        WitnessAddress,         WitnessPubKeyAddress,         WitnessScriptAddress,+        WitnessAddress,         Script32Address,         CashAddress       ),@@ -49,6 +50,9 @@     addressVersion,     addressBytes,     addrToText,+    addrToBase58,+    addrToBech32,+    addrToCash,     textToAddr,     bech32ToAddr,     cashToAddr,@@ -77,13 +81,11 @@ where  import Control.Applicative (Alternative ((<|>)))-import Control.Arrow (second) import Control.DeepSeq (NFData)-import Control.Monad (guard, (<=<))+import Control.Monad (guard, when, (<=<)) import Crypto.Secp256k1-import Data.Aeson (ToJSON (toJSON), Value, withText)-import Data.Aeson.Encoding (Encoding, null_, text)-import Data.Aeson.Types (Encoding, Parser, ToJSON (toJSON), Value, withText)+import Data.Aeson (ToJSON (toJSON), withText)+import Data.Aeson.Encoding (text) import Data.Binary (Binary (..)) import Data.ByteString (ByteString) import Data.ByteString qualified as B@@ -91,7 +93,7 @@ import Data.Bytes.Put (MonadPut (putByteString, putWord64be, putWord8), runPutS) import Data.Bytes.Serial (Serial (..)) import Data.Hashable (Hashable)-import Data.Maybe (isNothing)+import Data.Maybe (fromMaybe, isJust) import Data.Serialize (Serialize (..)) import Data.Text (Text) import Data.Text qualified as T@@ -108,6 +110,12 @@ import Haskoin.Util  -- | Address format for Bitcoin and Bitcoin Cash.+--+-- The 'WitnessAddress' and 'CashAddress' patterns can only be used to match.+-- Build those addresses with 'witnessAddress' and 'cashAddress', which check+-- the version and the payload length, and which return the dedicated+-- constructor when one exists. This keeps every address with a single+-- representation, so two equal addresses always compare equal. data Address   = -- | pay to public key hash (regular)     PubKeyAddress@@ -129,53 +137,100 @@       { -- | HASH256 hash of script         hash256 :: !Hash256       }-  | -- | other witness address-    WitnessAddress+  | -- | SegWit address with a witness version other than zero, such as+    -- Taproot. The version is between 1 and 16 and the program is between 2+    -- and 40 bytes long.+    OtherWitnessAddress       { version :: !Word8,         bytes :: !ByteString       }   | -- | pay to script hash (256-bit)     Script32Address-      { -- | HAS256 hash of script+      { -- | HASH256 hash of script         hash256 :: !Hash256       }-  | -- | other CashAddr-    CashAddress+  | -- | CashAddr with a type or hash size that has no dedicated constructor.+    -- Token-aware addresses have type 2 (P2PKH) or 3 (P2SH). The type is+    -- below 16 and the hash has one of the sizes the standard allows.+    OtherCashAddress       { version :: !Word8,         bytes :: !ByteString       }   deriving     (Eq, Ord, Generic, Show, Read, Hashable, NFData) +-- | Match a SegWit address with a witness version other than zero. Use+-- 'witnessAddress' to build one.+pattern WitnessAddress :: Word8 -> ByteString -> Address+pattern WitnessAddress v d <- OtherWitnessAddress v d++-- | Match a CashAddr that has no dedicated constructor, such as a token-aware+-- address. Use 'cashAddress' to build one.+pattern CashAddress :: Word8 -> ByteString -> Address+pattern CashAddress v d <- OtherCashAddress v d++{-# COMPLETE+  PubKeyAddress,+  ScriptAddress,+  WitnessPubKeyAddress,+  WitnessScriptAddress,+  WitnessAddress,+  Script32Address,+  CashAddress+  #-}++-- | Highest witness version defined by BIP-141.+maxWitnessVersion :: Word8+maxWitnessVersion = 16++-- | Witness program length limits from BIP-141.+minWitnessProgramLength, maxWitnessProgramLength :: Int+minWitnessProgramLength = 2+maxWitnessProgramLength = 40++-- | Highest CashAddr type. The type byte holds the type in four bits.+maxCashAddrType :: Word8+maxCashAddrType = 15++-- | Hash sizes that the CashAddr version byte can describe.+cashAddrHashLengths :: [Int]+cashAddrHashLengths = [20, 24, 28, 32, 40, 48, 56, 64]++-- | CashAddr types for token-aware addresses, introduced with CashTokens.+-- They lock coins with the same script as the plain P2PKH and P2SH types.+-- The type only tells the sender that the receiver can handle tokens.+tokenPubKeyType, tokenScriptType :: Word8+tokenPubKeyType = 2+tokenScriptType = 3+ -- | Binary serialization for 'Address' type is not standard. -- Do not expect other other software to understand these. -- Use text format or output scripts for exchange. instance Serial Address where-  serialize (PubKeyAddress k) = do-    putWord8 0x00-    serialize k-  serialize (ScriptAddress s) = do-    putWord8 0x01-    serialize s-  serialize (WitnessPubKeyAddress h) = do-    putWord8 0x02-    serialize h-  serialize (WitnessScriptAddress s) = do-    putWord8 0x03-    serialize s-  serialize (WitnessAddress v d) = do-    putWord8 0x04-    putWord8 v-    putWord64be (fromIntegral (B.length d))-    putByteString d-  serialize (Script32Address s) = do-    putWord8 0x05-    serialize s-  serialize (CashAddress v d) = do-    putWord8 0x06-    putWord8 v-    putWord64be (fromIntegral (B.length d))-    putByteString d+  serialize = \case+    PubKeyAddress k -> do+      putWord8 0x00+      serialize k+    ScriptAddress s -> do+      putWord8 0x01+      serialize s+    WitnessPubKeyAddress h -> do+      putWord8 0x02+      serialize h+    WitnessScriptAddress s -> do+      putWord8 0x03+      serialize s+    OtherWitnessAddress v d -> do+      putWord8 0x04+      putWord8 v+      putSized d+    Script32Address s -> do+      putWord8 0x05+      serialize s+    OtherCashAddress v d -> do+      putWord8 0x06+      putWord8 v+      putSized d    deserialize =     getWord8 >>= \case@@ -183,20 +238,38 @@       0x01 -> ScriptAddress <$> deserialize       0x02 -> WitnessPubKeyAddress <$> deserialize       0x03 -> WitnessScriptAddress <$> deserialize-      0x04 ->-        WitnessAddress-          <$> getWord8-          <*> (getByteString . fromIntegral =<< getWord64be)+      0x04 -> do+        v <- getWord8+        d <- getSized maxWitnessProgramLength+        checked "SegWit" (witnessAddress v d)       0x05 -> Script32Address <$> deserialize       0x06 -> do-        CashAddress-          <$> getWord8-          <*> (getByteString . fromIntegral =<< getWord64be)+        v <- getWord8+        d <- getSized (maximum cashAddrHashLengths)+        checked "CashAddr" (cashAddress v d)       b ->         fail . T.unpack $           "Could not decode address type byte: "             <> encodeHex (B.singleton b)+    where+      checked kind = maybe (fail ("Invalid " <> kind <> " address")) return +-- | Write bytes behind their length. The length is a 64-bit word to stay+-- compatible with data serialized by earlier versions.+putSized :: (MonadPut m) => ByteString -> m ()+putSized d = do+  putWord64be (fromIntegral (B.length d))+  putByteString d++-- | Read bytes written by 'putSized'. The length is checked against a maximum+-- while it is still a 64-bit word, so a corrupt or hostile length can neither+-- overflow an 'Int' nor ask for a huge allocation.+getSized :: (MonadGet m) => Int -> m ByteString+getSized maxLen = do+  n <- getWord64be+  when (n > fromIntegral maxLen) $ fail "Address payload too long"+  getByteString (fromIntegral n)+ instance Serialize Address where   put = serialize   get = deserialize@@ -228,7 +301,7 @@  -- | 'Address' is another type of SegWit address, not covered above. isWitnessAddress :: Address -> Bool-isWitnessAddress WitnessAddress {} = True+isWitnessAddress OtherWitnessAddress {} = True isWitnessAddress _ = False  -- | 'Address' pays to a 256-bit script hash.@@ -238,7 +311,7 @@  -- | 'Address' is another type of CashAddr, not covered above. isCashAddress :: Address -> Bool-isCashAddress CashAddress {} = True+isCashAddress OtherCashAddress {} = True isCashAddress _ = False  -- | Smart constructor for P2PKH address.@@ -257,150 +330,179 @@ witnessScriptAddress :: Hash256 -> Address witnessScriptAddress = WitnessScriptAddress --- | Smart constructor for other SegWit address.+-- | Smart constructor for a SegWit address from its witness version and+-- program. Version zero programs must be 20 or 32 bytes long and become+-- 'WitnessPubKeyAddress' or 'WitnessScriptAddress'. Other versions keep the+-- program as it is, as long as it is between 2 and 40 bytes long. witnessAddress :: Word8 -> ByteString -> Maybe Address witnessAddress v bs = do-  guard $ v <= 16-  guard $ B.length bs >= 2 && B.length bs <= 40-  case v of-    0 -> case B.length bs of-      20 -> do-        h <- eitherToMaybe $ runGetS deserialize bs-        return $ WitnessPubKeyAddress h-      32 -> do-        h <- eitherToMaybe $ runGetS deserialize bs-        return $ WitnessScriptAddress h+  guard $ v <= maxWitnessVersion+  guard $ B.length bs >= minWitnessProgramLength+  guard $ B.length bs <= maxWitnessProgramLength+  if v == 0+    then case B.length bs of+      20 -> WitnessPubKeyAddress <$> decodeHash bs+      32 -> WitnessScriptAddress <$> decodeHash bs       _ -> Nothing-    _ -> return $ WitnessAddress v bs+    else return $ OtherWitnessAddress v bs  -- | Smart constructor for P2SH32 address. script32Address :: Hash256 -> Address script32Address = Script32Address --- | Smart constructor for CashAddr.+-- | Smart constructor for a CashAddr from its type and hash. P2PKH and P2SH+-- types with a 20-byte hash become 'PubKeyAddress' and 'ScriptAddress', and+-- the P2SH type with a 32-byte hash becomes 'Script32Address'. Every other+-- combination that the standard allows is kept as it is. cashAddress :: Word8 -> ByteString -> Maybe Address cashAddress v b = do-  guard $ v < 16-  guard $ B.length b `elem` [20, 24, 28, 32, 40, 48, 56, 64]-  case v of-    0 -> case B.length b of-      20 -> do-        h <- eitherToMaybe $ runGetS deserialize b-        return $ pubKeyAddress h-      _ -> return $ CashAddress v b-    1 -> case B.length b of-      20 -> do-        h <- eitherToMaybe $ runGetS deserialize b-        return $ scriptAddress h-      32 -> do-        h <- eitherToMaybe $ runGetS deserialize b-        return $ script32Address h-      _ -> return $ CashAddress v b-    _ -> return $ CashAddress v b+  guard $ v <= maxCashAddrType+  guard $ B.length b `elem` cashAddrHashLengths+  case (v, B.length b) of+    (0, 20) -> PubKeyAddress <$> decodeHash b+    (1, 20) -> ScriptAddress <$> decodeHash b+    (1, 32) -> Script32Address <$> decodeHash b+    _ -> return $ OtherCashAddress v b +-- | Read a hash from bytes of the right length.+decodeHash :: (Serial a) => ByteString -> Maybe a+decodeHash = eitherToMaybe . runGetS deserialize++-- | The 160-bit hash an address pays to, if it pays to one. Token-aware+-- CashAddr addresses pay to the same hash as their plain counterparts. addressHash160 :: Address -> Maybe Hash160-addressHash160 (PubKeyAddress h) = Just h-addressHash160 (ScriptAddress h) = Just h-addressHash160 (WitnessPubKeyAddress h) = Just h-addressHash160 _ = Nothing+addressHash160 = \case+  PubKeyAddress h -> Just h+  ScriptAddress h -> Just h+  WitnessPubKeyAddress h -> Just h+  OtherCashAddress v b+    | (v == tokenPubKeyType || v == tokenScriptType) && B.length b == 20 ->+        decodeHash b+  _ -> Nothing +-- | The 256-bit hash an address pays to, if it pays to one. Token-aware+-- CashAddr addresses pay to the same hash as their plain counterparts. addressHash256 :: Address -> Maybe Hash256-addressHash256 (WitnessScriptAddress h) = Just h-addressHash256 (Script32Address h) = Just h-addressHash256 _ = Nothing+addressHash256 = \case+  WitnessScriptAddress h -> Just h+  Script32Address h -> Just h+  OtherCashAddress v b+    | v == tokenScriptType && B.length b == 32 ->+        decodeHash b+  _ -> Nothing +-- | The witness version of a SegWit address, or the CashAddr type of any+-- other address. addressVersion :: Address -> Word8-addressVersion (PubKeyAddress _) = 0-addressVersion (ScriptAddress _) = 1-addressVersion (WitnessPubKeyAddress _) = 0-addressVersion (WitnessScriptAddress _) = 0-addressVersion (WitnessAddress v _) = v-addressVersion (Script32Address _) = 1-addressVersion (CashAddress v _) = v+addressVersion = \case+  PubKeyAddress _ -> 0+  ScriptAddress _ -> 1+  WitnessPubKeyAddress _ -> 0+  WitnessScriptAddress _ -> 0+  OtherWitnessAddress v _ -> v+  Script32Address _ -> 1+  OtherCashAddress v _ -> v +-- | The hash or witness program of an address, without any prefix. addressBytes :: Address -> ByteString-addressBytes (PubKeyAddress h) = runPutS (serialize h)-addressBytes (ScriptAddress h) = runPutS (serialize h)-addressBytes (WitnessPubKeyAddress h) = runPutS (serialize h)-addressBytes (WitnessScriptAddress h) = runPutS (serialize h)-addressBytes (WitnessAddress _ b) = b-addressBytes (Script32Address h) = runPutS (serialize h)-addressBytes (CashAddress _ b) = runPutS (serialize b)+addressBytes = \case+  PubKeyAddress h -> hashBytes h+  ScriptAddress h -> hashBytes h+  WitnessPubKeyAddress h -> hashBytes h+  WitnessScriptAddress h -> hashBytes h+  OtherWitnessAddress _ b -> b+  Script32Address h -> hashBytes h+  OtherCashAddress _ b -> b +-- | Raw bytes of a hash.+hashBytes :: (Serial a) => a -> ByteString+hashBytes = runPutS . serialize++-- | JSON encoding uses the text form of the address. Encoding an address that+-- has no text form on the network, such as a SegWit address on Bitcoin Cash,+-- is a programming error and throws an 'error'. A loud failure is better than+-- a silent @null@ in the output. instance MarshalJSON Network Address where-  marshalValue net a = toJSON (addrToText net a)-  marshalEncoding net = maybe null_ text . addrToText net+  marshalValue net = toJSON . addrTextOrError net+  marshalEncoding net = text . addrTextOrError net   unmarshalValue net =     withText "address" $ \t ->       case textToAddr net t of         Nothing -> fail "could not decode address"         Just x -> return x --- | Convert address to human-readable string. Uses 'Base58', 'Bech32', or--- 'CashAddr' depending on network.+addrTextOrError :: Network -> Address -> Text+addrTextOrError net a = fromMaybe (error msg) (addrToText net a)+  where+    msg =+      "Address " <> show a <> " has no text form on network " <> net.name++-- | Convert address to human-readable string. Uses 'CashAddr' on Bitcoin Cash+-- networks, and 'Base58' or 'Bech32' on Bitcoin networks. addrToText :: Network -> Address -> Maybe Text-addrToText net a@PubKeyAddress {hash160 = h}-  | isNothing net.cashAddrPrefix =-      Just . encodeBase58Check . runPutS $ base58put net a-  | otherwise = cashAddrEncode net 0 (runPutS $ serialize h)-addrToText net a@ScriptAddress {hash160 = h}-  | isNothing net.cashAddrPrefix =-      Just . encodeBase58Check . runPutS $ base58put net a-  | otherwise =-      cashAddrEncode net 1 (runPutS $ serialize h)-addrToText net WitnessPubKeyAddress {hash160 = h} = do-  hrp <- net.bech32Prefix-  segwitEncode hrp 0 (B.unpack (runPutS $ serialize h))-addrToText net WitnessScriptAddress {hash256 = h} = do-  hrp <- net.bech32Prefix-  segwitEncode hrp 0 (B.unpack (runPutS $ serialize h))-addrToText net WitnessAddress {version = v, bytes = d} = do+addrToText net a+  | isJust net.cashAddrPrefix = addrToCash net a+  | otherwise = addrToBase58 net a <|> addrToBech32 net a++-- | Encode a P2PKH or P2SH address in the legacy 'Base58' format of the+-- network. Works on Bitcoin Cash networks too, for software that still needs+-- the legacy format there. Other address kinds have no 'Base58' form.+addrToBase58 :: Network -> Address -> Maybe Base58+addrToBase58 net = \case+  PubKeyAddress h -> Just $ base58 net.addrPrefix h+  ScriptAddress h -> Just $ base58 net.scriptPrefix h+  _ -> Nothing+  where+    base58 pfx h = encodeBase58Check . runPutS $ putWord8 pfx >> serialize h++-- | Encode a SegWit address in the 'Bech32' or 'Bech32m' format of the+-- network. Fails on networks without SegWit and for other address kinds.+addrToBech32 :: Network -> Address -> Maybe Bech32+addrToBech32 net a = do   hrp <- net.bech32Prefix-  segwitEncode hrp v (B.unpack d)-addrToText net Script32Address {hash256 = h}-  | isNothing net.cashAddrPrefix =-      Nothing-  | otherwise =-      cashAddrEncode net 1 (runPutS $ serialize h)-addrToText net CashAddress {version = v, bytes = h}-  | isNothing net.cashAddrPrefix =-      Nothing-  | otherwise =-      cashAddrEncode net v h+  case a of+    WitnessPubKeyAddress h -> segwitEncode hrp 0 (B.unpack (hashBytes h))+    WitnessScriptAddress h -> segwitEncode hrp 0 (B.unpack (hashBytes h))+    OtherWitnessAddress v d -> segwitEncode hrp v (B.unpack d)+    _ -> Nothing +-- | Encode an address in the 'CashAddr' format of the network. Fails on+-- networks without CashAddr and for SegWit addresses.+addrToCash :: Network -> Address -> Maybe CashAddr+addrToCash net = \case+  PubKeyAddress h -> cashAddrEncode net 0 (hashBytes h)+  ScriptAddress h -> cashAddrEncode net 1 (hashBytes h)+  Script32Address h -> cashAddrEncode net 1 (hashBytes h)+  OtherCashAddress v b -> cashAddrEncode net v b+  _ -> Nothing+ -- | Parse 'Base58', 'Bech32' or 'CashAddr' address, depending on network. textToAddr :: Network -> Text -> Maybe Address textToAddr net txt =   cashToAddr net txt <|> bech32ToAddr net txt <|> base58ToAddr net txt  cashToAddr :: Network -> Text -> Maybe Address-cashToAddr net txt = do-  (ver, bs) <- cashAddrDecode net txt-  case ver of-    0 -> case B.length bs of-      20 -> PubKeyAddress <$> eitherToMaybe (runGetS deserialize bs)-      _ -> return $ CashAddress ver bs-    1 -> case B.length bs of-      20 -> ScriptAddress <$> eitherToMaybe (runGetS deserialize bs)-      32 -> Script32Address <$> eitherToMaybe (runGetS deserialize bs)-      _ -> return $ CashAddress ver bs-    _ -> return $ CashAddress ver bs+cashToAddr net txt = uncurry cashAddress =<< cashAddrDecode net txt  bech32ToAddr :: Network -> Text -> Maybe Address bech32ToAddr net txt = do   hrp <- net.bech32Prefix-  (ver, bs) <- second B.pack <$> segwitDecode hrp txt-  case ver of-    0 -> case B.length bs of-      20 -> WitnessPubKeyAddress <$> eitherToMaybe (runGetS deserialize bs)-      32 -> WitnessScriptAddress <$> eitherToMaybe (runGetS deserialize bs)-      _ -> Nothing-    _ -> Just $ WitnessAddress ver bs+  (ver, prog) <- segwitDecode hrp txt+  witnessAddress ver (B.pack prog)  base58ToAddr :: Network -> Text -> Maybe Address-base58ToAddr net txt =-  eitherToMaybe . runGetS (base58get net) =<< decodeBase58Check txt+base58ToAddr net txt = do+  guard $ T.length txt <= maxBase58AddressLength+  bs <- decodeBase58Check txt+  eitherToMaybe $ runGetS (base58get net) bs +-- | A 'Base58' address holds 25 bytes: a version byte, a 20-byte hash and a+-- 4-byte checksum. That never takes more than 35 digits, because 58^35 is+-- larger than 256^25. Longer strings are rejected before any decoding, since+-- the time to decode grows with the square of the length.+maxBase58AddressLength :: Int+maxBase58AddressLength = 35+ base58get :: (MonadGet m) => Network -> m Address base58get net = do   pfx <- getWord8@@ -414,39 +516,35 @@       | x == net.scriptPrefix = return $ ScriptAddress a       | otherwise = fail "Does not recognize address prefix" -base58put :: (MonadPut m) => Network -> Address -> m ()-base58put net (PubKeyAddress h) = do-  putWord8 net.addrPrefix-  serialize h-base58put net (ScriptAddress h) = do-  putWord8 net.scriptPrefix-  serialize h-base58put _ _ = error "Cannot serialize this address as Base58"+-- | HASH160 of a public key in its serialized form.+pubKeyHash :: Ctx -> PublicKey -> Hash160+pubKeyHash ctx = addressHash . marshal ctx  -- | Obtain a standard pay-to-public-key-hash address from a public key. pubKeyAddr :: Ctx -> PublicKey -> Address-pubKeyAddr ctx = PubKeyAddress . addressHash . marshal ctx---- | Obtain a standard pay-to-public-key-hash (P2PKH) address from a 'Hash160'.-p2pkhAddr :: Hash160 -> Address-p2pkhAddr = PubKeyAddress+pubKeyAddr ctx = p2pkhAddr . pubKeyHash ctx  -- | Obtain a SegWit pay-to-witness-public-key-hash (P2WPKH) address from a--- public key.-pubKeyWitnessAddr :: Ctx -> PublicKey -> Address-pubKeyWitnessAddr ctx =-  WitnessPubKeyAddress . addressHash . marshal ctx+-- public key. Returns 'Nothing' for an uncompressed key. BIP-143 makes witness+-- spends with uncompressed keys non-standard, so coins sent to such an address+-- could not be spent through the normal network.+pubKeyWitnessAddr :: Ctx -> PublicKey -> Maybe Address+pubKeyWitnessAddr ctx pk = do+  guard pk.compress+  return . p2wpkhAddr $ pubKeyHash ctx pk  -- | Obtain a backwards-compatible SegWit P2SH-P2WPKH address from a public key.-pubKeyCompatWitnessAddr :: Ctx -> PublicKey -> Address-pubKeyCompatWitnessAddr ctx =-  p2shAddr-    . addressHash-    . marshal ctx-    . PayWitnessPKHash-    . addressHash-    . marshal ctx+-- Returns 'Nothing' for an uncompressed key, for the same reason as+-- 'pubKeyWitnessAddr'.+pubKeyCompatWitnessAddr :: Ctx -> PublicKey -> Maybe Address+pubKeyCompatWitnessAddr ctx pk = do+  guard pk.compress+  return . payToScriptAddress ctx . PayWitnessPKHash $ pubKeyHash ctx pk +-- | Obtain a standard pay-to-public-key-hash (P2PKH) address from a 'Hash160'.+p2pkhAddr :: Hash160 -> Address+p2pkhAddr = PubKeyAddress+ -- | Obtain a SegWit pay-to-witness-public-key-hash (P2WPKH) address from a -- 'Hash160'. p2wpkhAddr :: Hash160 -> Address@@ -472,10 +570,11 @@ -- | Compute a backwards-compatible SegWit P2SH-P2WSH address. payToNestedScriptAddress :: Ctx -> ScriptOutput -> Address payToNestedScriptAddress ctx =-  p2shAddr . addressHash . marshal ctx . toP2WSH . encodeOutput ctx+  p2shAddr . addressHash . marshal ctx . PayWitnessScriptHash . sha256 . marshal ctx --- | Encode an output script from an address. Will fail if using a--- pay-to-witness address on a non-SegWit network.+-- | Get the output script that locks coins sent to an address. Token-aware+-- CashAddr addresses use the same script as their plain counterparts. Other+-- CashAddr kinds have no known script, so the result is 'Nothing'. addressToOutput :: Address -> Maybe ScriptOutput addressToOutput =   \case@@ -483,13 +582,24 @@     ScriptAddress h -> Just (PayScriptHash h)     WitnessPubKeyAddress h -> Just (PayWitnessPKHash h)     WitnessScriptAddress h -> Just (PayWitnessScriptHash h)-    WitnessAddress v d -> Just (PayWitness v d)+    OtherWitnessAddress v d -> Just (PayWitness v d)     Script32Address h -> Just (PayScript32Hash h)-    CashAddress v a -> Nothing+    OtherCashAddress v b -> cashAddressOutput v b +-- | Output script for a CashAddr kind without a dedicated constructor.+cashAddressOutput :: Word8 -> ByteString -> Maybe ScriptOutput+cashAddressOutput v b+  | v == tokenPubKeyType && len == 20 = PayPKHash <$> decodeHash b+  | v == tokenScriptType && len == 20 = PayScriptHash <$> decodeHash b+  | v == tokenScriptType && len == 32 = PayScript32Hash <$> decodeHash b+  | otherwise = Nothing+  where+    len = B.length b+ -- | Get output script AST for an 'Address'. addressToScript :: Ctx -> Address -> Maybe Script-addressToScript ctx addr = encodeOutput ctx <$> addressToOutput addr+addressToScript ctx addr =+  addressToOutput addr >>= eitherToMaybe . encodeOutput ctx  -- | Encode address as output script in 'ByteString' form. addressToScriptBS :: Ctx -> Address -> Maybe ByteString@@ -509,16 +619,17 @@   where     e = "Could not decode address" --- | Get the 'Address' of a 'ScriptOutput'.+-- | Get the 'Address' of a 'ScriptOutput'. A pay-to-public-key output has no+-- address. Its coins are not spendable with the input script of the P2PKH+-- address of the same key, so reporting that address would mislead. outputAddress :: Ctx -> ScriptOutput -> Maybe Address-outputAddress ctx =+outputAddress _ =   \case     PayPKHash h -> Just $ PubKeyAddress h     PayScriptHash h -> Just $ ScriptAddress h-    PayPK k -> Just $ pubKeyAddr ctx k     PayWitnessPKHash h -> Just $ WitnessPubKeyAddress h     PayWitnessScriptHash h -> Just $ WitnessScriptAddress h-    PayWitness v d -> Just $ WitnessAddress v d+    PayWitness v d -> witnessAddress v d     PayScript32Hash h -> Just $ Script32Address h     _ -> Nothing @@ -528,4 +639,5 @@   \case     (RegularInput (SpendPKHash _ key)) -> Just $ pubKeyAddr ctx key     (ScriptHashInput _ rdm) -> Just $ payToScriptAddress ctx rdm+    (NestedWitnessInput rdm) -> Just $ payToScriptAddress ctx rdm     _ -> Nothing

@@ -26,19 +26,17 @@ import Data.Array (Array, assocs, listArray, (!), (//)) import Data.ByteString (ByteString) import Data.ByteString qualified as B-import Data.ByteString.Char8 qualified as C-import Data.Bytes.Get () import Data.Bytes.Put (runPutS) import Data.Bytes.Serial (Serial (serialize))-import Data.Char (chr, ord)-import Data.Maybe (fromMaybe, isJust, listToMaybe)+import Data.Char (chr) import Data.String.Conversions (cs) import Data.Text (Text) import Data.Text qualified as T+import Data.Text.Encoding qualified as E import Data.Word (Word8) import Haskoin.Crypto.Hash (checkSum32) import Haskoin.Util.Helpers (bsToInteger, integerToBS)-import Numeric (readInt, showIntAtBase)+import Numeric (showIntAtBase)  -- | 'Base58' classic Bitcoin address format. type Base58 = Text@@ -50,6 +48,9 @@ b58Array :: Array Int Word8 b58Array = listArray (0, 57) (B.unpack b58Data) +-- | Value of each byte as a Base58 digit. Bytes outside the alphabet map to+-- 'Nothing'. Every byte of a multi-byte UTF-8 character is outside the+-- alphabet, so no non-ASCII character can ever be read as a digit. b58InvArray :: Array Word8 (Maybe Int) b58InvArray =   listArray@@ -59,8 +60,7 @@   where     swap (i, c) = (c, Just i) --- | Convert a number less than or equal to provided integer into a 'Base58'--- character.+-- | Convert a number less than 58 into a 'Base58' character. b58 :: Int -> Word8 b58 = (b58Array !) @@ -73,17 +73,15 @@ encodeBase58I :: Integer -> Base58 encodeBase58I i = cs $ showIntAtBase 58 (chr . fromIntegral . b58) i "" --- | Decode a 'Base58' string into an arbitrary-length 'Integer'.-decodeBase58I :: Base58 -> Maybe Integer-decodeBase58I s =-  case go of-    Just (r, []) -> Just r-    _ -> Nothing+-- | Decode the UTF-8 bytes of a 'Base58' string into an 'Integer'. Fails on+-- the first byte that is not a 'Base58' digit.+decodeBase58I :: ByteString -> Maybe Integer+decodeBase58I = B.foldl' step (Just 0)   where-    p = isJust . b58' . fromIntegral . ord-    f = fromMaybe e . b58' . fromIntegral . ord-    go = listToMaybe $ readInt 58 p f (cs s)-    e = error "Could not decode base58"+    step acc w = do+      n <- acc+      d <- b58' w+      return (n * 58 + toInteger d)  -- | Encode an arbitrary 'ByteString' into a its 'Base58' representation, -- preserving leading zeroes.@@ -92,21 +90,29 @@   l <> r   where     (z, b) = B.span (== 0) bs-    l = cs $ B.replicate (B.length z) (b58 0) -- preserve leading 0's+    l = T.replicate (B.length z) "1" -- preserve leading 0's     r       | B.null b = T.empty       | otherwise = encodeBase58I $ bsToInteger b --- | Decode a 'Base58'-encoded 'Text' to a 'ByteString'.+-- | Decode a 'Base58'-encoded 'Text' to a 'ByteString'. Returns 'Nothing' if+-- the input contains any character outside the 'Base58' alphabet.+--+-- The time this takes grows with the square of the length of the input,+-- since the digits are accumulated into one big number. Bound the length+-- before decoding text from an untrusted source. No Bitcoin address is+-- longer than 35 characters and no extended key longer than 112;+-- 'Haskoin.Address.textToAddr', 'Haskoin.Crypto.Keys.fromWif' and+-- 'Haskoin.Crypto.Keys.xPrvImport' apply those bounds themselves. decodeBase58 :: Base58 -> Maybe ByteString decodeBase58 t =   B.append prefix <$> r   where-    (z, b) = B.span (== b58 0) (cs t)+    (z, b) = B.span (== b58 0) (E.encodeUtf8 t)     prefix = B.replicate (B.length z) 0 -- preserve leading 1's     r       | B.null b = Just B.empty-      | otherwise = integerToBS <$> decodeBase58I (cs b)+      | otherwise = integerToBS <$> decodeBase58I b  -- | Computes a checksum for the input 'ByteString' and encodes the input and -- the checksum as 'Base58'.@@ -115,11 +121,16 @@   (encodeBase58 . B.append bs . runPutS . serialize . checkSum32) bs  -- | Decode a 'Base58'-encoded string that contains a checksum. This function--- returns 'Nothing' if the input string contains invalid 'Base58' characters or--- if the checksum fails.+-- returns 'Nothing' if the input string contains invalid 'Base58' characters,+-- if it is too short to hold a checksum, or if the checksum fails. The cost+-- grows with the square of the length, as for 'decodeBase58': bound the+-- length of untrusted input first. decodeBase58Check :: Base58 -> Maybe ByteString-decodeBase58Check bs = do-  rs <- decodeBase58 bs-  let (res, chk) = B.splitAt (B.length rs - 4) rs+decodeBase58Check t = do+  rs <- decodeBase58 t+  guard $ B.length rs >= checkSumLength+  let (res, chk) = B.splitAt (B.length rs - checkSumLength) rs   guard $ chk == (runPutS . serialize . checkSum32) res   return res+  where+    checkSumLength = 4

@@ -4,7 +4,7 @@ {-# LANGUAGE NoFieldSelectors #-}  -- |--- Module      : Haskoin.Address.Base58+-- Module      : Haskoin.Address.Bech32 -- Copyright   : No rights reserved -- License     : MIT -- Maintainer  : jprupp@protonmail.ch@@ -51,7 +51,6 @@     (.|.),   ) import Data.ByteString qualified as B-import Data.Char (toUpper) import Data.Foldable (foldl') import Data.Functor.Identity (Identity, runIdentity) import Data.Ix (Ix (..))@@ -103,15 +102,21 @@ charset =   listArray (UnsafeWord5 0, UnsafeWord5 31) "qpzry9x8gf2tvdw0s3jn54khce6mua7l" --- | Convert a character to its five-bit value from 'Bech32' 'charset'.+-- | Inverse of 'charset'. Only the lowercase characters are present. The+-- decoder checks that the string is ASCII and not mixed case, then lowercases+-- it, before looking characters up here. No character from another alphabet+-- can therefore stand in for a 'Bech32' character.+charsetInverse :: Array Char (Maybe Word5)+charsetInverse =+  listArray ('0', 'z') (repeat Nothing) // map swap (assocs charset)+  where+    swap (w, c) = (c, Just w)++-- | Convert a lowercase character to its five-bit value from 'charset'. charsetMap :: Char -> Maybe Word5 charsetMap c-  | inRange (bounds inv) upperC = inv ! upperC+  | inRange (bounds charsetInverse) c = charsetInverse ! c   | otherwise = Nothing-  where-    upperC = toUpper c-    inv = listArray ('0', 'Z') (repeat Nothing) // map swap (assocs charset)-    swap (a, b) = (toUpper b, Just a)  -- | Calculate or validate 'Bech32' checksum. bech32Polymod :: [Word5] -> Word@@ -121,14 +126,16 @@       foldl' xor chk' [g | (g, i) <- zip generator [25 ..], testBit chk i]       where         generator = [0x3b6a57b2, 0x26508e6d, 0x1ea119fa, 0x3d4233dd, 0x2a1462b3]-        chk' = chk .<<. 5 `xor` fromWord5 value+        -- Keep only the low 25 bits before shifting, as the reference+        -- implementation does, so the accumulator never grows past 30 bits.+        chk' = ((chk .&. 0x1ffffff) .<<. 5) `xor` fromWord5 value  -- | Convert human-readable part of 'Bech32' string into a list of five-bit -- words. bech32HRPExpand :: HRP -> [Word5] bech32HRPExpand hrp =-  map (UnsafeWord5 . (.>>. 5)) hrpBytes-    ++ [UnsafeWord5 0]+  map (word5 . (.>>. 5)) hrpBytes+    ++ [word5 (0 :: Word8)]     ++ map word5 hrpBytes   where     hrpBytes = B.unpack $ E.encodeUtf8 hrp@@ -158,6 +165,10 @@ maxBech32Length :: Int maxBech32Length = 90 +-- | Number of five-bit words in a Bech32 checksum.+checksumLength :: Int+checksumLength = 6+ -- | Encode string of five-bit words into 'Bech32' using a provided -- human-readable part. Can fail if 'HRP' is invalid or result would be longer -- than 90 characters.@@ -170,25 +181,30 @@   guard $ T.length result <= maxBech32Length   return result +-- | BIP-173 allows only US-ASCII characters in the range 33 to 126 anywhere+-- in a 'Bech32' string.+isBech32Char :: Char -> Bool+isBech32Char c = c >= '\x21' && c <= '\x7e'+ -- | Check that human-readable part is valid for a 'Bech32' string. checkHRP :: HRP -> Bool-checkHRP hrp =-  not (T.null hrp)-    && T.all (\char -> char >= '\x21' && char <= '\x7e') hrp+checkHRP hrp = not (T.null hrp) && T.all isBech32Char hrp  -- | Decode human-readable 'Bech32' string into a human-readable part and a -- string of five-bit words. bech32Decode :: Bech32 -> Maybe (Bech32Encoding, HRP, [Word5]) bech32Decode bech32 = do   guard $ T.length bech32 <= maxBech32Length+  guard $ T.all isBech32Char bech32+  -- The string must be all uppercase or all lowercase, never a mix.   guard $ T.toUpper bech32 == bech32 || lowerBech32 == bech32   let (hrp, dat) = T.breakOnEnd "1" lowerBech32-  guard $ T.length dat >= 6+  guard $ T.length dat >= checksumLength   hrp' <- T.stripSuffix "1" hrp   guard $ checkHRP hrp'   dat' <- mapM charsetMap $ T.unpack dat   enc <- bech32VerifyChecksum hrp' dat'-  return (enc, hrp', take (T.length dat - 6) dat')+  return (enc, hrp', take (T.length dat - checksumLength) dat')   where     lowerBech32 = T.toLower bech32 @@ -218,13 +234,17 @@     go (value : dat') acc bits result =       go dat' acc' (bits' `rem` tobits) (result' : result)       where-        acc' = (acc .<<. frombits) .|. fromIntegral value+        -- Only the low (frombits + tobits - 1) bits of the accumulator are+        -- ever read, so masking to them keeps it from overflowing on long+        -- inputs.+        acc' = ((acc .<<. frombits) .|. fromIntegral value) .&. maxAcc         bits' = bits + frombits         result' =           [ (acc' .>>. b) .&. maxv           | b <- [bits' - tobits, bits' - 2 * tobits .. 0]           ]     maxv = (1 .<<. tobits) - 1+    maxAcc = (1 .<<. (frombits + tobits - 1)) - 1 {-# INLINE convertBits #-}  -- | Convert from eight-bit to five-bit word string, adding padding as required.@@ -232,7 +252,9 @@ toBase32 dat =   map word5 $ runIdentity $ convertBits (map fromIntegral dat) 8 5 yesPadding --- | Convert from five-bit word string to eight-bit word string, ignoring padding.+-- | Convert from five-bit word string to eight-bit word string. Fails if the+-- padding bits are not zero, or if there are enough of them to hold a whole+-- five-bit word, because the input is then not a canonical encoding. toBase256 :: [Word5] -> Maybe [Word8] toBase256 dat =   map fromIntegral <$> convertBits (map fromWord5 dat) 5 8 noPadding@@ -249,8 +271,10 @@ segwitDecode :: HRP -> Bech32 -> Maybe (Word8, Data) segwitDecode hrp addr = do   (enc, hrp', dat) <- bech32Decode addr-  guard $ (hrp == hrp') && not (null dat)-  let (UnsafeWord5 witver : datBase32) = dat+  guard $ hrp == hrp'+  (witver, datBase32) <- case dat of+    [] -> Nothing+    (v : rest) -> Just (fromWord5 v, rest)   decoded <- toBase256 datBase32   guard $ segwitCheck enc witver decoded   return (witver, decoded)@@ -260,6 +284,6 @@ segwitEncode :: HRP -> Word8 -> Data -> Maybe Text segwitEncode hrp witver witprog = do   guard $ segwitCheck enc witver witprog-  bech32Encode enc hrp $ UnsafeWord5 witver : toBase32 witprog+  bech32Encode enc hrp $ word5 witver : toBase32 witprog   where     enc = if witver == 0 then Bech32 else Bech32m

@@ -44,8 +44,9 @@ import Data.ByteString (ByteString) import Data.ByteString qualified as B import Data.ByteString.Char8 qualified as C-import Data.Char (ord, toLower, toUpper)+import Data.Char (isAscii, ord) import Data.List (elemIndex, foldl')+import Data.Maybe (fromMaybe) import Data.Text (Text) import Data.Text qualified as T import Data.Text.Encoding (decodeUtf8, encodeUtf8)@@ -58,7 +59,8 @@ -- from the wrong network. type CashPrefix = Text --- | 'CashAddr' version, until new address schemes appear it will be zero.+-- | 'CashAddr' type. Zero is P2PKH and one is P2SH. Two and three are their+-- token-aware forms, introduced with CashTokens. type CashVersion = Word8  -- | High level 'CashAddr' human-reabale string, with explicit or implicit prefix.@@ -72,15 +74,26 @@ charset :: String charset = "qpzry9x8gf2tvdw0s3jn54khce6mua7l" +-- | Number of five-bit characters in a 'Cash32' checksum.+checkSumLength :: Int+checkSumLength = 8+ -- | Get the 32-bit number associated with this 'Cash32' character. base32char :: Char -> Maybe Word8 base32char = fmap fromIntegral . (`elemIndex` charset) +-- | A 'CashAddr' string must be all lowercase or all uppercase. A mix of both+-- must be rejected. Only ASCII is allowed, so no character from another+-- alphabet can stand in for a letter.+singleCase :: Text -> Bool+singleCase t = T.all isAscii t && (T.toUpper t == t || T.toLower t == t)+ -- | High-Level: decode 'CashAddr' string if it is valid for the -- provided 'Network'. Prefix may be omitted from the string. cashAddrDecode :: Network -> CashAddr -> Maybe (CashVersion, ByteString) cashAddrDecode net ca = do   epfx <- net.cashAddrPrefix+  guard (singleCase ca)   let (cpfx, cdat) = T.breakOnEnd ":" (T.toLower ca)   guard (T.null cpfx || T.init cpfx == epfx)   (dpfx, ver, bs) <- cash32decodeType (epfx <> ":" <> cdat)@@ -95,19 +108,17 @@   cash32encodeType pfx cv bs  -- | Mid-Level: decode 'CashAddr' string containing arbitrary prefix, plus a--- version byte before the 'ByteString' that encodes type and length.+-- version byte before the 'ByteString' that encodes type and length. The+-- string must be the canonical encoding of its payload: padding bits must be+-- zero and there must be fewer than five of them. cash32decodeType :: Cash32 -> Maybe (CashPrefix, CashVersion, ByteString)-cash32decodeType ca' = do-  guard (T.toUpper ca' == ca' || ca == ca')-  (dpfx, bs) <- cash32decode ca-  guard (not (B.null bs))-  let vb = B.head bs-      pay = B.tail bs+cash32decodeType ca = do+  (dpfx, groups) <- cash32decodeGroups ca+  bs <- toBase256 groups+  (vb, pay) <- B.uncons bs   (ver, len) <- decodeVersionByte vb   guard (B.length pay == len)   return (dpfx, ver, pay)-  where-    ca = T.toLower ca'  -- | Mid-Level: encode 'CashAddr' string containing arbitrary prefix and -- 'CashVersion'. Length must be among those allowed by the standard.@@ -119,26 +130,33 @@   return (cash32encode pfx pl)  -- | Low-Level: decode 'Cash32' string. 'CashPrefix' must be part of the string.--- No version or hash length validation is performed.+-- No version or hash length validation is performed. The data may be any+-- sequence of five-bit groups, so bits left over after the last whole byte+-- are dropped. 'cash32decodeType' is the layer that enforces canonical+-- padding. cash32decode :: Cash32 -> Maybe (CashPrefix, ByteString) cash32decode text = do-  let bs = C.map toLower bs'-  guard (C.map toUpper bs' == bs' || bs == bs')-  let (pfx', dat) = C.breakEnd (== ':') bs+  (pfx, groups) <- cash32decodeGroups text+  return (pfx, wholeBytes groups)++-- | Check the checksum of a 'Cash32' string and return its prefix and its+-- data as five-bit groups, one per byte, without the checksum.+cash32decodeGroups :: Cash32 -> Maybe (CashPrefix, ByteString)+cash32decodeGroups text = do+  guard (singleCase text)+  let bs = encodeUtf8 (T.toLower text)+      (pfx', dat) = C.breakEnd (== ':') bs   pfx <-     if B.null pfx' || pfx' == C.singleton ':'       then Nothing       else Just (B.init pfx')   b32 <- B.pack <$> mapM base32char (C.unpack dat)+  guard (B.length b32 >= checkSumLength)   let px = B.map (.&. 0x1f) pfx       pd = px <> B.singleton 0 <> b32       cs = cash32Polymod pd-      bb = B.take (B.length b32 - 8) b32   guard (verifyCash32Polymod cs)-  let out = toBase256 bb-  return (decodeUtf8 pfx, out)-  where-    bs' = encodeUtf8 text+  return (decodeUtf8 pfx, B.take (B.length b32 - checkSumLength) b32)  -- | Low-Level: encode 'Cash32' string for 'CashPrefix' provided. Can encode -- arbitrary data. No prefix or length validation is performed.@@ -146,7 +164,7 @@ cash32encode pfx bs =   let b32 = toBase32 bs       px = B.map (.&. 0x1f) (encodeUtf8 pfx)-      pd = px <> B.singleton 0 <> b32 <> B.replicate 8 0+      pd = px <> B.singleton 0 <> b32 <> B.replicate checkSumLength 0       cs = cash32Polymod pd       c32 = B.map f (b32 <> cs)       f = fromIntegral . ord . (charset !!) . fromIntegral@@ -158,18 +176,26 @@ toBase32 =   B.pack     . map fromIntegral-    . fst+    -- With padding allowed the conversion always succeeds.+    . fromMaybe []     . convertBits True 8 5     . map fromIntegral     . B.unpack --- | Convert base of 'ByteString' from five to eight bits per byte. Ignore--- padding to be symmetric with respect to 'toBase32' function.-toBase256 :: ByteString -> ByteString+-- | Convert five-bit groups to the bytes they fill completely, dropping any+-- bits left over at the end.+wholeBytes :: ByteString -> ByteString+wholeBytes groups =+  B.take (5 * B.length groups `div` 8) . B.pack . map fromIntegral . fromMaybe [] $+    convertBits True 5 8 (map fromIntegral (B.unpack groups))++-- | Convert base of 'ByteString' from five to eight bits per byte. Fails if+-- the padding bits are not zero, or if there are enough of them to hold a+-- whole five-bit group, because the input is then not the canonical encoding+-- of its payload.+toBase256 :: ByteString -> Maybe ByteString toBase256 =-  B.pack-    . map fromIntegral-    . fst+  fmap (B.pack . map fromIntegral)     . convertBits False 5 8     . map fromIntegral     . B.unpack@@ -185,7 +211,7 @@     ls = [20, 24, 28, 32, 40, 48, 56, 64]  -- | Encode 'CashVersion' and length into version byte. Fail if version is--- larger than five bits, or length incorrect, since that is invalid.+-- larger than four bits, or length incorrect, since that is invalid. encodeVersionByte :: CashVersion -> Int -> Maybe Word8 encodeVersionByte ver len = do   guard (ver == ver .&. 0x0f)@@ -220,4 +246,4 @@  -- | Validate that polymod 'ByteString' (eight bytes) is equal to zero. verifyCash32Polymod :: ByteString -> Bool-verifyCash32Polymod = (== B.replicate 8 0)+verifyCash32Polymod = (== B.replicate checkSumLength 0)

@@ -41,7 +41,6 @@ import Data.Binary (Binary (..)) import Data.Bits import Data.ByteString qualified as B-import Data.ByteString.Builder (char7) import Data.ByteString.Lazy qualified as L import Data.Bytes.Get import Data.Bytes.Put@@ -76,13 +75,11 @@ instance Serial Block where   deserialize = do     header <- deserialize-    (VarInt c) <- deserialize-    txs <- replicateM (fromIntegral c) deserialize+    txs <- getVarIntList deserialize     return $ Block header txs   serialize (Block h txs) = do     serialize h-    putVarInt $ length txs-    forM_ txs serialize+    putVarIntList serialize txs  instance Serialize Block where   get = deserialize@@ -140,27 +137,44 @@  instance ToJSON BlockHash where   toJSON = String . blockHashToHex-  toEncoding = hexEncoding . L.reverse . runPutL . serialize+  toEncoding (BlockHash h) = reversedHexEncoding h  -- | Block hashes are reversed with respect to the in-memory byte order in a -- block hash when displayed. blockHashToHex :: BlockHash -> Text-blockHashToHex (BlockHash h) = encodeHex (B.reverse (runPutS (serialize h)))+blockHashToHex (BlockHash h) = reversedHex h  -- | Convert a human-readable hex block hash into a 'BlockHash'. Bytes are--- reversed as normal.+-- reversed as normal. The text must hold exactly 32 bytes of hex. hexToBlockHash :: Text -> Maybe BlockHash-hexToBlockHash hex = do-  bs <- B.reverse <$> decodeHex hex-  h <- eitherToMaybe (runGetS deserialize bs)-  return $ BlockHash h+hexToBlockHash = fmap BlockHash . hexToReversedHash +-- | Hex of a 256-bit hash in display order, which is the reverse of its byte+-- order in memory. Block hashes and Merkle roots are shown this way.+reversedHex :: Hash256 -> Text+reversedHex = encodeHex . B.reverse . runPutS . serialize++-- | JSON encoding of a 256-bit hash in display order.+reversedHexEncoding :: Hash256 -> Encoding+reversedHexEncoding = hexEncoding . L.reverse . runPutL . serialize++-- | Parse hex in display order into a 256-bit hash. Any input that is not+-- exactly 32 bytes of hex is rejected instead of being truncated.+hexToReversedHash :: Text -> Maybe Hash256+hexToReversedHash hex = do+  bs <- decodeHex hex+  guard (B.length bs == 32)+  eitherToMaybe $ runGetS deserialize $ B.reverse bs+ -- | Data type recording information of a 'Block'. The hash of a block is -- defined as the hash of this data structure, serialized. The block mining -- process involves finding a partial hash collision by varying the nonce in the -- 'BlockHeader' and/or additional entropy in the coinbase 'Transaction' of this -- 'Block'. Variations in the coinbase will result in different merkle roots in -- the 'BlockHeader'.+--+-- The JSON form shows the previous block hash and the Merkle root in display+-- order, like the @getblockheader@ RPC call of Bitcoin Core. data BlockHeader = BlockHeader   { version :: !Word32, --  4 bytes @@ -188,7 +202,7 @@     object       [ "version" .= v,         "prevblock" .= p,-        "merkleroot" .= encodeHex (runPutS $ serialize m),+        "merkleroot" .= reversedHex m,         "timestamp" .= t,         "bits" .= b,         "nonce" .= n@@ -198,7 +212,7 @@       mconcat         [ "version" `pair` word32 v,           "prevblock" `pair` toEncoding p,-          "merkleroot" `pair` hexEncoding (runPutL $ serialize m),+          "merkleroot" `pair` reversedHexEncoding m,           "timestamp" `pair` toEncoding t,           "bits" `pair` toEncoding b,           "nonce" `pair` toEncoding n@@ -210,12 +224,12 @@       BlockHeader         <$> o .: "version"         <*> o .: "prevblock"-        <*> (f =<< o .: "merkleroot")+        <*> (merkleRoot =<< o .: "merkleroot")         <*> o .: "timestamp"         <*> o .: "bits"         <*> o .: "nonce"     where-      f = maybe mzero return . (eitherToMaybe . runGetS deserialize <=< decodeHex)+      merkleRoot = maybe (fail "Invalid Merkle root") return . hexToReversedHash  instance Serial BlockHeader where   deserialize = do@@ -281,14 +295,11 @@   deserialize =     GetBlocks       <$> getWord32le-      <*> (repList =<< deserialize)+      <*> getVarIntList deserialize       <*> deserialize-    where-      repList (VarInt c) = replicateM (fromIntegral c) deserialize   serialize (GetBlocks v xs h) = do     putWord32le v-    putVarInt $ length xs-    forM_ xs serialize+    putVarIntList serialize xs     serialize h  instance Serialize GetBlocks where@@ -313,14 +324,11 @@   deserialize =     GetHeaders       <$> getWord32le-      <*> (repList =<< deserialize)+      <*> getVarIntList deserialize       <*> deserialize-    where-      repList (VarInt c) = replicateM (fromIntegral c) deserialize   serialize (GetHeaders v xs h) = do     putWord32le v-    putVarInt $ length xs-    forM_ xs serialize+    putVarIntList serialize xs     serialize h  instance Serialize GetHeaders where@@ -343,13 +351,9 @@   deriving (Eq, Show, Read, Generic, NFData)  instance Serial Headers where-  deserialize = Headers <$> (repList =<< deserialize)-    where-      repList (VarInt c) = replicateM (fromIntegral c) action-      action = liftM2 (,) deserialize deserialize-  serialize (Headers xs) = do-    putVarInt $ length xs-    forM_ xs $ \(a, b) -> serialize a >> serialize b+  deserialize = Headers <$> getVarIntList (liftM2 (,) deserialize deserialize)+  serialize (Headers xs) =+    putVarIntList (\(a, b) -> serialize a >> serialize b) xs  instance Serialize Headers where   put = serialize@@ -397,9 +401,13 @@            )  -- | Encode an 'Integer' to the compact number format used in the difficulty--- target of a block.+-- target of a block. The exponent is a single byte, so numbers that need more+-- than 255 bytes cannot be encoded and raise an error, as the assertion in+-- Bitcoin Core does. encodeCompact :: Integer -> Word32-encodeCompact i = nCompact+encodeCompact i+  | nSize > 255 = error "encodeCompact: number too large for the compact format"+  | otherwise = nCompact   where     i' = abs i     neg = i < 0

@@ -45,40 +45,46 @@     initialChain,     genesisMap, -    -- ** Helper Functions-    appendBlocks,+    -- ** Validation     validBlock,     validCP,     afterLastCP,     bip34,     validVersion,     validTimeWarp,-    lastNoMinDiff,+    medianTime,+    mtp,++    -- ** Difficulty     nextWorkRequired,+    nextPowWorkRequired,+    calcNextWork,+    lastNoMinDiff,+    diffInterval,     nextEdaWorkRequired,     nextDaaWorkRequired,-    nextAsertWorkRequired,-    computeAsertBits,     computeTarget,     getSuitableBlock,-    nextPowWorkRequired,-    calcNextWork,+    nextAsertWorkRequired,+    asertAnchor,+    computeAsertBits,     isValidPOW,     blockPOW,     headerWork,-    diffInterval,++    -- ** Helper Functions     blockLocatorNodes,+    skipHeight,+    appendBlocks,     mineBlock,     computeSubsidy,-    mtp,     firstGreaterOrEqual,     lastSmallerOrEqual,   ) where -import Control.Applicative ((<|>)) import Control.DeepSeq-import Control.Monad (guard, mzero, unless, when)+import Control.Monad (mzero, unless, when) import Control.Monad.Except (ExceptT (..), runExceptT, throwError) import Control.Monad.State.Strict as State (StateT, get, gets, lift, modify) import Control.Monad.Trans.Maybe@@ -93,8 +99,10 @@ import Data.HashMap.Strict (HashMap) import Data.HashMap.Strict qualified as HashMap import Data.Hashable-import Data.List (sort, sortBy)-import Data.Maybe (fromMaybe, listToMaybe)+import Data.Int (Int32)+import Data.List (sort)+import Data.Maybe (fromMaybe, isJust)+import Data.Ord (comparing) import Data.Serialize (Serialize (..)) import Data.Typeable (Typeable) import Data.Word (Word32, Word64)@@ -102,8 +110,8 @@ import Haskoin.Block.Common import Haskoin.Crypto import Haskoin.Network.Data-import Haskoin.Transaction.Genesis import Haskoin.Util+import Numeric (showHex)  -- | Short version of the block hash. Uses the good end of the hash (the part -- that doesn't have a long string of zeroes).@@ -157,11 +165,14 @@   put = serialize   get = deserialize +-- | Two nodes are the same when they hold the same header. instance Eq BlockNode where   (==) = (==) `on` (.header) +-- | Nodes are ordered by height, then by header, so that equal nodes compare+-- as equal and nodes at the same height still have a total order. instance Ord BlockNode where-  compare = compare `on` (.height)+  compare = comparing (\bn -> (bn.height, bn.header))  -- | Memory-based header tree. data HeaderMemory = HeaderMemory@@ -281,8 +292,12 @@       skip = headerHash net.genesisHeader     } --- | Validate a list of continuous block headers and import them to the--- block chain. Return 'Left' on failure with error information.+-- | Validate a list of continuous block headers and import them into the+-- block chain. Each header is validated against the headers before it and+-- added to the store as it passes, so a failure keeps the headers that came+-- before it and makes the last of them the best block when it has the most+-- work. Return 'Left' on failure with error information, otherwise the new+-- nodes with the newest one first. connectBlocks ::   (BlockHeaders m) =>   Network ->@@ -291,48 +306,21 @@   [BlockHeader] ->   m (Either String [BlockNode]) connectBlocks _ _ [] = return $ Right []-connectBlocks net t bhs@(bh : _) =-  runExceptT $ do-    unless (chained bhs) $-      throwError "Blocks to connect do not form a chain"-    par <--      maybeToExceptT-        "Could not get parent block"-        (MaybeT (parentBlock bh))-    pars <- lift $ getParents 10 par-    bb <- lift getBestBlockHeader-    go par [] bb par pars bhs >>= \case-      bns@(bn : _) -> do-        lift $ addBlockHeaders bns-        let bb' = chooseBest bn bb-        when (bb' /= bb) $ lift $ setBestBlockHeader bb'-        return bns-      _ -> undefined+connectBlocks net t bhs+  | not (chained bhs) = return $ Left "Blocks to connect do not form a chain"+  | otherwise = do+      best <- getBestBlockHeader+      (result, nodes, best') <- go best [] bhs+      when (best' /= best) $ setBestBlockHeader best'+      return $ either Left (const (Right nodes)) result   where     chained (h1 : h2 : hs) = headerHash h1 == h2.prev && chained (h2 : hs)     chained _ = True-    skipit lbh ls par-      | sh == lbh.height = return lbh-      | sh < lbh.height = do-          skM <- lift $ getAncestor sh lbh-          case skM of-            Just sk -> return sk-            Nothing ->-              throwError $-                "BUG: Could not get skip for block "-                  ++ show (headerHash $ par.header)-      | otherwise = do-          let sn = ls !! fromIntegral (par.height - sh)-          when (sn.height /= sh) $-            throwError "BUG: Node height not right in skip"-          return sn-      where-        sh = skipHeight (par.height + 1)-    go _ acc _ _ _ [] = return acc-    go lbh acc bb par pars (h : hs) = do-      sk <- skipit lbh acc par-      bn <- ExceptT . return $ validBlock net t bb par pars h sk-      go lbh (bn : acc) (chooseBest bn bb) bn (take 10 $ par : pars) hs+    go best nodes [] = return (Right (), nodes, best)+    go best nodes (bh : rest) =+      connectHeader net t best bh >>= \case+        Left err -> return (Left err, nodes, best)+        Right node -> go (chooseBest best node) (node : nodes) rest  -- | Block's parent. If the block header is in the store, its parent must also -- be there. No block header get deleted or pruned from the store.@@ -353,27 +341,42 @@   m (Either String BlockNode) connectBlock net t bh =   runExceptT $ do+    best <- lift getBestBlockHeader+    node <- ExceptT $ connectHeader net t best bh+    let best' = chooseBest best node+    when (best' /= best) $ lift $ setBestBlockHeader best'+    return node++-- | Validate one header against the store and add it to the store. The best+-- block passed in is only used by the checkpoint rule and is not updated.+connectHeader ::+  (BlockHeaders m) =>+  Network ->+  Timestamp ->+  BlockNode ->+  BlockHeader ->+  m (Either String BlockNode)+connectHeader net t best bh =+  runExceptT $ do     par <-       maybeToExceptT         "Could not get parent block"         (MaybeT (parentBlock bh))     pars <- lift $ getParents 10 par-    skM <- lift $ getAncestor (skipHeight (par.height + 1)) par-    sk <--      case skM of+    skipNode <-+      lift (getAncestor (skipHeight (par.height + 1)) par) >>= \case         Just sk -> return sk         Nothing ->           throwError $             "BUG: Could not get skip for block "-              ++ show (headerHash $ par.header)-    bb <- lift getBestBlockHeader-    bn <- ExceptT . return $ validBlock net t bb par pars bh sk-    let bb' = chooseBest bb bn-    lift $ addBlockHeader bn-    when (bb /= bb') . lift $ setBestBlockHeader bb'-    return bn+              ++ show (headerHash par.header)+    requiredBits <- lift $ nextWorkRequired net par bh+    node <- ExceptT . return $ validBlock net t best par pars bh skipNode requiredBits+    lift $ addBlockHeader node+    return node --- | Validate this block header. Build a 'BlockNode' if successful.+-- | Validate this block header. Build a 'BlockNode' if successful. The checks+-- follow @CheckBlockHeader@ and @ContextualCheckBlockHeader@ in Bitcoin Core. validBlock ::   Network ->   -- | current time@@ -388,8 +391,10 @@   BlockHeader ->   -- | skip node (black magic)   BlockNode ->+  -- | difficulty bits the chain requires, from 'nextWorkRequired'+  Word32 ->   Either String BlockNode-validBlock net t bb par pars bh sk = do+validBlock net t bb par pars bh sk requiredBits = do   let mt = medianTime . map (.header.timestamp) $ par : pars       nt = bh.timestamp       hh = headerHash bh@@ -399,10 +404,14 @@   unless (isValidPOW net bh) $     Left $       "Proof of work failed: " ++ show (headerHash bh)-  unless (nt <= t + 2 * 60 * 60) $+  unless (bh.bits == requiredBits) $     Left $+      "Incorrect difficulty bits: " ++ showBits bh.bits ++ ", expected " ++ showBits requiredBits+  unless (toInteger nt <= toInteger t + 2 * 60 * 60) $+    Left $       "Invalid header timestamp: " ++ show nt-  unless (nt >= mt) $+  -- The timestamp must be strictly above the median time past.+  unless (nt > mt) $     Left $       "Block timestamp too early: " ++ show nt   unless (validTimeWarp net ng par.header.timestamp nt) $@@ -427,14 +436,25 @@         work = aw,         skip = headerHash sk.header       }+  where+    showBits b = "0x" ++ showHex b "" --- | Return the median of all provided timestamps. Can be unsorted. Error on--- empty list.+-- | Return the median of all provided timestamps. Can be unsorted. For an+-- even count the upper of the two middle values is taken, as Bitcoin Core+-- does. Error on empty list. medianTime :: [Timestamp] -> Timestamp medianTime ts   | null ts = error "Cannot compute median time of empty header list"   | otherwise = sort ts !! (length ts `div` 2) +-- | Median time past of a block: the median of the timestamps of the block and+-- its ten closest ancestors, or fewer near genesis. This is+-- @GetMedianTimePast@ in Bitcoin Core.+mtp :: (BlockHeaders m) => BlockNode -> m Timestamp+mtp bn = do+  pars <- getParents 10 bn+  return $ medianTime $ map (.header.timestamp) (bn : pars)+ -- | Calculate the height of the skip (magic) block that corresponds to the -- given height. The block hash of the ancestor at that height will be placed on -- the 'BlockNode' structure to help locate ancestors at any height quickly.@@ -489,13 +509,9 @@   BlockHeight ->   Bool afterLastCP net bestHeight newChildHeight =-  case lM of-    Just l -> l < newChildHeight-    Nothing -> True-  where-    lM =-      listToMaybe . reverse $-        [c | (c, _) <- net.checkpoints, c <= bestHeight]+  case [c | (c, _) <- net.checkpoints, c <= bestHeight] of+    [] -> True+    reached -> maximum reached < newChildHeight  -- | This block should be at least version 2 (BIP34). Block height must be -- included in the coinbase transaction to prevent non-unique transaction@@ -508,11 +524,12 @@   BlockHash ->   Bool bip34 net height hsh-  | fst net.bip34Block == 0 = True-  | fst net.bip34Block == height = snd net.bip34Block == hsh-  | otherwise = True+  | height /= net.bip34Height = True+  | otherwise = maybe True (== hsh) net.bip34Hash --- | Check if the provided block height and version are valid.+-- | Check if the provided block height and version are valid. The version is+-- a signed 32-bit number in Bitcoin Core, so values with the top bit set are+-- negative and count as below version 2. validVersion ::   Network ->   -- | new child height@@ -521,10 +538,12 @@   Word32 ->   Bool validVersion net height version-  | version < 2 = height < fst net.bip34Block-  | version < 3 = height < net.bip66Height-  | version < 4 = height < net.bip65Height+  | signedVersion < 2 = height < net.bip34Height+  | signedVersion < 3 = height < net.bip66Height+  | signedVersion < 4 = height < net.bip65Height   | otherwise = True+  where+    signedVersion = fromIntegral version :: Int32  -- | BIP94 time warp rule: the first block of a retarget period may not be more -- than 600 seconds earlier than its parent.@@ -538,7 +557,8 @@   Timestamp ->   Bool validTimeWarp net height parent child-  | net.bip94 && height `mod` diffInterval net == 0 = child + 600 >= parent+  | net.bip94 && height `mod` diffInterval net == 0 =+      toInteger child + 600 >= toInteger parent   | otherwise = True  -- | Find last block with normal, as opposed to minimum difficulty (for test@@ -559,71 +579,73 @@       lastNoMinDiff net bn'     else return bn +-- | Test network rule: a block more than twice the target spacing after its+-- parent may be mined at the minimum difficulty.+minDiffGap :: Network -> BlockNode -> BlockHeader -> Bool+minDiffGap net par bh =+  toInteger bh.timestamp > toInteger par.header.timestamp + 2 * toInteger net.targetSpacing+ -- | Returns the work required on a block header given the previous block. This--- coresponds to @bitcoind@ function @GetNextWorkRequired@ in @main.cpp@.+-- corresponds to @GetNextWorkRequired@ in Bitcoin Core and Bitcoin Cash Node. nextWorkRequired ::   (BlockHeaders m) =>   Network ->   BlockNode ->   BlockHeader ->   m Word32-nextWorkRequired net par bh = do-  ma <- getAsertAnchor net-  case asert ma <|> daa <|> eda <|> pow of-    Just f -> f par bh-    Nothing -> error "Could not determine difficulty algorithm"+nextWorkRequired net par bh+  -- Bitcoin Cash Node never retargets on regtest, before picking an algorithm.+  | usesCashRules && net.powNoRetarget = return par.header.bits+  | otherwise =+      asertAnchor net par >>= \case+        Just anchor -> nextAsertWorkRequired net anchor par bh+        Nothing+          | activeAt net.daaHeight -> nextDaaWorkRequired net par bh+          | activeAt net.edaHeight -> nextEdaWorkRequired net par bh+          | otherwise -> nextPowWorkRequired net par bh   where-    asert ma = do-      anchor <- ma-      guard (par.height > anchor.height)-      return $ nextAsertWorkRequired net anchor-    daa = do-      daa_height <- net.daaHeight-      guard (par.height + 1 >= daa_height)-      return $ nextDaaWorkRequired net-    eda = do-      eda_height <- net.edaHeight-      guard (par.height + 1 >= eda_height)-      return $ nextEdaWorkRequired net-    pow = return $ nextPowWorkRequired net+    usesCashRules =+      isJust net.edaHeight || isJust net.daaHeight || isJust net.asertActivationTime+    activeAt = maybe False (\h -> par.height + 1 >= h)  -- | Find out the next amount of work required according to the Emergency--- Difficulty Adjustment (EDA) algorithm from Bitcoin Cash.+-- Difficulty Adjustment (EDA) algorithm from Bitcoin Cash. This corresponds to+-- @GetNextEDAWorkRequired@ in Bitcoin Cash Node. nextEdaWorkRequired ::   (BlockHeaders m) => Network -> BlockNode -> BlockHeader -> m Word32 nextEdaWorkRequired net par bh   | (par.height + 1) `mod` diffInterval net == 0 =       nextPowWorkRequired net par bh-  | mindiff = return (encodeCompact net.powLimit)-  | par.header.bits == encodeCompact net.powLimit =-      return (encodeCompact net.powLimit)+  | net.minDiffBlocks =+      if minDiffGap net par bh+        then return powLimitBits+        else (.header.bits) <$> lastNoMinDiff net par+  | par.header.bits == powLimitBits =+      return powLimitBits   | otherwise = do       par6 <- fromMaybe e1 <$> getAncestor (par.height - 6) par-      pars <- getParents 10 par-      pars6 <- getParents 10 par6-      let par6med =-            medianTime $ map (.header.timestamp) (par6 : pars6)-          parmed = medianTime $ map (.header.timestamp) (par : pars)-          mtp6 = parmed - par6med-      if mtp6 < 12 * 3600-        then return $ par.header.bits-        else-          return $-            let (diff, _) = decodeCompact par.header.bits-                ndiff = diff + (diff `shiftR` 2)-             in if net.powLimit > ndiff-                  then encodeCompact net.powLimit-                  else encodeCompact ndiff+      parMtp <- mtp par+      par6Mtp <- mtp par6+      -- If producing the last six blocks took less than twelve hours the+      -- difficulty stays. Otherwise the target grows by a quarter.+      if toInteger parMtp - toInteger par6Mtp < 12 * 3600+        then return par.header.bits+        else do+          let (target, _) = decodeCompact par.header.bits+              target' = target + (target `shiftR` 2)+          return $ encodeCompact (min net.powLimit target')   where-    mindiff = bh.timestamp > par.header.timestamp + net.targetSpacing * 2+    powLimitBits = encodeCompact net.powLimit     e1 = error "Could not get seventh ancestor of block"  -- | Find the next amount of work required according to the Difficulty--- Adjustment Algorithm (DAA) from Bitcoin Cash.+-- Adjustment Algorithm (DAA) from Bitcoin Cash. This corresponds to+-- @GetNextCashWorkRequired@ in Bitcoin Cash Node. The parent must be at or+-- above the difficulty interval height. nextDaaWorkRequired ::   (BlockHeaders m) => Network -> BlockNode -> BlockHeader -> m Word32 nextDaaWorkRequired net par bh-  | mindiff = return (encodeCompact net.powLimit)+  | net.minDiffBlocks && minDiffGap net par bh = return (encodeCompact net.powLimit)   | otherwise = do       unless (par.height >= diffInterval net) $         error "Block height below difficulty interval"@@ -636,15 +658,7 @@         else return $ encodeCompact nextTarget   where     e1 = error "Cannot get ancestor at parent - 144 height"-    mindiff = bh.timestamp > par.header.timestamp + net.targetSpacing * 2 -mtp :: (BlockHeaders m) => BlockNode -> m Timestamp-mtp bn-  | bn.height == 0 = return 0-  | otherwise = do-      pars <- getParents 11 bn-      return $ medianTime (map (.header.timestamp) pars)- firstGreaterOrEqual ::   (BlockHeaders m) =>   Network ->@@ -714,39 +728,64 @@ middleOf :: (Integral a) => a -> a -> a middleOf a b = a + ((b - a) `div` 2) --- TODO: Use known anchor after fork-getAsertAnchor :: (BlockHeaders m) => Network -> m (Maybe BlockNode)-getAsertAnchor net =+-- | Anchor block of the aserti3-2d algorithm for the chain that ends at the+-- given block: the earliest ancestor, or the block itself, whose median time+-- past reaches the activation time. The anchor is the last block whose+-- difficulty came from the previous algorithm. Returns 'Nothing' when the+-- block's own median time past is still below the activation time, in which+-- case the previous algorithm applies to its children.+asertAnchor :: (BlockHeaders m) => Network -> BlockNode -> m (Maybe BlockNode)+asertAnchor net tip =   case net.asertActivationTime of     Nothing -> return Nothing-    Just act -> firstGreaterOrEqual net (f act)+    Just activation -> do+      tipMtp <- mtp tip+      if tipMtp < activation+        then return Nothing+        else Just <$> search activation 0 tip.height   where-    f act bn = do-      m <- mtp bn-      return $ compare m act+    -- The median time past never decreases along a chain, so a binary search+    -- over the heights finds the first block that reaches the activation+    -- time. The upper bound always satisfies it.+    search activation lo hi+      | lo >= hi = ancestorAt lo+      | otherwise = do+          let mid = lo + (hi - lo) `div` 2+          midMtp <- mtp =<< ancestorAt mid+          if midMtp >= activation+            then search activation lo mid+            else search activation (mid + 1) hi+    ancestorAt h = fromMaybe e <$> getAncestor h tip+    e = error "asertAnchor: could not get ancestor" --- | Find the next amount of work required according to the aserti3-2d algorithm.+-- | Find the next amount of work required according to the aserti3-2d+-- algorithm. This corresponds to @GetNextASERTWorkRequired@ in Bitcoin Cash+-- Node. nextAsertWorkRequired ::   (BlockHeaders m) =>   Network ->+  -- | anchor block, see 'asertAnchor'   BlockNode ->+  -- | parent of the new block   BlockNode ->+  -- | new block header   BlockHeader ->   m Word32-nextAsertWorkRequired net anchor par bh = do-  anchor_parent <--    fromMaybe e_fork <$> getBlockHeader anchor.header.prev-  let anchor_parent_time = toInteger anchor_parent.header.timestamp-      time_diff = current_time - anchor_parent_time-  return $ computeAsertBits halflife anchor_bits time_diff height_diff+nextAsertWorkRequired net anchor par bh+  | net.minDiffBlocks && minDiffGap net par bh = return (encodeCompact net.powLimit)+  | otherwise = do+      -- The clock starts at the anchor's parent. A genesis anchor has no+      -- parent, so its own timestamp is used, as Bitcoin Cash Node does.+      anchorParentTime <-+        if isGenesis anchor+          then return anchor.header.timestamp+          else (.header.timestamp) . fromMaybe e <$> getBlockHeader anchor.header.prev+      let timeDiff = toInteger bh.timestamp - toInteger anchorParentTime+          heightDiff = toInteger par.height + 1 - toInteger anchor.height+      return $+        computeAsertBits net.powLimit net.asertHalfLife anchor.header.bits timeDiff heightDiff   where-    halflife = net.asertHalfLife-    anchor_height = toInteger anchor.height-    anchor_bits = anchor.header.bits-    current_height = toInteger par.height + 1-    height_diff = current_height - anchor_height-    current_time = toInteger bh.timestamp-    e_fork = error "Could not get fork block header"+    e = error "Could not get parent of ASERT anchor block"  idealBlockTime :: Integer idealBlockTime = 10 * 60@@ -757,68 +796,84 @@ radix :: Integer radix = 1 `shiftL` rBits -maxBits :: Word32-maxBits = 0x1d00ffff--maxTarget :: Integer-maxTarget = fst $ decodeCompact maxBits-+-- | The aserti3-2d formula: the target of the anchor block, doubled for every+-- half-life that the chain runs behind its ideal schedule and halved for every+-- half-life it runs ahead, in 16.16 fixed point with a cubic approximation of+-- the exponential. computeAsertBits ::+  -- | proof-of-work limit (largest target) of the network   Integer ->+  -- | half-life in seconds+  Integer ->+  -- | bits of the anchor block   Word32 ->+  -- | seconds from the anchor's parent to the new block   Integer ->+  -- | blocks from the anchor to the new block   Integer ->   Word32-computeAsertBits halflife anchor_bits time_diff height_diff =-  if e2 >= 0 && e2 < 65536-    then-      if g4 == 0-        then encodeCompact 1-        else-          if g4 > maxTarget-            then maxBits-            else encodeCompact g4-    else error $ "Exponent not in range: " ++ show e2+computeAsertBits powLimit halflife anchorBits timeDiff heightDiff+  | target == 0 = encodeCompact 1+  | target > powLimit = encodeCompact powLimit+  | otherwise = encodeCompact target   where-    g1 = fst (decodeCompact anchor_bits)-    e1 =-      ((time_diff - idealBlockTime * (height_diff + 1)) * radix)-        `quot` halflife-    s = e1 `shiftR` rBits-    e2 = e1 - s * radix-    g2 =-      g1-        * ( radix-              + ( (195766423245049 * e2 + 971821376 * e2 ^ 2 + 5127 * e2 ^ 3 + 2 ^ 47)-                    `shiftR` (rBits * 3)-                )+    anchorTarget = fst (decodeCompact anchorBits)+    -- Exponent in 16.16 fixed point. The reference C++ code truncates toward+    -- zero, hence quot.+    expo = ((timeDiff - idealBlockTime * (heightDiff + 1)) * radix) `quot` halflife+    -- Whole half-lives (an arithmetic shift, so rounded down) and the+    -- fractional part in [0, radix).+    shifts = expo `shiftR` rBits+    frac = expo - shifts * radix+    -- 2 ^ (frac / radix) in 16.16 fixed point.+    factor =+      radix+        + ( (195766423245049 * frac + 971821376 * frac ^ (2 :: Int) + 5127 * frac ^ (3 :: Int) + 2 ^ (47 :: Int))+              `shiftR` (rBits * 3)           )-    g3 =-      if s < 0-        then g2 `shiftR` negate (fromIntegral s)-        else g2 `shiftL` fromIntegral s-    g4 = g3 `shiftR` rBits+    scaled = anchorTarget * factor+    shifted+      | shifts < 0 = scaled `shiftR` fromInteger (negate shifts)+      | otherwise = scaled `shiftL` fromInteger shifts+    target = shifted `shiftR` rBits --- | Compute Bitcoin Cash DAA target for a new block.-computeTarget :: Network -> BlockNode -> BlockNode -> Integer-computeTarget net f l =-  let work = (l.work - f.work) * fromIntegral net.targetSpacing-      tspan = l.header.timestamp - f.header.timestamp-      tspan'-        | tspan > 288 * net.targetSpacing =-            288 * net.targetSpacing-        | tspan < 72 * net.targetSpacing =-            72 * net.targetSpacing-        | otherwise = tspan-      work' = work `div` fromIntegral tspan'-   in 2 ^ (256 :: Integer) `div` work'+-- | Compute Bitcoin Cash DAA target for a new block, like @ComputeTarget@ in+-- Bitcoin Cash Node.+computeTarget ::+  Network ->+  -- | first suitable block of the window+  BlockNode ->+  -- | last suitable block of the window+  BlockNode ->+  Integer+computeTarget net firstBlock lastBlock =+  let spacing = toInteger net.targetSpacing+      work = (lastBlock.work - firstBlock.work) * spacing+      actual = toInteger lastBlock.header.timestamp - toInteger firstBlock.header.timestamp+      clamped = max (72 * spacing) (min (288 * spacing) actual)+      work' = work `div` clamped+   in -- (2^256 - work) / work, as the unsigned negation in the reference code+      (2 ^ (256 :: Int) - work') `div` work' --- | Get suitable block for Bitcoin Cash DAA computation.+-- | Get suitable block for Bitcoin Cash DAA computation: the block with the+-- median timestamp among the given block, its parent and its grandparent. On+-- equal timestamps the same block as Bitcoin Cash Node's sorting network is+-- chosen. getSuitableBlock :: (BlockHeaders m) => BlockNode -> m BlockNode getSuitableBlock par = do   unless (par.height >= 3) $ error "Block height is less than three"-  blocks <- (par :) <$> getParents 2 par-  return $ sortBy (compare `on` (.header.timestamp)) blocks !! 1+  parents <- getParents 2 par+  case parents of+    [parent, grandparent] -> return $ medianOfThree grandparent parent par+    _ -> error "Could not get the two parents of the block"+  where+    later x y = x.header.timestamp > y.header.timestamp+    -- Oldest first, swapping only on a strictly later timestamp.+    medianOfThree b0 b1 b2 =+      let (c0, c2) = if later b0 b2 then (b2, b0) else (b0, b2)+          (d0, d1) = if later c0 b1 then (b1, c0) else (c0, b1)+          (e1, _) = if later d1 c2 then (c2, d1) else (d1, c2)+       in const e1 d0  -- | Returns the work required on a block header given the previous block. This -- coresponds to bitcoind function GetNextWorkRequired in main.cpp.@@ -828,7 +883,7 @@   | (par.height + 1) `mod` diffInterval net /= 0 =       if net.minDiffBlocks         then-          if ht > pt + delta+          if minDiffGap net par bh             then return $ encodeCompact net.powLimit             else do               d <- lastNoMinDiff net par@@ -845,11 +900,11 @@       return $ calcNextWork net h f.header.timestamp   where     e1 = error "Could not get ancestor for block header"-    pt = par.header.timestamp-    ht = bh.timestamp-    delta = net.targetSpacing * 2  -- | Computes the work required for the first block in a new retarget period.+-- The actual timespan is limited to a quarter and four times the target+-- timespan. A negative timespan, when the last block is dated before the+-- first, is limited like a short one. calcNextWork ::   Network ->   -- | last block in previous retarget (parent)@@ -857,18 +912,15 @@   -- | timestamp of first block in previous retarget   Timestamp ->   Word32-calcNextWork net header time+calcNextWork net header firstTime   | net.powNoRetarget = header.bits   | new > net.powLimit = encodeCompact net.powLimit   | otherwise = encodeCompact new   where-    s = header.timestamp - time-    n-      | s < net.targetTimespan `div` 4 = net.targetTimespan `div` 4-      | s > net.targetTimespan * 4 = net.targetTimespan * 4-      | otherwise = s-    l = fst $ decodeCompact header.bits-    new = l * fromIntegral n `div` fromIntegral net.targetTimespan+    timespan = toInteger net.targetTimespan+    actual = toInteger header.timestamp - toInteger firstTime+    clamped = max (timespan `div` 4) (min (timespan * 4) actual)+    new = fst (decodeCompact header.bits) * clamped `div` timespan  -- | Returns True if the difficulty target (bits) of the header is valid and the -- proof of work of the header matches the advertised difficulty target. This@@ -887,18 +939,24 @@  -- | Returns the work represented by this block. Work is defined as the number -- of tries needed to solve a block in the average case with respect to the--- target.+-- target. A header whose bits are negative, overflow or are zero has no work,+-- like @GetBlockProof@ in Bitcoin Core. headerWork :: BlockHeader -> Integer-headerWork bh = largestHash `div` (target + 1)+headerWork bh+  | target <= 0 || over = 0+  | otherwise = largestHash `div` (target + 1)   where-    target = fst $ decodeCompact bh.bits+    (target, over) = decodeCompact bh.bits     largestHash = 1 `shiftL` 256  -- | Number of blocks on average between difficulty cycles (2016 blocks). diffInterval :: Network -> Word32 diffInterval net = net.targetTimespan `div` net.targetSpacing --- | Compare two blocks to get the best.+-- | Compare two blocks to get the best: the one with more accumulated work,+-- then the higher one. When both are equal the first argument is kept, so+-- callers pass the block they already have first and the block that was seen+-- first stays the best. chooseBest :: BlockNode -> BlockNode -> BlockNode chooseBest b1 b2   | b1.work == b2.work =@@ -908,26 +966,23 @@   | b1.work > b2.work = b1   | otherwise = b2 --- | Get list of blocks for a block locator.+-- | Get list of blocks for a block locator: the ten blocks below the best, then+-- blocks at exponentially growing distances, then genesis. This is+-- @LocatorEntries@ in Bitcoin Core. blockLocatorNodes :: (BlockHeaders m) => BlockNode -> m [BlockNode] blockLocatorNodes best =-  reverse <$> go [] best 1+  reverse <$> go [] (0 :: Int) best 1   where     e1 = error "Could not get ancestor"-    go loc bn n =-      let loc' = bn : loc-          n' =-            if length loc' > 10-              then n * 2-              else 1-       in if bn.height < n'-            then do-              a <- fromMaybe e1 <$> getAncestor 0 bn-              return $ a : loc'-            else do-              let h = bn.height - n'-              bn' <- fromMaybe e1 <$> getAncestor h bn-              go loc' bn' n'+    go acc count node step+      | isGenesis node = return (node : acc)+      | otherwise = do+          let acc' = node : acc+              count' = count + 1+              height = if node.height > step then node.height - step else 0+              step' = if count' > 10 then step * 2 else step+          ancestor <- fromMaybe e1 <$> getAncestor height node+          go acc' count' ancestor step'  -- | Get block locator. blockLocator :: (BlockHeaders m) => BlockNode -> m BlockLocator@@ -936,14 +991,13 @@ -- | Become rich beyond your wildest dreams. mineBlock :: Network -> Word32 -> BlockHeader -> BlockHeader mineBlock net seed h =-  head-    [ j-    | i <- (+ seed) <$> [0 .. maxBound],-      let j = h {nonce = i},-      isValidPOW net j-    ]+  case filter (isValidPOW net) [h {nonce = i} | i <- (+ seed) <$> [0 .. maxBound]] of+    (mined : _) -> mined+    [] -> error "mineBlock: no nonce satisfies the target"  -- | Generate and append new blocks (mining). Only practical in regtest network.+-- Every block is dated one target spacing after its parent, so the chain+-- passes the median time past rule. appendBlocks ::   Network ->   -- | random seed@@ -960,7 +1014,11 @@         net         seed         bh-          { prev = headerHash bh,+          { -- Version 4 passes the version rules of BIP34, BIP65 and BIP66+            -- at any height. Regtest applies them from height 1.+            version = 4,+            prev = headerHash bh,+            timestamp = bh.timestamp + net.targetSpacing,             -- Just to make it different in every header             merkle = sha256 $ runPutS $ serialize seed           }@@ -984,8 +1042,8 @@           f pl pr  -- | Generate the entire Genesis block for 'Network'.-genesisBlock :: Network -> Ctx -> Block-genesisBlock net ctx = Block net.genesisHeader [genesisTx ctx]+genesisBlock :: Network -> Block+genesisBlock net = Block net.genesisHeader [net.genesisTx]  -- | Compute block subsidy at particular height. computeSubsidy :: Network -> BlockHeight -> Word64

@@ -23,32 +23,29 @@     merkleBlockTxs,     testMerkleRoot,     buildPartialMerkle,+    extractMatches,     decodeMerkleFlags,     encodeMerkleFlags,     calcTreeHeight,     calcTreeWidth,     hash2,     calcHash,-    traverseAndBuild,-    traverseAndExtract,-    extractMatches,     splitIn,     boolsToWord8,   ) where  import Control.DeepSeq-import Control.Monad (forM_, replicateM, when)+import Control.Monad (when) import Data.Binary (Binary (..)) import Data.Bits-import qualified Data.ByteString as BS import Data.Bytes.Get import Data.Bytes.Put import Data.Bytes.Serial import Data.Either (isRight) import Data.Hashable-import Data.Maybe import Data.Serialize (Serialize (..))+import qualified Data.Vector as V import Data.Word (Word32, Word8) import GHC.Generics import Haskoin.Block.Common@@ -84,20 +81,15 @@   deserialize = do     header <- deserialize     ntx <- getWord32le-    (VarInt matchLen) <- deserialize-    hashes <- replicateM (fromIntegral matchLen) deserialize-    (VarInt flagLen) <- deserialize-    ws <- replicateM (fromIntegral flagLen) getWord8-    return $ MerkleBlock header ntx hashes (decodeMerkleFlags ws)+    hashes <- getVarIntList deserialize+    flagBytes <- getVarIntList getWord8+    return $ MerkleBlock header ntx hashes (decodeMerkleFlags flagBytes)    serialize (MerkleBlock h ntx hashes flags) = do     serialize h     putWord32le ntx-    putVarInt $ length hashes-    forM_ hashes serialize-    let ws = encodeMerkleFlags flags-    putVarInt $ length ws-    forM_ ws putWord8+    putVarIntList serialize hashes+    putVarIntList putWord8 (encodeMerkleFlags flags)  instance Binary MerkleBlock where   put = serialize@@ -107,13 +99,12 @@   put = serialize   get = deserialize --- | Unpack Merkle flags into 'FlagBits' structure.+-- | Unpack Merkle flags into 'FlagBits' structure. The least significant bit+-- of each byte comes first. decodeMerkleFlags :: [Word8] -> FlagBits-decodeMerkleFlags ws =-  [ b | p <- [0 .. length ws * 8 - 1], b <- [testBit (ws !! (p `div` 8)) (p `mod` 8)]-  ]+decodeMerkleFlags = concatMap (\w -> map (testBit w) [0 .. 7]) --- | Pack Merkle flags from 'FlagBits'.+-- | Pack Merkle flags from 'FlagBits'. The last byte is padded with zero bits. encodeMerkleFlags :: FlagBits -> [Word8] encodeMerkleFlags bs = map boolsToWord8 $ splitIn 8 bs @@ -139,19 +130,51 @@   Int calcTreeWidth ntx h = (ntx + (1 `shiftL` h) - 1) `shiftR` h --- | Computes the root of a Merkle tree from a list of leaf node hashes.+-- | Every level of a Merkle tree, leaves first and root last. Each level+-- lists its nodes from left to right. A level with an odd number of nodes+-- pairs its last node with itself to build the level above.+type MerkleLevels = [V.Vector Hash256]++-- | Build all levels of the Merkle tree over the given leaves, in linear+-- time. Also report whether some node combines two identical hashes, which+-- Bitcoin Core calls a mutated tree (CVE-2012-2459). The last node of an odd+-- level pairing with itself does not count as a duplicate.+merkleLevels :: [Hash256] -> (MerkleLevels, Bool)+merkleLevels leaves = go (V.fromList leaves) False []+  where+    go level mutated above+      | V.length level <= 1 = (reverse (level : above), mutated)+      | otherwise = go (V.fromList parents) (mutated || duplicated) (level : above)+      where+        count = V.length level+        pairs = [(level V.! i, level V.! min (i + 1) (count - 1)) | i <- [0, 2 .. count - 1]]+        parents = [hash2 l r | (l, r) <- pairs]+        duplicated = or [level V.! i == level V.! (i + 1) | i <- [0, 2 .. count - 2]]++-- | Computes the root of a Merkle tree from a list of leaf node hashes. Fails+-- for an empty list, since a block has at least its coinbase, and for a+-- mutated tree, in which two sibling nodes are identical (CVE-2012-2459). A+-- block with duplicate transactions is invalid, and its mutated tree has the+-- same root as the valid block it was derived from. buildMerkleRoot ::   -- | transaction hashes (leaf nodes)   [TxHash] ->   -- | root of the Merkle tree-  MerkleRoot-buildMerkleRoot txs = calcHash (calcTreeHeight $ length txs) 0 txs+  Either String MerkleRoot+buildMerkleRoot [] = Left "buildMerkleRoot: a block needs at least one transaction"+buildMerkleRoot txs+  | mutated = Left "buildMerkleRoot: duplicate transaction hashes (mutated tree)"+  | otherwise = Right (V.head (last levels))+  where+    (levels, mutated) = merkleLevels (map (.get) txs)  -- | Concatenate and compute double SHA256. hash2 :: Hash256 -> Hash256 -> Hash256 hash2 a b = doubleSHA256 $ runPutS (serialize a) <> runPutS (serialize b) --- | Computes the hash of a specific node in a Merkle tree.+-- | Computes the hash of a specific node in a Merkle tree. Builds the whole+-- tree, so use 'buildMerkleRoot' or 'buildPartialMerkle' for more than one+-- node. calcHash ::   -- | height of the node   Int ->@@ -163,14 +186,9 @@   Hash256 calcHash height pos txs   | height < 0 || pos < 0 = error "calcHash: Invalid parameters"-  | height == 0 = (txs !! pos).get-  | otherwise = hash2 left right+  | otherwise = (levels !! height) V.! pos   where-    left = calcHash (height - 1) (pos * 2) txs-    right-      | pos * 2 + 1 < calcTreeWidth (length txs) (height - 1) =-          calcHash (height - 1) (pos * 2 + 1) txs-      | otherwise = left+    (levels, _) = merkleLevels (map (.get) txs)  -- | Build a partial Merkle tree. Provide a list of tuples with all transaction -- hashes in the block, and whether the transaction is to be included in the@@ -181,61 +199,74 @@   [(TxHash, Bool)] ->   -- | flag bits and partial Merkle tree   (FlagBits, PartialMerkleTree)-buildPartialMerkle hs = traverseAndBuild (calcTreeHeight $ length hs) 0 hs+buildPartialMerkle [] = ([], [])+buildPartialMerkle txs = traverseAndBuild levels matches (length levels - 1) 0+  where+    (levels, _) = merkleLevels (map ((.get) . fst) txs)+    matches = matchLevels (map snd txs) --- | Helper function to build partial Merkle tree. Used by 'buildPartialMerkle'--- above.+-- | For every level of the tree, whether each node has a matching transaction+-- somewhere below it. Shaped like the levels of 'merkleLevels'.+matchLevels :: [Bool] -> [V.Vector Bool]+matchLevels leafMatches = go (V.fromList leafMatches) []+  where+    go level above+      | V.length level <= 1 = reverse (level : above)+      | otherwise = go (V.fromList parents) (level : above)+      where+        count = V.length level+        parents = [level V.! i || level V.! min (i + 1) (count - 1) | i <- [0, 2 .. count - 1]]++-- | Depth-first walk that records the partial Merkle tree, like+-- @CPartialMerkleTree::TraverseAndBuild@ in Bitcoin Core. A node with no match+-- below it is stored as a single hash. A node with a match is descended into. traverseAndBuild ::-  Int -> Int -> [(TxHash, Bool)] -> (FlagBits, PartialMerkleTree)-traverseAndBuild height pos txs-  | height < 0 || pos < 0 = error "traverseAndBuild: Invalid parameters"-  | height == 0 || not match = ([match], [calcHash height pos t])-  | otherwise = (match : lb ++ rb, lh ++ rh)+  MerkleLevels -> [V.Vector Bool] -> Int -> Int -> (FlagBits, PartialMerkleTree)+traverseAndBuild levels matches height pos+  | height == 0 || not match = ([match], [node])+  | otherwise = (match : leftBits ++ rightBits, leftHashes ++ rightHashes)   where-    t = map fst txs-    s = pos `shiftL` height-    e = min (length txs) $ (pos + 1) `shiftL` height-    match = any snd $ take (e - s) $ drop s txs-    (lb, lh) = traverseAndBuild (height - 1) (pos * 2) txs-    (rb, rh)-      | (pos * 2 + 1) < calcTreeWidth (length txs) (height - 1) =-          traverseAndBuild (height - 1) (pos * 2 + 1) txs+    match = (matches !! height) V.! pos+    node = (levels !! height) V.! pos+    (leftBits, leftHashes) = traverseAndBuild levels matches (height - 1) (pos * 2)+    (rightBits, rightHashes)+      | pos * 2 + 1 < V.length (levels !! (height - 1)) =+          traverseAndBuild levels matches (height - 1) (pos * 2 + 1)       | otherwise = ([], []) --- | Helper function to extract transaction hashes from partial Merkle tree.+-- | Depth-first walk that rebuilds a node of the partial Merkle tree, like+-- @CPartialMerkleTree::TraverseAndExtract@ in Bitcoin Core. Returns the hash+-- of the node, the matching transactions below it and the flags and hashes+-- that are still unused. traverseAndExtract ::   Int ->   Int ->   Int ->   FlagBits ->   PartialMerkleTree ->-  Maybe (MerkleRoot, [TxHash], Int, Int)-traverseAndExtract height pos ntx flags hashes-  | null flags = Nothing-  | height == 0 || not match = leafResult-  | isNothing leftM = Nothing-  | (pos * 2 + 1) >= calcTreeWidth ntx (height - 1) =-      Just (hash2 lh lh, lm, lcf + 1, lch)-  | isNothing rightM = Nothing-  | otherwise =-      Just (hash2 lh rh, lm ++ rm, lcf + rcf + 1, lch + rch)-  where-    leafResult-      | null hashes = Nothing-      | otherwise = Just (h, [TxHash h | height == 0 && match], 1, 1)-    (match : fs) = flags-    (h : _) = hashes-    leftM = traverseAndExtract (height - 1) (pos * 2) ntx fs hashes-    (lh, lm, lcf, lch) = fromMaybe e leftM-    rightM =-      traverseAndExtract-        (height - 1)-        (pos * 2 + 1)-        ntx-        (drop lcf fs)-        (drop lch hashes)-    (rh, rm, rcf, rch) = fromMaybe e rightM-    e = error "traverseAndExtract: unexpected error extracting a Maybe value"+  Either String (Hash256, [TxHash], FlagBits, PartialMerkleTree)+traverseAndExtract height pos ntx flags hashes =+  case flags of+    [] -> Left "extractMatches: ran out of flag bits"+    (parentOfMatch : flags')+      | height == 0 || not parentOfMatch ->+          -- a leaf, or a subtree without matches: its hash is stored as is+          case hashes of+            [] -> Left "extractMatches: ran out of hashes"+            (h : hashes') ->+              Right (h, [TxHash h | height == 0 && parentOfMatch], flags', hashes')+      | otherwise -> do+          (left, leftMatches, flags'', hashes'') <-+            traverseAndExtract (height - 1) (pos * 2) ntx flags' hashes+          if pos * 2 + 1 < calcTreeWidth ntx (height - 1)+            then do+              (right, rightMatches, flags''', hashes''') <-+                traverseAndExtract (height - 1) (pos * 2 + 1) ntx flags'' hashes''+              -- Two branches never hash the same set of distinct transactions.+              when (left == right) $+                Left "extractMatches: identical left and right branches (mutated tree)"+              return (hash2 left right, leftMatches ++ rightMatches, flags''', hashes''')+            else return (hash2 left left, leftMatches, flags'', hashes'')  -- | Extracts the matching hashes from a partial merkle tree. This will return -- the list of transaction hashes that have been included (set to true) in@@ -250,31 +281,23 @@   Either String (MerkleRoot, [TxHash]) extractMatches net flags hashes ntx   | ntx == 0 =-      Left-        "extractMatches: number of transactions can not be 0"+      Left "extractMatches: number of transactions can not be 0"   | ntx > net.maxBlockSize `div` 60 =-      Left-        "extractMatches: number of transactions excessively high"+      Left "extractMatches: number of transactions excessively high"   | length hashes > ntx =-      Left-        "extractMatches: More hashes provided than the number of transactions"+      Left "extractMatches: More hashes provided than the number of transactions"   | length flags < length hashes =-      Left-        "extractMatches: At least one bit per node and one bit per hash"-  | isNothing resM =-      Left-        "extractMatches: traverseAndExtract failed"-  | (nBitsUsed + 7) `div` 8 /= (length flags + 7) `div` 8 =-      Left-        "extractMatches: All bits were not consumed"-  | nHashUsed /= length hashes =-      Left $-        "extractMatches: All hashes were not consumed: " ++ show nHashUsed-  | otherwise = return (merkRoot, matches)-  where-    resM = traverseAndExtract (calcTreeHeight ntx) 0 ntx flags hashes-    (merkRoot, matches, nBitsUsed, nHashUsed) = fromMaybe e resM-    e = error "extractMatches: unexpected error extracting a Maybe value"+      Left "extractMatches: At least one bit per node and one bit per hash"+  | otherwise = do+      (root, matches, unusedFlags, unusedHashes) <-+        traverseAndExtract (calcTreeHeight ntx) 0 ntx flags hashes+      let bitsUsed = length flags - length unusedFlags+      -- Only the padding of the last flag byte may stay unused.+      when ((bitsUsed + 7) `div` 8 /= (length flags + 7) `div` 8) $+        Left "extractMatches: All bits were not consumed"+      when (not (null unusedHashes)) $+        Left "extractMatches: All hashes were not consumed"+      return (root, matches)  -- | Helper function to split a list in chunks 'Int' length. Last chunk may be -- smaller.

@@ -40,6 +40,7 @@ where  import Control.DeepSeq+import Control.Monad (guard) import Crypto.Hash import Crypto.MAC.HMAC (HMAC, hmac) import Data.Binary (Binary (..))@@ -82,6 +83,15 @@   put = serialize   get = deserialize +-- | Decode a hex string that must hold exactly the given number of bytes. The+-- text forms of the hash types use it so that a hash can never have the wrong+-- length.+decodeHexBytes :: Int -> String -> Maybe ByteString+decodeHexBytes n str = do+  bs <- decodeHex (cs str)+  guard (B.length bs == n)+  return bs+ -- | Type for 512-bit hashes. newtype Hash512 = Hash512 {get :: ShortByteString}   deriving (Eq, Ord, Generic)@@ -103,7 +113,7 @@ instance Read Hash512 where   readPrec = do     R.String str <- lexP-    maybe pfail (return . Hash512 . toShort) (decodeHex (cs str))+    maybe pfail (return . Hash512 . toShort) (decodeHexBytes 64 str)  instance Show Hash256 where   showsPrec _ = shows . encodeHex . fromShort . (.get)@@ -111,7 +121,7 @@ instance Read Hash256 where   readPrec = do     R.String str <- lexP-    maybe pfail (return . Hash256 . toShort) (decodeHex (cs str))+    maybe pfail (return . Hash256 . toShort) (decodeHexBytes 32 str)  instance Show Hash160 where   showsPrec _ = shows . encodeHex . fromShort . (.get)@@ -119,16 +129,10 @@ instance Read Hash160 where   readPrec = do     R.String str <- lexP-    maybe pfail (return . Hash160 . toShort) (decodeHex (cs str))+    maybe pfail (return . Hash160 . toShort) (decodeHexBytes 20 str)  instance IsString Hash512 where-  fromString str =-    case decodeHex $ cs str of-      Nothing -> e-      Just bs ->-        case B.length bs of-          64 -> Hash512 (toShort bs)-          _ -> e+  fromString = maybe e (Hash512 . toShort) . decodeHexBytes 64     where       e = error "Could not decode hash from hex string" @@ -145,13 +149,7 @@   get = deserialize  instance IsString Hash256 where-  fromString str =-    case decodeHex $ cs str of-      Nothing -> e-      Just bs ->-        case B.length bs of-          32 -> Hash256 (toShort bs)-          _ -> e+  fromString = maybe e (Hash256 . toShort) . decodeHexBytes 32     where       e = error "Could not decode hash from hex string" @@ -168,13 +166,7 @@   get = deserialize  instance IsString Hash160 where-  fromString str =-    case decodeHex $ cs str of-      Nothing -> e-      Just bs ->-        case B.length bs of-          20 -> Hash160 (toShort bs)-          _ -> e+  fromString = maybe e (Hash160 . toShort) . decodeHexBytes 20     where       e = error "Could not decode hash from hex string" 

@@ -25,8 +25,10 @@     PublicKey (..),     PrivateKey (..),     wrapPubKey,+    decodePubKey,     derivePublicKey,     wrapSecKey,+    decodeSecKey,     fromMiniKey,     tweakPubKey,     tweakSecKey,@@ -38,7 +40,7 @@ where  import Control.DeepSeq-import Control.Monad (guard, mzero, (<=<))+import Control.Monad (guard, mzero, unless, (<=<)) import Crypto.Secp256k1 import Data.Aeson   ( Encoding,@@ -64,6 +66,7 @@ import Data.Serialize (Serialize (..)) import Data.String (IsString, fromString) import Data.String.Conversions (cs)+import Data.Text qualified as T import GHC.Generics (Generic) import Haskoin.Address.Base58 import Haskoin.Crypto.Hash@@ -85,7 +88,7 @@   unmarshalValue ctx =     withText "PublicKey" $ \t -> do       bs <- maybe (fail "Expected hex public key") return $ decodeHex t-      either fail return $ unmarshal ctx bs+      either fail return $ decodePubKey ctx bs  instance Marshal Ctx PublicKey where   marshalGet ctx = do@@ -108,6 +111,18 @@ wrapPubKey :: Bool -> PubKey -> PublicKey wrapPubKey c p = PublicKey p c +-- | Decode a public key from bytes that must hold the key and nothing else:+-- 33 bytes starting with 0x02 or 0x03, or 65 bytes starting with 0x04. The+-- 'Marshal' instance reads a key from a longer stream and leaves the rest, so+-- it would accept trailing bytes here. A key pushed in a script, a witness or+-- a PSBT record is the whole item, so use this function for those.+decodePubKey :: Ctx -> ByteString -> Either String PublicKey+decodePubKey ctx = runGetS $ do+  k <- marshalGet ctx+  done <- isEmpty+  unless done $ fail "Trailing bytes after public key"+  return k+ -- | Derives a public key from a private key. This function will preserve -- compression flag. derivePublicKey :: Ctx -> PrivateKey -> PublicKey@@ -126,16 +141,29 @@   { key :: !SecKey,     compress :: !Bool   }-  deriving (Eq, Show, Read, Generic, NFData)+  deriving (Eq, Generic, NFData) +-- | The secret is not shown. A key that ends up in a log, an error message+-- or a REPL session must not give its coins away. There is no 'Read'+-- instance for the same reason: use 'toWif' and 'fromWif' to write a key+-- out and read it back.+instance Show PrivateKey where+  showsPrec d p =+    showParen (d > 10) $+      showString "PrivateKey {key = <redacted>, compress = "+        . shows p.compress+        . showString "}"+ instance Serial PrivateKey where   serialize p = do     putByteString p.key.get     serialize p.compress   deserialize = do-    k <- getByteString 32+    bs <- getByteString 32     c <- deserialize-    return PrivateKey {key = SecKey k, compress = c}+    case decodeSecKey bs of+      Nothing -> fail "Secret key is zero or not below the curve order"+      Just k -> return PrivateKey {key = k, compress = c}  instance MarshalJSON Network PrivateKey where   marshalValue net = String . toWif net@@ -148,6 +176,20 @@ wrapSecKey :: Bool -> SecKey -> PrivateKey wrapSecKey c d = PrivateKey d c +-- | Order of the secp256k1 group. A secret key is a number in @[1, n-1]@.+curveOrder :: Integer+curveOrder = 0xfffffffffffffffffffffffffffffffebaaedce6af48a03bbfd25e8cd0364141++-- | Build a secret key from its 32 big-endian bytes. Fails when the value is+-- zero or not below the curve order. 'Crypto.Secp256k1.secKey' only checks the+-- length, and such a key would make 'derivePubKey' and 'signMsg' crash.+decodeSecKey :: ByteString -> Maybe SecKey+decodeSecKey bs = do+  guard (BS.length bs == 32)+  let n = bsToInteger bs+  guard (n >= 1 && n < curveOrder)+  secKey bs+ -- | Tweak a private key. tweakSecKey :: Ctx -> SecKey -> Hash256 -> Maybe SecKey tweakSecKey ctx k =@@ -157,24 +199,35 @@ fromMiniKey :: ByteString -> Maybe PrivateKey fromMiniKey bs = do   guard checkShortKey-  wrapSecKey False <$> (secKey . runPutS . serialize . sha256) bs+  wrapSecKey False <$> (decodeSecKey . runPutS . serialize . sha256) bs   where     checkHash = runPutS $ serialize $ sha256 $ bs `BS.append` "?"     checkShortKey = BS.length bs `elem` [22, 30] && BS.head checkHash == 0x00 --- | Decode private key from WIF (wallet import format) string.+-- | Longest Base58 string a WIF can take. A WIF holds at most 38 bytes with+-- its checksum, which never need more than 52 digits because 58^52 is larger+-- than 256^38. Longer strings are rejected before decoding, since the time to+-- decode Base58 grows with the square of the length.+maxWifLength :: Int+maxWifLength = 52++-- | Decode private key from WIF (wallet import format) string. Fails on a+-- string of another network, of the wrong length, or holding a key that is+-- zero or not below the curve order. fromWif :: Network -> Base58 -> Maybe PrivateKey fromWif net wif = do+  guard (T.length wif <= maxWifLength)   bs <- decodeBase58Check wif+  (prefix, rest) <- BS.uncons bs   -- Check that this is a private key-  guard (BS.head bs == net.secretPrefix)-  case BS.length bs of+  guard (prefix == net.secretPrefix)+  case BS.length rest of     -- Uncompressed format-    33 -> wrapSecKey False <$> (secKey . BS.tail) bs-    -- Compressed format-    34 -> do-      guard $ BS.last bs == 0x01-      wrapSecKey True <$> (secKey . BS.tail . BS.init) bs+    32 -> wrapSecKey False <$> decodeSecKey rest+    -- Compressed format: the key is followed by a 0x01 flag byte+    33 -> do+      guard $ BS.last rest == 0x01+      wrapSecKey True <$> decodeSecKey (BS.init rest)     -- Bad length     _ -> Nothing 

@@ -106,7 +106,7 @@ import Control.Applicative import Control.DeepSeq import Control.Exception (Exception, throw)-import Control.Monad (guard, mzero, unless, (<=<))+import Control.Monad (guard, mzero, unless, when, (<=<)) import Crypto.Secp256k1 import Data.Aeson as Aeson   ( FromJSON,@@ -122,6 +122,7 @@ import Data.Bits (clearBit, setBit, testBit) import Data.ByteString (ByteString) import Data.ByteString qualified as B+import Data.Char (isDigit) import Data.Bytes.Get   ( MonadGet       ( getByteString,@@ -162,6 +163,7 @@ import Text.Read as Read   ( Lexeme (Ident, Number, String),     Read (readPrec),+    ReadPrec,     lexP,     parens,     pfail,@@ -197,19 +199,33 @@     -- | private key of this node     key :: !SecKey   }-  deriving (Generic, Eq, Show, Read, NFData, Hashable)+  deriving (Generic, Eq, NFData, Hashable) +-- | The chain code and the key are not shown. Together they give every key+-- below this one, so a value that ends up in a log or an error message+-- must not reveal them. There is no 'Read' instance for the same reason:+-- use 'xPrvExport' and 'xPrvImport' to write a key out and read it back.+instance Show XPrvKey where+  showsPrec d k =+    showParen (d > 10) $+      showString "XPrvKey {depth = "+        . shows k.depth+        . showString ", parent = "+        . shows k.parent+        . showString ", index = "+        . shows k.index+        . showString ", chain = <redacted>, key = <redacted>}"+ instance Marshal Network XPrvKey where   marshalGet net = do     ver <- getWord32be     unless (ver == net.xPrvPrefix) $       fail "Get: Invalid version for extended private key"-    XPrvKey-      <$> getWord8-      <*> deserialize-      <*> getWord32be-      <*> deserialize-      <*> getPadPrvKey+    d <- getWord8+    p <- deserialize+    i <- getWord32be+    checkMasterFields d p i+    XPrvKey d p i <$> deserialize <*> getPadPrvKey    marshalPut net k = do     putWord32be net.xPrvPrefix@@ -250,11 +266,12 @@     ver <- getWord32be     unless (ver == net.xPubPrefix) $       fail "Get: Invalid version for extended public key"-    XPubKey-      <$> getWord8-      <*> deserialize-      <*> getWord32be-      <*> deserialize+    d <- getWord8+    p <- deserialize+    i <- getWord32be+    checkMasterFields d p i+    XPubKey d p i+      <$> deserialize       <*> ((\PublicKey {point} -> point) <$> marshalGet ctx)    marshalPut (net, ctx) k = do@@ -276,14 +293,24 @@    marshalEncoding (net, ctx) = text . xPubExport net ctx +-- | A key at depth 0 is a master key. BIP32 requires its parent fingerprint+-- and child index to be zero; test vector 5 lists keys that break this rule+-- as invalid.+checkMasterFields :: (MonadGet m) => Word8 -> Fingerprint -> KeyIndex -> m ()+checkMasterFields depth parent index =+  when (depth == 0 && (parent /= Fingerprint 0 || index /= 0)) $+    fail "Extended key at depth 0 must have a zero parent fingerprint and index"+ -- | Build a BIP32 compatible extended private key from a bytestring. This will--- produce a root node (@depth=0@ and @parent=0@).+-- produce a root node (@depth=0@ and @parent=0@). Throws 'DerivationException'+-- in the vanishingly unlikely case that the seed gives a key outside the curve+-- order, which BIP32 declares invalid. makeXPrvKey :: ByteString -> XPrvKey makeXPrvKey bs =   XPrvKey 0 (Fingerprint 0) 0 c k   where     (p, c) = split512 $ hmac512 "Bitcoin seed" bs-    k = fromMaybe err (secKey (runPutS (serialize p)))+    k = fromMaybe err (decodeSecKey (runPutS (serialize p)))     err = throw $ DerivationException "Invalid seed"  -- | Derive an extended public key from an extended private key. This function@@ -310,9 +337,9 @@   -- | extended child private key   XPrvKey prvSubKey ctx xkey child-  | child >= 0 && child < 0x80000000 =-      XPrvKey (xkey.depth + 1) (xPrvFP ctx xkey) child c k-  | otherwise = error "Invalid child derivation index"+  | child < 0x80000000 =+      XPrvKey (nextDepth xkey.depth) (xPrvFP ctx xkey) child c k+  | otherwise = throw hardIndexException   where     pK = (deriveXPubKey ctx xkey).key     m = B.append (exportPubKey ctx True pK) (runPutS (serialize child))@@ -331,9 +358,9 @@   -- | extended child public key   XPubKey pubSubKey ctx xKey child-  | child >= 0 && child < 0x80000000 =-      XPubKey (xKey.depth + 1) (xPubFP ctx xKey) child c pK-  | otherwise = error "Invalid child derivation index"+  | child < 0x80000000 =+      XPubKey (nextDepth xKey.depth) (xPubFP ctx xKey) child c pK+  | otherwise = throw hardIndexException   where     m = B.append (exportPubKey ctx True xKey.key) (runPutS $ serialize child)     (a, c) = split512 $ hmac512 (runPutS $ serialize xKey.chain) m@@ -355,9 +382,9 @@   -- | extended child private key   XPrvKey hardSubKey ctx xkey child-  | child >= 0 && child < 0x80000000 =-      XPrvKey (xkey.depth + 1) (xPrvFP ctx xkey) i c k-  | otherwise = error "Invalid child derivation index"+  | child < 0x80000000 =+      XPrvKey (nextDepth xkey.depth) (xPrvFP ctx xkey) i c k+  | otherwise = throw hardIndexException   where     i = setBit child 31     m = B.append (bsPadPrvKey xkey.key) (runPutS $ serialize i)@@ -365,6 +392,21 @@     k = fromMaybe err $ tweakSecKey ctx xkey.key a     err = throw $ DerivationException "Invalid hardSubKey derivation" +-- | The exception for a child index with the hard bit set. The derivation+-- functions take the index without the bit, below 2^31, and 'hardSubKey'+-- sets the bit itself. Every failure of a derivation throws+-- 'DerivationException', so that a caller can catch them all at once.+hardIndexException :: DerivationException+hardIndexException = DerivationException "Invalid child derivation index"++-- | Depth of a child key. BIP32 stores the depth in one byte, so a key at+-- depth 255 can have no children. Bitcoin Core wraps around to 0 here, which+-- gives a key that cannot be told from a master key. This library refuses, as+-- rust-bitcoin does.+nextDepth :: Word8 -> Word8+nextDepth 255 = throw $ DerivationException "Maximum derivation depth exceeded"+nextDepth d = d + 1+ -- | Returns true if the extended private key was derived through a hard -- derivation. xPrvIsHard :: XPrvKey -> Bool@@ -427,17 +469,22 @@ xPubAddr :: Ctx -> XPubKey -> Address xPubAddr ctx xkey = pubKeyAddr ctx (wrapPubKey True xkey.key) --- | Compute a SegWit P2WPKH address for an extended public key.+-- | Compute a SegWit P2WPKH address for an extended public key. Extended+-- public keys are always compressed, so the address always exists. xPubWitnessAddr :: Ctx -> XPubKey -> Address-xPubWitnessAddr ctx xkey =-  pubKeyWitnessAddr ctx (wrapPubKey True xkey.key)+xPubWitnessAddr ctx xkey = p2wpkhAddr (xPubKeyHash ctx xkey)  -- | Compute a backwards-compatible SegWit P2SH-P2WPKH address for an extended--- public key.+-- public key. Extended public keys are always compressed, so the address+-- always exists. xPubCompatWitnessAddr :: Ctx -> XPubKey -> Address xPubCompatWitnessAddr ctx xkey =-  pubKeyCompatWitnessAddr ctx (wrapPubKey True xkey.key)+  payToScriptAddress ctx (PayWitnessPKHash (xPubKeyHash ctx xkey)) +-- | HASH160 of the compressed public key of an extended public key.+xPubKeyHash :: Ctx -> XPubKey -> Hash160+xPubKeyHash ctx xkey = addressHash (marshal ctx (wrapPubKey True xkey.key))+ -- | Exports an extended private key to the BIP32 key export format ('Base58'). xPrvExport :: Network -> XPrvKey -> Base58 xPrvExport net = encodeBase58Check . marshal net@@ -447,17 +494,40 @@ xPubExport net ctx = encodeBase58Check . marshal (net, ctx)  -- | Decodes a BIP32 encoded extended private key. This function will fail if--- invalid base 58 characters are detected or if the checksum fails.+-- invalid base 58 characters are detected, if the checksum fails, if the+-- payload is not exactly 78 bytes, or if the key fails the checks of BIP32. xPrvImport :: Network -> Base58 -> Maybe XPrvKey xPrvImport net =-  eitherToMaybe . unmarshal net <=< decodeBase58Check+  eitherToMaybe . unmarshal net <=< decodeExtendedKey  -- | Decodes a BIP32 encoded extended public key. This function will fail if--- invalid base 58 characters are detected or if the checksum fails.+-- invalid base 58 characters are detected, if the checksum fails, if the+-- payload is not exactly 78 bytes, or if the key fails the checks of BIP32. xPubImport :: Network -> Ctx -> Base58 -> Maybe XPubKey xPubImport net ctx =-  eitherToMaybe . unmarshal (net, ctx) <=< decodeBase58Check+  eitherToMaybe . unmarshal (net, ctx) <=< decodeExtendedKey +-- | Size in bytes of a serialized extended key, without its checksum.+extendedKeySize :: Int+extendedKeySize = 78++-- | Longest Base58 string an extended key can take. The 82 bytes of key and+-- checksum never need more than 112 digits because 58^112 is larger than+-- 256^82. Longer strings are rejected before decoding, since the time to decode+-- Base58 grows with the square of the length.+maxExtendedKeyLength :: Int+maxExtendedKeyLength = 112++-- | Decode the Base58Check form of an extended key into its 78 bytes. A payload+-- of another size is refused, as Bitcoin Core does, so that trailing bytes or+-- an uncompressed public key cannot slip through.+decodeExtendedKey :: Base58 -> Maybe ByteString+decodeExtendedKey t = do+  guard (Text.length t <= maxExtendedKeyLength)+  bs <- decodeBase58Check t+  guard (B.length bs == extendedKeySize)+  return bs+ -- | Export an extended private key to WIF (Wallet Import Format). xPrvWif :: Network -> XPrvKey -> Base58 xPrvWif net xkey = toWif net (wrapSecKey True xkey.key)@@ -552,12 +622,13 @@       let (a, rdm) = deriveMSAddr ctx keys m i        in (a, rdm, i) --- | Helper function to go through derivation indices.+-- | Helper function to go through derivation indices. Throws+-- 'DerivationException' for an index with the hard bit set. cycleIndex :: KeyIndex -> [KeyIndex] cycleIndex i   | i == 0 = cycle [0 .. 0x7fffffff]   | i < 0x80000000 = cycle $ [i .. 0x7fffffff] ++ [0 .. (i - 1)]-  | otherwise = error $ "cycleIndex: invalid index " ++ show i+  | otherwise = throw $ DerivationException $ "cycleIndex: invalid index " ++ show i  {- Derivation Paths -} @@ -631,7 +702,8 @@     if nextA == nextB then iA `compare` iB else nextA `compare` nextB   (nextA :/ iA) `compare` (nextB :/ iB) =     if nextA == nextB then iA `compare` iB else nextA `compare` nextB-  -- Different hardness: hard paths are LT soft paths+  -- Different hardness: a soft path sorts before a hard one, as it does when+  -- comparing the index lists of 'pathToList', where the hard bit is set.   (nextA :/ _iA) `compare` (nextB :| _iB) =     if nextA == nextB then LT else nextA `compare` nextB   (nextA :| _iA) `compare` (nextB :/ _iB) =@@ -904,12 +976,24 @@ appendBip32Segment d (Bip32SoftIndex i) = d :/ i appendBip32Segment d (Bip32HardIndex i) = d :| i --- | Parse a BIP32 derivation path index element from a string.+-- | Parse a BIP32 derivation path index element from a string. The element is+-- a decimal number below 2^31, followed by @'@, @h@ or @H@ for a hardened+-- index. Bitcoin Core accepts the same three markers. The number is read as an+-- 'Integer' so that a value too large for 32 bits cannot wrap around. parseBip32PathIndex :: String -> Maybe Bip32PathIndex-parseBip32PathIndex segment = case reads segment of-  [(i, "")] -> guard (is31Bit i) >> return (Bip32SoftIndex i)-  [(i, "'")] -> guard (is31Bit i) >> return (Bip32HardIndex i)-  _ -> Nothing+parseBip32PathIndex segment =+  case span isDigit segment of+    ("", _) -> Nothing+    (digits, "") -> Bip32SoftIndex <$> parseIndex digits+    (digits, [marker])+      | marker `elem` hardMarkers -> Bip32HardIndex <$> parseIndex digits+    _ -> Nothing+  where+    hardMarkers = "'hH" :: String+    parseIndex digits = do+      let n = read digits :: Integer+      guard (is31Bit n)+      return (fromInteger n)  -- | Type for BIP32 path index element. data Bip32PathIndex@@ -932,19 +1016,20 @@         parens $ do           Ident "Bip32HardIndex" <- lexP           Number n <- lexP-          maybe-            pfail-            (return . Bip32HardIndex . fromIntegral)-            (numberToInteger n)+          maybe pfail (fmap Bip32HardIndex . readIndex) (numberToInteger n)       s =         parens $ do           Ident "Bip32SoftIndex" <- lexP           Number n <- lexP-          maybe-            pfail-            (return . Bip32SoftIndex . fromIntegral)-            (numberToInteger n)+          maybe pfail (fmap Bip32SoftIndex . readIndex) (numberToInteger n) +-- | Read a derivation index that was lexed as a number, refusing values that+-- do not fit in 31 bits instead of wrapping them around.+readIndex :: Integer -> ReadPrec KeyIndex+readIndex i+  | is31Bit i = return (fromInteger i)+  | otherwise = pfail+ -- | Test whether the number could be a valid BIP32 derivation index. is31Bit :: (Integral a) => a -> Bool is31Bit i = i >= 0 && i < 0x80000000@@ -967,7 +1052,7 @@       { xpub :: !XPubKey,         net :: !Network       }-  deriving (Show, Read, Eq, Generic, NFData)+  deriving (Show, Eq, Generic, NFData)  -- | Apply a parsed path to an extended key to derive the new key defined in the -- path. If the path starts with /m/, a private key will be returned and if the@@ -1045,8 +1130,8 @@   pad <- getWord8   unless (pad == 0x00) $ fail "Private key must be padded with 0x00"   bs <- getByteString 32-  case secKey bs of-    Nothing -> fail $ "Could not decode secret key: " ++ cs (encodeHex bs)+  case decodeSecKey bs of+    Nothing -> fail "Secret key is zero or not below the curve order"     Just x -> return x  -- | Serialize HDW-specific private key.

@@ -12,7 +12,7 @@ where  import Control.DeepSeq (NFData)-import Control.Monad ((>=>))+import Control.Monad (unless) import Data.Aeson   ( FromJSON (parseJSON),     ToJSON (toEncoding, toJSON),@@ -22,10 +22,9 @@ import Data.Binary (Binary (..)) import Data.Bytes.Get (getWord32be) import Data.Bytes.Put (putWord32be)+import Data.ByteString qualified as B import Data.Bytes.Serial (Serial (..))-import Data.Either (fromRight) import Data.Hashable (Hashable)-import Data.Maybe (fromMaybe) import Data.Serialize (Serialize (..)) import Data.Serialize qualified as S import Data.String (IsString (..))@@ -44,29 +43,24 @@ fingerprintToText :: Fingerprint -> Text fingerprintToText = encodeHex . S.encode +-- | Read a fingerprint from exactly eight hex digits. textToFingerprint :: Text -> Either String Fingerprint-textToFingerprint =-  maybe (Left "Fingerprint: invalid hex") Right . decodeHex >=> S.decode+textToFingerprint t = do+  bs <- maybe (Left "Fingerprint: invalid hex") Right (decodeHex t)+  unless (B.length bs == 4) $ Left "Fingerprint: expected 4 bytes"+  S.decode bs  instance Show Fingerprint where   show = show . Text.unpack . encodeHex . S.encode  instance Read Fingerprint where-  readPrec =-    readPrec-      >>= maybe (fail "Fingerprint: invalid hex") pure . decodeHex-      >>= either (fail . ("Fingerprint: " <>)) pure . S.decode+  readPrec = readPrec >>= either fail pure . textToFingerprint  instance IsString Fingerprint where   fromString =-    fromRight decodeError-      . S.decode-      . fromMaybe hexError-      . decodeHex+    either (error . ("Fingerprint literal: " <>)) id+      . textToFingerprint       . Text.pack-    where-      decodeError = error "Fingerprint literal: Unable to decode"-      hexError = error "Fingerprint literal: Invalid hex"  instance Serial Fingerprint where   serialize = putWord32be . (.get)

@@ -25,7 +25,7 @@   ) where -import Control.Monad (when)+import Control.Monad (unless, when) import Crypto.Hash (SHA256 (..), hashWith) import Crypto.KDF.PBKDF2 (Parameters (..), fastPBKDF2_SHA512) import Data.Bits (shiftL, shiftR)@@ -39,6 +39,7 @@ import Data.Text (Text) import Data.Text qualified as T import Data.Text.Encoding qualified as E+import Data.Text.Normalize (NormalizationMode (NFKD), normalize) import Data.Vector (Vector, (!)) import Data.Vector qualified as V import Haskoin.Util@@ -63,16 +64,28 @@ pbkdfParams :: Parameters pbkdfParams = Parameters {iterCounts = 2048, outputLength = 64} --- | Provide intial 'Entropy' as a 'ByteString' of length multiple of 4 bytes.--- Output a 'Mnemonic' sentence.+-- | Smallest entropy BIP39 allows: 128 bits, which gives 12 words.+minEntropyBytes :: Int+minEntropyBytes = 16++-- | Largest entropy BIP39 allows: 256 bits, which gives 24 words.+maxEntropyBytes :: Int+maxEntropyBytes = 32++-- | Word counts of the sentences BIP39 allows, for 128 to 256 bits of entropy.+validWordCounts :: [Int]+validWordCounts = [12, 15, 18, 21, 24]++-- | Provide initial 'Entropy' as a 'ByteString' of 16 to 32 bytes, in steps+-- of 4 bytes, as BIP39 allows. Output a 'Mnemonic' sentence of 12 to 24 words. toMnemonic :: Entropy -> Either String Mnemonic toMnemonic ent = do-  when (B.null ent) $-    Left "toMnemonic: entropy can not be empty"   when (remainder /= 0) $     Left "toMnemonic: entropy must be multiples of 4 bytes"-  when (cs_len > 16) $-    Left "toMnemonic: maximum entropy is 64 bytes (512 bits)"+  when (B.length ent < minEntropyBytes) $+    Left "toMnemonic: minimum entropy is 16 bytes (128 bits)"+  when (B.length ent > maxEntropyBytes) $+    Left "toMnemonic: maximum entropy is 32 bytes (256 bits)"   return ms   where     (cs_len, remainder) = B.length ent `quotRem` 4@@ -83,16 +96,16 @@ -- | Revert 'toMnemonic'. Do not use this to generate a 'Seed'. Instead use -- 'mnemonicToSeed'. This outputs the original 'Entropy' used to generate a -- 'Mnemonic' sentence.+--+-- The sentence is NFKD-normalised before its words are looked up, as BIP39+-- requires. Only sentences of 12, 15, 18, 21 or 24 words are accepted. fromMnemonic :: Mnemonic -> Either String Entropy fromMnemonic ms = do   when (T.null ms) $     Left "fromMnemonic: empty mnemonic"-  when (word_count > 48) $-    Left $-      "fromMnemonic: too many words: " ++ show word_count-  when (word_count `mod` 3 /= 0) $+  unless (word_count `elem` validWordCounts) $     Left $-      "fromMnemonic: wrong number of words:" ++ show word_count+      "fromMnemonic: wrong number of words: " ++ show word_count   ms_bs <- indicesToBS =<< getIndices ms_words   let (ms_ent, ms_cs) = B.splitAt (ent_len * 4) ms_bs       ms_cs_num = numCS cs_len ms_cs@@ -102,7 +115,7 @@       "fromMnemonic: checksum failed: " ++ sh ent_cs_num ms_cs_num   return ms_ent   where-    ms_words = T.words ms+    ms_words = T.words (normalize NFKD ms)     word_count = length ms_words     (ent_len, cs_len) = (word_count * 11) `quotRem` 32     sh cs_a cs_b = show cs_a ++ " /= " ++ show cs_b@@ -120,18 +133,20 @@       x -> flip shiftR x  -- | Turn an arbitrary sequence of characters into a 512-bit 'Seed'. Use--- 'mnemonicToSeed' to get a seed from a 'Mnemonic' sentence. Warning: Does not--- perform NFKD normalization.+-- 'mnemonicToSeed' to get a seed from a 'Mnemonic' sentence. Both inputs are+-- NFKD-normalised first, as BIP39 requires. anyToSeed :: Passphrase -> Mnemonic -> Seed anyToSeed pf ms =   fastPBKDF2_SHA512     pbkdfParams-    (E.encodeUtf8 ms)-    ("mnemonic" `mappend` E.encodeUtf8 pf)+    (E.encodeUtf8 (normalize NFKD ms))+    ("mnemonic" `mappend` E.encodeUtf8 (normalize NFKD pf))  -- | Get a 512-bit 'Seed' from a 'Mnemonic' sentence. Will validate checksum. -- 'Passphrase' can be used to protect the 'Mnemonic'. Use an empty string as--- 'Passphrase' if none is required.+-- 'Passphrase' if none is required. The sentence and the passphrase are+-- NFKD-normalised as BIP39 requires, so a passphrase with accented letters+-- gives the same seed here as in other wallets. mnemonicToSeed :: Passphrase -> Mnemonic -> Either String Seed mnemonicToSeed pf ms = do   ent <- fromMnemonic ms@@ -142,7 +157,7 @@ getIndices :: [Text] -> Either String [Int] getIndices ws   | null n = return $ catMaybes i-  | otherwise = Left $ "getIndices: words not found: " ++ cs w+  | otherwise = Left $ "fromMnemonic: words not in the list: " ++ cs w   where     i = map (`M.lookup` wordListMap) ws     n = elemIndices Nothing i

@@ -17,6 +17,7 @@ module Haskoin.Crypto.Signature   ( -- * Signatures     signHash,+    hashToMsg,     verifyHashSig,     isCanonicalHalfOrder,     decodeStrictSig,@@ -35,7 +36,7 @@ import Data.Bytes.Get import Data.Bytes.Put import Data.Bytes.Serial-import Data.Maybe (fromMaybe, isNothing)+import Data.Maybe (fromMaybe) import Data.Serialize (Serialize (..)) import Data.Text qualified as T import Haskoin.Crypto.Hash@@ -56,9 +57,7 @@  -- | Verify an ECDSA signature for a 256-bit hash. verifyHashSig :: Ctx -> Hash256 -> Sig -> PubKey -> Bool-verifyHashSig ctx h s p = verifySig ctx p norm (hashToMsg h)-  where-    norm = fromMaybe s (normalizeSig ctx s)+verifyHashSig ctx h s p = verifySig ctx p (normalizeSig ctx s) (hashToMsg h)  instance Marshal Ctx Sig where   marshalGet ctx = do@@ -82,15 +81,17 @@ instance MarshalJSON Ctx Sig where   marshalValue ctx = String . encodeHex . exportSig ctx   marshalEncoding ctx = hexEncoding . L.fromStrict . exportSig ctx+  -- Decoding is as strict as the binary form: low-S and non-zero components.   unmarshalValue ctx =     withText "Sig" $ \t ->-      case decodeHex t >>= importSig ctx of+      case decodeHex t >>= decodeStrictSig ctx of         Nothing -> fail $ "Could not decode signature: " <> T.unpack t         Just s -> return s --- | Is canonical half order.+-- | Is canonical half order: the s component is not above half the curve+-- order, the only form 'verifySig' accepts. isCanonicalHalfOrder :: Ctx -> Sig -> Bool-isCanonicalHalfOrder ctx = isNothing . normalizeSig ctx+isCanonicalHalfOrder = isLowS  -- | Decode signature strictly. decodeStrictSig :: Ctx -> ByteString -> Maybe Sig

@@ -17,11 +17,15 @@     module Common,     module Message,     module Bloom,+    module CompactBlock,+    module BlockFilter,   ) where +import Haskoin.Network.BlockFilter as BlockFilter import Haskoin.Network.Bloom as Bloom import Haskoin.Network.Common as Common+import Haskoin.Network.CompactBlock as CompactBlock import Haskoin.Network.Constants as Constants import Haskoin.Network.Data as Data import Haskoin.Network.Message as Message

@@ -0,0 +1,215 @@+{-# LANGUAGE DeriveAnyClass #-}+{-# LANGUAGE DeriveGeneric #-}+{-# LANGUAGE DuplicateRecordFields #-}+{-# LANGUAGE OverloadedRecordDot #-}+{-# LANGUAGE NoFieldSelectors #-}++-- |+-- Module      : Haskoin.Network.BlockFilter+-- Copyright   : No rights reserved+-- License     : MIT+-- Maintainer  : jprupp@protonmail.ch+-- Stability   : experimental+-- Portability : POSIX+--+-- Messages of client-side block filtering (BIP 157): @getcfilters@,+-- @cfilter@, @getcfheaders@, @cfheaders@, @getcfcheckpt@ and @cfcheckpt@.+-- The filters themselves are defined by BIP 158.+module Haskoin.Network.BlockFilter+  ( FilterType,+    basicFilterType,+    GetCFilters (..),+    CFilter (..),+    GetCFHeaders (..),+    CFHeaders (..),+    GetCFCheckpt (..),+    CFCheckpt (..),+  )+where++import Control.DeepSeq+import Data.Binary (Binary (..))+import Data.ByteString (ByteString)+import Data.Bytes.Get+import Data.Bytes.Put+import Data.Bytes.Serial+import Data.Serialize (Serialize (..))+import Data.Word (Word32, Word8)+import GHC.Generics (Generic)+import Haskoin.Block.Common (BlockHash)+import Haskoin.Crypto.Hash (Hash256)+import Haskoin.Network.Common++-- | Kind of filter, as defined by BIP 158.+type FilterType = Word8++-- | The basic filter type of BIP 158, the only one defined so far.+basicFilterType :: FilterType+basicFilterType = 0++-- | The @getcfilters@ message. It asks for the filters of a range of blocks.+-- BIP 157 limits a range to 1000 blocks.+data GetCFilters = GetCFilters+  { -- | kind of filter+    filterType :: !FilterType,+    -- | height of the first block of the range+    startHeight :: !Word32,+    -- | hash of the last block of the range+    stopHash :: !BlockHash+  }+  deriving (Eq, Show, Generic, NFData)++instance Serial GetCFilters where+  deserialize = GetCFilters <$> getWord8 <*> getWord32le <*> deserialize+  serialize g = do+    putWord8 g.filterType+    putWord32le g.startHeight+    serialize g.stopHash++instance Binary GetCFilters where+  put = serialize+  get = deserialize++instance Serialize GetCFilters where+  put = serialize+  get = deserialize++-- | The @cfilter@ message: the filter of one block.+data CFilter = CFilter+  { -- | kind of filter+    filterType :: !FilterType,+    -- | hash of the block the filter is for+    blockHash :: !BlockHash,+    -- | the serialized filter+    filterBytes :: !ByteString+  }+  deriving (Eq, Show, Generic, NFData)++instance Serial CFilter where+  deserialize = CFilter <$> getWord8 <*> deserialize <*> getVarIntBytes+  serialize c = do+    putWord8 c.filterType+    serialize c.blockHash+    putVarIntBytes c.filterBytes++instance Binary CFilter where+  put = serialize+  get = deserialize++instance Serialize CFilter where+  put = serialize+  get = deserialize++-- | The @getcfheaders@ message. It asks for the filter hashes of a range of+-- blocks, with the filter header before the range. BIP 157 limits a range to+-- 2000 blocks.+data GetCFHeaders = GetCFHeaders+  { -- | kind of filter+    filterType :: !FilterType,+    -- | height of the first block of the range+    startHeight :: !Word32,+    -- | hash of the last block of the range+    stopHash :: !BlockHash+  }+  deriving (Eq, Show, Generic, NFData)++instance Serial GetCFHeaders where+  deserialize = GetCFHeaders <$> getWord8 <*> getWord32le <*> deserialize+  serialize g = do+    putWord8 g.filterType+    putWord32le g.startHeight+    serialize g.stopHash++instance Binary GetCFHeaders where+  put = serialize+  get = deserialize++instance Serialize GetCFHeaders where+  put = serialize+  get = deserialize++-- | The @cfheaders@ message, the answer to 'GetCFHeaders'. The filter header+-- of each block is the double SHA-256 of its filter hash and the previous+-- filter header.+data CFHeaders = CFHeaders+  { -- | kind of filter+    filterType :: !FilterType,+    -- | hash of the last block of the range+    stopHash :: !BlockHash,+    -- | filter header of the block before the range+    previousHeader :: !Hash256,+    -- | filter hash of every block of the range+    filterHashes :: ![Hash256]+  }+  deriving (Eq, Show, Generic, NFData)++instance Serial CFHeaders where+  deserialize =+    CFHeaders+      <$> getWord8+      <*> deserialize+      <*> deserialize+      <*> getVarIntList deserialize+  serialize c = do+    putWord8 c.filterType+    serialize c.stopHash+    serialize c.previousHeader+    putVarIntList serialize c.filterHashes++instance Binary CFHeaders where+  put = serialize+  get = deserialize++instance Serialize CFHeaders where+  put = serialize+  get = deserialize++-- | The @getcfcheckpt@ message. It asks for the filter headers at every+-- thousandth block up to the given one.+data GetCFCheckpt = GetCFCheckpt+  { -- | kind of filter+    filterType :: !FilterType,+    -- | hash of the last block of the chain to cover+    stopHash :: !BlockHash+  }+  deriving (Eq, Show, Generic, NFData)++instance Serial GetCFCheckpt where+  deserialize = GetCFCheckpt <$> getWord8 <*> deserialize+  serialize g = do+    putWord8 g.filterType+    serialize g.stopHash++instance Binary GetCFCheckpt where+  put = serialize+  get = deserialize++instance Serialize GetCFCheckpt where+  put = serialize+  get = deserialize++-- | The @cfcheckpt@ message, the answer to 'GetCFCheckpt'.+data CFCheckpt = CFCheckpt+  { -- | kind of filter+    filterType :: !FilterType,+    -- | hash of the last block of the chain covered+    stopHash :: !BlockHash,+    -- | filter headers at heights 1000, 2000, and so on+    filterHeaders :: ![Hash256]+  }+  deriving (Eq, Show, Generic, NFData)++instance Serial CFCheckpt where+  deserialize = CFCheckpt <$> getWord8 <*> deserialize <*> getVarIntList deserialize+  serialize c = do+    putWord8 c.filterType+    serialize c.stopHash+    putVarIntList serialize c.filterHeaders++instance Binary CFCheckpt where+  put = serialize+  get = deserialize++instance Serialize CFCheckpt where+  put = serialize+  get = deserialize

@@ -26,6 +26,9 @@     BloomFilter (..),     FilterLoad (..),     FilterAdd (..),+    maxBloomSize,+    maxHashFuncs,+    maxFilterAddSize,     bloomCreate,     bloomInsert,     bloomContains,@@ -34,11 +37,13 @@     isBloomFull,     acceptsFilters,     bloomRelevantUpdate,+    scriptPushData,   ) where +import Control.Applicative ((<|>)) import Control.DeepSeq-import Control.Monad (forM_, replicateM)+import Control.Monad (when) import Crypto.Secp256k1 (Ctx) import Data.Binary (Binary (..)) import Data.Bits@@ -52,20 +57,29 @@ import Data.List (foldl') import Data.Sequence qualified as S import Data.Serialize (Serialize (..))+import Data.Serialize qualified as Ser import Data.Word import GHC.Generics (Generic) import Haskoin.Network.Common+import Haskoin.Script.Common import Haskoin.Script.Standard import Haskoin.Transaction.Common import Haskoin.Util.Marshal --- | 20,000 items with fp rate < 0.1% or 10,000 items and <0.0001%+-- | Largest filter a peer may load, in bytes. 20,000 items with fp rate+-- < 0.1% or 10,000 items and <0.0001%. maxBloomSize :: Int maxBloomSize = 36000 +-- | Largest number of hash functions a filter may use. maxHashFuncs :: Word32 maxHashFuncs = 50 +-- | Largest data element a 'FilterAdd' message may carry, in bytes. It is+-- the largest element a script can push (@MAX_SCRIPT_ELEMENT_SIZE@).+maxFilterAddSize :: Int+maxFilterAddSize = 520+ ln2Squared :: Double ln2Squared = 0.4804530139182014246671025263266649717305529515945455 @@ -86,13 +100,14 @@     BloomUpdateP2PubKeyOnly   deriving (Eq, Show, Read, Generic, NFData) +-- | Only the two low bits of the flags byte count, as with the+-- @BLOOM_UPDATE_MASK@ of Bitcoin Core. The value 3 means no update. instance Serial BloomFlags where-  deserialize = go =<< getWord8+  deserialize = go . (.&. 3) =<< getWord8     where-      go 0 = return BloomUpdateNone       go 1 = return BloomUpdateAll       go 2 = return BloomUpdateP2PubKeyOnly-      go _ = fail "BloomFlags get: Invalid bloom flag"+      go _ = return BloomUpdateNone    serialize f = putWord8 $ case f of     BloomUpdateNone -> 0@@ -125,15 +140,21 @@   }   deriving (Eq, Show, Read, Generic, NFData) +-- | A filter with more than 'maxBloomSize' bytes or more than 'maxHashFuncs'+-- hash functions fails the parse, as Bitcoin Core refuses such a+-- @filterload@ message. instance Serial BloomFilter where-  deserialize =-    BloomFilter-      <$> (S.fromList <$> (readDat =<< deserialize))-      <*> getWord32le-      <*> getWord32le-      <*> deserialize-    where-      readDat (VarInt len) = replicateM (fromIntegral len) getWord8+  deserialize = do+    VarInt len <- deserialize+    when (len > fromIntegral maxBloomSize) $+      fail ("Bloom filter of " ++ show len ++ " bytes is too large")+    bytes <- getByteString (fromIntegral len)+    functions <- getWord32le+    when (functions > maxHashFuncs) $+      fail ("Bloom filter with " ++ show functions ++ " hash functions has too many")+    tweak <- getWord32le+    flags <- deserialize+    return BloomFilter {array = S.fromList (BS.unpack bytes), ..}    serialize BloomFilter {..} = do     putVarInt $ S.length array@@ -173,15 +194,16 @@   deriving (Eq, Show, Read, Generic)   deriving newtype (NFData) +-- | An element longer than 'maxFilterAddSize' fails the parse, as Bitcoin+-- Core refuses such a @filteradd@ message. instance Serial FilterAdd where   deserialize = do-    (VarInt len) <- deserialize-    dat <- getByteString $ fromIntegral len+    dat <- getVarIntBytes+    when (BS.length dat > maxFilterAddSize) $+      fail ("filteradd element of " ++ show (BS.length dat) ++ " bytes is too long")     return $ FilterAdd dat -  serialize (FilterAdd bs) = do-    putVarInt $ BS.length bs-    putByteString bs+  serialize (FilterAdd bs) = putVarIntBytes bs  instance Binary FilterAdd where   put = serialize@@ -192,7 +214,10 @@   get = deserialize  -- | Build a bloom filter that will provide the given false positive rate when--- the given number of elements have been inserted.+-- the given number of elements have been inserted. The size is capped at+-- 'maxBloomSize' and the number of hash functions at 'maxHashFuncs'. A filter+-- built for many more elements than fit in 'maxBloomSize' gets zero hash+-- functions and then matches everything, as in Bitcoin Core. bloomCreate ::   -- | number of elements   Int ->@@ -213,7 +238,9 @@     a = -1 / ln2Squared * fromIntegral numElem * log fpRate     -- Maximum size in bits     b = fromIntegral $ maxBloomSize * 8-    numHashF = truncate $ min c (fromIntegral maxHashFuncs)+    numHashF+      | numElem == 0 = 0+      | otherwise = truncate $ min c (fromIntegral maxHashFuncs)     -- Suggested number of hash functions     c = fromIntegral bloomSize * 8 / fromIntegral numElem * ln2 @@ -223,8 +250,14 @@   where     seed = hashNum * 0xfba4c795 + b.tweak +-- | Bit positions that the hash functions of a filter map some data to. There+-- are as many as the filter has hash functions. The filter must not be empty.+bloomBits :: BloomFilter -> ByteString -> [Word32]+bloomBits b bs =+  map (\i -> bloomHash b i bs) (take (fromIntegral b.functions) [0 ..])+ -- | Insert arbitrary data into a bloom filter. Returns the new bloom filter--- containing the new data.+-- containing the new data. An empty filter stays empty. bloomInsert ::   -- | Original bloom filter   BloomFilter ->@@ -233,19 +266,18 @@   -- | Bloom filter containing the new data   BloomFilter bloomInsert b bs-  | isBloomFull b = b-  | otherwise = b {array = dat}+  | S.null b.array = b+  | otherwise = b {array = foldl' setBit' b.array (bloomBits b bs)}   where-    idxs = map (\i -> bloomHash b i bs) [0 .. b.functions - 1]-    upd s i =+    setBit' s i =       S.adjust         (.|. bitMask !! fromIntegral (7 .&. i))         (fromIntegral $ i `shiftR` 3)         s-    dat = foldl upd b.array idxs  -- | Tests if some arbitrary data matches the filter. This can be either because--- the data was inserted into the filter or because it is a false positive.+-- the data was inserted into the filter or because it is a false positive. An+-- empty filter, and a filter with no hash functions, match everything. bloomContains ::   -- | Bloom filter   BloomFilter ->@@ -254,20 +286,43 @@   -- | Returns True if the data matches the filter   Bool bloomContains b bs-  | isBloomFull b = True-  | isBloomEmpty b = False-  | otherwise = all isSet idxs+  | S.null b.array = True+  | otherwise = all isSet (bloomBits b bs)   where-    s = b.array-    idxs = map (\i -> bloomHash b i bs) [0 .. b.functions - 1]     isSet i =-      S.index s (fromIntegral $ i `shiftR` 3)+      S.index b.array (fromIntegral $ i `shiftR` 3)         .&. (bitMask !! fromIntegral (7 .&. i))         /= 0 --- | Checks if any of the outputs of a tx is in the current bloom filter.--- If it is, add the txid and vout as an outpoint (i.e. so that--- a future tx that spends the output won't be missed).+-- | Data elements pushed by a script, in order, without the empty ones. The+-- scan stops at the first byte sequence that is not a valid operation, as+-- @GetOp@ does in Bitcoin Core, and keeps the elements found before it.+scriptPushData :: ByteString -> [ByteString]+scriptPushData = either (const []) id . runGetS pushes+  where+    pushes :: Ser.Get [ByteString]+    pushes = do+      done <- isEmpty+      if done+        then return []+        else do+          op <- (Just <$> deserialize) <|> return Nothing+          case op of+            Nothing -> return []+            Just (OP_PUSHDATA d _)+              | not (BS.null d) -> (d :) <$> pushes+            Just _ -> pushes++-- | Checks if any output of a transaction matches the filter, as+-- @IsRelevantAndUpdate@ does in Bitcoin Core. An output matches when any data+-- element pushed by its script is in the filter. The outpoint of a matching+-- output is inserted according to the flags: always with 'BloomUpdateAll',+-- only for pay-to-pubkey and pay-to-multisig outputs with+-- 'BloomUpdateP2PubKeyOnly', and never with 'BloomUpdateNone'. The result is+-- 'Nothing' when no output matches, and otherwise the filter with the+-- outpoints added, which lets a future transaction spending them match too.+-- Non-standard output scripts are scanned like any other. An empty filter+-- matches every transaction and gets no outpoints. bloomRelevantUpdate ::   Ctx ->   -- | Bloom filter@@ -277,51 +332,28 @@   -- | Returns an updated bloom filter adding relevant output   Maybe BloomFilter bloomRelevantUpdate ctx b tx-  | isBloomFull b || isBloomEmpty b = Nothing-  | b.flags == BloomUpdateNone = Nothing-  | not (null matchOuts) = Just $ foldl' addRelevant b matchOuts+  | S.null b.array = Just b+  | found = Just updated   | otherwise = Nothing   where-    -- TxHash if we end up inserting an outpoint--    h = txHash tx-    -- Decode the scriptOutpus and add vOuts in case we make them outpoints-    decodedOutputScripts = traverse (unmarshal ctx . (.script)) tx.outputs-    err = error "Error Decoding output script"-    idxOutputScripts = either (const err) (zip [0 ..]) decodedOutputScripts-    -- Check if any txOuts were contained in the bloom filter-    matchFilter =-      filter (\(_, op) -> any (bloomContains b) (encodeScriptOut op))-    matchOuts = matchFilter idxOutputScripts-    addRelevant :: BloomFilter -> (Word32, ScriptOutput) -> BloomFilter-    addRelevant bf (id', scriptOut) =-      case (b.flags, scriptType) of-        -- We filtered out BloomUpdateNone so we insert any PayPk or PayMulSig--        (_, True) -> bloomInsert bf outpoint-        (BloomUpdateAll, _) -> bloomInsert bf outpoint-        _ -> error "Error Updating Bloom Filter with relevant outpoint"-      where-        outpoint = runPutS $ serialize $ OutPoint {hash = h, index = id'}-        scriptType = (\s -> isPayPK s || isPayMulSig s) scriptOut-    -- Encodes a scriptOutput so it can be checked agains the Bloom Filter-    encodeScriptOut :: ScriptOutput -> [ByteString]-    encodeScriptOut (PayPK pk) =-      return $ marshal ctx pk-    encodeScriptOut (PayPKHash ph) =-      return . runPutS $ serialize ph-    encodeScriptOut (PayMulSig outputMuSig _) =-      map (marshal ctx) outputMuSig-    encodeScriptOut (PayScriptHash sh) =-      return . runPutS $ serialize sh-    encodeScriptOut (PayWitnessPKHash ph) =-      return . runPutS $ serialize ph-    encodeScriptOut (PayWitnessScriptHash sh) =-      return . runPutS $ serialize sh-    encodeScriptOut (PayWitness _ wd) =-      return wd-    encodeScriptOut (DataCarrier dat) =-      return dat+    (found, updated) = foldl' step (False, b) (zip [0 ..] tx.outputs)+    step :: (Bool, BloomFilter) -> (Word32, TxOut) -> (Bool, BloomFilter)+    step (f, cur) (i, out)+      | any (bloomContains cur) (scriptPushData out.script) =+          (True, addOutpoint cur i out)+      | otherwise = (f, cur)+    addOutpoint :: BloomFilter -> Word32 -> TxOut -> BloomFilter+    addOutpoint cur i out =+      case b.flags of+        BloomUpdateAll -> bloomInsert cur (outpoint i)+        BloomUpdateP2PubKeyOnly+          | paysToKeys out.script -> bloomInsert cur (outpoint i)+        _ -> cur+    outpoint i = runPutS $ serialize $ OutPoint {hash = txHash tx, index = i}+    paysToKeys script =+      case unmarshal ctx script of+        Right o -> isPayPK o || isPayMulSig o+        Left _ -> False  -- | Returns True if the filter is empty (all bytes set to 0x00) isBloomEmpty :: BloomFilter -> Bool@@ -342,4 +374,4 @@  -- | Does the peer with these version services accept bloom filters? acceptsFilters :: Word64 -> Bool-acceptsFilters srv = srv .&. (1 `shiftL` 2) /= 0+acceptsFilters srv = srv .&. nodeBloom /= 0

@@ -4,6 +4,8 @@ {-# LANGUAGE DuplicateRecordFields #-} {-# LANGUAGE GeneralizedNewtypeDeriving #-} {-# LANGUAGE ImportQualifiedPost #-}+{-# LANGUAGE NamedFieldPuns #-}+{-# LANGUAGE OverloadedRecordDot #-} {-# LANGUAGE OverloadedStrings #-} {-# LANGUAGE NoFieldSelectors #-} @@ -20,7 +22,16 @@   ( -- * Network Data Types     Addr (..),     NetworkAddressTime,+    AddrV2 (..),+    NetworkAddressV2 (..),+    AddressNetwork (..),+    addressNetworkId,+    addressNetworkLength,+    maxAddrV2Size,+    toNetworkAddressV2,+    fromNetworkAddressV2,     Alert (..),+    FeeFilter (..),     GetData (..),     Inv (..),     InvVector (..),@@ -34,9 +45,11 @@     Pong (..),     Reject (..),     RejectCode (..),+    SendTxRcncl (..),     VarInt (..),     VarString (..),     Version (..),+    maxUserAgentLength,     MessageCommand (..),     reject,     nodeNone,@@ -45,26 +58,33 @@     nodeBloom,     nodeWitness,     nodeXThin,+    nodeCompactFilters,+    nodeNetworkLimited,+    nodeP2PV2,     commandToString,     stringToCommand,     putVarInt,+    getVarIntList,+    putVarIntList,+    getVarIntBytes,+    putVarIntBytes,+    maxListSize,   ) where  import Control.DeepSeq-import Control.Monad (forM_, liftM2, replicateM, unless)+import Control.Monad (forM_, liftM2, replicateM, unless, when) import Data.Binary (Binary (..))-import Data.Bits (shiftL)+import Data.Bits (shiftL, shiftR, (.&.), (.|.)) import Data.ByteString (ByteString) import Data.ByteString qualified as B-import Data.ByteString.Char8 as C (replicate) import Data.Bytes.Get import Data.Bytes.Put import Data.Bytes.Serial import Data.Serialize (Serialize (..)) import Data.String import Data.String.Conversions (cs)-import Data.Word (Word32, Word64)+import Data.Word (Word16, Word32, Word64, Word8) import GHC.Generics (Generic) import Haskoin.Crypto.Hash import Network.Socket (SockAddr (..))@@ -83,9 +103,8 @@   deriving newtype (NFData)  instance Serial Addr where-  deserialize = Addr <$> (repList =<< deserialize)+  deserialize = Addr <$> getVarIntList action     where-      repList (VarInt c) = replicateM (fromIntegral c) action       action = liftM2 (,) getWord32le deserialize    serialize (Addr xs) = do@@ -100,6 +119,169 @@   get = deserialize   put = serialize +-- | Network that an 'addrv2' address belongs to (BIP 155).+data AddressNetwork+  = -- | IPv4, 4 address bytes+    AddrIPv4+  | -- | IPv6, 16 address bytes+    AddrIPv6+  | -- | Tor v2, 10 address bytes. No longer in use.+    AddrTorV2+  | -- | Tor v3, 32 address bytes+    AddrTorV3+  | -- | I2P, 32 address bytes+    AddrI2P+  | -- | CJDNS, 16 address bytes+    AddrCJDNS+  | -- | Yggdrasil, 16 address bytes+    AddrYggdrasil+  | -- | a network identifier this library does not know+    AddrUnknown Word8+  deriving (Eq, Show, Read, Generic, NFData)++-- | Network identifier byte of BIP 155.+addressNetworkId :: AddressNetwork -> Word8+addressNetworkId AddrIPv4 = 1+addressNetworkId AddrIPv6 = 2+addressNetworkId AddrTorV2 = 3+addressNetworkId AddrTorV3 = 4+addressNetworkId AddrI2P = 5+addressNetworkId AddrCJDNS = 6+addressNetworkId AddrYggdrasil = 7+addressNetworkId (AddrUnknown w) = w++-- | Network of a BIP 155 identifier byte.+addressNetwork :: Word8 -> AddressNetwork+addressNetwork 1 = AddrIPv4+addressNetwork 2 = AddrIPv6+addressNetwork 3 = AddrTorV2+addressNetwork 4 = AddrTorV3+addressNetwork 5 = AddrI2P+addressNetwork 6 = AddrCJDNS+addressNetwork 7 = AddrYggdrasil+addressNetwork w = AddrUnknown w++-- | Number of address bytes that BIP 155 requires for a network, if known.+addressNetworkLength :: AddressNetwork -> Maybe Int+addressNetworkLength AddrIPv4 = Just 4+addressNetworkLength AddrIPv6 = Just 16+addressNetworkLength AddrTorV2 = Just 10+addressNetworkLength AddrTorV3 = Just 32+addressNetworkLength AddrI2P = Just 32+addressNetworkLength AddrCJDNS = Just 16+addressNetworkLength AddrYggdrasil = Just 16+addressNetworkLength (AddrUnknown _) = Nothing++-- | Longest address that an 'addrv2' entry may carry, in bytes (BIP 155).+maxAddrV2Size :: Word64+maxAddrV2Size = 512++-- | An entry of an 'addrv2' message (BIP 155).+data NetworkAddressV2 = NetworkAddressV2+  { -- | time this node was last seen+    time :: !Word32,+    -- | bitmask of services available for this address+    services :: !Word64,+    -- | network the address belongs to+    network :: !AddressNetwork,+    -- | address bytes, as many as the network requires+    address :: !ByteString,+    -- | port, or 0 when the network has none+    port :: !Word16+  }+  deriving (Eq, Show, Read, Generic, NFData)++-- | An entry fails to parse when its address is longer than 'maxAddrV2Size'+-- or does not have the length its network requires. Entries of unknown+-- networks are kept with their bytes.+instance Serial NetworkAddressV2 where+  deserialize = do+    time <- getWord32le+    VarInt services <- deserialize+    network <- addressNetwork <$> getWord8+    VarInt len <- deserialize+    when (len > maxAddrV2Size) $+      fail ("addrv2 address too long: " ++ show len)+    address <- getByteString (fromIntegral len)+    forM_ (addressNetworkLength network) $ \expected ->+      unless (B.length address == expected) $+        fail $+          unwords+            [ "addrv2 address of",+              show (B.length address),+              "bytes for",+              show network,+              "(should be",+              show expected ++ ")"+            ]+    port <- getWord16be+    return NetworkAddressV2 {time, services, network, address, port}++  serialize a = do+    putWord32le a.time+    putVarInt a.services+    putWord8 (addressNetworkId a.network)+    putVarIntBytes a.address+    putWord16be a.port++instance Binary NetworkAddressV2 where+  get = deserialize+  put = serialize++instance Serialize NetworkAddressV2 where+  get = deserialize+  put = serialize++-- | The 'addrv2' message (BIP 155). It replaces 'Addr' once both peers have+-- sent @sendaddrv2@, and can carry Tor, I2P and CJDNS addresses.+newtype AddrV2 = AddrV2+  { list :: [NetworkAddressV2]+  }+  deriving (Eq, Show, Generic)+  deriving newtype (NFData)++instance Serial AddrV2 where+  deserialize = AddrV2 <$> getVarIntList deserialize+  serialize (AddrV2 xs) = putVarIntList serialize xs++instance Binary AddrV2 where+  get = deserialize+  put = serialize++instance Serialize AddrV2 where+  get = deserialize+  put = serialize++-- | Prefix of an IPv4-mapped IPv6 address.+ipv4Prefix :: ByteString+ipv4Prefix = B.replicate 10 0 <> B.pack [0xff, 0xff]++-- | The 'addrv2' form of an 'addr' entry. An IPv4-mapped address becomes an+-- 'AddrIPv4' entry with four address bytes. Any other address is IPv6.+toNetworkAddressV2 :: NetworkAddressTime -> NetworkAddressV2+toNetworkAddressV2 (t, NetworkAddress s (HostAddress bs)) =+  NetworkAddressV2 {time = t, services = s, network, address, port}+  where+    ip = B.take 16 bs+    port =+      (fromIntegral (B.index bs 16) `shiftL` 8)+        .|. fromIntegral (B.index bs 17)+    (network, address)+      | B.take 12 ip == ipv4Prefix = (AddrIPv4, B.drop 12 ip)+      | otherwise = (AddrIPv6, ip)++-- | The 'addr' form of an 'addrv2' entry. Only IPv4 and IPv6 entries have+-- one. Tor, I2P and CJDNS addresses do not fit the 'addr' message.+fromNetworkAddressV2 :: NetworkAddressV2 -> Maybe NetworkAddressTime+fromNetworkAddressV2 a =+  case a.network of+    AddrIPv4 -> Just (entry (ipv4Prefix <> a.address))+    AddrIPv6 -> Just (entry a.address)+    _ -> Nothing+  where+    entry ip = (a.time, NetworkAddress a.services (HostAddress (ip <> portBytes)))+    portBytes = B.pack [fromIntegral (a.port `shiftR` 8), fromIntegral a.port]+ -- | Data type describing signed messages that can be sent between bitcoin -- nodes to display important notifications to end users about the health of -- the network.@@ -123,6 +305,27 @@   put = serialize   get = deserialize +-- | The 'feefilter' message (BIP 133). The peer asks not to be sent+-- transactions that pay less than this fee rate.+newtype FeeFilter = FeeFilter+  { -- | minimum fee rate in satoshi per 1000 bytes+    feeRate :: Word64+  }+  deriving (Eq, Show, Read, Generic)+  deriving newtype (NFData)++instance Serial FeeFilter where+  deserialize = FeeFilter <$> getWord64le+  serialize (FeeFilter r) = putWord64le r++instance Binary FeeFilter where+  put = serialize+  get = deserialize++instance Serialize FeeFilter where+  put = serialize+  get = deserialize+ -- | The 'GetData' type is used to retrieve information on a specific object -- ('Block' or 'Tx') identified by the objects hash. The payload of a 'GetData' -- request is a list of 'InvVector' which represent all the hashes of objects@@ -138,9 +341,7 @@   deriving newtype (NFData)  instance Serial GetData where-  deserialize = GetData <$> (repList =<< deserialize)-    where-      repList (VarInt c) = replicateM (fromIntegral c) deserialize+  deserialize = GetData <$> getVarIntList deserialize    serialize (GetData xs) = do     putVarInt $ length xs@@ -165,9 +366,7 @@   deriving newtype (NFData)  instance Serial Inv where-  deserialize = Inv <$> (repList =<< deserialize)-    where-      repList (VarInt c) = replicateM (fromIntegral c) deserialize+  deserialize = Inv <$> getVarIntList deserialize    serialize (Inv xs) = do     putVarInt $ length xs@@ -192,6 +391,10 @@     InvBlock   | -- | filtered block     InvMerkleBlock+  | -- | compact block (BIP 152)+    InvCompactBlock+  | -- | transaction identified by its witness transaction id (BIP 339)+    InvWTx   | -- | segwit transaction     InvWitnessTx   | -- | segwit block@@ -211,6 +414,8 @@           1 -> return InvTx           2 -> return InvBlock           3 -> return InvMerkleBlock+          4 -> return InvCompactBlock+          5 -> return InvWTx           _             | x == 1 `shiftL` 30 + 1 -> return InvWitnessTx             | x == 1 `shiftL` 30 + 2 -> return InvWitnessBlock@@ -223,6 +428,8 @@         InvTx -> 1         InvBlock -> 2         InvMerkleBlock -> 3+        InvCompactBlock -> 4+        InvWTx -> 5         InvWitnessTx -> 1 `shiftL` 30 + 1         InvWitnessBlock -> 1 `shiftL` 30 + 2         InvWitnessMerkleBlock -> 1 `shiftL` 30 + 3@@ -259,6 +466,8 @@   get = deserialize   put = serialize +-- | Sixteen address bytes followed by a big-endian port, the 18-byte address+-- of the 'addr' and 'version' messages. newtype HostAddress   = HostAddress ByteString   deriving (Eq, Show, Ord, Generic)@@ -350,9 +559,7 @@   deriving newtype (NFData)  instance Serial NotFound where-  deserialize = NotFound <$> (repList =<< deserialize)-    where-      repList (VarInt c) = replicateM (fromIntegral c) deserialize+  deserialize = NotFound <$> getVarIntList deserialize    serialize (NotFound xs) = do     putVarInt $ length xs@@ -416,8 +623,8 @@     code :: !RejectCode,     -- | text reason for rejection     reason :: !VarString,-    -- | extra data such as block or tx hash-    extra :: !ByteString+    -- | hash of the rejected block or transaction, when the peer gives one+    extra :: !(Maybe Hash256)   }   deriving (Eq, Show, Read, Generic, NFData) @@ -469,10 +676,10 @@   put = serialize   get = deserialize --- | Convenience function to build a 'Reject' message.+-- | Convenience function to build a 'Reject' message without a hash. reject :: MessageCommand -> RejectCode -> ByteString -> Reject reject cmd code reason =-  Reject cmd code (VarString reason) B.empty+  Reject cmd code (VarString reason) Nothing  instance Serial Reject where   deserialize =@@ -480,18 +687,18 @@       Reject (stringToCommand bs)         <$> deserialize         <*> deserialize-        <*> maybeData+        <*> maybeHash     where-      maybeData =+      maybeHash =         isEmpty >>= \done ->           if done-            then return B.empty-            else getByteString 32-  serialize (Reject cmd code reason dat) = do+            then return Nothing+            else Just <$> deserialize+  serialize (Reject cmd code reason extra) = do     serialize $ VarString $ commandToString cmd     serialize code     serialize reason-    unless (B.null dat) $ putByteString dat+    forM_ extra serialize  instance Binary Reject where   put = serialize@@ -501,19 +708,61 @@   put = serialize   get = deserialize +-- | The 'sendtxrcncl' message (BIP 330). It announces support for+-- transaction reconciliation.+data SendTxRcncl = SendTxRcncl+  { -- | reconciliation protocol version+    version :: !Word32,+    -- | salt for the short transaction identifiers+    salt :: !Word64+  }+  deriving (Eq, Show, Read, Generic, NFData)++instance Serial SendTxRcncl where+  deserialize = SendTxRcncl <$> getWord32le <*> getWord64le+  serialize (SendTxRcncl v s) = putWord32le v >> putWord64le s++instance Binary SendTxRcncl where+  put = serialize+  get = deserialize++instance Serialize SendTxRcncl where+  put = serialize+  get = deserialize+ -- | Data type representing a variable-length integer. The 'VarInt' type -- usually precedes an array or a string that can vary in length. newtype VarInt = VarInt {get :: Word64}   deriving (Eq, Show, Read, Generic)   deriving newtype (NFData) +-- | Only the shortest encoding of a value is accepted, as in the+-- @ReadCompactSize@ function of Bitcoin Core. A value below 253 must use one+-- byte, below 0x10000 three bytes, and below 0x100000000 five bytes. instance Serial VarInt where   deserialize = VarInt <$> (getWord8 >>= go)     where-      go 0xff = getWord64le-      go 0xfe = fromIntegral <$> getWord32le-      go 0xfd = fromIntegral <$> getWord16le+      go 0xff = do+        x <- getWord64le+        when (x < 0x100000000) $ nonCanonical 9 x+        return x+      go 0xfe = do+        x <- getWord32le+        when (x < 0x10000) $ nonCanonical 5 x+        return $ fromIntegral x+      go 0xfd = do+        x <- getWord16le+        when (x < 0xfd) $ nonCanonical 3 x+        return $ fromIntegral x       go x = return $ fromIntegral x+      nonCanonical :: (MonadGet m, Show a) => Int -> a -> m ()+      nonCanonical n x =+        fail $+          unwords+            [ "VarInt: non-canonical",+              show n ++ "-byte encoding of",+              show x+            ]    serialize (VarInt x)     | x < 0xfd =@@ -539,19 +788,51 @@ putVarInt :: (MonadPut m, Integral a) => a -> m () putVarInt = serialize . VarInt . fromIntegral +-- | Largest number of elements that a serialized list may announce, and+-- largest number of bytes that a serialized string may announce. Bitcoin Core+-- refuses larger counts when it reads a compact size (@MAX_SIZE@).+maxListSize :: Word64+maxListSize = 0x02000000++-- | Read a list that starts with its element count as a 'VarInt'. A count+-- above 'maxListSize' fails the parse. Without this check a huge count would+-- wrap around to a negative 'Int' and read as an empty list.+getVarIntList :: (MonadGet m) => m a -> m [a]+getVarIntList element = do+  VarInt count <- deserialize+  when (count > maxListSize) $+    fail ("List count too large: " ++ show count)+  replicateM (fromIntegral count) element++-- | Write a list with its element count as a 'VarInt' in front.+putVarIntList :: (MonadPut m) => (a -> m ()) -> [a] -> m ()+putVarIntList element xs = do+  putVarInt (length xs)+  mapM_ element xs++-- | Read bytes that start with their count as a 'VarInt'. A count above+-- 'maxListSize' fails the parse.+getVarIntBytes :: (MonadGet m) => m ByteString+getVarIntBytes = do+  VarInt count <- deserialize+  when (count > maxListSize) $+    fail ("Byte count too large: " ++ show count)+  getByteString (fromIntegral count)++-- | Write bytes with their count as a 'VarInt' in front.+putVarIntBytes :: (MonadPut m) => ByteString -> m ()+putVarIntBytes bs = do+  putVarInt (B.length bs)+  putByteString bs+ -- | Data type for serialization of variable-length strings. newtype VarString = VarString {get :: ByteString}   deriving (Eq, Show, Read, Generic)   deriving newtype (NFData)  instance Serial VarString where-  deserialize = VarString <$> (readBS =<< deserialize)-    where-      readBS (VarInt len) = getByteString (fromIntegral len)--  serialize (VarString bs) = do-    putVarInt $ B.length bs-    putByteString bs+  deserialize = VarString <$> getVarIntBytes+  serialize (VarString bs) = putVarIntBytes bs  instance Binary VarString where   put = serialize@@ -561,6 +842,11 @@   put = serialize   get = deserialize +-- | Longest user agent that a 'Version' message may carry, in bytes. Bitcoin+-- Core disconnects a peer that sends a longer one (@MAX_SUBVERSION_LENGTH@).+maxUserAgentLength :: Int+maxUserAgentLength = 256+ -- | When a bitcoin node creates an outgoing connection to another node, -- the first message it will send is a 'Version' message. The other node -- will similarly respond with it's own 'Version' message.@@ -586,6 +872,9 @@   }   deriving (Eq, Show, Generic, NFData) +-- | A user agent longer than 'maxUserAgentLength' fails the parse. The relay+-- flag is 'True' when the message ends before it, as for peers that predate+-- BIP 37. instance Serial Version where   deserialize =     Version@@ -595,12 +884,17 @@       <*> deserialize       <*> deserialize       <*> getWord64le-      <*> deserialize+      <*> userAgent       <*> getWord32le       <*> (go =<< isEmpty)     where       go True = return True       go False = getBool+      userAgent = do+        ua@(VarString bs) <- deserialize+        when (B.length bs > maxUserAgentLength) $+          fail ("Version: user agent of " ++ show (B.length bs) ++ " bytes is too long")+        return ua    serialize (Version v s t ar as n ua sh r) = do     putWord32le v@@ -641,6 +935,8 @@   = MCVersion   | MCVerAck   | MCAddr+  | MCAddrV2+  | MCSendAddrV2   | MCInv   | MCGetData   | MCNotFound@@ -660,6 +956,19 @@   | MCMempool   | MCReject   | MCSendHeaders+  | MCFeeFilter+  | MCSendCmpct+  | MCCmpctBlock+  | MCGetBlockTxn+  | MCBlockTxn+  | MCGetCFilters+  | MCCFilter+  | MCGetCFHeaders+  | MCCFHeaders+  | MCGetCFCheckpt+  | MCCFCheckpt+  | MCWtxidRelay+  | MCSendTxRcncl   | MCOther ByteString   deriving (Eq, Generic, NFData) @@ -671,12 +980,15 @@     String str <- lexP     return (stringToCommand (cs str)) +-- | A command is twelve bytes on the wire: its name in printable ASCII, then+-- NUL bytes. The parse fails for a byte outside printable ASCII in the name or+-- a byte other than NUL after it, as @IsMessageTypeValid@ does in Bitcoin+-- Core. Serializing a name longer than twelve bytes, or with a byte outside+-- printable ASCII, is an error. instance Serial MessageCommand where-  deserialize = go <$> getByteString 12-    where-      go bs =-        let str = unpackCommand bs-         in stringToCommand str+  deserialize = do+    bs <- getByteString 12+    either fail (return . stringToCommand) (unpackCommand bs)   serialize mc = putByteString $ packCommand $ commandToString mc  instance Binary MessageCommand where@@ -696,6 +1008,8 @@   "version" -> MCVersion   "verack" -> MCVerAck   "addr" -> MCAddr+  "addrv2" -> MCAddrV2+  "sendaddrv2" -> MCSendAddrV2   "inv" -> MCInv   "getdata" -> MCGetData   "notfound" -> MCNotFound@@ -715,6 +1029,19 @@   "mempool" -> MCMempool   "reject" -> MCReject   "sendheaders" -> MCSendHeaders+  "feefilter" -> MCFeeFilter+  "sendcmpct" -> MCSendCmpct+  "cmpctblock" -> MCCmpctBlock+  "getblocktxn" -> MCGetBlockTxn+  "blocktxn" -> MCBlockTxn+  "getcfilters" -> MCGetCFilters+  "cfilter" -> MCCFilter+  "getcfheaders" -> MCGetCFHeaders+  "cfheaders" -> MCCFHeaders+  "getcfcheckpt" -> MCGetCFCheckpt+  "cfcheckpt" -> MCCFCheckpt+  "wtxidrelay" -> MCWtxidRelay+  "sendtxrcncl" -> MCSendTxRcncl   _ -> MCOther str  -- | Convert a 'MessageCommand' to its string representation.@@ -723,6 +1050,8 @@   MCVersion -> "version"   MCVerAck -> "verack"   MCAddr -> "addr"+  MCAddrV2 -> "addrv2"+  MCSendAddrV2 -> "sendaddrv2"   MCInv -> "inv"   MCGetData -> "getdata"   MCNotFound -> "notfound"@@ -742,17 +1071,51 @@   MCMempool -> "mempool"   MCReject -> "reject"   MCSendHeaders -> "sendheaders"+  MCFeeFilter -> "feefilter"+  MCSendCmpct -> "sendcmpct"+  MCCmpctBlock -> "cmpctblock"+  MCGetBlockTxn -> "getblocktxn"+  MCBlockTxn -> "blocktxn"+  MCGetCFilters -> "getcfilters"+  MCCFilter -> "cfilter"+  MCGetCFHeaders -> "getcfheaders"+  MCCFHeaders -> "cfheaders"+  MCGetCFCheckpt -> "getcfcheckpt"+  MCCFCheckpt -> "cfcheckpt"+  MCWtxidRelay -> "wtxidrelay"+  MCSendTxRcncl -> "sendtxrcncl"   MCOther c -> c --- | Pack a string 'MessageCommand' so that it is exactly 12-bytes long.+-- | Length of a command on the wire.+commandSize :: Int+commandSize = 12++-- | Is this byte printable ASCII? Command names are made of these.+printable :: Word8 -> Bool+printable w = w >= 0x20 && w <= 0x7e++-- | Pack a command name so that it is exactly 12 bytes long. A name that+-- does not fit, or has a byte outside printable ASCII, is an error. Bitcoin+-- Core asserts the same when it builds a header. packCommand :: ByteString -> ByteString-packCommand s =-  B.take 12 $-    s `mappend` C.replicate 12 '\NUL'+packCommand s+  | B.length s > commandSize =+      error ("Message command longer than 12 bytes: " ++ show s)+  | not (B.all printable s) =+      error ("Message command with a byte outside printable ASCII: " ++ show s)+  | otherwise = s <> B.replicate (commandSize - B.length s) 0 --- | Undo packing done by 'packCommand'.-unpackCommand :: ByteString -> ByteString-unpackCommand = B.takeWhile (/= 0)+-- | Undo packing done by 'packCommand'. Fails for a name with a byte outside+-- printable ASCII, or for a byte other than NUL after the name.+unpackCommand :: ByteString -> Either String ByteString+unpackCommand bs+  | not (B.all (== 0) padding) =+      Left ("Message command with bytes after its NUL terminator: " ++ show bs)+  | not (B.all printable name) =+      Left ("Message command with a byte outside printable ASCII: " ++ show bs)+  | otherwise = Right name+  where+    (name, padding) = B.break (== 0) bs  -- | Node offers no services. nodeNone :: Word64@@ -777,3 +1140,17 @@ -- | Services indicate Xtreme Thinblocks compatibility. nodeXThin :: Word64 nodeXThin = 1 `shiftL` 4++-- | Services indicate node serves compact block filters (BIP 157).+nodeCompactFilters :: Word64+nodeCompactFilters = 1 `shiftL` 6++-- | Services indicate node serves only the last 288 blocks (BIP 159). Pruned+-- nodes advertise this instead of 'nodeNetwork'.+nodeNetworkLimited :: Word64+nodeNetworkLimited = 1 `shiftL` 10++-- | Services indicate node supports the version 2 encrypted transport+-- (BIP 324).+nodeP2PV2 :: Word64+nodeP2PV2 = 1 `shiftL` 11

@@ -0,0 +1,218 @@+{-# LANGUAGE DeriveAnyClass #-}+{-# LANGUAGE DeriveGeneric #-}+{-# LANGUAGE DuplicateRecordFields #-}+{-# LANGUAGE OverloadedRecordDot #-}+{-# LANGUAGE NoFieldSelectors #-}++-- |+-- Module      : Haskoin.Network.CompactBlock+-- Copyright   : No rights reserved+-- License     : MIT+-- Maintainer  : jprupp@protonmail.ch+-- Stability   : experimental+-- Portability : POSIX+--+-- Messages of the compact block relay protocol (BIP 152): @sendcmpct@,+-- @cmpctblock@, @getblocktxn@ and @blocktxn@.+module Haskoin.Network.CompactBlock+  ( SendCompact (..),+    CompactBlock (..),+    PrefilledTx (..),+    GetBlockTxn (..),+    BlockTxn (..),+    maxShortId,+  )+where++import Control.DeepSeq+import Control.Monad (when)+import Data.Binary (Binary (..))+import Data.Bits (shiftL, shiftR, (.|.))+import Data.Bytes.Get+import Data.Bytes.Put+import Data.Bytes.Serial+import Data.Serialize (Serialize (..))+import Data.Word (Word32, Word64)+import GHC.Generics (Generic)+import Haskoin.Block.Common (BlockHash, BlockHeader)+import Haskoin.Network.Common+import Haskoin.Transaction.Common (Tx)++-- | The @sendcmpct@ message. It tells the peer whether to announce new blocks+-- as compact blocks, and which version of the protocol to use. Version 1+-- identifies transactions by their txid and version 2 by their wtxid.+data SendCompact = SendCompact+  { -- | announce blocks with @cmpctblock@ instead of @inv@ or @headers@+    announce :: !Bool,+    -- | compact block protocol version+    version :: !Word64+  }+  deriving (Eq, Show, Read, Generic, NFData)++instance Serial SendCompact where+  deserialize = SendCompact <$> ((/= 0) <$> getWord8) <*> getWord64le+  serialize (SendCompact a v) = do+    putWord8 (if a then 1 else 0)+    putWord64le v++instance Binary SendCompact where+  put = serialize+  get = deserialize++instance Serialize SendCompact where+  put = serialize+  get = deserialize++-- | Largest short transaction identifier. Short identifiers are six bytes.+maxShortId :: Word64+maxShortId = 0xffffffffffff++getShortId :: (MonadGet m) => m Word64+getShortId = do+  low <- getWord32le+  high <- getWord16le+  return $ fromIntegral high `shiftL` 32 .|. fromIntegral low++putShortId :: (MonadPut m) => Word64 -> m ()+putShortId x+  | x > maxShortId = error ("Short transaction id does not fit six bytes: " ++ show x)+  | otherwise = do+      putWord32le (fromIntegral x)+      putWord16le (fromIntegral (x `shiftR` 32))++-- | A transaction sent along with a compact block, with its position in the+-- block.+data PrefilledTx = PrefilledTx+  { -- | position of the transaction in the block+    index :: !Word32,+    -- | the transaction+    tx :: !Tx+  }+  deriving (Eq, Show, Generic, NFData)++-- | The @cmpctblock@ message: a block header with short identifiers for most+-- of its transactions, and the full transactions the sender expects the peer+-- to lack. Positions in the block are absolute here; on the wire each one is+-- encoded as its distance from the previous one, as BIP 152 requires.+data CompactBlock = CompactBlock+  { -- | block header+    header :: !BlockHeader,+    -- | nonce the short identifiers were computed with+    nonce :: !Word64,+    -- | short identifiers of the transactions not sent in full+    shortIds :: ![Word64],+    -- | transactions sent in full, in order of their position+    prefilled :: ![PrefilledTx]+  }+  deriving (Eq, Show, Generic, NFData)++instance Serial CompactBlock where+  deserialize =+    CompactBlock+      <$> deserialize+      <*> getWord64le+      <*> getVarIntList getShortId+      <*> getDifferentialList (\i -> PrefilledTx i <$> deserialize)++  serialize c = do+    serialize c.header+    putWord64le c.nonce+    putVarIntList putShortId c.shortIds+    putDifferentialList (.index) (serialize . (.tx)) c.prefilled++instance Binary CompactBlock where+  put = serialize+  get = deserialize++instance Serialize CompactBlock where+  put = serialize+  get = deserialize++-- | The @getblocktxn@ message. It asks for the transactions at the given+-- positions of a block. Positions are absolute here and differentially+-- encoded on the wire.+data GetBlockTxn = GetBlockTxn+  { -- | hash of the block+    hash :: !BlockHash,+    -- | positions of the wanted transactions, in increasing order+    indexes :: ![Word32]+  }+  deriving (Eq, Show, Generic, NFData)++instance Serial GetBlockTxn where+  deserialize = GetBlockTxn <$> deserialize <*> getDifferentialList return+  serialize g = do+    serialize g.hash+    putDifferentialList id (const (return ())) g.indexes++instance Binary GetBlockTxn where+  put = serialize+  get = deserialize++instance Serialize GetBlockTxn where+  put = serialize+  get = deserialize++-- | The @blocktxn@ message, the answer to 'GetBlockTxn'.+data BlockTxn = BlockTxn+  { -- | hash of the block+    hash :: !BlockHash,+    -- | the requested transactions, in the order they were asked for+    transactions :: ![Tx]+  }+  deriving (Eq, Show, Generic, NFData)++instance Serial BlockTxn where+  deserialize = BlockTxn <$> deserialize <*> getVarIntList deserialize+  serialize b = do+    serialize b.hash+    putVarIntList serialize b.transactions++instance Binary BlockTxn where+  put = serialize+  get = deserialize++instance Serialize BlockTxn where+  put = serialize+  get = deserialize++-- | Read a list whose elements each start with a block position. The first+-- position is written as is, and every later one as its distance from the+-- previous position minus one. A position that does not fit 32 bits fails+-- the parse.+getDifferentialList :: (MonadGet m) => (Word32 -> m a) -> m [a]+getDifferentialList element = do+  VarInt count <- deserialize+  when (count > maxListSize) $+    fail ("List count too large: " ++ show count)+  go count Nothing+  where+    go 0 _ = return []+    go n previous = do+      VarInt distance <- deserialize+      let position = toInteger distance + maybe 0 (\p -> toInteger p + 1) previous+      when (position > 0xffffffff) $+        fail ("Block position does not fit 32 bits: " ++ show position)+      let i = fromInteger position+      x <- element i+      (x :) <$> go (n - 1) (Just i)++-- | Write a list whose elements each carry a block position, in the encoding+-- that 'getDifferentialList' reads. Positions must be strictly increasing,+-- otherwise their distances cannot be encoded and this is an error.+putDifferentialList :: (MonadPut m) => (a -> Word32) -> (a -> m ()) -> [a] -> m ()+putDifferentialList position element xs = do+  putVarInt (length xs)+  go Nothing xs+  where+    go _ [] = return ()+    go previous (x : rest) = do+      let i = position x+      case previous of+        Nothing -> putVarInt i+        Just p+          | i > p -> putVarInt (i - p - 1)+          | otherwise ->+              error ("Block positions must be strictly increasing: " ++ show p ++ " then " ++ show i)+      element x+      go (Just i) rest

@@ -81,7 +81,9 @@           0x1d00ffff           2083236893,       -- Hash 000000000019d6689c085ae165831e934ff763ae46a2a6c172b3f1b60a8ce26f+      genesisTx = mainnetGenesisTx,       maxBlockSize = 1000000,+      maxMessageSize = 4000000,       maxSatoshi = 2100000000000000,       userAgent =         "/haskoin-btc:" <> versionString <> "/",@@ -91,10 +93,8 @@       bip94 = False,       powLimit =         0x00000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffff,-      bip34Block =-        ( 227931,-          "000000000000024b89b42a942fe0d9fea3bb44ab7bd1b19115dd6a759c0808b8"-        ),+      bip34Height = 227931,+      bip34Hash = Just "000000000000024b89b42a942fe0d9fea3bb44ab7bd1b19115dd6a759c0808b8",       bip65Height = 388381,       bip66Height = 363725,       targetTimespan = 14 * 24 * 60 * 60,@@ -182,7 +182,9 @@           486604799           414098458,       -- Hash 000000000933ea01ad0ee984209779baaec3ced90fa3f408719526f8d77f4943+      genesisTx = mainnetGenesisTx,       maxBlockSize = 1000000,+      maxMessageSize = 4000000,       maxSatoshi = 2100000000000000,       userAgent = "/haskoin-btc-test:" <> versionString <> "/",       defaultPort = 18333,@@ -191,10 +193,8 @@       bip94 = False,       powLimit =         0x00000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffff,-      bip34Block =-        ( 21111,-          "0000000023b3a96d3484e5abb3755c413e7d41500f8e2a5c3f0dd01299cd8ef8"-        ),+      bip34Height = 21111,+      bip34Hash = Just "0000000023b3a96d3484e5abb3755c413e7d41500f8e2a5c3f0dd01299cd8ef8",       bip65Height = 581885,       bip66Height = 330776,       targetTimespan = 14 * 24 * 60 * 60,@@ -243,7 +243,9 @@           0x1d00ffff           393743547,       -- Hash 00000000da84f2bafbbc53dee25a72ae507ff4914b867c565be350b0da8bf043+      genesisTx = testnet4GenesisTx,       maxBlockSize = 1000000,+      maxMessageSize = 4000000,       maxSatoshi = 2100000000000000,       userAgent = "/haskoin-btc-test4:" <> versionString <> "/",       defaultPort = 48333,@@ -252,10 +254,8 @@       bip94 = True,       powLimit =         0x00000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffff,-      bip34Block =-        ( 1,-          "0000000012982b6d5f621229286b880e909984df669c2afabb102ce311b13f28"-        ),+      bip34Height = 1,+      bip34Hash = Just "0000000012982b6d5f621229286b880e909984df669c2afabb102ce311b13f28",       bip65Height = 1,       bip66Height = 1,       targetTimespan = 14 * 24 * 60 * 60,@@ -298,7 +298,9 @@           1296688602           0x207fffff           2,+      genesisTx = mainnetGenesisTx,       maxBlockSize = 1000000,+      maxMessageSize = 4000000,       maxSatoshi = 2100000000000000,       userAgent = "/haskoin-btc-regtest:" <> versionString <> "/",       defaultPort = 18444,@@ -307,12 +309,10 @@       bip94 = False,       powLimit =         0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff,-      bip34Block =-        ( 100000000,-          "0000000000000000000000000000000000000000000000000000000000000000"-        ),-      bip65Height = 1351,-      bip66Height = 1251,+      bip34Height = 1,+      bip34Hash = Nothing,+      bip65Height = 1,+      bip66Height = 1,       targetTimespan = 14 * 24 * 60 * 60,       targetSpacing = 10 * 60,       checkpoints = [],@@ -350,7 +350,9 @@           0x1d00ffff           2083236893,       -- Hash 000000000019d6689c085ae165831e934ff763ae46a2a6c172b3f1b60a8ce26f+      genesisTx = mainnetGenesisTx,       maxBlockSize = 32000000,+      maxMessageSize = 64000000,       maxSatoshi = 2100000000000000,       userAgent = "/haskoin-bch:" <> versionString <> "/",       defaultPort = 8333,@@ -359,10 +361,8 @@       bip94 = False,       powLimit =         0x00000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffff,-      bip34Block =-        ( 227931,-          "000000000000024b89b42a942fe0d9fea3bb44ab7bd1b19115dd6a759c0808b8"-        ),+      bip34Height = 227931,+      bip34Hash = Just "000000000000024b89b42a942fe0d9fea3bb44ab7bd1b19115dd6a759c0808b8",       bip65Height = 388381,       bip66Height = 363725,       targetTimespan = 14 * 24 * 60 * 60,@@ -416,10 +416,20 @@            ( 504031,             "0000000000000000011ebf65b60d0a3de80b8175be709d653b4c1a1beeb6ab9c"+          ),+          ( 951145,+            "000000000000000000f64dbed68370486f945097ba90b17e30d7bf5c43df7a60"+          ),+          ( 960710,+            "00000000000000000275ee55c04aa109347c9ee0b5bb4617837df3044f7e1be5"+          ),+          ( 970892,+            "000000000000000000e76270e57f4ebbd2b282db46a1695984935126c0a68cd8"           )         ],       seeds =         [ "seed.flowee.cash", -- Flowee+          "seed-bch.bitcoinforks.org", -- Bitcoin Forks           "btccash-seeder.bitcoinunlimited.info", -- Bitcoin Unlimited           "seed.bchd.cash", -- BCHD           "seed.bch.loping.net", -- Loping.net@@ -459,7 +469,9 @@           0x1d00ffff           114152193,       -- Hash 000000001dd410c49a788668ce26751718cc797474d3152a5fc073dd44fd9f7b+      genesisTx = mainnetGenesisTx,       maxBlockSize = 2000000,+      maxMessageSize = 4000000,       maxSatoshi = 2100000000000000,       userAgent = "/haskoin-bch-test4:" <> versionString <> "/",       defaultPort = 28333,@@ -468,10 +480,8 @@       bip94 = False,       powLimit =         0x00000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffff,-      bip34Block =-        ( 2,-          "00000000b0c65b1e03baace7d5c093db0d6aac224df01484985ffd5e86a1a20c"-        ),+      bip34Height = 2,+      bip34Hash = Just "00000000b0c65b1e03baace7d5c093db0d6aac224df01484985ffd5e86a1a20c",       bip65Height = 3,       bip66Height = 4,       targetTimespan = 14 * 24 * 60 * 60,@@ -490,6 +500,15 @@           ),           ( 54700,             "00000000009af4379d87f17d0f172ee4769b48839a5a3a3e81d69da4322518b8"+          ),+          ( 305848,+            "00000000601bf68f9927154cf55557b1c08245b4d415658d1cbcd1eb4502dabc"+          ),+          ( 313651,+            "000000005c58d20403191a778c51206eca7552629c1e390313e786d2c388d0fb"+          ),+          ( 325709,+            "00000000000097a6ca206aa88b45a2158eea1a9ab8a49aed8f4b193d558e74b4"           )         ],       seeds =@@ -531,7 +550,9 @@           486604799           414098458,       -- Hash 000000000933ea01ad0ee984209779baaec3ced90fa3f408719526f8d77f4943+      genesisTx = mainnetGenesisTx,       maxBlockSize = 32000000,+      maxMessageSize = 64000000,       maxSatoshi = 2100000000000000,       userAgent = "/haskoin-bch-test:" <> versionString <> "/",       defaultPort = 18333,@@ -540,10 +561,8 @@       bip94 = False,       powLimit =         0x00000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffff,-      bip34Block =-        ( 21111,-          "0000000023b3a96d3484e5abb3755c413e7d41500f8e2a5c3f0dd01299cd8ef8"-        ),+      bip34Height = 21111,+      bip34Hash = Just "0000000023b3a96d3484e5abb3755c413e7d41500f8e2a5c3f0dd01299cd8ef8",       bip65Height = 581885,       bip66Height = 330776,       targetTimespan = 14 * 24 * 60 * 60,@@ -561,6 +580,15 @@            ( 1188697,             "0000000000170ed0918077bde7b4d36cc4c91be69fa09211f748240dabe047fb"+          ),+          ( 1710483,+            "00000000078fe0c74ffa0c5221081c34774aa7d17a3c14c36f952f829463f120"+          ),+          ( 1718198,+            "00000000fb70d93bc600b9189f2bb13383b0e44d96a4547615b3c194680e6308"+          ),+          ( 1730264,+            "000000000001ce982fa29717a4ed233b0e5a7a8b9936a17fdeeccc5c1d0af795"           )         ],       seeds =@@ -601,7 +629,9 @@           1296688602           0x207fffff           2,-      maxBlockSize = 1000000,+      genesisTx = mainnetGenesisTx,+      maxBlockSize = 32000000,+      maxMessageSize = 64000000,       maxSatoshi = 2100000000000000,       userAgent = "/haskoin-bch-regtest:" <> versionString <> "/",       defaultPort = 18444,@@ -610,10 +640,8 @@       bip94 = False,       powLimit =         0x7fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff,-      bip34Block =-        ( 100000000,-          "0000000000000000000000000000000000000000000000000000000000000000"-        ),+      bip34Height = 100000000,+      bip34Hash = Nothing,       bip65Height = 1351,       bip66Height = 1251,       targetTimespan = 14 * 24 * 60 * 60,

@@ -15,6 +15,7 @@ import Data.Word (Word32, Word64, Word8) import GHC.Generics (Generic) import Haskoin.Block.Common+import Haskoin.Transaction.Common (Tx)  -- | Network definition. data Network = Network@@ -34,8 +35,14 @@     magic :: !Word32,     -- | genesis block header     genesisHeader :: !BlockHeader,+    -- | coinbase transaction of the genesis block+    genesisTx :: !Tx,     -- | maximum block size in bytes     maxBlockSize :: !Int,+    -- | largest P2P message that 'getMessage' accepts, in bytes. Bitcoin Core+    -- refuses any message over 4,000,000 bytes (@MAX_PROTOCOL_MESSAGE_LENGTH@).+    -- Bitcoin Cash Node refuses block messages over twice the block size.+    maxMessageSize :: !Word32,     -- | maximum amount of satoshi     maxSatoshi :: !Word64,     -- | user agent string@@ -50,8 +57,11 @@     bip94 :: !Bool,     -- | proof-of-work target higest possible value     powLimit :: !Integer,-    -- | block at which BIP34 activates-    bip34Block :: !(BlockHeight, BlockHash),+    -- | height at which BIP34 activates+    bip34Height :: !BlockHeight,+    -- | hash of the block at 'bip34Height', when the chain pins one. Bitcoin+    -- Core pins none on regtest.+    bip34Hash :: !(Maybe BlockHash),     -- | block at which BIP65 activates     bip65Height :: !BlockHeight,     -- | block at which BIP66 activates

@@ -25,7 +25,7 @@ where  import Control.DeepSeq-import Control.Monad (unless)+import Control.Monad (unless, when) import Data.Binary (Binary (..)) import Data.ByteString (ByteString) import Data.ByteString qualified as B@@ -38,8 +38,10 @@ import Haskoin.Block.Common import Haskoin.Block.Merkle import Haskoin.Crypto.Hash+import Haskoin.Network.BlockFilter import Haskoin.Network.Bloom import Haskoin.Network.Common+import Haskoin.Network.CompactBlock import Haskoin.Network.Data import Haskoin.Transaction.Common @@ -89,6 +91,8 @@   = MVersion !Version   | MVerAck   | MAddr !Addr+  | MAddrV2 !AddrV2+  | MSendAddrV2   | MInv !Inv   | MGetData !GetData   | MNotFound !NotFound@@ -108,7 +112,21 @@   | MMempool   | MReject !Reject   | MSendHeaders-  | MOther !ByteString !ByteString+  | MFeeFilter !FeeFilter+  | MSendCompact !SendCompact+  | MCompactBlock !CompactBlock+  | MGetBlockTxn !GetBlockTxn+  | MBlockTxn !BlockTxn+  | MGetCFilters !GetCFilters+  | MCFilter !CFilter+  | MGetCFHeaders !GetCFHeaders+  | MCFHeaders !CFHeaders+  | MGetCFCheckpt !GetCFCheckpt+  | MCFCheckpt !CFCheckpt+  | MWtxidRelay+  | MSendTxRcncl !SendTxRcncl+  | -- | a message of a command this library does not know, with its payload+    MOther !ByteString !ByteString   deriving (Eq, Show, Generic, NFData)  -- | Get 'MessageCommand' assocated with a message.@@ -116,6 +134,8 @@ msgType (MVersion _) = MCVersion msgType MVerAck = MCVerAck msgType (MAddr _) = MCAddr+msgType (MAddrV2 _) = MCAddrV2+msgType MSendAddrV2 = MCSendAddrV2 msgType (MInv _) = MCInv msgType (MGetData _) = MCGetData msgType (MNotFound _) = MCNotFound@@ -125,6 +145,7 @@ msgType (MBlock _) = MCBlock msgType (MMerkleBlock _) = MCMerkleBlock msgType (MHeaders _) = MCHeaders+msgType MGetAddr = MCGetAddr msgType (MFilterLoad _) = MCFilterLoad msgType (MFilterAdd _) = MCFilterAdd msgType MFilterClear = MCFilterClear@@ -134,61 +155,89 @@ msgType MMempool = MCMempool msgType (MReject _) = MCReject msgType MSendHeaders = MCSendHeaders-msgType MGetAddr = MCGetAddr+msgType (MFeeFilter _) = MCFeeFilter+msgType (MSendCompact _) = MCSendCmpct+msgType (MCompactBlock _) = MCCmpctBlock+msgType (MGetBlockTxn _) = MCGetBlockTxn+msgType (MBlockTxn _) = MCBlockTxn+msgType (MGetCFilters _) = MCGetCFilters+msgType (MCFilter _) = MCCFilter+msgType (MGetCFHeaders _) = MCGetCFHeaders+msgType (MCFHeaders _) = MCCFHeaders+msgType (MGetCFCheckpt _) = MCGetCFCheckpt+msgType (MCFCheckpt _) = MCCFCheckpt+msgType MWtxidRelay = MCWtxidRelay+msgType (MSendTxRcncl _) = MCSendTxRcncl msgType (MOther c _) = MCOther c --- | Deserializer for network messages.+-- | Deserializer for network messages. It reads one message and nothing+-- more, so messages can be read one after the other from a stream. The parse+-- fails for a header with the magic of another network, a payload larger+-- than the 'maxMessageSize' of the network, or a checksum that does not+-- match the payload. Only the declared payload is handed to the parser of the+-- message type. A message type that carries no payload is accepted with+-- whatever payload it comes with, as in Bitcoin Core. getMessage :: (MonadGet m) => Network -> m Message getMessage net = do   (MessageHeader mgc cmd len chk) <- deserialize-  bs <- lookAhead $ getByteString $ fromIntegral len   unless     (mgc == net.magic)     (fail $ "get: Invalid network magic bytes: " ++ show mgc)+  when (len > net.maxMessageSize) $+    fail $+      "get: Message of "+        ++ show len+        ++ " bytes is larger than the limit of "+        ++ show net.maxMessageSize+  payload <- getByteString (fromIntegral len)   unless-    (checkSum32 bs == chk)+    (checkSum32 payload == chk)     (fail $ "get: Invalid message checksum: " ++ show chk)-  if len > 0-    then do-      bs <- ensure (fromIntegral len)-      let f = case cmd of-            MCVersion -> MVersion <$> deserialize-            MCAddr -> MAddr <$> deserialize-            MCInv -> MInv <$> deserialize-            MCGetData -> MGetData <$> deserialize-            MCNotFound -> MNotFound <$> deserialize-            MCGetBlocks -> MGetBlocks <$> deserialize-            MCGetHeaders -> MGetHeaders <$> deserialize-            MCTx -> MTx <$> deserialize-            MCBlock -> MBlock <$> deserialize-            MCMerkleBlock -> MMerkleBlock <$> deserialize-            MCHeaders -> MHeaders <$> deserialize-            MCFilterLoad -> MFilterLoad <$> deserialize-            MCFilterAdd -> MFilterAdd <$> deserialize-            MCPing -> MPing <$> deserialize-            MCPong -> MPong <$> deserialize-            MCAlert -> MAlert <$> deserialize-            MCReject -> MReject <$> deserialize-            MCOther c -> MOther c <$> getByteString (fromIntegral len)-            _ ->-              fail $-                "get: command "-                  ++ show cmd-                  ++ " should not carry a payload"-      either fail return (runGetS f bs)-    else case cmd of-      MCGetAddr -> return MGetAddr-      MCVerAck -> return MVerAck-      MCFilterClear -> return MFilterClear-      MCMempool -> return MMempool-      MCSendHeaders -> return MSendHeaders-      MCOther c -> return (MOther c B.empty)-      _ ->-        fail $-          "get: command "-            ++ show cmd-            ++ " is expected to carry a payload"+  either fail return (runGetS (getPayload cmd len) payload) +-- | Parser for the payload of a message of the given command.+getPayload :: (MonadGet m) => MessageCommand -> Word32 -> m Message+getPayload cmd len =+  case cmd of+    MCVersion -> MVersion <$> deserialize+    MCVerAck -> return MVerAck+    MCAddr -> MAddr <$> deserialize+    MCAddrV2 -> MAddrV2 <$> deserialize+    MCSendAddrV2 -> return MSendAddrV2+    MCInv -> MInv <$> deserialize+    MCGetData -> MGetData <$> deserialize+    MCNotFound -> MNotFound <$> deserialize+    MCGetBlocks -> MGetBlocks <$> deserialize+    MCGetHeaders -> MGetHeaders <$> deserialize+    MCTx -> MTx <$> deserialize+    MCBlock -> MBlock <$> deserialize+    MCMerkleBlock -> MMerkleBlock <$> deserialize+    MCHeaders -> MHeaders <$> deserialize+    MCGetAddr -> return MGetAddr+    MCFilterLoad -> MFilterLoad <$> deserialize+    MCFilterAdd -> MFilterAdd <$> deserialize+    MCFilterClear -> return MFilterClear+    MCPing -> MPing <$> deserialize+    MCPong -> MPong <$> deserialize+    MCAlert -> MAlert <$> deserialize+    MCMempool -> return MMempool+    MCReject -> MReject <$> deserialize+    MCSendHeaders -> return MSendHeaders+    MCFeeFilter -> MFeeFilter <$> deserialize+    MCSendCmpct -> MSendCompact <$> deserialize+    MCCmpctBlock -> MCompactBlock <$> deserialize+    MCGetBlockTxn -> MGetBlockTxn <$> deserialize+    MCBlockTxn -> MBlockTxn <$> deserialize+    MCGetCFilters -> MGetCFilters <$> deserialize+    MCCFilter -> MCFilter <$> deserialize+    MCGetCFHeaders -> MGetCFHeaders <$> deserialize+    MCCFHeaders -> MCFHeaders <$> deserialize+    MCGetCFCheckpt -> MGetCFCheckpt <$> deserialize+    MCCFCheckpt -> MCFCheckpt <$> deserialize+    MCWtxidRelay -> return MWtxidRelay+    MCSendTxRcncl -> MSendTxRcncl <$> deserialize+    MCOther c -> MOther c <$> getByteString (fromIntegral len)+ -- | Serializer for network messages. putMessage :: (MonadPut m) => Network -> Message -> m () putMessage net msg = do@@ -197,6 +246,8 @@           MVersion m -> (MCVersion, runPutS $ serialize m)           MVerAck -> (MCVerAck, B.empty)           MAddr m -> (MCAddr, runPutS $ serialize m)+          MAddrV2 m -> (MCAddrV2, runPutS $ serialize m)+          MSendAddrV2 -> (MCSendAddrV2, B.empty)           MInv m -> (MCInv, runPutS $ serialize m)           MGetData m -> (MCGetData, runPutS $ serialize m)           MNotFound m -> (MCNotFound, runPutS $ serialize m)@@ -216,6 +267,19 @@           MMempool -> (MCMempool, B.empty)           MReject m -> (MCReject, runPutS $ serialize m)           MSendHeaders -> (MCSendHeaders, B.empty)+          MFeeFilter m -> (MCFeeFilter, runPutS $ serialize m)+          MSendCompact m -> (MCSendCmpct, runPutS $ serialize m)+          MCompactBlock m -> (MCCmpctBlock, runPutS $ serialize m)+          MGetBlockTxn m -> (MCGetBlockTxn, runPutS $ serialize m)+          MBlockTxn m -> (MCBlockTxn, runPutS $ serialize m)+          MGetCFilters m -> (MCGetCFilters, runPutS $ serialize m)+          MCFilter m -> (MCCFilter, runPutS $ serialize m)+          MGetCFHeaders m -> (MCGetCFHeaders, runPutS $ serialize m)+          MCFHeaders m -> (MCCFHeaders, runPutS $ serialize m)+          MGetCFCheckpt m -> (MCGetCFCheckpt, runPutS $ serialize m)+          MCFCheckpt m -> (MCCFCheckpt, runPutS $ serialize m)+          MWtxidRelay -> (MCWtxidRelay, B.empty)+          MSendTxRcncl m -> (MCSendTxRcncl, runPutS $ serialize m)           MOther c p -> (MCOther c, p)       chk = checkSum32 payload       len = fromIntegral $ B.length payload

@@ -4,6 +4,7 @@ {-# LANGUAGE DuplicateRecordFields #-} {-# LANGUAGE GeneralizedNewtypeDeriving #-} {-# LANGUAGE OverloadedStrings #-}+{-# LANGUAGE PatternSynonyms #-} {-# LANGUAGE NoFieldSelectors #-}  -- |@@ -18,9 +19,12 @@ module Haskoin.Script.Common   ( -- * Scripts     ScriptOp (..),+    pattern OP_CHECKSIGADD,     Script (..),     PushDataType (..),     isPushOp,+    pushOpData,+    isMinimalPush,     opPushData,     intToScriptOp,     scriptOpToInt,@@ -38,8 +42,8 @@ import Data.Bytes.Get import Data.Bytes.Put import Data.Bytes.Serial-import Data.Either (fromRight) import Data.Hashable+import Data.Maybe (isJust) import Data.Serialize (Serialize (..)) import Data.Word (Word8) import GHC.Generics (Generic)@@ -104,6 +108,12 @@   deriving (Show, Read, Eq, Generic, Hashable, NFData)  -- | Data type representing an operator allowed inside a 'Script'.+--+-- An 'OP_PUSHDATA' must carry a payload that fits its 'PushDataType': at most+-- 75 bytes for 'OPCODE', 255 for 'OPDATA1', 65535 for 'OPDATA2'. Serializing+-- a push that breaks this invariant fails with an 'error' call, because no+-- byte sequence can represent it. Build pushes with 'opPushData' to get the+-- minimal encoding. data ScriptOp   = -- Pushing Data     OP_PUSHDATA@@ -224,7 +234,8 @@   | OP_NOP8   | OP_NOP9   | OP_NOP10-  | -- Bitcoin Cash Nov 2018 hard fork+  | -- Bitcoin Cash Nov 2018 hard fork. Opcode 0xba is 'OP_CHECKSIGADD' in+    -- Tapscript (BIP 342), see the pattern synonym of that name.     OP_CHECKDATASIG   | OP_CHECKDATASIGVERIFY   | -- Bitcoin Cash May 2020 hard fork@@ -235,6 +246,13 @@   | OP_INVALIDOPCODE !Word8   deriving (Show, Read, Eq, Generic, Hashable, NFData) +-- | Opcode 0xba as Tapscript (BIP 342) names it. It is the same opcode as+-- 'OP_CHECKDATASIG' of Bitcoin Cash, so a value built with either name is+-- equal to the other and serializes to the same byte. 'Show' prints the+-- Bitcoin Cash name.+pattern OP_CHECKSIGADD :: ScriptOp+pattern OP_CHECKSIGADD = OP_CHECKDATASIG+ instance Serial ScriptOp where   deserialize = go . fromIntegral =<< getWord8     where@@ -398,7 +416,7 @@           putWord8 0x4d           putWord16le $ fromIntegral len         OPDATA4 -> do-          unless (len <= 0x7fffffff) $+          unless (len <= 0xffffffff) $             error "OP_PUSHDATA OPDATA4: Payload size too big"           putWord8 0x4e           putWord32le $ fromIntegral len@@ -539,33 +557,38 @@   put = serialize   get = deserialize --- | Check whether opcode is only data.+-- | Check whether opcode is only data: 'OP_PUSHDATA', 'OP_0', 'OP_1NEGATE' or+-- one of 'OP_1' to 'OP_16'. isPushOp :: ScriptOp -> Bool-isPushOp op = case op of-  OP_PUSHDATA _ _ -> True-  OP_0 -> True-  OP_1NEGATE -> True-  OP_1 -> True-  OP_2 -> True-  OP_3 -> True-  OP_4 -> True-  OP_5 -> True-  OP_6 -> True-  OP_7 -> True-  OP_8 -> True-  OP_9 -> True-  OP_10 -> True-  OP_11 -> True-  OP_12 -> True-  OP_13 -> True-  OP_14 -> True-  OP_15 -> True-  OP_16 -> True-  _ -> False+isPushOp = isJust . pushOpData --- | Optimally encode data using one of the 4 types of data pushing opcodes.+-- | The data that a push opcode puts on the stack. 'OP_0' pushes the empty+-- string, 'OP_1' to 'OP_16' push one byte with that value, 'OP_1NEGATE'+-- pushes the byte 0x81, and 'OP_PUSHDATA' pushes its payload. Other opcodes+-- push nothing and give 'Nothing'.+pushOpData :: ScriptOp -> Maybe ByteString+pushOpData op = case op of+  OP_PUSHDATA bs _ -> Just bs+  OP_0 -> Just B.empty+  OP_1NEGATE -> Just (B.singleton 0x81)+  _ -> B.singleton . fromIntegral <$> either (const Nothing) Just (scriptOpToInt op)++-- | Is the opcode a push in its shortest encoding? This is the rule of+-- @CheckMinimalPush@ in Bitcoin Core, which the @MINIMALDATA@ policy flag+-- enforces: the empty string is 'OP_0', one byte from 1 to 16 is the matching+-- 'OP_1' to 'OP_16', the byte 0x81 is 'OP_1NEGATE', and other data uses the+-- smallest 'PushDataType' that holds it. An opcode that pushes nothing is not+-- a minimal push.+isMinimalPush :: ScriptOp -> Bool+isMinimalPush op = maybe False (\bs -> opPushData bs == op) (pushOpData op)++-- | Encode data as the push opcode of its minimal encoding, see+-- 'isMinimalPush'. opPushData :: ByteString -> ScriptOp opPushData bs+  | len == 0 = OP_0+  | len == 1, Right op <- intToScriptOp (fromIntegral (B.head bs)) = op+  | bs == B.singleton 0x81 = OP_1NEGATE   | len <= 0x4b = OP_PUSHDATA bs OPCODE   | len <= 0xff = OP_PUSHDATA bs OPDATA1   | len <= 0xffff = OP_PUSHDATA bs OPDATA2@@ -574,25 +597,46 @@   where     len = B.length bs --- | Transforms integers @[1 .. 16]@ to 'ScriptOp' @[OP_1 .. OP_16]@.-intToScriptOp :: Int -> ScriptOp-intToScriptOp i-  | i `elem` [1 .. 16] = op-  | otherwise = err-  where-    op =-      fromRight err-        . runGetS deserialize-        . B.singleton-        . fromIntegral-        $ i + 0x50-    err = error $ "intToScriptOp: Invalid integer " ++ show i+-- | Transforms integers @[1 .. 16]@ to 'ScriptOp' @[OP_1 .. OP_16]@. Other+-- integers give a 'Left'.+intToScriptOp :: Int -> Either String ScriptOp+intToScriptOp i = case i of+  1 -> Right OP_1+  2 -> Right OP_2+  3 -> Right OP_3+  4 -> Right OP_4+  5 -> Right OP_5+  6 -> Right OP_6+  7 -> Right OP_7+  8 -> Right OP_8+  9 -> Right OP_9+  10 -> Right OP_10+  11 -> Right OP_11+  12 -> Right OP_12+  13 -> Right OP_13+  14 -> Right OP_14+  15 -> Right OP_15+  16 -> Right OP_16+  _ -> Left $ "intToScriptOp: invalid integer " ++ show i --- | Decode 'ScriptOp' @[OP_1 .. OP_16]@ to integers @[1 .. 16]@. This functions--- fails for other values of 'ScriptOp'+-- | Decode 'ScriptOp' @[OP_1 .. OP_16]@ to integers @[1 .. 16]@. Other+-- opcodes give a 'Left'. scriptOpToInt :: ScriptOp -> Either String Int-scriptOpToInt s-  | res `elem` [1 .. 16] = return res-  | otherwise = Left $ "scriptOpToInt: invalid opcode " ++ show s-  where-    res = fromIntegral (B.head $ runPutS $ serialize s) - 0x50+scriptOpToInt op = case op of+  OP_1 -> Right 1+  OP_2 -> Right 2+  OP_3 -> Right 3+  OP_4 -> Right 4+  OP_5 -> Right 5+  OP_6 -> Right 6+  OP_7 -> Right 7+  OP_8 -> Right 8+  OP_9 -> Right 9+  OP_10 -> Right 10+  OP_11 -> Right 11+  OP_12 -> Right 12+  OP_13 -> Right 13+  OP_14 -> Right 14+  OP_15 -> Right 15+  OP_16 -> Right 16+  _ -> Left $ "scriptOpToInt: invalid opcode " ++ show op

@@ -27,6 +27,7 @@     sigHashAll,     sigHashNone,     sigHashSingle,+    sigHashDefault,     anyoneCanPay,     hasForkIdFlag,     setAnyoneCanPay,@@ -126,6 +127,12 @@   toJSON = Number . fromIntegral   toEncoding (SigHash n) = toEncoding n +-- | SIGHASH_DEFAULT of BIP 341: the hash type 0, which a Taproot key path+-- signature leaves out and which signs like 'sigHashAll'. It is only valid+-- in Taproot signatures.+sigHashDefault :: SigHash+sigHashDefault = 0+ -- | SIGHASH_NONE as a byte. sigHashNone :: SigHash sigHashNone = fromIntegral $ fromEnum SIGHASH_NONE@@ -174,10 +181,17 @@ isSigHashSingle :: SigHash -> Bool isSigHashSingle = (== sigHashSingle) . (.&. 0x1f) --- | Returns 'True' if the 'SigHash' has the value 'SIGHASH_UNKNOWN'.+-- | Is the hash type byte one that no node accepts in a signature? This is+-- the test of @IsDefinedHashtypeSignature@ in Bitcoin Core, which the+-- @STRICTENC@ flag enforces: after masking the 'SIGHASH_ANYONECANPAY' and+-- 'SIGHASH_FORKID' bits, the byte must be 'SIGHASH_ALL', 'SIGHASH_NONE' or+-- 'SIGHASH_SINGLE'. Whether the 'SIGHASH_FORKID' bit itself is allowed+-- depends on the network, see 'decodeTxSig'. Only the low byte is looked at,+-- since a fork id may sit in the upper bytes. isSigHashUnknown :: SigHash -> Bool-isSigHashUnknown =-  (`notElem` [sigHashAll, sigHashNone, sigHashSingle]) . (.&. 0x1f)+isSigHashUnknown sh = base < sigHashAll || base > sigHashSingle+  where+    base = (sh .&. 0xff) .&. complement (sigHashAnyoneCanPay .|. sigHashForkId)  -- | Add a fork id to a 'SigHash'. sigHashAddForkId :: SigHash -> Word32 -> SigHash@@ -192,7 +206,23 @@ sigHashGetForkId :: SigHash -> Word32 sigHashGetForkId (SigHash n) = fromIntegral $ n `shiftR` 8 --- | Computes the hash that will be used for signing a transaction.+-- | Computes the hash that will be used for signing a transaction input that+-- is not a SegWit input.+--+-- The script is the @scriptCode@ of the input: the output script being spent,+-- or the redeem script for a pay-to-script-hash output. If that script+-- contains 'OP_CODESEPARATOR', the caller must pass the part after the last+-- 'OP_CODESEPARATOR' executed before the signature check, as consensus+-- defines it. Any 'OP_CODESEPARATOR' left in that part is removed here, as+-- @FindAndDelete@ does in Bitcoin Core.+--+-- On a network with a fork id, such as Bitcoin Cash, every signature must use+-- the fork id digest of 'txSigHashForkId', so the 'SigHash' must carry the+-- 'SIGHASH_FORKID' flag and the digest is computed by that function. A+-- 'SigHash' without the flag fails, instead of producing a digest no node+-- accepts.+--+-- Fails when the input index is not an index of the transaction. txSigHash ::   Network ->   -- | transaction to sign@@ -206,14 +236,18 @@   -- | what to sign   SigHash ->   -- | hash to be signed-  Hash256+  Either String Hash256 txSigHash net tx out v i sh-  | hasForkIdFlag sh && isJust net.sigHashForkId =+  | i < 0 || i >= length tx.inputs =+      Left "txSigHash: input index out of range"+  | isJust net.sigHashForkId && not (hasForkIdFlag sh) =+      Left "txSigHash: SIGHASH_FORKID is required on this network"+  | isJust net.sigHashForkId =       txSigHashForkId net tx out v i sh   | otherwise = do       let newIn = buildInputs tx.inputs fout i sh       -- When SigSingle and input index > outputs, then sign integer 1-      fromMaybe one $ do+      return . fromMaybe one $ do         newOut <- buildOutputs tx.outputs i sh         let newTx = Tx tx.version newIn newOut [] tx.locktime         return . doubleSHA256 . runPutS $ do@@ -223,12 +257,16 @@     fout = Script $ filter (/= OP_CODESEPARATOR) out.ops     one = "0100000000000000000000000000000000000000000000000000000000000000" --- | Build transaction inputs for computing sighashes.+-- | Build transaction inputs for computing sighashes. With+-- 'SIGHASH_ANYONECANPAY' only the signed input remains. With 'SIGHASH_NONE'+-- or 'SIGHASH_SINGLE' the sequence numbers of the other inputs are zero. Any+-- other base type, including the undefined ones, behaves as 'SIGHASH_ALL',+-- as in Bitcoin Core. buildInputs :: [TxIn] -> Script -> Int -> SigHash -> [TxIn] buildInputs txins out i sh   | anyoneCanPay sh = [serialOut (txins !! i)]-  | isSigHashAll sh || isSigHashUnknown sh = single-  | otherwise = zipWith noSeq single [0 ..]+  | isSigHashNone sh || isSigHashSingle sh = zipWith noSeq single [0 ..]+  | otherwise = single   where     serialOut TxIn {..} = TxIn {script = runPutS $ serialize out, ..}     emptyIn TxIn {..} = TxIn {script = B.empty, ..}@@ -236,18 +274,31 @@     single = updateIndex i emptyIns serialOut     noSeq TxIn {..} j = TxIn {sequence = if i == j then sequence else 0, ..} --- | Build transaction outputs for computing sighashes.+-- | Build transaction outputs for computing sighashes. 'SIGHASH_NONE' signs+-- no output. 'SIGHASH_SINGLE' signs the output at the input index, with the+-- outputs before it blanked, and gives 'Nothing' when there is no such+-- output. Any other base type signs every output. buildOutputs :: [TxOut] -> Int -> SigHash -> Maybe [TxOut] buildOutputs txos i sh-  | isSigHashAll sh || isSigHashUnknown sh = return txos   | isSigHashNone sh = return []+  | not (isSigHashSingle sh) = return txos   | i >= length txos = Nothing   | otherwise = return $ buffer ++ [txos !! i]   where     buffer = replicate i $ TxOut maxBound B.empty --- | Compute the hash that will be used for signing a transaction. This--- function is used when the 'SIGHASH_FORKID' flag is set.+-- | Compute the digest of BIP 143, used for SegWit version 0 inputs on+-- Bitcoin and, with the fork id of the network, for every input on Bitcoin+-- Cash.+--+-- The script is the @scriptCode@ of BIP 143: the pay-to-public-key-hash+-- script of the key for a pay-to-witness-public-key-hash input, or the+-- witness script for a pay-to-witness-script-hash input. If it contains+-- 'OP_CODESEPARATOR', the caller must pass the part after the last one+-- executed before the signature check. Unlike 'txSigHash', nothing is removed+-- from that part, as BIP 143 specifies.+--+-- Fails when the input index is not an index of the transaction. txSigHashForkId ::   Network ->   -- | transaction to sign@@ -261,9 +312,11 @@   -- | what to sign   SigHash ->   -- | hash to be signed-  Hash256-txSigHashForkId net tx out v i sh =-  doubleSHA256 . runPutS $ do+  Either String Hash256+txSigHashForkId net tx out v i sh+  | i < 0 || i >= length tx.inputs =+      Left "txSigHashForkId: input index out of range"+  | otherwise = Right . doubleSHA256 . runPutS $ do     putWord32le tx.version     serialize hashPrevouts     serialize hashSequence@@ -299,6 +352,14 @@ -- | Data type representing a signature together with a 'SigHash'. The 'SigHash' -- is serialized as one byte at the end of an ECDSA 'Sig'. All signatures in -- transaction inputs are of type 'TxSignature'.+--+-- The binary form is as strict as the @DERSIG@, @LOW_S@ and @STRICTENC@ flags+-- of Bitcoin Core: strict DER, a low S value, non-zero components, a defined+-- hash type byte ('isSigHashUnknown'), the 'SIGHASH_FORKID' flag exactly on+-- the networks that have a fork id, and nothing after the hash type byte.+-- These are the policy rules every node applies to new transactions. Inputs+-- mined before BIP 66 and the low-S rule may hold signatures that this form+-- rejects, so it is not a parser for the whole chain history. data TxSignature   = TxSignature       { sig :: !Sig,@@ -324,6 +385,8 @@           fail "Non-canonical signature: unknown hashtype byte"         when (isNothing net.sigHashForkId && hasForkIdFlag sh) $           fail "Non-canonical signature: invalid network for forkId"+        when (isJust net.sigHashForkId && not (hasForkIdFlag sh)) $+          fail "Non-canonical signature: SIGHASH_FORKID is required on this network"         return $ TxSignature sig sh  instance MarshalJSON (Network, Ctx) TxSignature where@@ -337,9 +400,13 @@           Left e -> fail e           Right s -> return s +-- | Serialize a signature with its hash type byte. 'TxSignatureEmpty' is the+-- empty string. encodeTxSig :: Network -> Ctx -> TxSignature -> ByteString encodeTxSig net ctx = runPutS . marshalPut (net, ctx) +-- | Parse a signature with its hash type byte, under the rules listed at+-- 'TxSignature'. The empty string is 'TxSignatureEmpty'. decodeTxSig :: Network -> Ctx -> ByteString -> Either String TxSignature decodeTxSig net ctx =   runGetS $ do

@@ -32,6 +32,7 @@     isPayWitnessScriptHash,     isPayScript32Hash,     isDataCarrier,+    maxMultisigKeys,     encodeOutput,     decodeOutput,     toP2SH,@@ -47,12 +48,13 @@     isSpendPKHash,     isSpendMulSig,     isScriptHashInput,+    isNestedWitnessInput,   ) where  import Control.Applicative ((<|>)) import Control.DeepSeq-import Control.Monad (guard, liftM2, (<=<))+import Control.Monad (unless) import Crypto.Secp256k1 import Data.Aeson (ToJSON (..), Value (..), withText) import Data.Aeson.Encoding (Encoding, text)@@ -65,7 +67,6 @@ import Data.Function (on) import Data.Hashable import Data.List (sortBy)-import Data.Maybe (fromJust, isJust) import Data.Word (Word8) import GHC.Generics (Generic) import Haskoin.Crypto.Hash@@ -83,7 +84,7 @@     PayPK {key :: !PublicKey}   | -- | pay to public key hash     PayPKHash {hash160 :: !Hash160}-  | -- | multisig+  | -- | multisig of 1 to 'maxMultisigKeys' keys     PayMulSig       { keys :: ![PublicKey],         required :: !Int@@ -94,15 +95,16 @@     PayWitnessPKHash {hash160 :: !Hash160}   | -- | pay to witness script hash     PayWitnessScriptHash {hash256 :: !Hash256}-  | -- | another pay to witness address+  | -- | witness program of version 1 to 16, from 2 to 40 bytes long     PayWitness       { version :: !Word8,         bytes :: !ByteString       }   | -- | pay to a script hash (256-bit)     PayScript32Hash {hash256 :: !Hash256}-  | -- | provably unspendable data carrier-    DataCarrier {bytes :: !ByteString}+  | -- | provably unspendable data carrier: @OP_RETURN@ followed by the data+    -- of each push, which may be no push at all+    DataCarrier {pushes :: ![ByteString]}   deriving (Eq, Show, Read, Generic, NFData)  instance MarshalJSON Ctx ScriptOutput where@@ -161,140 +163,143 @@ isDataCarrier (DataCarrier _) = True isDataCarrier _ = False +-- | The most keys a multisig output can have: @MAX_PUBKEYS_PER_MULTISIG@ of+-- Bitcoin Core.+maxMultisigKeys :: Int+maxMultisigKeys = 20+ -- | Tries to decode a 'ScriptOutput' from a 'Script'. This can fail if the -- script is not recognized as any of the standard output types.+--+-- The templates are matched on their exact bytes, as Bitcoin Core matches+-- them: the hash or key of a pay-to-public-key, pay-to-public-key-hash,+-- pay-to-script-hash or witness output must be a direct push ('OPCODE'). A+-- script that writes it with @OP_PUSHDATA1@ is not that output type. By+-- consensus it is not a pay-to-script-hash or witness output at all, and+-- anyone can spend it, so it must not be shown as the address it looks like.+-- The counts of a multisig output are @OP_1@ to @OP_16@, or a one-byte push+-- for 17 to 'maxMultisigKeys', and a key must fill its push exactly. decodeOutput :: Ctx -> Script -> Either String ScriptOutput decodeOutput ctx s = case s.ops of   -- Pay to PubKey-  [OP_PUSHDATA bs _, OP_CHECKSIG]-    | B.length bs == 33 || B.length bs == 65 ->-        PayPK <$> unmarshal ctx bs-    | otherwise ->-        Left "decodeOutput: public key must be 33 or 65 bytes long"+  [OP_PUSHDATA bs OPCODE, OP_CHECKSIG] ->+    PayPK <$> decodePubKey ctx bs   -- Pay to PubKey Hash-  [OP_DUP, OP_HASH160, OP_PUSHDATA bs _, OP_EQUALVERIFY, OP_CHECKSIG]+  [OP_DUP, OP_HASH160, OP_PUSHDATA bs OPCODE, OP_EQUALVERIFY, OP_CHECKSIG]     | B.length bs == 20 ->         PayPKHash <$> runGetS deserialize bs     | otherwise ->         Left "decodeOutput: public key hash must be 20 bytes long"   -- Pay to Script Hash-  [OP_HASH160, OP_PUSHDATA bs _, OP_EQUAL]+  [OP_HASH160, OP_PUSHDATA bs OPCODE, OP_EQUAL]     | B.length bs == 20 ->         PayScriptHash <$> runGetS deserialize bs     | otherwise ->         Left "decodeOutput: script hash must be 20 bytes long"   -- Pay to 256-bit Script Hash-  [OP_HASH256, OP_PUSHDATA bs _, OP_EQUAL]+  [OP_HASH256, OP_PUSHDATA bs OPCODE, OP_EQUAL]     | B.length bs == 32 ->         PayScript32Hash <$> runGetS deserialize bs     | otherwise ->         Left "decodeOutput: script hash must be 32 bytes long"-  -- Pay to Witness-  [OP_0, OP_PUSHDATA bs OPCODE]-    | B.length bs == 20 ->-        PayWitnessPKHash <$> runGetS deserialize bs-    | B.length bs == 32 ->-        PayWitnessScriptHash <$> runGetS deserialize bs-    | otherwise ->-        Left "decodeOutput: version 0 segwit must be 20 or 32 bytes long"-  -- Other Witness-  [ver, OP_PUSHDATA bs _]+  -- Witness programs+  [ver, OP_PUSHDATA bs OPCODE]+    | Just 0 <- opWitnessVersion ver -> case B.length bs of+        20 -> PayWitnessPKHash <$> runGetS deserialize bs+        32 -> PayWitnessScriptHash <$> runGetS deserialize bs+        _ -> Left "decodeOutput: version 0 segwit must be 20 or 32 bytes long"     | Just wv <- opWitnessVersion ver,-      B.length bs >= 2,-      B.length bs <= 40 ->+      B.length bs >= minWitnessProgramLength,+      B.length bs <= maxWitnessProgramLength ->         Right $ PayWitness wv bs   -- Provably unspendable data carrier output-  [OP_RETURN, OP_PUSHDATA bs _] -> Right $ DataCarrier bs+  OP_RETURN : rest+    | Just ds <- mapM pushOpData rest -> Right $ DataCarrier ds   -- Pay to MultiSig Keys   _ -> case matchPayMulSig ctx s of     Right x -> return x     Left _ -> Left "decodeOutput: Non-standard output" +-- | Shortest and longest witness program, in bytes, as BIP 141 defines them.+minWitnessProgramLength, maxWitnessProgramLength :: Int+minWitnessProgramLength = 2+maxWitnessProgramLength = 40++-- | The opcode that starts a witness program of a version. witnessVersionOp :: Word8 -> Maybe ScriptOp witnessVersionOp 0 = Just OP_0-witnessVersionOp 1 = Just OP_1-witnessVersionOp 2 = Just OP_2-witnessVersionOp 3 = Just OP_3-witnessVersionOp 4 = Just OP_4-witnessVersionOp 5 = Just OP_5-witnessVersionOp 6 = Just OP_6-witnessVersionOp 7 = Just OP_7-witnessVersionOp 8 = Just OP_8-witnessVersionOp 9 = Just OP_9-witnessVersionOp 10 = Just OP_10-witnessVersionOp 11 = Just OP_11-witnessVersionOp 12 = Just OP_12-witnessVersionOp 13 = Just OP_13-witnessVersionOp 14 = Just OP_14-witnessVersionOp 15 = Just OP_15-witnessVersionOp 16 = Just OP_16-witnessVersionOp _ = Nothing+witnessVersionOp v = eitherToMaybe $ intToScriptOp $ fromIntegral v +-- | The witness version that an opcode starts. opWitnessVersion :: ScriptOp -> Maybe Word8 opWitnessVersion OP_0 = Just 0-opWitnessVersion OP_1 = Just 1-opWitnessVersion OP_2 = Just 2-opWitnessVersion OP_3 = Just 3-opWitnessVersion OP_4 = Just 4-opWitnessVersion OP_5 = Just 5-opWitnessVersion OP_6 = Just 6-opWitnessVersion OP_7 = Just 7-opWitnessVersion OP_8 = Just 8-opWitnessVersion OP_9 = Just 9-opWitnessVersion OP_10 = Just 10-opWitnessVersion OP_11 = Just 11-opWitnessVersion OP_12 = Just 12-opWitnessVersion OP_13 = Just 13-opWitnessVersion OP_14 = Just 14-opWitnessVersion OP_15 = Just 15-opWitnessVersion OP_16 = Just 16-opWitnessVersion _ = Nothing+opWitnessVersion op = fromIntegral <$> eitherToMaybe (scriptOpToInt op) --- | Computes a 'Script' from a standard 'ScriptOutput'.-encodeOutput :: Ctx -> ScriptOutput -> Script-encodeOutput ctx s = Script $ case s of+-- | Computes a 'Script' from a standard 'ScriptOutput'. Fails for a value+-- that no script can express: a 'PayMulSig' whose required count is not+-- between 1 and its number of keys, or with more than 'maxMultisigKeys' keys,+-- and a 'PayWitness' whose version is not 1 to 16 or whose program is not 2+-- to 40 bytes long. A version 0 program is a 'PayWitnessPKHash' or a+-- 'PayWitnessScriptHash'.+encodeOutput :: Ctx -> ScriptOutput -> Either String Script+encodeOutput ctx s = Script <$> case s of   -- Pay to PubKey-  (PayPK k) -> [opPushData $ marshal ctx k, OP_CHECKSIG]+  (PayPK k) -> Right [opPushData $ marshal ctx k, OP_CHECKSIG]   -- Pay to PubKey Hash Address   (PayPKHash h) ->-    [ OP_DUP,-      OP_HASH160,-      opPushData $ runPutS $ serialize h,-      OP_EQUALVERIFY,-      OP_CHECKSIG-    ]+    Right+      [ OP_DUP,+        OP_HASH160,+        opPushData $ runPutS $ serialize h,+        OP_EQUALVERIFY,+        OP_CHECKSIG+      ]   -- Pay to MultiSig Keys   (PayMulSig ps r)-    | r <= length ps ->-        let opM = intToScriptOp r-            opN = intToScriptOp $ length ps-            keys = map (opPushData . marshal ctx) ps-         in opM : keys ++ [opN, OP_CHECKMULTISIG]-    | otherwise -> error "encodeOutput: PayMulSig r must be <= than pkeys"+    | r < 1 ->+        Left "encodeOutput: multisig must require at least one signature"+    | r > n ->+        Left "encodeOutput: multisig requires more signatures than it has keys"+    | n > maxMultisigKeys ->+        Left "encodeOutput: multisig has more than 20 keys"+    | otherwise ->+        let keys = map (opPushData . marshal ctx) ps+         in Right $ multisigCountOp r : keys ++ [multisigCountOp n, OP_CHECKMULTISIG]+    where+      n = length ps   -- Pay to Script Hash Address   (PayScriptHash h) ->-    [OP_HASH160, opPushData $ runPutS $ serialize h, OP_EQUAL]+    Right [OP_HASH160, opPushData $ runPutS $ serialize h, OP_EQUAL]+  -- Pay to 256-bit Script Hash Address+  (PayScript32Hash h) ->+    Right [OP_HASH256, opPushData $ runPutS $ serialize h, OP_EQUAL]   -- Pay to Witness PubKey Hash Address   (PayWitnessPKHash h) ->-    [OP_0, opPushData $ runPutS $ serialize h]+    Right [OP_0, opPushData $ runPutS $ serialize h]   (PayWitnessScriptHash h) ->-    [OP_0, opPushData $ runPutS $ serialize h]-  (PayWitness v h) ->-    [ case witnessVersionOp v of-        Nothing -> error "encodeOutput: invalid witness version"-        Just c -> c,-      opPushData h-    ]+    Right [OP_0, opPushData $ runPutS $ serialize h]+  (PayWitness v h)+    | v == 0 ->+        Left "encodeOutput: a version 0 witness output is PayWitnessPKHash or PayWitnessScriptHash"+    | B.length h < minWitnessProgramLength || B.length h > maxWitnessProgramLength ->+        Left "encodeOutput: witness program must be 2 to 40 bytes long"+    | Just c <- witnessVersionOp v ->+        Right [c, opPushData h]+    | otherwise ->+        Left "encodeOutput: witness version must be 16 or less"   -- Provably unspendable output-  (DataCarrier d) -> [OP_RETURN, opPushData d]+  (DataCarrier ds) -> Right $ OP_RETURN : map opPushData ds +-- | The 'Script' of a 'ScriptOutput' is the binary form. Writing a value that+-- 'encodeOutput' rejects fails with an 'error' call, since 'marshalPut'+-- cannot report a failure. instance Marshal Ctx ScriptOutput where   marshalGet ctx = do     script <- deserialize     case decodeOutput ctx script of       Left e -> fail e       Right o -> return o-  marshalPut ctx = serialize . encodeOutput ctx+  marshalPut ctx = either error serialize . encodeOutput ctx  -- | Encode script as pay-to-script-hash script toP2SH :: Script -> ScriptOutput@@ -304,35 +309,50 @@ toP2WSH :: Script -> ScriptOutput toP2WSH = PayWitnessScriptHash . sha256 . runPutS . serialize --- | Match @[OP_N, PubKey1, ..., PubKeyM, OP_M, OP_CHECKMULTISIG]@+-- | Match @[OP_M, PubKey1, ..., PubKeyN, OP_N, OP_CHECKMULTISIG]@ with M and N+-- from 1 to 'maxMultisigKeys' and M at most N. matchPayMulSig :: Ctx -> Script -> Either String ScriptOutput matchPayMulSig ctx (Script ops) = case splitAt (length ops - 2) ops of   (m : xs, [n, OP_CHECKMULTISIG]) -> do-    (intM, intN) <- liftM2 (,) (scriptOpToInt m) (scriptOpToInt n)-    if intM <= intN && length xs == intN-      then liftM2 PayMulSig (go xs) (return intM)-      else Left "matchPayMulSig: Invalid M or N parameters"+    intM <- maybeToEither "matchPayMulSig: invalid M parameter" $ opMultisigCount m+    intN <- maybeToEither "matchPayMulSig: invalid N parameter" $ opMultisigCount n+    unless (intM <= intN && length xs == intN) $+      Left "matchPayMulSig: Invalid M or N parameters"+    keys <- mapM key xs+    return $ PayMulSig keys intM   _ -> Left "matchPayMulSig: script did not match output template"   where-    go (OP_PUSHDATA bs _ : xs)-      | B.length bs == 33 || B.length bs == 65 =-          liftM2 (:) (unmarshal ctx bs) (go xs)-      | otherwise =-          Left "matchPayMulSig: public key must be 33 or 65 bytes long"-    go [] =-      Right []-    go _ =-      Left "matchPayMulSig: invalid multisig opcode"+    key (OP_PUSHDATA bs _) = decodePubKey ctx bs+    key _ = Left "matchPayMulSig: invalid multisig opcode" +-- | The count that a multisig opcode stands for: @OP_1@ to @OP_16@, or a+-- one-byte push of 17 to 'maxMultisigKeys'. Bitcoin Core reads the count as a+-- minimal script number, so a push of a byte from 1 to 16 is not a count.+opMultisigCount :: ScriptOp -> Maybe Int+opMultisigCount op = case op of+  OP_PUSHDATA bs OPCODE+    | B.length bs == 1,+      let n = fromIntegral (B.head bs),+      n > 16 && n <= maxMultisigKeys ->+        Just n+  _ -> eitherToMaybe $ scriptOpToInt op++-- | The opcode of a multisig count from 1 to 'maxMultisigKeys'.+multisigCountOp :: Int -> ScriptOp+multisigCountOp n =+  either (const $ OP_PUSHDATA (B.singleton $ fromIntegral n) OPCODE) id $+    intToScriptOp n+ -- | Sort the public keys of a multisig output in ascending order by comparing--- their compressed serialized representations. Refer to BIP-67.+-- their serialized representations. Refer to BIP-67, which defines the order+-- for compressed keys. Any other output is returned unchanged. sortMulSig :: Ctx -> ScriptOutput -> ScriptOutput sortMulSig ctx out = case out of   PayMulSig keys r ->     PayMulSig       (sortBy (compare `on` marshal ctx) keys)       r-  _ -> error "Can only call orderMulSig on PayMulSig scripts"+  _ -> out  -- | Data type describing standard transaction input scripts. Input scripts -- provide the signing data required to unlock the coins of the output they are@@ -377,6 +397,12 @@ isScriptHashInput (ScriptHashInput _ _) = True isScriptHashInput _ = False +-- | Returns true if the input script is spending a pay-to-script-hash output+-- that wraps a SegWit program.+isNestedWitnessInput :: ScriptInput -> Bool+isNestedWitnessInput (NestedWitnessInput _) = True+isNestedWitnessInput _ = False+ -- | A redeem script is the output script serialized into the spending input -- script. It must be included in inputs that spend pay-to-script-hash outputs. type RedeemScript = ScriptOutput@@ -393,9 +419,28 @@         -- | redeem script         redeem :: !RedeemScript       }+  | -- | input of a pay-to-script-hash output that wraps a SegWit program+    -- (P2SH-P2WPKH or P2SH-P2WSH): the script only pushes the witness output+    -- script, and the signatures are in the witness+    NestedWitnessInput+      { -- | the wrapped 'PayWitnessPKHash' or 'PayWitnessScriptHash' output+        redeem :: !RedeemScript+      }   deriving (Show, Read, Eq, Generic, NFData) --- | Heuristic to decode an input script into one of the standard types.+-- | The signature that a script element stands for: an empty push is+-- 'TxSignatureEmpty', any other push must decode as a signature.+sigOp :: Network -> Ctx -> ScriptOp -> Maybe TxSignature+sigOp net ctx op = do+  bs <- pushOpData op+  if B.null bs+    then return TxSignatureEmpty+    else eitherToMaybe $ decodeTxSig net ctx bs++-- | Heuristic to decode an input script into one of the standard types, when+-- the output it spends is not known. A single empty push is read as a+-- 'SpendPK' with an empty signature, although it is also the form of a+-- 'SpendMulSig' without signatures. decodeSimpleInput :: Network -> Ctx -> Script -> Either String SimpleInput decodeSimpleInput net ctx (Script ops) =   maybeToEither errMsg $ matchPK ops <|> matchPKHash ops <|> matchMulSig ops@@ -403,20 +448,36 @@     matchPK [op] = SpendPK <$> f op     matchPK _ = Nothing     matchPKHash [op, OP_PUSHDATA pub _] =-      SpendPKHash <$> f op <*> eitherToMaybe (unmarshal ctx pub)+      SpendPKHash <$> f op <*> eitherToMaybe (decodePubKey ctx pub)     matchPKHash _ = Nothing-    matchMulSig (x : xs) = do-      guard $ x == OP_0-      SpendMulSig <$> mapM f xs+    matchMulSig (OP_0 : xs) = SpendMulSig <$> mapM f xs     matchMulSig _ = Nothing-    f OP_0 = return TxSignatureEmpty-    f (OP_PUSHDATA "" OPCODE) = f OP_0-    f (OP_PUSHDATA bs _) = eitherToMaybe $ decodeTxSig net ctx bs-    f _ = Nothing+    f = sigOp net ctx     errMsg = "decodeInput: Could not decode script input" +-- | Decode the input of a pay-to-script-hash output as the redeem script+-- requires: one signature for 'PayPK', a signature and a key for+-- 'PayPKHash', and @OP_0@ followed by the signatures, possibly none, for+-- 'PayMulSig'. Other redeem scripts have no standard input.+decodeSimpleInputFor ::+  Network -> Ctx -> RedeemScript -> [ScriptOp] -> Maybe SimpleInput+decodeSimpleInputFor net ctx rdm ops = case (rdm, ops) of+  (PayPK _, [op]) -> SpendPK <$> f op+  (PayPKHash _, [op, OP_PUSHDATA pub _]) ->+    SpendPKHash <$> f op <*> eitherToMaybe (decodePubKey ctx pub)+  (PayMulSig _ _, OP_0 : xs) -> SpendMulSig <$> mapM f xs+  _ -> Nothing+  where+    f = sigOp net ctx+ -- | Heuristic to decode a 'ScriptInput' from a 'Script'. This function fails if -- the script can not be parsed as a standard script input.+--+-- A script whose last element is a standard output script is the input of a+-- pay-to-script-hash output. The elements before it must be the input that+-- the redeem script requires, see 'ScriptHashInput'. When the redeem script+-- is a SegWit program and nothing comes before it, the input is a+-- 'NestedWitnessInput'. decodeInput :: Network -> Ctx -> Script -> Either String ScriptInput decodeInput net ctx s@(Script ops) =   maybeToEither errMsg $ matchSimpleInput <|> matchPayScriptHash@@ -427,8 +488,12 @@       case splitAt (length s.ops - 1) ops of         (is, [OP_PUSHDATA bs _]) -> do           rdm <- eitherToMaybe $ unmarshal ctx bs-          inp <- eitherToMaybe $ decodeSimpleInput net ctx $ Script is-          return $ ScriptHashInput inp rdm+          case (is, rdm) of+            ([], PayWitnessPKHash _) -> return $ NestedWitnessInput rdm+            ([], PayWitnessScriptHash _) -> return $ NestedWitnessInput rdm+            _ -> do+              inp <- decodeSimpleInputFor net ctx rdm is+              return $ ScriptHashInput inp rdm         _ -> Nothing     errMsg = "decodeInput: Could not decode script input" @@ -445,6 +510,8 @@   RegularInput ri -> encodeSimpleInput net ctx ri   ScriptHashInput i o ->     Script $ (encodeSimpleInput net ctx i).ops ++ [opPushData $ marshal ctx o]+  NestedWitnessInput o ->+    Script [opPushData $ marshal ctx o]  -- | Encode a standard 'SimpleInput' into opcodes as an input 'Script'. encodeSimpleInput :: Network -> Ctx -> SimpleInput -> Script