core-lightning/hsmd/hsmd_wire.csv
Ken Sedgwick e9ff50df96 hsmd: Implement hsmd_forget_channel for Channel Deletion in HSMD
Changelog-Added: hsmd: Added hsmd_forget_channel to enable explicit channel deletion. ([#6987])

Motivation: Previously, a signer prematurely forgetting a channel led
to failures in unresolved channel requests. This update introduces
hsmd_forget_channel, allowing nodes to explicitly notify signers when
a channel is irrevocably resolved and can be safely forgotten. This
ensures synchronized channel cleanup between nodes and signers.

This change maintains backward and forward compatibility. Nodes
explicitly check whether a signer has `WIRE_HSMD_FORGET_CHANNEL`
capability before sending the message.  Nodes without
`WIRE_HSMD_FORGET_CHANNEL` capability won't send this message. Signers
capable of handling this message but not receiving it will continue to
use conservative pruning methods.

Fixes #6987
2024-01-17 13:34:20 +01:00

16 KiB

1# Clients should not give a bad request but not the HSM's decision to crash.
2msgtype,hsmstatus_client_bad_request,1000
3msgdata,hsmstatus_client_bad_request,id,node_id,
4msgdata,hsmstatus_client_bad_request,description,wirestring,
5msgdata,hsmstatus_client_bad_request,len,u16,
6msgdata,hsmstatus_client_bad_request,msg,u8,len
7#include <bitcoin/chainparams.h>
8# Start the HSM.
9msgtype,hsmd_init,11
10msgdata,hsmd_init,bip32_key_version,bip32_key_version,
11msgdata,hsmd_init,chainparams,chainparams,
12msgdata,hsmd_init,hsm_encryption_key,?secret,
13msgdata,hsmd_init,dev_force_privkey,?privkey,
14msgdata,hsmd_init,dev_force_bip32_seed,?secret,
15msgdata,hsmd_init,dev_force_channel_secrets,?secrets,
16msgdata,hsmd_init,dev_force_channel_secrets_shaseed,?sha256,
17msgdata,hsmd_init,hsm_wire_min_version,u32,
18msgdata,hsmd_init,hsm_wire_max_version,u32,
19#include <common/bip32.h>
20# DEPRECATED after 23.05, remove in two versions!
21msgtype,hsmd_init_reply_v2,113
22msgdata,hsmd_init_reply_v2,node_id,node_id,
23msgdata,hsmd_init_reply_v2,bip32,ext_key,
24msgdata,hsmd_init_reply_v2,bolt12,pubkey,
25# Sorry: I should have put version in v2 :(
26msgtype,hsmd_init_reply_v4,114
27# This gets upgraded when the wire protocol changes in incompatible
28# ways:
29msgdata,hsmd_init_reply_v4,hsm_version,u32,
30# Capabilities, by convention are message numbers, indicating
31# that the HSM supports you sending this message.
32msgdata,hsmd_init_reply_v4,num_hsm_capabilities,u16,
33msgdata,hsmd_init_reply_v4,hsm_capabilities,u32,num_hsm_capabilities
34msgdata,hsmd_init_reply_v4,node_id,node_id,
35msgdata,hsmd_init_reply_v4,bip32,ext_key,
36msgdata,hsmd_init_reply_v4,bolt12,pubkey,
37# Declare a new channel.
38msgtype,hsmd_new_channel,30
39msgdata,hsmd_new_channel,id,node_id,
40msgdata,hsmd_new_channel,dbid,u64,
41# No value returned.
42msgtype,hsmd_new_channel_reply,130
43# Get a new HSM FD, with the specified permissions
44msgtype,hsmd_client_hsmfd,9
45# Which identity to use for requests
46msgdata,hsmd_client_hsmfd,id,node_id,
47# Database id for this client, if any.
48msgdata,hsmd_client_hsmfd,dbid,u64,
49msgdata,hsmd_client_hsmfd,permissions,u64,
50# No content, just an fd.
51msgtype,hsmd_client_hsmfd_reply,109
52#include <common/derive_basepoints.h>
53# Get the basepoints and funding key for this specific channel.
54msgtype,hsmd_get_channel_basepoints,10
55msgdata,hsmd_get_channel_basepoints,peerid,node_id,
56msgdata,hsmd_get_channel_basepoints,dbid,u64,
57msgtype,hsmd_get_channel_basepoints_reply,110
58msgdata,hsmd_get_channel_basepoints_reply,basepoints,basepoints,
59msgdata,hsmd_get_channel_basepoints_reply,funding_pubkey,pubkey,
60#include <common/channel_type.h>
61# Provide channel parameters.
62msgtype,hsmd_setup_channel,31
63msgdata,hsmd_setup_channel,is_outbound,bool,
64msgdata,hsmd_setup_channel,channel_value,amount_sat,
65msgdata,hsmd_setup_channel,push_value,amount_msat,
66msgdata,hsmd_setup_channel,funding_txid,bitcoin_txid,
67msgdata,hsmd_setup_channel,funding_txout,u16,
68msgdata,hsmd_setup_channel,local_to_self_delay,u16,
69msgdata,hsmd_setup_channel,local_shutdown_script_len,u16,
70msgdata,hsmd_setup_channel,local_shutdown_script,u8,local_shutdown_script_len
71msgdata,hsmd_setup_channel,local_shutdown_wallet_index,?u32,
72msgdata,hsmd_setup_channel,remote_basepoints,basepoints,
73msgdata,hsmd_setup_channel,remote_funding_pubkey,pubkey,
74msgdata,hsmd_setup_channel,remote_to_self_delay,u16,
75msgdata,hsmd_setup_channel,remote_shutdown_script_len,u16,
76msgdata,hsmd_setup_channel,remote_shutdown_script,u8,remote_shutdown_script_len
77msgdata,hsmd_setup_channel,channel_type,channel_type,
78# No value returned.,
79msgtype,hsmd_setup_channel_reply,131
80# check if the signer agrees that a funding candidate outpoint is buried
81msgtype,hsmd_check_outpoint,32
82msgdata,hsmd_check_outpoint,funding_txid,bitcoin_txid,
83msgdata,hsmd_check_outpoint,funding_txout,u16,
84msgtype,hsmd_check_outpoint_reply,132
85msgdata,hsmd_check_outpoint_reply,is_buried,bool,
86# change the funding/splice state to locked
87msgtype,hsmd_lock_outpoint,37
88msgdata,hsmd_lock_outpoint,funding_txid,bitcoin_txid,
89msgdata,hsmd_lock_outpoint,funding_txout,u16,
90# No value returned.
91msgtype,hsmd_lock_outpoint_reply,137
92# Forget channel.
93msgtype,hsmd_forget_channel,34
94msgdata,hsmd_forget_channel,id,node_id,
95msgdata,hsmd_forget_channel,dbid,u64,
96# No value returned.
97msgtype,hsmd_forget_channel_reply,134
98# Return signature for a funding tx.
99#include <common/utxo.h>
100# Master asks the HSM to sign a node_announcement
101msgtype,hsmd_node_announcement_sig_req,6
102msgdata,hsmd_node_announcement_sig_req,annlen,u16,
103msgdata,hsmd_node_announcement_sig_req,announcement,u8,annlen
104msgtype,hsmd_node_announcement_sig_reply,106
105msgdata,hsmd_node_announcement_sig_reply,signature,secp256k1_ecdsa_signature,
106# Sign a withdrawal request
107#include <bitcoin/psbt.h>
108msgtype,hsmd_sign_withdrawal,7
109msgdata,hsmd_sign_withdrawal,num_inputs,u16,
110msgdata,hsmd_sign_withdrawal,inputs,utxo,num_inputs
111msgdata,hsmd_sign_withdrawal,psbt,wally_psbt,
112msgtype,hsmd_sign_withdrawal_reply,107
113msgdata,hsmd_sign_withdrawal_reply,psbt,wally_psbt,
114# Sign an invoice
115msgtype,hsmd_sign_invoice,8
116msgdata,hsmd_sign_invoice,len,u16,
117msgdata,hsmd_sign_invoice,u5bytes,u8,len
118msgdata,hsmd_sign_invoice,hrplen,u16,
119msgdata,hsmd_sign_invoice,hrp,u8,hrplen
120msgtype,hsmd_sign_invoice_reply,108
121msgdata,hsmd_sign_invoice_reply,sig,secp256k1_ecdsa_recoverable_signature,
122# Preapprove an invoice for payment
123msgtype,hsmd_preapprove_invoice,38
124msgdata,hsmd_preapprove_invoice,invstring,wirestring,
125# Result is true if approved, declined if false
126msgtype,hsmd_preapprove_invoice_reply,138
127msgdata,hsmd_preapprove_invoice_reply,approved,bool,
128# Preapprove a keysend payment
129msgtype,hsmd_preapprove_keysend,39
130msgdata,hsmd_preapprove_keysend,destination,node_id,
131msgdata,hsmd_preapprove_keysend,payment_hash,sha256,
132msgdata,hsmd_preapprove_keysend,amount_msat,amount_msat,
133# Result is true if approved, declined if false
134msgtype,hsmd_preapprove_keysend_reply,139
135msgdata,hsmd_preapprove_keysend_reply,approved,bool,
136# Give me ECDH(node-id-secret,point)
137msgtype,hsmd_ecdh_req,1
138msgdata,hsmd_ecdh_req,point,pubkey,
139msgtype,hsmd_ecdh_resp,100
140msgdata,hsmd_ecdh_resp,ss,secret,
141msgtype,hsmd_cannouncement_sig_req,2
142msgdata,hsmd_cannouncement_sig_req,calen,u16,
143msgdata,hsmd_cannouncement_sig_req,ca,u8,calen
144msgtype,hsmd_cannouncement_sig_reply,102
145msgdata,hsmd_cannouncement_sig_reply,node_signature,secp256k1_ecdsa_signature,
146msgdata,hsmd_cannouncement_sig_reply,bitcoin_signature,secp256k1_ecdsa_signature,
147msgtype,hsmd_cupdate_sig_req,3
148msgdata,hsmd_cupdate_sig_req,culen,u16,
149msgdata,hsmd_cupdate_sig_req,cu,u8,culen
150msgtype,hsmd_cupdate_sig_reply,103
151msgdata,hsmd_cupdate_sig_reply,culen,u16,
152msgdata,hsmd_cupdate_sig_reply,cu,u8,culen
153# Master asks HSM to sign a commitment transaction.
154msgtype,hsmd_sign_commitment_tx,5
155msgdata,hsmd_sign_commitment_tx,peer_id,node_id,
156msgdata,hsmd_sign_commitment_tx,channel_dbid,u64,
157msgdata,hsmd_sign_commitment_tx,tx,bitcoin_tx,
158msgdata,hsmd_sign_commitment_tx,remote_funding_key,pubkey,
159msgdata,hsmd_sign_commitment_tx,commit_num,u64,
160msgtype,hsmd_sign_commitment_tx_reply,105
161msgdata,hsmd_sign_commitment_tx_reply,sig,bitcoin_signature,
162# Validate the counterparty's commitment signatures.
163msgtype,hsmd_validate_commitment_tx,35
164msgdata,hsmd_validate_commitment_tx,tx,bitcoin_tx,
165msgdata,hsmd_validate_commitment_tx,num_htlcs,u16,
166msgdata,hsmd_validate_commitment_tx,htlcs,simple_htlc,num_htlcs
167msgdata,hsmd_validate_commitment_tx,commit_num,u64,
168msgdata,hsmd_validate_commitment_tx,feerate,u32,
169msgdata,hsmd_validate_commitment_tx,sig,bitcoin_signature,
170msgdata,hsmd_validate_commitment_tx,num_htlc_sigs,u16,
171msgdata,hsmd_validate_commitment_tx,htlc_sigs,bitcoin_signature,num_htlc_sigs
172msgtype,hsmd_validate_commitment_tx_reply,135
173msgdata,hsmd_validate_commitment_tx_reply,old_commitment_secret,?secret,
174msgdata,hsmd_validate_commitment_tx_reply,next_per_commitment_point,pubkey,
175# Vaidate the counterparty's revocation secret
176msgtype,hsmd_validate_revocation,36
177msgdata,hsmd_validate_revocation,revoke_num,u64,
178msgdata,hsmd_validate_revocation,per_commitment_secret,secret,
179# No value returned.
180msgtype,hsmd_validate_revocation_reply,136
181# Onchaind asks HSM to sign a spend to-us. Four variants, since each set
182# of keys is derived differently...
183msgtype,hsmd_sign_delayed_payment_to_us,12
184msgdata,hsmd_sign_delayed_payment_to_us,commit_num,u64,
185msgdata,hsmd_sign_delayed_payment_to_us,tx,bitcoin_tx,
186msgdata,hsmd_sign_delayed_payment_to_us,wscript_len,u16,
187msgdata,hsmd_sign_delayed_payment_to_us,wscript,u8,wscript_len
188msgtype,hsmd_sign_remote_htlc_to_us,13
189msgdata,hsmd_sign_remote_htlc_to_us,remote_per_commitment_point,pubkey,
190msgdata,hsmd_sign_remote_htlc_to_us,tx,bitcoin_tx,
191msgdata,hsmd_sign_remote_htlc_to_us,wscript_len,u16,
192msgdata,hsmd_sign_remote_htlc_to_us,wscript,u8,wscript_len
193msgdata,hsmd_sign_remote_htlc_to_us,option_anchor_outputs,bool,
194msgtype,hsmd_sign_penalty_to_us,14
195msgdata,hsmd_sign_penalty_to_us,revocation_secret,secret,
196msgdata,hsmd_sign_penalty_to_us,tx,bitcoin_tx,
197msgdata,hsmd_sign_penalty_to_us,wscript_len,u16,
198msgdata,hsmd_sign_penalty_to_us,wscript,u8,wscript_len
199# Onchaind asks HSM to sign a local HTLC success or HTLC timeout tx.
200msgtype,hsmd_sign_local_htlc_tx,16
201msgdata,hsmd_sign_local_htlc_tx,commit_num,u64,
202msgdata,hsmd_sign_local_htlc_tx,tx,bitcoin_tx,
203msgdata,hsmd_sign_local_htlc_tx,wscript_len,u16,
204msgdata,hsmd_sign_local_htlc_tx,wscript,u8,wscript_len
205msgdata,hsmd_sign_local_htlc_tx,option_anchor_outputs,bool,
206# Openingd/channeld asks HSM to sign the other sides' commitment tx.
207#include <common/htlc_wire.h>
208msgtype,hsmd_sign_remote_commitment_tx,19
209msgdata,hsmd_sign_remote_commitment_tx,tx,bitcoin_tx,
210msgdata,hsmd_sign_remote_commitment_tx,remote_funding_key,pubkey,
211msgdata,hsmd_sign_remote_commitment_tx,remote_per_commit,pubkey,
212msgdata,hsmd_sign_remote_commitment_tx,option_static_remotekey,bool,
213msgdata,hsmd_sign_remote_commitment_tx,commit_num,u64,
214msgdata,hsmd_sign_remote_commitment_tx,num_htlcs,u16,
215msgdata,hsmd_sign_remote_commitment_tx,htlcs,simple_htlc,num_htlcs
216msgdata,hsmd_sign_remote_commitment_tx,feerate,u32,
217# channeld asks HSM to sign remote HTLC tx.
218msgtype,hsmd_sign_remote_htlc_tx,20
219msgdata,hsmd_sign_remote_htlc_tx,tx,bitcoin_tx,
220msgdata,hsmd_sign_remote_htlc_tx,len,u16,
221msgdata,hsmd_sign_remote_htlc_tx,wscript,u8,len
222msgdata,hsmd_sign_remote_htlc_tx,remote_per_commit_point,pubkey,
223msgdata,hsmd_sign_remote_htlc_tx,option_anchor_outputs,bool,
224# closingd asks HSM to sign mutual close tx.
225msgtype,hsmd_sign_mutual_close_tx,21
226msgdata,hsmd_sign_mutual_close_tx,tx,bitcoin_tx,
227msgdata,hsmd_sign_mutual_close_tx,remote_funding_key,pubkey,
228# channeld asks HSM to sign splice tx.
229msgtype,hsmd_sign_splice_tx,29
230msgdata,hsmd_sign_splice_tx,tx,bitcoin_tx,
231msgdata,hsmd_sign_splice_tx,remote_funding_key,pubkey,
232msgdata,hsmd_sign_splice_tx,input_index,u32,
233# Reply for all the above requests.
234msgtype,hsmd_sign_tx_reply,112
235msgdata,hsmd_sign_tx_reply,sig,bitcoin_signature,
236# Openingd/channeld/onchaind asks for Nth per_commitment_point, if > 2, gets N-2 secret.
237msgtype,hsmd_get_per_commitment_point,18
238msgdata,hsmd_get_per_commitment_point,n,u64,
239msgtype,hsmd_get_per_commitment_point_reply,118
240msgdata,hsmd_get_per_commitment_point_reply,per_commitment_point,pubkey,
241msgdata,hsmd_get_per_commitment_point_reply,old_commitment_secret,?secret,
242# master -> hsmd: do you have a memleak?
243msgtype,hsmd_dev_memleak,33
244msgtype,hsmd_dev_memleak_reply,133
245msgdata,hsmd_dev_memleak_reply,leak,bool,
246# channeld asks to check if claimed future commitment_secret is correct.
247msgtype,hsmd_check_future_secret,22
248msgdata,hsmd_check_future_secret,n,u64,
249msgdata,hsmd_check_future_secret,commitment_secret,secret,
250msgtype,hsmd_check_future_secret_reply,122
251msgdata,hsmd_check_future_secret_reply,correct,bool,
252# lightningd asks us to sign a string.
253msgtype,hsmd_sign_message,23
254msgdata,hsmd_sign_message,len,u16,
255msgdata,hsmd_sign_message,msg,u8,len
256msgtype,hsmd_sign_message_reply,123
257msgdata,hsmd_sign_message_reply,sig,secp256k1_ecdsa_recoverable_signature,
258# lightningd needs to get a scriptPubkey for a utxo with closeinfo
259msgtype,hsmd_get_output_scriptpubkey,24
260msgdata,hsmd_get_output_scriptpubkey,channel_id,u64,
261msgdata,hsmd_get_output_scriptpubkey,peer_id,node_id,
262msgdata,hsmd_get_output_scriptpubkey,commitment_point,?pubkey,
263msgtype,hsmd_get_output_scriptpubkey_reply,124
264msgdata,hsmd_get_output_scriptpubkey_reply,script_len,u16,
265msgdata,hsmd_get_output_scriptpubkey_reply,script,u8,script_len
266# Sign a bolt12-style merkle hash
267msgtype,hsmd_sign_bolt12,25
268msgdata,hsmd_sign_bolt12,messagename,wirestring,
269msgdata,hsmd_sign_bolt12,fieldname,wirestring,
270msgdata,hsmd_sign_bolt12,merkleroot,sha256,
271# This is for invreq payer_id (temporary keys)
272msgdata,hsmd_sign_bolt12,publictweaklen,u16,
273msgdata,hsmd_sign_bolt12,publictweak,u8,publictweaklen
274msgtype,hsmd_sign_bolt12_reply,125
275msgdata,hsmd_sign_bolt12_reply,sig,bip340sig,
276# Sign an option_will_fund offer hash
277msgtype,hsmd_sign_option_will_fund_offer,26
278msgdata,hsmd_sign_option_will_fund_offer,funding_pubkey,pubkey,
279msgdata,hsmd_sign_option_will_fund_offer,blockheight,u32,
280msgdata,hsmd_sign_option_will_fund_offer,channel_fee_base_max_msat,u32,
281msgdata,hsmd_sign_option_will_fund_offer,channel_fee_proportional_basis_max,u16,
282msgtype,hsmd_sign_option_will_fund_offer_reply,126
283msgdata,hsmd_sign_option_will_fund_offer_reply,rsig,secp256k1_ecdsa_signature,
284# Derive pseudorandom secret
285msgtype,hsmd_derive_secret,27
286msgdata,hsmd_derive_secret,len,u16,
287msgdata,hsmd_derive_secret,info,u8,len
288# Reply with the derived secret
289msgtype,hsmd_derive_secret_reply,127
290msgdata,hsmd_derive_secret_reply,secret,secret,
291# Sanity check this pubkey derivation is correct (unhardened only)
292msgtype,hsmd_check_pubkey,28
293msgdata,hsmd_check_pubkey,index,u32,
294msgdata,hsmd_check_pubkey,pubkey,pubkey,
295# Reply
296msgtype,hsmd_check_pubkey_reply,128
297msgdata,hsmd_check_pubkey_reply,ok,bool,
298msgtype,hsmd_sign_anchorspend,147
299msgdata,hsmd_sign_anchorspend,peerid,node_id,
300msgdata,hsmd_sign_anchorspend,channel_dbid,u64,
301msgdata,hsmd_sign_anchorspend,num_inputs,u16,
302msgdata,hsmd_sign_anchorspend,inputs,utxo,num_inputs
303msgdata,hsmd_sign_anchorspend,psbt,wally_psbt,
304msgtype,hsmd_sign_anchorspend_reply,148
305msgdata,hsmd_sign_anchorspend_reply,psbt,wally_psbt,
306# These are where lightningd asks for signatures on onchaind's behalf.
307msgtype,hsmd_sign_any_delayed_payment_to_us,142
308msgdata,hsmd_sign_any_delayed_payment_to_us,commit_num,u64,
309msgdata,hsmd_sign_any_delayed_payment_to_us,tx,bitcoin_tx,
310msgdata,hsmd_sign_any_delayed_payment_to_us,wscript_len,u16,
311msgdata,hsmd_sign_any_delayed_payment_to_us,wscript,u8,wscript_len
312msgdata,hsmd_sign_any_delayed_payment_to_us,input,u32,
313msgdata,hsmd_sign_any_delayed_payment_to_us,peerid,node_id,
314msgdata,hsmd_sign_any_delayed_payment_to_us,channel_dbid,u64,
315msgtype,hsmd_sign_any_remote_htlc_to_us,143
316msgdata,hsmd_sign_any_remote_htlc_to_us,remote_per_commitment_point,pubkey,
317msgdata,hsmd_sign_any_remote_htlc_to_us,tx,bitcoin_tx,
318msgdata,hsmd_sign_any_remote_htlc_to_us,wscript_len,u16,
319msgdata,hsmd_sign_any_remote_htlc_to_us,wscript,u8,wscript_len
320msgdata,hsmd_sign_any_remote_htlc_to_us,option_anchor_outputs,bool,
321msgdata,hsmd_sign_any_remote_htlc_to_us,input,u32,
322msgdata,hsmd_sign_any_remote_htlc_to_us,peerid,node_id,
323msgdata,hsmd_sign_any_remote_htlc_to_us,channel_dbid,u64,
324msgtype,hsmd_sign_any_penalty_to_us,144
325msgdata,hsmd_sign_any_penalty_to_us,revocation_secret,secret,
326msgdata,hsmd_sign_any_penalty_to_us,tx,bitcoin_tx,
327msgdata,hsmd_sign_any_penalty_to_us,wscript_len,u16,
328msgdata,hsmd_sign_any_penalty_to_us,wscript,u8,wscript_len
329msgdata,hsmd_sign_any_penalty_to_us,input,u32,
330msgdata,hsmd_sign_any_penalty_to_us,peerid,node_id,
331msgdata,hsmd_sign_any_penalty_to_us,channel_dbid,u64,
332msgtype,hsmd_sign_any_local_htlc_tx,146
333msgdata,hsmd_sign_any_local_htlc_tx,commit_num,u64,
334msgdata,hsmd_sign_any_local_htlc_tx,tx,bitcoin_tx,
335msgdata,hsmd_sign_any_local_htlc_tx,wscript_len,u16,
336msgdata,hsmd_sign_any_local_htlc_tx,wscript,u8,wscript_len
337msgdata,hsmd_sign_any_local_htlc_tx,option_anchor_outputs,bool,
338msgdata,hsmd_sign_any_local_htlc_tx,input,u32,
339msgdata,hsmd_sign_any_local_htlc_tx,peerid,node_id,
340msgdata,hsmd_sign_any_local_htlc_tx,channel_dbid,u64,
341msgtype,hsmd_sign_htlc_tx_mingle,149
342msgdata,hsmd_sign_htlc_tx_mingle,peerid,node_id,
343msgdata,hsmd_sign_htlc_tx_mingle,channel_dbid,u64,
344msgdata,hsmd_sign_htlc_tx_mingle,num_inputs,u16,
345msgdata,hsmd_sign_htlc_tx_mingle,inputs,utxo,num_inputs
346msgdata,hsmd_sign_htlc_tx_mingle,psbt,wally_psbt,
347msgtype,hsmd_sign_htlc_tx_mingle_reply,150
348msgdata,hsmd_sign_htlc_tx_mingle_reply,psbt,wally_psbt,