1
0
mirror of https://github.com/lightning/bolts.git synced 2024-11-19 01:50:03 +01:00

Prevent preimage reveal collision while claiming onchain incoming HTLC (#808)

See CVE-2020-26896 for context.
This commit is contained in:
Antoine Riard 2020-11-10 02:49:18 -05:00 committed by GitHub
parent 5a86adaa77
commit dcf6b0f359
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -314,6 +314,7 @@ A local node:
outgoing HTLC:
- MUST *resolve* the output by spending it, using the HTLC-success
transaction.
- MUST NOT reveal its own preimage when it's not the final recipient.<sup>[Preimage-Extraction](https://lists.linuxfoundation.org/pipermail/lightning-dev/2020-October/002857.html)</sup>
- MUST resolve the output of that HTLC-success transaction.
- otherwise:
- if the *remote node* is NOT irrevocably committed to the HTLC: