rust-lightning/lightning
Valentine Wallace 615eefb543
Verify inbound ReleaseHeldHtlc messages via hmac.
See AsyncPaymentsContext::hmac, but this prevents the recipient from
deanonymizing us. Without this, if they are able to guess the correct payment
id, then they could create a blinded path to us and confirm our identity.

We also move the PAYMENT_HASH_HMAC_INPUT const to use &[7; 16], which is safe
because this const was added since the last release. This ordering reads more
smoothly.
2024-09-13 10:40:06 -04:00
..
src Verify inbound ReleaseHeldHtlc messages via hmac. 2024-09-13 10:40:06 -04:00
Cargo.toml Update versions to 0.0.124 and invoice 0.32 types 0.1 release 2024-09-03 18:18:52 +00:00