Use `Sha256`s for tweaks in `sign` to enforce randomness

[rust-lightning] / lightning / src / ln / channel_keys.rs

diff --git a/lightning/src/ln/channel_keys.rs b/lightning/src/ln/channel_keys.rs
index 76dc1e42b37d72e7dca1d92c98ff7193cc817693..eaa14f27f3312aa613e449c7d8084183a3cdee4b 100644 (file)
--- a/lightning/src/ln/channel_keys.rs
+++ b/lightning/src/ln/channel_keys.rs
@@ -45,11 +45,11 @@ macro_rules! basepoint_impl {
                        ///
                        /// This calculates the hash part in the tweak derivation process, which is used to
                        /// ensure that each key is unique and cannot be guessed by an external party.
-                       pub fn derive_add_tweak(&self, per_commitment_point: &PublicKey) -> [u8; 32] {
+                       pub fn derive_add_tweak(&self, per_commitment_point: &PublicKey) -> Sha256 {
                                let mut sha = Sha256::engine();
                                sha.input(&per_commitment_point.serialize());
                                sha.input(&self.to_public_key().serialize());
-                               Sha256::from_engine(sha).to_byte_array()
+                               Sha256::from_engine(sha)
                        }
                }
 
@@ -166,18 +166,20 @@ fn derive_public_key<T: secp256k1::Signing>(
        let mut sha = Sha256::engine();
        sha.input(&per_commitment_point.serialize());
        sha.input(&base_point.serialize());
-       let res = Sha256::from_engine(sha).to_byte_array();
+       let res = Sha256::from_engine(sha);
 
        add_public_key_tweak(secp_ctx, base_point, &res)
 }
 
 /// Adds a tweak to a public key to derive a new public key.
+///
+/// May panic if `tweak` is not the output of a SHA-256 hash.
 pub fn add_public_key_tweak<T: secp256k1::Signing>(
-       secp_ctx: &Secp256k1<T>, base_point: &PublicKey, tweak: &[u8; 32],
+       secp_ctx: &Secp256k1<T>, base_point: &PublicKey, tweak: &Sha256,
 ) -> PublicKey {
        let hashkey = PublicKey::from_secret_key(
                &secp_ctx,
-               &SecretKey::from_slice(tweak)
+               &SecretKey::from_slice(tweak.as_byte_array())
                        .expect("Hashes should always be valid keys unless SHA-256 is broken"),
        );
        base_point.combine(&hashkey)