]> git.bitcoin.ninja Git - rust-lightning/commit
Add Bolt12Invoice::verify_using_payer_data
authorJeffrey Czyz <jkczyz@gmail.com>
Fri, 12 Jul 2024 17:16:23 +0000 (12:16 -0500)
committerJeffrey Czyz <jkczyz@gmail.com>
Mon, 22 Jul 2024 16:34:04 +0000 (11:34 -0500)
commit868fee7d2d98d1a5dd971a90b71b6016d3cfca29
treed25dd458370a719dc046a862005e882e31fef244
parent114954cbace0b26bc99205c493ce53dc9bf42183
Add Bolt12Invoice::verify_using_payer_data

Invoices are authenticated by checking the payer metadata in the
corresponding invoice request or refund. For all invoices requests and
for refunds using blinded paths, this will be the encrypted payment id
and a 128-bit nonce. Allows checking the unencrypted payment id and
nonce explicitly instead of the payer metadata. This will be used by an
upcoming change that includes the payment id and nonce in the invoice
request's reply path and the refund's blinded paths instead of
completely in the payer metadata, which mitigates de-anonymization
attacks.
lightning/src/offers/invoice.rs
lightning/src/offers/invoice_request.rs
lightning/src/offers/refund.rs
lightning/src/offers/signer.rs