📅 Original date posted:2018-11-08
📝 Original message:
Would it be possible to query a command line program or a JSON-RPC call to
get the secret? In that case we could add it to the `listpeers` output.
On Wed, Nov 7, 2018 at 6:43 AM tock203 <tomokio203 at gmail.com> wrote:
> We implemented the latter scheme. lightning-dissector already supports key
> rotation.
> FYI, here's the key log file format lightning-dissector currently
> implements.
> https://github.com/nayutaco/lightning-dissector/blob/master/CONTRIBUTING.md#by-dumping-key-log-file
>
> Whenever key rotation happens(nonce==0), lightning node software write
> 16byteMAC & key of "first BOLT packet".
> When you read .pcap starts with a message whose nonce is not 0, the
> messages can not be decrypted until the next key rotation.
>
> The current design is as described above. Because it is a provisional
> specification, any opinion is welcome.
>
> 2018年11月6日(火) 16:08 Olaoluwa Osuntokun <laolu32 at gmail.com>:
>
>> Hi tomokio,
>>
>> This is so dope! We've long discussed creating canned protocol
>> transcripts for
>> other implementations to assert their responses again, and I think this
>> is a
>> great first step towards that.
>>
>> > Our proposal:
>> > Every implementation has compile option which enable output key
>> information
>> > file.
>>
>> So is this request to add an option which will write out the _plaintext_
>> messages to disk, or an option that writes out the final derived
>> read/write
>> secrets to disk? For the latter path, it the tools that read these
>> transcripts
>> would need to be aware of key rotations, so they'd be able to continue to
>> decrypt the transact pt post rotation.
>>
>> -- Laolu
>>
>>
>> On Sat, Oct 27, 2018 at 2:37 AM <tomokio203 at gmail.com> wrote:
>>
>>> Hello lightning network developers.
>>> Nayuta team is developing Wireshark plug-in for Lightning Network(BOLT)
>>> protocol.
>>> https://github.com/nayutaco/lightning-dissector
>>>
>>> It’s alpha version, but it can decode some BOLT message.
>>> Currently, this software works for Nayuta’s implementation(ptarmigan)
>>> and Éclair.
>>> When ptarmigan is compiled with some option, it write out key
>>> information file. This Wireshark plug-in decode packet using that file.
>>> When you use Éclair, this software parse log file.
>>>
>>> Through our development experience, interoperability test is time
>>> consuming task.
>>> If people can see communication log of BOLT message on same format
>>> (.pcap), it will be useful for interoperability test.
>>>
>>> Our proposal:
>>> Every implementation has compile option which enable output key
>>> information file.
>>>
>>> We are glad if this project is useful for lightning network eco-system.
>>>
>> _______________________________________________
>>> Lightning-dev mailing list
>>> Lightning-dev at lists.linuxfoundation.org
>>> https://lists.linuxfoundation.org/mailman/listinfo/lightning-dev
>>>
>> _______________________________________________
> Lightning-dev mailing list
> Lightning-dev at lists.linuxfoundation.org
> https://lists.linuxfoundation.org/mailman/listinfo/lightning-dev
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.linuxfoundation.org/pipermail/lightning-dev/attachments/20181108/d7736bc9/attachment.html>;
Christian Decker [ARCHIVE] /
npub1wt…gtuyn
2023-06-09 12:52:15
in reply to nevent1q…zxum
Author Public Key
npub1wtx5qvewc7pd6znlvwktq03mdld05mv3h5dkzfwd3dc30gdmsptsugtuynPublished at
2023-06-09 12:52:15Event JSON
{
"id": "f8fca0160ee8428f857e76310643b15e8aa9614fb3eed8ae3238750f6ad79d79",
"pubkey": "72cd40332ec782dd0a7f63acb03e3b6fdafa6d91bd1b6125cd8b7117a1bb8057",
"created_at": 1686315135,
"kind": 1,
"tags": [
[
"e",
"71ffaaf623edf85ad8f606b35918fcff823f8f86c8248220c81b34f31bb32ad3",
"",
"root"
],
[
"e",
"5755133fdbdf0dc2ec90d44a72c2d2e1ef657efcaab6367a1babdfd52b45fd70",
"",
"reply"
],
[
"p",
"11c31955a038077b9cc8d9efe9ee753a64dc29958c62e0b2c8bb60630f8149c9"
]
],
"content": "📅 Original date posted:2018-11-08\n📝 Original message:\nWould it be possible to query a command line program or a JSON-RPC call to\nget the secret? In that case we could add it to the `listpeers` output.\n\nOn Wed, Nov 7, 2018 at 6:43 AM tock203 \u003ctomokio203 at gmail.com\u003e wrote:\n\n\u003e We implemented the latter scheme. lightning-dissector already supports key\n\u003e rotation.\n\u003e FYI, here's the key log file format lightning-dissector currently\n\u003e implements.\n\u003e https://github.com/nayutaco/lightning-dissector/blob/master/CONTRIBUTING.md#by-dumping-key-log-file\n\u003e\n\u003e Whenever key rotation happens(nonce==0), lightning node software write\n\u003e 16byteMAC \u0026 key of \"first BOLT packet\".\n\u003e When you read .pcap starts with a message whose nonce is not 0, the\n\u003e messages can not be decrypted until the next key rotation.\n\u003e\n\u003e The current design is as described above. Because it is a provisional\n\u003e specification, any opinion is welcome.\n\u003e\n\u003e 2018年11月6日(火) 16:08 Olaoluwa Osuntokun \u003claolu32 at gmail.com\u003e:\n\u003e\n\u003e\u003e Hi tomokio,\n\u003e\u003e\n\u003e\u003e This is so dope! We've long discussed creating canned protocol\n\u003e\u003e transcripts for\n\u003e\u003e other implementations to assert their responses again, and I think this\n\u003e\u003e is a\n\u003e\u003e great first step towards that.\n\u003e\u003e\n\u003e\u003e \u003e Our proposal:\n\u003e\u003e \u003e Every implementation has compile option which enable output key\n\u003e\u003e information\n\u003e\u003e \u003e file.\n\u003e\u003e\n\u003e\u003e So is this request to add an option which will write out the _plaintext_\n\u003e\u003e messages to disk, or an option that writes out the final derived\n\u003e\u003e read/write\n\u003e\u003e secrets to disk? For the latter path, it the tools that read these\n\u003e\u003e transcripts\n\u003e\u003e would need to be aware of key rotations, so they'd be able to continue to\n\u003e\u003e decrypt the transact pt post rotation.\n\u003e\u003e\n\u003e\u003e -- Laolu\n\u003e\u003e\n\u003e\u003e\n\u003e\u003e On Sat, Oct 27, 2018 at 2:37 AM \u003ctomokio203 at gmail.com\u003e wrote:\n\u003e\u003e\n\u003e\u003e\u003e Hello lightning network developers.\n\u003e\u003e\u003e Nayuta team is developing Wireshark plug-in for Lightning Network(BOLT)\n\u003e\u003e\u003e protocol.\n\u003e\u003e\u003e https://github.com/nayutaco/lightning-dissector\n\u003e\u003e\u003e\n\u003e\u003e\u003e It’s alpha version, but it can decode some BOLT message.\n\u003e\u003e\u003e Currently, this software works for Nayuta’s implementation(ptarmigan)\n\u003e\u003e\u003e and Éclair.\n\u003e\u003e\u003e When ptarmigan is compiled with some option, it write out key\n\u003e\u003e\u003e information file. This Wireshark plug-in decode packet using that file.\n\u003e\u003e\u003e When you use Éclair, this software parse log file.\n\u003e\u003e\u003e\n\u003e\u003e\u003e Through our development experience, interoperability test is time\n\u003e\u003e\u003e consuming task.\n\u003e\u003e\u003e If people can see communication log of BOLT message on same format\n\u003e\u003e\u003e (.pcap), it will be useful for interoperability test.\n\u003e\u003e\u003e\n\u003e\u003e\u003e Our proposal:\n\u003e\u003e\u003e Every implementation has compile option which enable output key\n\u003e\u003e\u003e information file.\n\u003e\u003e\u003e\n\u003e\u003e\u003e We are glad if this project is useful for lightning network eco-system.\n\u003e\u003e\u003e\n\u003e\u003e _______________________________________________\n\u003e\u003e\u003e Lightning-dev mailing list\n\u003e\u003e\u003e Lightning-dev at lists.linuxfoundation.org\n\u003e\u003e\u003e https://lists.linuxfoundation.org/mailman/listinfo/lightning-dev\n\u003e\u003e\u003e\n\u003e\u003e _______________________________________________\n\u003e Lightning-dev mailing list\n\u003e Lightning-dev at lists.linuxfoundation.org\n\u003e https://lists.linuxfoundation.org/mailman/listinfo/lightning-dev\n\u003e\n-------------- next part --------------\nAn HTML attachment was scrubbed...\nURL: \u003chttp://lists.linuxfoundation.org/pipermail/lightning-dev/attachments/20181108/d7736bc9/attachment.html\u003e",
"sig": "aa853e3c82604dbda45d62a0988e0df338d3289d397d8b4cac06f99b625b3a632a7a02fcf5475a78ccb4d4d03b49570e4525405e287d9e62e0bd374a5546d88c"
}