use core::time::Duration; use std::collections::HashMap; use zeroize::Zeroizing; use rand_core::{RngCore, OsRng}; use ciphersuite::{group::GroupEncoding, Ciphersuite, Ristretto}; use frost::Participant; use sp_runtime::traits::Verify; use serai_client::{ primitives::{SeraiAddress, Signature}, validator_sets::primitives::{ExternalValidatorSet, KeyPair}, }; use tokio::time::sleep; use serai_db::{Get, DbTxn, Db, MemDb}; use processor_messages::{ key_gen::{self, KeyGenId}, CoordinatorMessage, }; use tributary::{TransactionTrait, Tributary}; use crate::{ tributary::{ Transaction, TributarySpec, scanner::{PublishSeraiTransaction, handle_new_blocks}, }, tests::{ MemProcessors, LocalP2p, tributary::{new_keys, new_spec, new_tributaries, run_tributaries, wait_for_tx_inclusion}, }, }; #[tokio::test] async fn dkg_test() { env_logger::init(); let keys = new_keys(&mut OsRng); let spec = new_spec(&mut OsRng, &keys); let full_tributaries = new_tributaries(&keys, &spec).await; let mut dbs = vec![]; let mut tributaries = vec![]; for (db, p2p, tributary) in full_tributaries { dbs.push(db); tributaries.push((p2p, tributary)); } // Run the tributaries in the background tokio::spawn(run_tributaries(tributaries.clone())); let mut txs = vec![]; // Create DKG commitments for each key for key in &keys { let attempt = 0; let mut commitments = vec![0; 256]; OsRng.fill_bytes(&mut commitments); let mut tx = Transaction::DkgCommitments { attempt, commitments: vec![commitments], signed: Transaction::empty_signed(), }; tx.sign(&mut OsRng, spec.genesis(), key); txs.push(tx); } let block_before_tx = tributaries[0].1.tip().await; // Publish all commitments but one for (i, tx) in txs.iter().enumerate().skip(1) { assert_eq!(tributaries[i].1.add_transaction(tx.clone()).await, Ok(true)); } // Wait until these are included for tx in txs.iter().skip(1) { wait_for_tx_inclusion(&tributaries[0].1, block_before_tx, tx.hash()).await; } let expected_commitments: HashMap<_, _> = txs .iter() .enumerate() .map(|(i, tx)| { if let Transaction::DkgCommitments { commitments, .. } = tx { (Participant::new((i + 1).try_into().unwrap()).unwrap(), commitments[0].clone()) } else { panic!("txs had non-commitments"); } }) .collect(); async fn new_processors( db: &mut MemDb, key: &Zeroizing<::F>, spec: &TributarySpec, tributary: &Tributary, ) -> MemProcessors { let processors = MemProcessors::new(); handle_new_blocks::<_, _, _, _, _, LocalP2p>( db, key, &|_, _, _, _| async { panic!("provided TX caused recognized_id to be called in new_processors") }, &processors, &(), &|_| async { panic!( "test tried to publish a new Tributary TX from handle_application_tx in new_processors" ) }, spec, &tributary.reader(), ) .await; processors } // Instantiate a scanner and verify it has nothing to report let processors = new_processors(&mut dbs[0], &keys[0], &spec, &tributaries[0].1).await; assert!(processors.0.read().await.is_empty()); // Publish the last commitment let block_before_tx = tributaries[0].1.tip().await; assert_eq!(tributaries[0].1.add_transaction(txs[0].clone()).await, Ok(true)); wait_for_tx_inclusion(&tributaries[0].1, block_before_tx, txs[0].hash()).await; sleep(Duration::from_secs(Tributary::::block_time().into())).await; // Verify the scanner emits a KeyGen::Commitments message handle_new_blocks::<_, _, _, _, _, LocalP2p>( &mut dbs[0], &keys[0], &|_, _, _, _| async { panic!("provided TX caused recognized_id to be called after Commitments") }, &processors, &(), &|_| async { panic!( "test tried to publish a new Tributary TX from handle_application_tx after Commitments" ) }, &spec, &tributaries[0].1.reader(), ) .await; { let mut msgs = processors.0.write().await; assert_eq!(msgs.len(), 1); let msgs = msgs.get_mut(&spec.set().network).unwrap(); let mut expected_commitments = expected_commitments.clone(); expected_commitments.remove(&Participant::new((1).try_into().unwrap()).unwrap()); assert_eq!( msgs.pop_front().unwrap(), CoordinatorMessage::KeyGen(key_gen::CoordinatorMessage::Commitments { id: KeyGenId { session: spec.set().session, attempt: 0 }, commitments: expected_commitments }) ); assert!(msgs.is_empty()); } // Verify all keys exhibit this scanner behavior for (i, key) in keys.iter().enumerate().skip(1) { let processors = new_processors(&mut dbs[i], key, &spec, &tributaries[i].1).await; let mut msgs = processors.0.write().await; assert_eq!(msgs.len(), 1); let msgs = msgs.get_mut(&spec.set().network).unwrap(); let mut expected_commitments = expected_commitments.clone(); expected_commitments.remove(&Participant::new((i + 1).try_into().unwrap()).unwrap()); assert_eq!( msgs.pop_front().unwrap(), CoordinatorMessage::KeyGen(key_gen::CoordinatorMessage::Commitments { id: KeyGenId { session: spec.set().session, attempt: 0 }, commitments: expected_commitments }) ); assert!(msgs.is_empty()); } // Now do shares let mut txs = vec![]; for (k, key) in keys.iter().enumerate() { let attempt = 0; let mut shares = vec![vec![]]; for i in 0 .. keys.len() { if i != k { let mut share = vec![0; 256]; OsRng.fill_bytes(&mut share); shares.last_mut().unwrap().push(share); } } let mut txn = dbs[k].txn(); let mut tx = Transaction::DkgShares { attempt, shares, confirmation_nonces: crate::tributary::dkg_confirmation_nonces(key, &spec, &mut txn, 0), signed: Transaction::empty_signed(), }; txn.commit(); tx.sign(&mut OsRng, spec.genesis(), key); txs.push(tx); } let block_before_tx = tributaries[0].1.tip().await; for (i, tx) in txs.iter().enumerate().skip(1) { assert_eq!(tributaries[i].1.add_transaction(tx.clone()).await, Ok(true)); } for tx in txs.iter().skip(1) { wait_for_tx_inclusion(&tributaries[0].1, block_before_tx, tx.hash()).await; } // With just 4 sets of shares, nothing should happen yet handle_new_blocks::<_, _, _, _, _, LocalP2p>( &mut dbs[0], &keys[0], &|_, _, _, _| async { panic!("provided TX caused recognized_id to be called after some shares") }, &processors, &(), &|_| async { panic!( "test tried to publish a new Tributary TX from handle_application_tx after some shares" ) }, &spec, &tributaries[0].1.reader(), ) .await; assert_eq!(processors.0.read().await.len(), 1); assert!(processors.0.read().await[&spec.set().network].is_empty()); // Publish the final set of shares let block_before_tx = tributaries[0].1.tip().await; assert_eq!(tributaries[0].1.add_transaction(txs[0].clone()).await, Ok(true)); wait_for_tx_inclusion(&tributaries[0].1, block_before_tx, txs[0].hash()).await; sleep(Duration::from_secs(Tributary::::block_time().into())).await; // Each scanner should emit a distinct shares message let shares_for = |i: usize| { CoordinatorMessage::KeyGen(key_gen::CoordinatorMessage::Shares { id: KeyGenId { session: spec.set().session, attempt: 0 }, shares: vec![txs .iter() .enumerate() .filter_map(|(l, tx)| { if let Transaction::DkgShares { shares, .. } = tx { if i == l { None } else { let relative_i = i - (if i > l { 1 } else { 0 }); Some(( Participant::new((l + 1).try_into().unwrap()).unwrap(), shares[0][relative_i].clone(), )) } } else { panic!("txs had non-shares"); } }) .collect::>()], }) }; // Any scanner which has handled the prior blocks should only emit the new event for (i, key) in keys.iter().enumerate() { handle_new_blocks::<_, _, _, _, _, LocalP2p>( &mut dbs[i], key, &|_, _, _, _| async { panic!("provided TX caused recognized_id to be called after shares") }, &processors, &(), &|_| async { panic!("test tried to publish a new Tributary TX from handle_application_tx") }, &spec, &tributaries[i].1.reader(), ) .await; { let mut msgs = processors.0.write().await; assert_eq!(msgs.len(), 1); let msgs = msgs.get_mut(&spec.set().network).unwrap(); assert_eq!(msgs.pop_front().unwrap(), shares_for(i)); assert!(msgs.is_empty()); } } // Yet new scanners should emit all events for (i, key) in keys.iter().enumerate() { let processors = new_processors(&mut MemDb::new(), key, &spec, &tributaries[i].1).await; let mut msgs = processors.0.write().await; assert_eq!(msgs.len(), 1); let msgs = msgs.get_mut(&spec.set().network).unwrap(); let mut expected_commitments = expected_commitments.clone(); expected_commitments.remove(&Participant::new((i + 1).try_into().unwrap()).unwrap()); assert_eq!( msgs.pop_front().unwrap(), CoordinatorMessage::KeyGen(key_gen::CoordinatorMessage::Commitments { id: KeyGenId { session: spec.set().session, attempt: 0 }, commitments: expected_commitments }) ); assert_eq!(msgs.pop_front().unwrap(), shares_for(i)); assert!(msgs.is_empty()); } // Send DkgConfirmed let mut substrate_key = [0; 32]; OsRng.fill_bytes(&mut substrate_key); let mut network_key = vec![0; usize::try_from((OsRng.next_u64() % 32) + 32).unwrap()]; OsRng.fill_bytes(&mut network_key); let key_pair = KeyPair(serai_client::Public(substrate_key), network_key.try_into().unwrap()); let mut txs = vec![]; for (i, key) in keys.iter().enumerate() { let attempt = 0; let mut txn = dbs[i].txn(); let share = crate::tributary::generated_key_pair::(&mut txn, key, &spec, &key_pair, 0).unwrap(); txn.commit(); let mut tx = Transaction::DkgConfirmed { attempt, confirmation_share: share, signed: Transaction::empty_signed(), }; tx.sign(&mut OsRng, spec.genesis(), key); txs.push(tx); } let block_before_tx = tributaries[0].1.tip().await; for (i, tx) in txs.iter().enumerate() { assert_eq!(tributaries[i].1.add_transaction(tx.clone()).await, Ok(true)); } for tx in &txs { wait_for_tx_inclusion(&tributaries[0].1, block_before_tx, tx.hash()).await; } struct CheckPublishSetKeys { spec: TributarySpec, key_pair: KeyPair, } #[async_trait::async_trait] impl PublishSeraiTransaction for CheckPublishSetKeys { async fn publish_set_keys( &self, _db: &(impl Sync + Get), set: ExternalValidatorSet, removed: Vec, key_pair: KeyPair, signature: Signature, ) { assert_eq!(set, self.spec.set()); assert!(removed.is_empty()); assert_eq!(self.key_pair, key_pair); assert!(signature.verify( &*serai_client::validator_sets::primitives::set_keys_message(&set, &[], &key_pair), &serai_client::Public( frost::dkg::musig::musig_key::( &serai_client::validator_sets::primitives::musig_context(set.into()), &self.spec.validators().into_iter().map(|(validator, _)| validator).collect::>() ) .unwrap() .to_bytes() ), )); } } // The scanner should successfully try to publish a transaction with a validly signed signature handle_new_blocks::<_, _, _, _, _, LocalP2p>( &mut dbs[0], &keys[0], &|_, _, _, _| async { panic!("provided TX caused recognized_id to be called after DKG confirmation") }, &processors, &CheckPublishSetKeys { spec: spec.clone(), key_pair: key_pair.clone() }, &|_| async { panic!("test tried to publish a new Tributary TX from handle_application_tx") }, &spec, &tributaries[0].1.reader(), ) .await; { assert!(processors.0.read().await.get(&spec.set().network).unwrap().is_empty()); } }