github.com/edxfund/validator@v1.8.16-0.20181020093046-c1def72855da/consensus/clique/clique.go (about)

     1  // Copyright 2017 The go-ethereum Authors
     2  // This file is part of the go-ethereum library.
     3  //
     4  // The go-ethereum library is free software: you can redistribute it and/or modify
     5  // it under the terms of the GNU Lesser General Public License as published by
     6  // the Free Software Foundation, either version 3 of the License, or
     7  // (at your option) any later version.
     8  //
     9  // The go-ethereum library is distributed in the hope that it will be useful,
    10  // but WITHOUT ANY WARRANTY; without even the implied warranty of
    11  // MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
    12  // GNU Lesser General Public License for more details.
    13  //
    14  // You should have received a copy of the GNU Lesser General Public License
    15  // along with the go-ethereum library. If not, see <http://www.gnu.org/licenses/>.
    16  
    17  // Package clique implements the proof-of-authority consensus engine.
    18  package clique
    19  
    20  import (
    21  	"bytes"
    22  	"errors"
    23  	"math/big"
    24  	"math/rand"
    25  	"sync"
    26  	"time"
    27  
    28  	"github.com/EDXFund/Validator/accounts"
    29  	"github.com/EDXFund/Validator/common"
    30  	"github.com/EDXFund/Validator/common/hexutil"
    31  	"github.com/EDXFund/Validator/consensus"
    32  	"github.com/EDXFund/Validator/consensus/misc"
    33  	"github.com/EDXFund/Validator/core/state"
    34  	"github.com/EDXFund/Validator/core/types"
    35  	"github.com/EDXFund/Validator/crypto"
    36  	"github.com/EDXFund/Validator/crypto/sha3"
    37  	"github.com/EDXFund/Validator/ethdb"
    38  	"github.com/EDXFund/Validator/log"
    39  	"github.com/EDXFund/Validator/params"
    40  	"github.com/EDXFund/Validator/rlp"
    41  	"github.com/EDXFund/Validator/rpc"
    42  	lru "github.com/hashicorp/golang-lru"
    43  )
    44  
    45  const (
    46  	checkpointInterval = 1024 // Number of blocks after which to save the vote snapshot to the database
    47  	inmemorySnapshots  = 128  // Number of recent vote snapshots to keep in memory
    48  	inmemorySignatures = 4096 // Number of recent block signatures to keep in memory
    49  
    50  	wiggleTime = 500 * time.Millisecond // Random delay (per signer) to allow concurrent signers
    51  )
    52  
    53  // Clique proof-of-authority protocol constants.
    54  var (
    55  	epochLength = uint64(30000) // Default number of blocks after which to checkpoint and reset the pending votes
    56  
    57  	extraVanity = 32 // Fixed number of extra-data prefix bytes reserved for signer vanity
    58  	extraSeal   = 65 // Fixed number of extra-data suffix bytes reserved for signer seal
    59  
    60  	nonceAuthVote = hexutil.MustDecode("0xffffffffffffffff") // Magic nonce number to vote on adding a new signer
    61  	nonceDropVote = hexutil.MustDecode("0x0000000000000000") // Magic nonce number to vote on removing a signer.
    62  
    63  //	uncleHash = types.CalcUncleHash(nil) // Always Keccak256(RLP([])) as uncles are meaningless outside of PoW.
    64  
    65  	diffInTurn = big.NewInt(2) // Block difficulty for in-turn signatures
    66  	diffNoTurn = big.NewInt(1) // Block difficulty for out-of-turn signatures
    67  )
    68  
    69  // Various error messages to mark blocks invalid. These should be private to
    70  // prevent engine specific errors from being referenced in the remainder of the
    71  // codebase, inherently breaking if the engine is swapped out. Please put common
    72  // error types into the consensus package.
    73  var (
    74  	// errUnknownBlock is returned when the list of signers is requested for a block
    75  	// that is not part of the local blockchain.
    76  	errUnknownBlock = errors.New("unknown block")
    77  
    78  	// errInvalidCheckpointBeneficiary is returned if a checkpoint/epoch transition
    79  	// block has a beneficiary set to non-zeroes.
    80  	errInvalidCheckpointBeneficiary = errors.New("beneficiary in checkpoint block non-zero")
    81  
    82  	// errInvalidVote is returned if a nonce value is something else that the two
    83  	// allowed constants of 0x00..0 or 0xff..f.
    84  	errInvalidVote = errors.New("vote nonce not 0x00..0 or 0xff..f")
    85  
    86  	// errInvalidCheckpointVote is returned if a checkpoint/epoch transition block
    87  	// has a vote nonce set to non-zeroes.
    88  	errInvalidCheckpointVote = errors.New("vote nonce in checkpoint block non-zero")
    89  
    90  	// errMissingVanity is returned if a block's extra-data section is shorter than
    91  	// 32 bytes, which is required to store the signer vanity.
    92  	errMissingVanity = errors.New("extra-data 32 byte vanity prefix missing")
    93  
    94  	// errMissingSignature is returned if a block's extra-data section doesn't seem
    95  	// to contain a 65 byte secp256k1 signature.
    96  	errMissingSignature = errors.New("extra-data 65 byte suffix signature missing")
    97  
    98  	// errExtraSigners is returned if non-checkpoint block contain signer data in
    99  	// their extra-data fields.
   100  	errExtraSigners = errors.New("non-checkpoint block contains extra signer list")
   101  
   102  	// errInvalidCheckpointSigners is returned if a checkpoint block contains an
   103  	// invalid list of signers (i.e. non divisible by 20 bytes, or not the correct
   104  	// ones).
   105  	errInvalidCheckpointSigners = errors.New("invalid signer list on checkpoint block")
   106  
   107  	// errInvalidMixDigest is returned if a block's mix digest is non-zero.
   108  	errInvalidMixDigest = errors.New("non-zero mix digest")
   109  
   110  	// errInvalidUncleHash is returned if a block contains an non-empty uncle list.
   111  	errInvalidUncleHash = errors.New("non empty uncle hash")
   112  
   113  	// errInvalidDifficulty is returned if the difficulty of a block is not either
   114  	// of 1 or 2, or if the value does not match the turn of the signer.
   115  	errInvalidDifficulty = errors.New("invalid difficulty")
   116  
   117  	// ErrInvalidTimestamp is returned if the timestamp of a block is lower than
   118  	// the previous block's timestamp + the minimum block period.
   119  	ErrInvalidTimestamp = errors.New("invalid timestamp")
   120  
   121  	// errInvalidVotingChain is returned if an authorization list is attempted to
   122  	// be modified via out-of-range or non-contiguous headers.
   123  	errInvalidVotingChain = errors.New("invalid voting chain")
   124  
   125  	// errUnauthorized is returned if a header is signed by a non-authorized entity.
   126  	errUnauthorized = errors.New("unauthorized")
   127  
   128  	// errWaitTransactions is returned if an empty block is attempted to be sealed
   129  	// on an instant chain (0 second period). It's important to refuse these as the
   130  	// block reward is zero, so an empty block just bloats the chain... fast.
   131  	errWaitTransactions = errors.New("waiting for transactions")
   132  )
   133  
   134  // SignerFn is a signer callback function to request a hash to be signed by a
   135  // backing account.
   136  type SignerFn func(accounts.Account, []byte) ([]byte, error)
   137  
   138  // sigHash returns the hash which is used as input for the proof-of-authority
   139  // signing. It is the hash of the entire header apart from the 65 byte signature
   140  // contained at the end of the extra data.
   141  //
   142  // Note, the method requires the extra data to be at least 65 bytes, otherwise it
   143  // panics. This is done to avoid accidentally using both forms (signature present
   144  // or not), which could be abused to produce different hashes for the same header.
   145  //////////MUST TODO: add defferent type of header to build hash
   146  func sigHash(header *types.Header) (hash common.Hash) {
   147  	hasher := sha3.NewKeccak256()
   148  
   149  	rlp.Encode(hasher, []interface{}{
   150  		header.ParentHash,
   151  		header.Coinbase,
   152  		header.Root,
   153  		header.TxHash,
   154  		header.ReceiptHash,
   155  		header.Bloom,
   156  		header.Difficulty,
   157  		header.Number,
   158  		header.GasLimit,
   159  		header.GasUsed,
   160  		header.Time,
   161  		header.Extra[:len(header.Extra)-65], // Yes, this will panic if extra is too short
   162  		header.MixDigest,
   163  		header.Nonce,
   164  	})
   165  	hasher.Sum(hash[:0])
   166  	return hash
   167  }
   168  
   169  // ecrecover extracts the Ethereum account address from a signed header.
   170  func ecrecover(header *types.Header, sigcache *lru.ARCCache) (common.Address, error) {
   171  	// If the signature's already cached, return that
   172  	hash := header.Hash()
   173  	if address, known := sigcache.Get(hash); known {
   174  		return address.(common.Address), nil
   175  	}
   176  	// Retrieve the signature from the header extra-data
   177  	if len(header.Extra) < extraSeal {
   178  		return common.Address{}, errMissingSignature
   179  	}
   180  	signature := header.Extra[len(header.Extra)-extraSeal:]
   181  
   182  	// Recover the public key and the Ethereum address
   183  	pubkey, err := crypto.Ecrecover(sigHash(header).Bytes(), signature)
   184  	if err != nil {
   185  		return common.Address{}, err
   186  	}
   187  	var signer common.Address
   188  	copy(signer[:], crypto.Keccak256(pubkey[1:])[12:])
   189  
   190  	sigcache.Add(hash, signer)
   191  	return signer, nil
   192  }
   193  
   194  // Clique is the proof-of-authority consensus engine proposed to support the
   195  // Ethereum testnet following the Ropsten attacks.
   196  type Clique struct {
   197  	config *params.CliqueConfig // Consensus engine configuration parameters
   198  	db     ethdb.Database       // Database to store and retrieve snapshot checkpoints
   199  
   200  	recents    *lru.ARCCache // Snapshots for recent block to speed up reorgs
   201  	signatures *lru.ARCCache // Signatures of recent blocks to speed up mining
   202  
   203  	proposals map[common.Address]bool // Current list of proposals we are pushing
   204  
   205  	signer common.Address // Ethereum address of the signing key
   206  	signFn SignerFn       // Signer function to authorize hashes with
   207  	lock   sync.RWMutex   // Protects the signer fields
   208  }
   209  
   210  // New creates a Clique proof-of-authority consensus engine with the initial
   211  // signers set to the ones provided by the user.
   212  func New(config *params.CliqueConfig, db ethdb.Database) *Clique {
   213  	// Set any missing consensus parameters to their defaults
   214  	conf := *config
   215  	if conf.Epoch == 0 {
   216  		conf.Epoch = epochLength
   217  	}
   218  	// Allocate the snapshot caches and create the engine
   219  	recents, _ := lru.NewARC(inmemorySnapshots)
   220  	signatures, _ := lru.NewARC(inmemorySignatures)
   221  
   222  	return &Clique{
   223  		config:     &conf,
   224  		db:         db,
   225  		recents:    recents,
   226  		signatures: signatures,
   227  		proposals:  make(map[common.Address]bool),
   228  	}
   229  }
   230  
   231  // Author implements consensus.Engine, returning the Ethereum address recovered
   232  // from the signature in the header's extra-data section.
   233  func (c *Clique) Author(header *types.Header) (common.Address, error) {
   234  	return ecrecover(header, c.signatures)
   235  }
   236  
   237  // VerifyHeader checks whether a header conforms to the consensus rules.
   238  func (c *Clique) VerifyHeader(chain consensus.ChainReader, header *types.Header, seal bool) error {
   239  	return c.verifyHeader(chain, header, nil)
   240  }
   241  
   242  // VerifyHeaders is similar to VerifyHeader, but verifies a batch of headers. The
   243  // method returns a quit channel to abort the operations and a results channel to
   244  // retrieve the async verifications (the order is that of the input slice).
   245  func (c *Clique) VerifyHeaders(chain consensus.ChainReader, headers []*types.Header, seals []bool) (chan<- struct{}, <-chan error) {
   246  	abort := make(chan struct{})
   247  	results := make(chan error, len(headers))
   248  
   249  	go func() {
   250  		for i, header := range headers {
   251  			err := c.verifyHeader(chain, header, headers[:i])
   252  
   253  			select {
   254  			case <-abort:
   255  				return
   256  			case results <- err:
   257  			}
   258  		}
   259  	}()
   260  	return abort, results
   261  }
   262  
   263  // verifyHeader checks whether a header conforms to the consensus rules.The
   264  // caller may optionally pass in a batch of parents (ascending order) to avoid
   265  // looking those up from the database. This is useful for concurrently verifying
   266  // a batch of new headers.
   267  func (c *Clique) verifyHeader(chain consensus.ChainReader, header *types.Header, parents []*types.Header) error {
   268  	if header.Number == nil {
   269  		return errUnknownBlock
   270  	}
   271  	number := header.Number.Uint64()
   272  
   273  	// Don't waste time checking blocks from the future
   274  	if header.Time.Cmp(big.NewInt(time.Now().Unix())) > 0 {
   275  		return consensus.ErrFutureBlock
   276  	}
   277  	// Checkpoint blocks need to enforce zero beneficiary
   278  	checkpoint := (number % c.config.Epoch) == 0
   279  	if checkpoint && header.Coinbase != (common.Address{}) {
   280  		return errInvalidCheckpointBeneficiary
   281  	}
   282  	// Nonces must be 0x00..0 or 0xff..f, zeroes enforced on checkpoints
   283  	if !bytes.Equal(header.Nonce[:], nonceAuthVote) && !bytes.Equal(header.Nonce[:], nonceDropVote) {
   284  		return errInvalidVote
   285  	}
   286  	if checkpoint && !bytes.Equal(header.Nonce[:], nonceDropVote) {
   287  		return errInvalidCheckpointVote
   288  	}
   289  	// Check that the extra-data contains both the vanity and signature
   290  	if len(header.Extra) < extraVanity {
   291  		return errMissingVanity
   292  	}
   293  	if len(header.Extra) < extraVanity+extraSeal {
   294  		return errMissingSignature
   295  	}
   296  	// Ensure that the extra-data contains a signer list on checkpoint, but none otherwise
   297  	signersBytes := len(header.Extra) - extraVanity - extraSeal
   298  	if !checkpoint && signersBytes != 0 {
   299  		return errExtraSigners
   300  	}
   301  	if checkpoint && signersBytes%common.AddressLength != 0 {
   302  		return errInvalidCheckpointSigners
   303  	}
   304  	// Ensure that the mix digest is zero as we don't have fork protection currently
   305  	if header.MixDigest != (common.Hash{}) {
   306  		return errInvalidMixDigest
   307  	}
   308  
   309  	// Ensure that the block's difficulty is meaningful (may not be correct at this point)
   310  	if number > 0 {
   311  		if header.Difficulty == nil || (header.Difficulty.Cmp(diffInTurn) != 0 && header.Difficulty.Cmp(diffNoTurn) != 0) {
   312  			return errInvalidDifficulty
   313  		}
   314  	}
   315  	// If all checks passed, validate any special fields for hard forks
   316  	if err := misc.VerifyForkHashes(chain.Config(), header, false); err != nil {
   317  		return err
   318  	}
   319  	// All basic checks passed, verify cascading fields
   320  	return c.verifyCascadingFields(chain, header, parents)
   321  }
   322  
   323  // verifyCascadingFields verifies all the header fields that are not standalone,
   324  // rather depend on a batch of previous headers. The caller may optionally pass
   325  // in a batch of parents (ascending order) to avoid looking those up from the
   326  // database. This is useful for concurrently verifying a batch of new headers.
   327  func (c *Clique) verifyCascadingFields(chain consensus.ChainReader, header *types.Header, parents []*types.Header) error {
   328  	// The genesis block is the always valid dead-end
   329  	number := header.Number.Uint64()
   330  	if number == 0 {
   331  		return nil
   332  	}
   333  	// Ensure that the block's timestamp isn't too close to it's parent
   334  	var parent *types.Header
   335  	if len(parents) > 0 {
   336  		parent = parents[len(parents)-1]
   337  	} else {
   338  		parent = chain.GetHeader(header.ParentHash, number-1)
   339  	}
   340  	if parent == nil || parent.Number.Uint64() != number-1 || parent.Hash() != header.ParentHash {
   341  		return consensus.ErrUnknownAncestor
   342  	}
   343  	if parent.Time.Uint64()+c.config.Period > header.Time.Uint64() {
   344  		return ErrInvalidTimestamp
   345  	}
   346  	// Retrieve the snapshot needed to verify this header and cache it
   347  	snap, err := c.snapshot(chain, number-1, header.ParentHash, parents)
   348  	if err != nil {
   349  		return err
   350  	}
   351  	// If the block is a checkpoint block, verify the signer list
   352  	if number%c.config.Epoch == 0 {
   353  		signers := make([]byte, len(snap.Signers)*common.AddressLength)
   354  		for i, signer := range snap.signers() {
   355  			copy(signers[i*common.AddressLength:], signer[:])
   356  		}
   357  		extraSuffix := len(header.Extra) - extraSeal
   358  		if !bytes.Equal(header.Extra[extraVanity:extraSuffix], signers) {
   359  			return errInvalidCheckpointSigners
   360  		}
   361  	}
   362  	// All basic checks passed, verify the seal and return
   363  	return c.verifySeal(chain, header, parents)
   364  }
   365  
   366  // snapshot retrieves the authorization snapshot at a given point in time.
   367  func (c *Clique) snapshot(chain consensus.ChainReader, number uint64, hash common.Hash, parents []*types.Header) (*Snapshot, error) {
   368  	// Search for a snapshot in memory or on disk for checkpoints
   369  	var (
   370  		headers []*types.Header
   371  		snap    *Snapshot
   372  	)
   373  	for snap == nil {
   374  		// If an in-memory snapshot was found, use that
   375  		if s, ok := c.recents.Get(hash); ok {
   376  			snap = s.(*Snapshot)
   377  			break
   378  		}
   379  		// If an on-disk checkpoint snapshot can be found, use that
   380  		if number%checkpointInterval == 0 {
   381  			if s, err := loadSnapshot(c.config, c.signatures, c.db, hash); err == nil {
   382  				log.Trace("Loaded voting snapshot from disk", "number", number, "hash", hash)
   383  				snap = s
   384  				break
   385  			}
   386  		}
   387  		// If we're at an checkpoint block, make a snapshot if it's known
   388  		if number == 0 || (number%c.config.Epoch == 0 && chain.GetHeaderByNumber(number-1) == nil) {
   389  			checkpoint := chain.GetHeaderByNumber(number)
   390  			if checkpoint != nil {
   391  				hash := checkpoint.Hash()
   392  
   393  				signers := make([]common.Address, (len(checkpoint.Extra)-extraVanity-extraSeal)/common.AddressLength)
   394  				for i := 0; i < len(signers); i++ {
   395  					copy(signers[i][:], checkpoint.Extra[extraVanity+i*common.AddressLength:])
   396  				}
   397  				snap = newSnapshot(c.config, c.signatures, number, hash, signers)
   398  				if err := snap.store(c.db); err != nil {
   399  					return nil, err
   400  				}
   401  				log.Info("Stored checkpoint snapshot to disk", "number", number, "hash", hash)
   402  				break
   403  			}
   404  		}
   405  		// No snapshot for this header, gather the header and move backward
   406  		var header *types.Header
   407  		if len(parents) > 0 {
   408  			// If we have explicit parents, pick from there (enforced)
   409  			header = parents[len(parents)-1]
   410  			if header.Hash() != hash || header.Number.Uint64() != number {
   411  				return nil, consensus.ErrUnknownAncestor
   412  			}
   413  			parents = parents[:len(parents)-1]
   414  		} else {
   415  			// No explicit parents (or no more left), reach out to the database
   416  			header = chain.GetHeader(hash, number)
   417  			if header == nil {
   418  				return nil, consensus.ErrUnknownAncestor
   419  			}
   420  		}
   421  		headers = append(headers, header)
   422  		number, hash = number-1, header.ParentHash
   423  	}
   424  	// Previous snapshot found, apply any pending headers on top of it
   425  	for i := 0; i < len(headers)/2; i++ {
   426  		headers[i], headers[len(headers)-1-i] = headers[len(headers)-1-i], headers[i]
   427  	}
   428  	snap, err := snap.apply(headers)
   429  	if err != nil {
   430  		return nil, err
   431  	}
   432  	c.recents.Add(snap.Hash, snap)
   433  
   434  	// If we've generated a new checkpoint snapshot, save to disk
   435  	if snap.Number%checkpointInterval == 0 && len(headers) > 0 {
   436  		if err = snap.store(c.db); err != nil {
   437  			return nil, err
   438  		}
   439  		log.Trace("Stored voting snapshot to disk", "number", snap.Number, "hash", snap.Hash)
   440  	}
   441  	return snap, err
   442  }
   443  
   444  // VerifyUncles implements consensus.Engine, always returning an error for any
   445  // uncles as this consensus mechanism doesn't permit uncles.
   446  /*func (c *Clique) VerifyUncles(chain consensus.ChainReader, block *types.Block) error {
   447  	if len(block.Uncles()) > 0 {
   448  		return errors.New("uncles not allowed")
   449  	}
   450  	return nil
   451  }
   452  */
   453  
   454  // VerifySeal implements consensus.Engine, checking whether the signature contained
   455  // in the header satisfies the consensus protocol requirements.
   456  func (c *Clique) VerifySeal(chain consensus.ChainReader, header *types.Header) error {
   457  	return c.verifySeal(chain, header, nil)
   458  }
   459  
   460  // verifySeal checks whether the signature contained in the header satisfies the
   461  // consensus protocol requirements. The method accepts an optional list of parent
   462  // headers that aren't yet part of the local blockchain to generate the snapshots
   463  // from.
   464  func (c *Clique) verifySeal(chain consensus.ChainReader, header *types.Header, parents []*types.Header) error {
   465  	// Verifying the genesis block is not supported
   466  	number := header.Number.Uint64()
   467  	if number == 0 {
   468  		return errUnknownBlock
   469  	}
   470  	// Retrieve the snapshot needed to verify this header and cache it
   471  	snap, err := c.snapshot(chain, number-1, header.ParentHash, parents)
   472  	if err != nil {
   473  		return err
   474  	}
   475  
   476  	// Resolve the authorization key and check against signers
   477  	signer, err := ecrecover(header, c.signatures)
   478  	if err != nil {
   479  		return err
   480  	}
   481  	if _, ok := snap.Signers[signer]; !ok {
   482  		return errUnauthorized
   483  	}
   484  	for seen, recent := range snap.Recents {
   485  		if recent == signer {
   486  			// Signer is among recents, only fail if the current block doesn't shift it out
   487  			if limit := uint64(len(snap.Signers)/2 + 1); seen > number-limit {
   488  				return errUnauthorized
   489  			}
   490  		}
   491  	}
   492  	// Ensure that the difficulty corresponds to the turn-ness of the signer
   493  	inturn := snap.inturn(header.Number.Uint64(), signer)
   494  	if inturn && header.Difficulty.Cmp(diffInTurn) != 0 {
   495  		return errInvalidDifficulty
   496  	}
   497  	if !inturn && header.Difficulty.Cmp(diffNoTurn) != 0 {
   498  		return errInvalidDifficulty
   499  	}
   500  	return nil
   501  }
   502  
   503  // Prepare implements consensus.Engine, preparing all the consensus fields of the
   504  // header for running the transactions on top.
   505  func (c *Clique) Prepare(chain consensus.ChainReader, header *types.Header) error {
   506  	// If the block isn't a checkpoint, cast a random vote (good enough for now)
   507  	header.Coinbase = common.Address{}
   508  	header.Nonce = types.BlockNonce{}
   509  
   510  	number := header.Number.Uint64()
   511  	// Assemble the voting snapshot to check which votes make sense
   512  	snap, err := c.snapshot(chain, number-1, header.ParentHash, nil)
   513  	if err != nil {
   514  		return err
   515  	}
   516  	if number%c.config.Epoch != 0 {
   517  		c.lock.RLock()
   518  
   519  		// Gather all the proposals that make sense voting on
   520  		addresses := make([]common.Address, 0, len(c.proposals))
   521  		for address, authorize := range c.proposals {
   522  			if snap.validVote(address, authorize) {
   523  				addresses = append(addresses, address)
   524  			}
   525  		}
   526  		// If there's pending proposals, cast a vote on them
   527  		if len(addresses) > 0 {
   528  			header.Coinbase = addresses[rand.Intn(len(addresses))]
   529  			if c.proposals[header.Coinbase] {
   530  				copy(header.Nonce[:], nonceAuthVote)
   531  			} else {
   532  				copy(header.Nonce[:], nonceDropVote)
   533  			}
   534  		}
   535  		c.lock.RUnlock()
   536  	}
   537  	// Set the correct difficulty
   538  	header.Difficulty = CalcDifficulty(snap, c.signer)
   539  
   540  	// Ensure the extra data has all it's components
   541  	if len(header.Extra) < extraVanity {
   542  		header.Extra = append(header.Extra, bytes.Repeat([]byte{0x00}, extraVanity-len(header.Extra))...)
   543  	}
   544  	header.Extra = header.Extra[:extraVanity]
   545  
   546  	if number%c.config.Epoch == 0 {
   547  		for _, signer := range snap.signers() {
   548  			header.Extra = append(header.Extra, signer[:]...)
   549  		}
   550  	}
   551  	header.Extra = append(header.Extra, make([]byte, extraSeal)...)
   552  
   553  	// Mix digest is reserved for now, set to empty
   554  	header.MixDigest = common.Hash{}
   555  
   556  	// Ensure the timestamp has the correct delay
   557  	parent := chain.GetHeader(header.ParentHash, number-1)
   558  	if parent == nil {
   559  		return consensus.ErrUnknownAncestor
   560  	}
   561  	header.Time = new(big.Int).Add(parent.Time, new(big.Int).SetUint64(c.config.Period))
   562  	if header.Time.Int64() < time.Now().Unix() {
   563  		header.Time = big.NewInt(time.Now().Unix())
   564  	}
   565  	return nil
   566  }
   567  
   568  // Finalize implements consensus.Engine, ensuring no uncles are set, nor block
   569  // rewards given, and returns the final block.
   570  func (c *Clique) Finalize(chain consensus.ChainReader, header *types.Header, state *state.StateDB, txs []*types.Transaction, receipts []*types.ContractResult) (*types.Block, error) {
   571  	// No block rewards in PoA, so the state remains as is and uncles are dropped
   572  	header.Root = state.IntermediateRoot(chain.Config().IsEIP158(header.Number))
   573  
   574  	// Assemble and return the final block for sealing
   575  	return types.NewBlock(header, txs, receipts), nil
   576  }
   577  
   578  // Authorize injects a private key into the consensus engine to mint new blocks
   579  // with.
   580  func (c *Clique) Authorize(signer common.Address, signFn SignerFn) {
   581  	c.lock.Lock()
   582  	defer c.lock.Unlock()
   583  
   584  	c.signer = signer
   585  	c.signFn = signFn
   586  }
   587  
   588  // Seal implements consensus.Engine, attempting to create a sealed block using
   589  // the local signing credentials.
   590  func (c *Clique) Seal(chain consensus.ChainReader, block *types.Block, results chan<- *types.Block, stop <-chan struct{}) error {
   591  	header := block.Header()
   592  
   593  	// Sealing the genesis block is not supported
   594  	number := header.Number.Uint64()
   595  	if number == 0 {
   596  		return errUnknownBlock
   597  	}
   598  	// For 0-period chains, refuse to seal empty blocks (no reward but would spin sealing)
   599  	if c.config.Period == 0 && len(block.Transactions()) == 0 {
   600  		return errWaitTransactions
   601  	}
   602  	// Don't hold the signer fields for the entire sealing procedure
   603  	c.lock.RLock()
   604  	signer, signFn := c.signer, c.signFn
   605  	c.lock.RUnlock()
   606  
   607  	// Bail out if we're unauthorized to sign a block
   608  	snap, err := c.snapshot(chain, number-1, header.ParentHash, nil)
   609  	if err != nil {
   610  		return err
   611  	}
   612  	if _, authorized := snap.Signers[signer]; !authorized {
   613  		return errUnauthorized
   614  	}
   615  	// If we're amongst the recent signers, wait for the next block
   616  	for seen, recent := range snap.Recents {
   617  		if recent == signer {
   618  			// Signer is among recents, only wait if the current block doesn't shift it out
   619  			if limit := uint64(len(snap.Signers)/2 + 1); number < limit || seen > number-limit {
   620  				log.Info("Signed recently, must wait for others")
   621  				return nil
   622  			}
   623  		}
   624  	}
   625  	// Sweet, the protocol permits us to sign the block, wait for our time
   626  	delay := time.Unix(header.Time.Int64(), 0).Sub(time.Now()) // nolint: gosimple
   627  	if header.Difficulty.Cmp(diffNoTurn) == 0 {
   628  		// It's not our turn explicitly to sign, delay it a bit
   629  		wiggle := time.Duration(len(snap.Signers)/2+1) * wiggleTime
   630  		delay += time.Duration(rand.Int63n(int64(wiggle)))
   631  
   632  		log.Trace("Out-of-turn signing requested", "wiggle", common.PrettyDuration(wiggle))
   633  	}
   634  	// Sign all the things!
   635  	sighash, err := signFn(accounts.Account{Address: signer}, sigHash(header).Bytes())
   636  	if err != nil {
   637  		return err
   638  	}
   639  	copy(header.Extra[len(header.Extra)-extraSeal:], sighash)
   640  	// Wait until sealing is terminated or delay timeout.
   641  	log.Trace("Waiting for slot to sign and propagate", "delay", common.PrettyDuration(delay))
   642  	go func() {
   643  		select {
   644  		case <-stop:
   645  			return
   646  		case <-time.After(delay):
   647  		}
   648  
   649  		select {
   650  		case results <- block.WithSeal(header):
   651  		default:
   652  			log.Warn("Sealing result is not read by miner", "sealhash", c.SealHash(header))
   653  		}
   654  	}()
   655  
   656  	return nil
   657  }
   658  
   659  // CalcDifficulty is the difficulty adjustment algorithm. It returns the difficulty
   660  // that a new block should have based on the previous blocks in the chain and the
   661  // current signer.
   662  func (c *Clique) CalcDifficulty(chain consensus.ChainReader, time uint64, parent *types.Header) *big.Int {
   663  	snap, err := c.snapshot(chain, parent.Number.Uint64(), parent.Hash(), nil)
   664  	if err != nil {
   665  		return nil
   666  	}
   667  	return CalcDifficulty(snap, c.signer)
   668  }
   669  
   670  // CalcDifficulty is the difficulty adjustment algorithm. It returns the difficulty
   671  // that a new block should have based on the previous blocks in the chain and the
   672  // current signer.
   673  func CalcDifficulty(snap *Snapshot, signer common.Address) *big.Int {
   674  	if snap.inturn(snap.Number+1, signer) {
   675  		return new(big.Int).Set(diffInTurn)
   676  	}
   677  	return new(big.Int).Set(diffNoTurn)
   678  }
   679  
   680  // SealHash returns the hash of a block prior to it being sealed.
   681  func (c *Clique) SealHash(header *types.Header) common.Hash {
   682  	return sigHash(header)
   683  }
   684  
   685  // Close implements consensus.Engine. It's a noop for clique as there is are no background threads.
   686  func (c *Clique) Close() error {
   687  	return nil
   688  }
   689  
   690  // APIs implements consensus.Engine, returning the user facing RPC API to allow
   691  // controlling the signer voting.
   692  func (c *Clique) APIs(chain consensus.ChainReader) []rpc.API {
   693  	return []rpc.API{{
   694  		Namespace: "clique",
   695  		Version:   "1.0",
   696  		Service:   &API{chain: chain, clique: c},
   697  		Public:    false,
   698  	}}
   699  }