github.com/edxfund/validator@v1.8.16-0.20181020093046-c1def72855da/consensus/clique/clique.go (about) 1 // Copyright 2017 The go-ethereum Authors 2 // This file is part of the go-ethereum library. 3 // 4 // The go-ethereum library is free software: you can redistribute it and/or modify 5 // it under the terms of the GNU Lesser General Public License as published by 6 // the Free Software Foundation, either version 3 of the License, or 7 // (at your option) any later version. 8 // 9 // The go-ethereum library is distributed in the hope that it will be useful, 10 // but WITHOUT ANY WARRANTY; without even the implied warranty of 11 // MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the 12 // GNU Lesser General Public License for more details. 13 // 14 // You should have received a copy of the GNU Lesser General Public License 15 // along with the go-ethereum library. If not, see <http://www.gnu.org/licenses/>. 16 17 // Package clique implements the proof-of-authority consensus engine. 18 package clique 19 20 import ( 21 "bytes" 22 "errors" 23 "math/big" 24 "math/rand" 25 "sync" 26 "time" 27 28 "github.com/EDXFund/Validator/accounts" 29 "github.com/EDXFund/Validator/common" 30 "github.com/EDXFund/Validator/common/hexutil" 31 "github.com/EDXFund/Validator/consensus" 32 "github.com/EDXFund/Validator/consensus/misc" 33 "github.com/EDXFund/Validator/core/state" 34 "github.com/EDXFund/Validator/core/types" 35 "github.com/EDXFund/Validator/crypto" 36 "github.com/EDXFund/Validator/crypto/sha3" 37 "github.com/EDXFund/Validator/ethdb" 38 "github.com/EDXFund/Validator/log" 39 "github.com/EDXFund/Validator/params" 40 "github.com/EDXFund/Validator/rlp" 41 "github.com/EDXFund/Validator/rpc" 42 lru "github.com/hashicorp/golang-lru" 43 ) 44 45 const ( 46 checkpointInterval = 1024 // Number of blocks after which to save the vote snapshot to the database 47 inmemorySnapshots = 128 // Number of recent vote snapshots to keep in memory 48 inmemorySignatures = 4096 // Number of recent block signatures to keep in memory 49 50 wiggleTime = 500 * time.Millisecond // Random delay (per signer) to allow concurrent signers 51 ) 52 53 // Clique proof-of-authority protocol constants. 54 var ( 55 epochLength = uint64(30000) // Default number of blocks after which to checkpoint and reset the pending votes 56 57 extraVanity = 32 // Fixed number of extra-data prefix bytes reserved for signer vanity 58 extraSeal = 65 // Fixed number of extra-data suffix bytes reserved for signer seal 59 60 nonceAuthVote = hexutil.MustDecode("0xffffffffffffffff") // Magic nonce number to vote on adding a new signer 61 nonceDropVote = hexutil.MustDecode("0x0000000000000000") // Magic nonce number to vote on removing a signer. 62 63 // uncleHash = types.CalcUncleHash(nil) // Always Keccak256(RLP([])) as uncles are meaningless outside of PoW. 64 65 diffInTurn = big.NewInt(2) // Block difficulty for in-turn signatures 66 diffNoTurn = big.NewInt(1) // Block difficulty for out-of-turn signatures 67 ) 68 69 // Various error messages to mark blocks invalid. These should be private to 70 // prevent engine specific errors from being referenced in the remainder of the 71 // codebase, inherently breaking if the engine is swapped out. Please put common 72 // error types into the consensus package. 73 var ( 74 // errUnknownBlock is returned when the list of signers is requested for a block 75 // that is not part of the local blockchain. 76 errUnknownBlock = errors.New("unknown block") 77 78 // errInvalidCheckpointBeneficiary is returned if a checkpoint/epoch transition 79 // block has a beneficiary set to non-zeroes. 80 errInvalidCheckpointBeneficiary = errors.New("beneficiary in checkpoint block non-zero") 81 82 // errInvalidVote is returned if a nonce value is something else that the two 83 // allowed constants of 0x00..0 or 0xff..f. 84 errInvalidVote = errors.New("vote nonce not 0x00..0 or 0xff..f") 85 86 // errInvalidCheckpointVote is returned if a checkpoint/epoch transition block 87 // has a vote nonce set to non-zeroes. 88 errInvalidCheckpointVote = errors.New("vote nonce in checkpoint block non-zero") 89 90 // errMissingVanity is returned if a block's extra-data section is shorter than 91 // 32 bytes, which is required to store the signer vanity. 92 errMissingVanity = errors.New("extra-data 32 byte vanity prefix missing") 93 94 // errMissingSignature is returned if a block's extra-data section doesn't seem 95 // to contain a 65 byte secp256k1 signature. 96 errMissingSignature = errors.New("extra-data 65 byte suffix signature missing") 97 98 // errExtraSigners is returned if non-checkpoint block contain signer data in 99 // their extra-data fields. 100 errExtraSigners = errors.New("non-checkpoint block contains extra signer list") 101 102 // errInvalidCheckpointSigners is returned if a checkpoint block contains an 103 // invalid list of signers (i.e. non divisible by 20 bytes, or not the correct 104 // ones). 105 errInvalidCheckpointSigners = errors.New("invalid signer list on checkpoint block") 106 107 // errInvalidMixDigest is returned if a block's mix digest is non-zero. 108 errInvalidMixDigest = errors.New("non-zero mix digest") 109 110 // errInvalidUncleHash is returned if a block contains an non-empty uncle list. 111 errInvalidUncleHash = errors.New("non empty uncle hash") 112 113 // errInvalidDifficulty is returned if the difficulty of a block is not either 114 // of 1 or 2, or if the value does not match the turn of the signer. 115 errInvalidDifficulty = errors.New("invalid difficulty") 116 117 // ErrInvalidTimestamp is returned if the timestamp of a block is lower than 118 // the previous block's timestamp + the minimum block period. 119 ErrInvalidTimestamp = errors.New("invalid timestamp") 120 121 // errInvalidVotingChain is returned if an authorization list is attempted to 122 // be modified via out-of-range or non-contiguous headers. 123 errInvalidVotingChain = errors.New("invalid voting chain") 124 125 // errUnauthorized is returned if a header is signed by a non-authorized entity. 126 errUnauthorized = errors.New("unauthorized") 127 128 // errWaitTransactions is returned if an empty block is attempted to be sealed 129 // on an instant chain (0 second period). It's important to refuse these as the 130 // block reward is zero, so an empty block just bloats the chain... fast. 131 errWaitTransactions = errors.New("waiting for transactions") 132 ) 133 134 // SignerFn is a signer callback function to request a hash to be signed by a 135 // backing account. 136 type SignerFn func(accounts.Account, []byte) ([]byte, error) 137 138 // sigHash returns the hash which is used as input for the proof-of-authority 139 // signing. It is the hash of the entire header apart from the 65 byte signature 140 // contained at the end of the extra data. 141 // 142 // Note, the method requires the extra data to be at least 65 bytes, otherwise it 143 // panics. This is done to avoid accidentally using both forms (signature present 144 // or not), which could be abused to produce different hashes for the same header. 145 //////////MUST TODO: add defferent type of header to build hash 146 func sigHash(header *types.Header) (hash common.Hash) { 147 hasher := sha3.NewKeccak256() 148 149 rlp.Encode(hasher, []interface{}{ 150 header.ParentHash, 151 header.Coinbase, 152 header.Root, 153 header.TxHash, 154 header.ReceiptHash, 155 header.Bloom, 156 header.Difficulty, 157 header.Number, 158 header.GasLimit, 159 header.GasUsed, 160 header.Time, 161 header.Extra[:len(header.Extra)-65], // Yes, this will panic if extra is too short 162 header.MixDigest, 163 header.Nonce, 164 }) 165 hasher.Sum(hash[:0]) 166 return hash 167 } 168 169 // ecrecover extracts the Ethereum account address from a signed header. 170 func ecrecover(header *types.Header, sigcache *lru.ARCCache) (common.Address, error) { 171 // If the signature's already cached, return that 172 hash := header.Hash() 173 if address, known := sigcache.Get(hash); known { 174 return address.(common.Address), nil 175 } 176 // Retrieve the signature from the header extra-data 177 if len(header.Extra) < extraSeal { 178 return common.Address{}, errMissingSignature 179 } 180 signature := header.Extra[len(header.Extra)-extraSeal:] 181 182 // Recover the public key and the Ethereum address 183 pubkey, err := crypto.Ecrecover(sigHash(header).Bytes(), signature) 184 if err != nil { 185 return common.Address{}, err 186 } 187 var signer common.Address 188 copy(signer[:], crypto.Keccak256(pubkey[1:])[12:]) 189 190 sigcache.Add(hash, signer) 191 return signer, nil 192 } 193 194 // Clique is the proof-of-authority consensus engine proposed to support the 195 // Ethereum testnet following the Ropsten attacks. 196 type Clique struct { 197 config *params.CliqueConfig // Consensus engine configuration parameters 198 db ethdb.Database // Database to store and retrieve snapshot checkpoints 199 200 recents *lru.ARCCache // Snapshots for recent block to speed up reorgs 201 signatures *lru.ARCCache // Signatures of recent blocks to speed up mining 202 203 proposals map[common.Address]bool // Current list of proposals we are pushing 204 205 signer common.Address // Ethereum address of the signing key 206 signFn SignerFn // Signer function to authorize hashes with 207 lock sync.RWMutex // Protects the signer fields 208 } 209 210 // New creates a Clique proof-of-authority consensus engine with the initial 211 // signers set to the ones provided by the user. 212 func New(config *params.CliqueConfig, db ethdb.Database) *Clique { 213 // Set any missing consensus parameters to their defaults 214 conf := *config 215 if conf.Epoch == 0 { 216 conf.Epoch = epochLength 217 } 218 // Allocate the snapshot caches and create the engine 219 recents, _ := lru.NewARC(inmemorySnapshots) 220 signatures, _ := lru.NewARC(inmemorySignatures) 221 222 return &Clique{ 223 config: &conf, 224 db: db, 225 recents: recents, 226 signatures: signatures, 227 proposals: make(map[common.Address]bool), 228 } 229 } 230 231 // Author implements consensus.Engine, returning the Ethereum address recovered 232 // from the signature in the header's extra-data section. 233 func (c *Clique) Author(header *types.Header) (common.Address, error) { 234 return ecrecover(header, c.signatures) 235 } 236 237 // VerifyHeader checks whether a header conforms to the consensus rules. 238 func (c *Clique) VerifyHeader(chain consensus.ChainReader, header *types.Header, seal bool) error { 239 return c.verifyHeader(chain, header, nil) 240 } 241 242 // VerifyHeaders is similar to VerifyHeader, but verifies a batch of headers. The 243 // method returns a quit channel to abort the operations and a results channel to 244 // retrieve the async verifications (the order is that of the input slice). 245 func (c *Clique) VerifyHeaders(chain consensus.ChainReader, headers []*types.Header, seals []bool) (chan<- struct{}, <-chan error) { 246 abort := make(chan struct{}) 247 results := make(chan error, len(headers)) 248 249 go func() { 250 for i, header := range headers { 251 err := c.verifyHeader(chain, header, headers[:i]) 252 253 select { 254 case <-abort: 255 return 256 case results <- err: 257 } 258 } 259 }() 260 return abort, results 261 } 262 263 // verifyHeader checks whether a header conforms to the consensus rules.The 264 // caller may optionally pass in a batch of parents (ascending order) to avoid 265 // looking those up from the database. This is useful for concurrently verifying 266 // a batch of new headers. 267 func (c *Clique) verifyHeader(chain consensus.ChainReader, header *types.Header, parents []*types.Header) error { 268 if header.Number == nil { 269 return errUnknownBlock 270 } 271 number := header.Number.Uint64() 272 273 // Don't waste time checking blocks from the future 274 if header.Time.Cmp(big.NewInt(time.Now().Unix())) > 0 { 275 return consensus.ErrFutureBlock 276 } 277 // Checkpoint blocks need to enforce zero beneficiary 278 checkpoint := (number % c.config.Epoch) == 0 279 if checkpoint && header.Coinbase != (common.Address{}) { 280 return errInvalidCheckpointBeneficiary 281 } 282 // Nonces must be 0x00..0 or 0xff..f, zeroes enforced on checkpoints 283 if !bytes.Equal(header.Nonce[:], nonceAuthVote) && !bytes.Equal(header.Nonce[:], nonceDropVote) { 284 return errInvalidVote 285 } 286 if checkpoint && !bytes.Equal(header.Nonce[:], nonceDropVote) { 287 return errInvalidCheckpointVote 288 } 289 // Check that the extra-data contains both the vanity and signature 290 if len(header.Extra) < extraVanity { 291 return errMissingVanity 292 } 293 if len(header.Extra) < extraVanity+extraSeal { 294 return errMissingSignature 295 } 296 // Ensure that the extra-data contains a signer list on checkpoint, but none otherwise 297 signersBytes := len(header.Extra) - extraVanity - extraSeal 298 if !checkpoint && signersBytes != 0 { 299 return errExtraSigners 300 } 301 if checkpoint && signersBytes%common.AddressLength != 0 { 302 return errInvalidCheckpointSigners 303 } 304 // Ensure that the mix digest is zero as we don't have fork protection currently 305 if header.MixDigest != (common.Hash{}) { 306 return errInvalidMixDigest 307 } 308 309 // Ensure that the block's difficulty is meaningful (may not be correct at this point) 310 if number > 0 { 311 if header.Difficulty == nil || (header.Difficulty.Cmp(diffInTurn) != 0 && header.Difficulty.Cmp(diffNoTurn) != 0) { 312 return errInvalidDifficulty 313 } 314 } 315 // If all checks passed, validate any special fields for hard forks 316 if err := misc.VerifyForkHashes(chain.Config(), header, false); err != nil { 317 return err 318 } 319 // All basic checks passed, verify cascading fields 320 return c.verifyCascadingFields(chain, header, parents) 321 } 322 323 // verifyCascadingFields verifies all the header fields that are not standalone, 324 // rather depend on a batch of previous headers. The caller may optionally pass 325 // in a batch of parents (ascending order) to avoid looking those up from the 326 // database. This is useful for concurrently verifying a batch of new headers. 327 func (c *Clique) verifyCascadingFields(chain consensus.ChainReader, header *types.Header, parents []*types.Header) error { 328 // The genesis block is the always valid dead-end 329 number := header.Number.Uint64() 330 if number == 0 { 331 return nil 332 } 333 // Ensure that the block's timestamp isn't too close to it's parent 334 var parent *types.Header 335 if len(parents) > 0 { 336 parent = parents[len(parents)-1] 337 } else { 338 parent = chain.GetHeader(header.ParentHash, number-1) 339 } 340 if parent == nil || parent.Number.Uint64() != number-1 || parent.Hash() != header.ParentHash { 341 return consensus.ErrUnknownAncestor 342 } 343 if parent.Time.Uint64()+c.config.Period > header.Time.Uint64() { 344 return ErrInvalidTimestamp 345 } 346 // Retrieve the snapshot needed to verify this header and cache it 347 snap, err := c.snapshot(chain, number-1, header.ParentHash, parents) 348 if err != nil { 349 return err 350 } 351 // If the block is a checkpoint block, verify the signer list 352 if number%c.config.Epoch == 0 { 353 signers := make([]byte, len(snap.Signers)*common.AddressLength) 354 for i, signer := range snap.signers() { 355 copy(signers[i*common.AddressLength:], signer[:]) 356 } 357 extraSuffix := len(header.Extra) - extraSeal 358 if !bytes.Equal(header.Extra[extraVanity:extraSuffix], signers) { 359 return errInvalidCheckpointSigners 360 } 361 } 362 // All basic checks passed, verify the seal and return 363 return c.verifySeal(chain, header, parents) 364 } 365 366 // snapshot retrieves the authorization snapshot at a given point in time. 367 func (c *Clique) snapshot(chain consensus.ChainReader, number uint64, hash common.Hash, parents []*types.Header) (*Snapshot, error) { 368 // Search for a snapshot in memory or on disk for checkpoints 369 var ( 370 headers []*types.Header 371 snap *Snapshot 372 ) 373 for snap == nil { 374 // If an in-memory snapshot was found, use that 375 if s, ok := c.recents.Get(hash); ok { 376 snap = s.(*Snapshot) 377 break 378 } 379 // If an on-disk checkpoint snapshot can be found, use that 380 if number%checkpointInterval == 0 { 381 if s, err := loadSnapshot(c.config, c.signatures, c.db, hash); err == nil { 382 log.Trace("Loaded voting snapshot from disk", "number", number, "hash", hash) 383 snap = s 384 break 385 } 386 } 387 // If we're at an checkpoint block, make a snapshot if it's known 388 if number == 0 || (number%c.config.Epoch == 0 && chain.GetHeaderByNumber(number-1) == nil) { 389 checkpoint := chain.GetHeaderByNumber(number) 390 if checkpoint != nil { 391 hash := checkpoint.Hash() 392 393 signers := make([]common.Address, (len(checkpoint.Extra)-extraVanity-extraSeal)/common.AddressLength) 394 for i := 0; i < len(signers); i++ { 395 copy(signers[i][:], checkpoint.Extra[extraVanity+i*common.AddressLength:]) 396 } 397 snap = newSnapshot(c.config, c.signatures, number, hash, signers) 398 if err := snap.store(c.db); err != nil { 399 return nil, err 400 } 401 log.Info("Stored checkpoint snapshot to disk", "number", number, "hash", hash) 402 break 403 } 404 } 405 // No snapshot for this header, gather the header and move backward 406 var header *types.Header 407 if len(parents) > 0 { 408 // If we have explicit parents, pick from there (enforced) 409 header = parents[len(parents)-1] 410 if header.Hash() != hash || header.Number.Uint64() != number { 411 return nil, consensus.ErrUnknownAncestor 412 } 413 parents = parents[:len(parents)-1] 414 } else { 415 // No explicit parents (or no more left), reach out to the database 416 header = chain.GetHeader(hash, number) 417 if header == nil { 418 return nil, consensus.ErrUnknownAncestor 419 } 420 } 421 headers = append(headers, header) 422 number, hash = number-1, header.ParentHash 423 } 424 // Previous snapshot found, apply any pending headers on top of it 425 for i := 0; i < len(headers)/2; i++ { 426 headers[i], headers[len(headers)-1-i] = headers[len(headers)-1-i], headers[i] 427 } 428 snap, err := snap.apply(headers) 429 if err != nil { 430 return nil, err 431 } 432 c.recents.Add(snap.Hash, snap) 433 434 // If we've generated a new checkpoint snapshot, save to disk 435 if snap.Number%checkpointInterval == 0 && len(headers) > 0 { 436 if err = snap.store(c.db); err != nil { 437 return nil, err 438 } 439 log.Trace("Stored voting snapshot to disk", "number", snap.Number, "hash", snap.Hash) 440 } 441 return snap, err 442 } 443 444 // VerifyUncles implements consensus.Engine, always returning an error for any 445 // uncles as this consensus mechanism doesn't permit uncles. 446 /*func (c *Clique) VerifyUncles(chain consensus.ChainReader, block *types.Block) error { 447 if len(block.Uncles()) > 0 { 448 return errors.New("uncles not allowed") 449 } 450 return nil 451 } 452 */ 453 454 // VerifySeal implements consensus.Engine, checking whether the signature contained 455 // in the header satisfies the consensus protocol requirements. 456 func (c *Clique) VerifySeal(chain consensus.ChainReader, header *types.Header) error { 457 return c.verifySeal(chain, header, nil) 458 } 459 460 // verifySeal checks whether the signature contained in the header satisfies the 461 // consensus protocol requirements. The method accepts an optional list of parent 462 // headers that aren't yet part of the local blockchain to generate the snapshots 463 // from. 464 func (c *Clique) verifySeal(chain consensus.ChainReader, header *types.Header, parents []*types.Header) error { 465 // Verifying the genesis block is not supported 466 number := header.Number.Uint64() 467 if number == 0 { 468 return errUnknownBlock 469 } 470 // Retrieve the snapshot needed to verify this header and cache it 471 snap, err := c.snapshot(chain, number-1, header.ParentHash, parents) 472 if err != nil { 473 return err 474 } 475 476 // Resolve the authorization key and check against signers 477 signer, err := ecrecover(header, c.signatures) 478 if err != nil { 479 return err 480 } 481 if _, ok := snap.Signers[signer]; !ok { 482 return errUnauthorized 483 } 484 for seen, recent := range snap.Recents { 485 if recent == signer { 486 // Signer is among recents, only fail if the current block doesn't shift it out 487 if limit := uint64(len(snap.Signers)/2 + 1); seen > number-limit { 488 return errUnauthorized 489 } 490 } 491 } 492 // Ensure that the difficulty corresponds to the turn-ness of the signer 493 inturn := snap.inturn(header.Number.Uint64(), signer) 494 if inturn && header.Difficulty.Cmp(diffInTurn) != 0 { 495 return errInvalidDifficulty 496 } 497 if !inturn && header.Difficulty.Cmp(diffNoTurn) != 0 { 498 return errInvalidDifficulty 499 } 500 return nil 501 } 502 503 // Prepare implements consensus.Engine, preparing all the consensus fields of the 504 // header for running the transactions on top. 505 func (c *Clique) Prepare(chain consensus.ChainReader, header *types.Header) error { 506 // If the block isn't a checkpoint, cast a random vote (good enough for now) 507 header.Coinbase = common.Address{} 508 header.Nonce = types.BlockNonce{} 509 510 number := header.Number.Uint64() 511 // Assemble the voting snapshot to check which votes make sense 512 snap, err := c.snapshot(chain, number-1, header.ParentHash, nil) 513 if err != nil { 514 return err 515 } 516 if number%c.config.Epoch != 0 { 517 c.lock.RLock() 518 519 // Gather all the proposals that make sense voting on 520 addresses := make([]common.Address, 0, len(c.proposals)) 521 for address, authorize := range c.proposals { 522 if snap.validVote(address, authorize) { 523 addresses = append(addresses, address) 524 } 525 } 526 // If there's pending proposals, cast a vote on them 527 if len(addresses) > 0 { 528 header.Coinbase = addresses[rand.Intn(len(addresses))] 529 if c.proposals[header.Coinbase] { 530 copy(header.Nonce[:], nonceAuthVote) 531 } else { 532 copy(header.Nonce[:], nonceDropVote) 533 } 534 } 535 c.lock.RUnlock() 536 } 537 // Set the correct difficulty 538 header.Difficulty = CalcDifficulty(snap, c.signer) 539 540 // Ensure the extra data has all it's components 541 if len(header.Extra) < extraVanity { 542 header.Extra = append(header.Extra, bytes.Repeat([]byte{0x00}, extraVanity-len(header.Extra))...) 543 } 544 header.Extra = header.Extra[:extraVanity] 545 546 if number%c.config.Epoch == 0 { 547 for _, signer := range snap.signers() { 548 header.Extra = append(header.Extra, signer[:]...) 549 } 550 } 551 header.Extra = append(header.Extra, make([]byte, extraSeal)...) 552 553 // Mix digest is reserved for now, set to empty 554 header.MixDigest = common.Hash{} 555 556 // Ensure the timestamp has the correct delay 557 parent := chain.GetHeader(header.ParentHash, number-1) 558 if parent == nil { 559 return consensus.ErrUnknownAncestor 560 } 561 header.Time = new(big.Int).Add(parent.Time, new(big.Int).SetUint64(c.config.Period)) 562 if header.Time.Int64() < time.Now().Unix() { 563 header.Time = big.NewInt(time.Now().Unix()) 564 } 565 return nil 566 } 567 568 // Finalize implements consensus.Engine, ensuring no uncles are set, nor block 569 // rewards given, and returns the final block. 570 func (c *Clique) Finalize(chain consensus.ChainReader, header *types.Header, state *state.StateDB, txs []*types.Transaction, receipts []*types.ContractResult) (*types.Block, error) { 571 // No block rewards in PoA, so the state remains as is and uncles are dropped 572 header.Root = state.IntermediateRoot(chain.Config().IsEIP158(header.Number)) 573 574 // Assemble and return the final block for sealing 575 return types.NewBlock(header, txs, receipts), nil 576 } 577 578 // Authorize injects a private key into the consensus engine to mint new blocks 579 // with. 580 func (c *Clique) Authorize(signer common.Address, signFn SignerFn) { 581 c.lock.Lock() 582 defer c.lock.Unlock() 583 584 c.signer = signer 585 c.signFn = signFn 586 } 587 588 // Seal implements consensus.Engine, attempting to create a sealed block using 589 // the local signing credentials. 590 func (c *Clique) Seal(chain consensus.ChainReader, block *types.Block, results chan<- *types.Block, stop <-chan struct{}) error { 591 header := block.Header() 592 593 // Sealing the genesis block is not supported 594 number := header.Number.Uint64() 595 if number == 0 { 596 return errUnknownBlock 597 } 598 // For 0-period chains, refuse to seal empty blocks (no reward but would spin sealing) 599 if c.config.Period == 0 && len(block.Transactions()) == 0 { 600 return errWaitTransactions 601 } 602 // Don't hold the signer fields for the entire sealing procedure 603 c.lock.RLock() 604 signer, signFn := c.signer, c.signFn 605 c.lock.RUnlock() 606 607 // Bail out if we're unauthorized to sign a block 608 snap, err := c.snapshot(chain, number-1, header.ParentHash, nil) 609 if err != nil { 610 return err 611 } 612 if _, authorized := snap.Signers[signer]; !authorized { 613 return errUnauthorized 614 } 615 // If we're amongst the recent signers, wait for the next block 616 for seen, recent := range snap.Recents { 617 if recent == signer { 618 // Signer is among recents, only wait if the current block doesn't shift it out 619 if limit := uint64(len(snap.Signers)/2 + 1); number < limit || seen > number-limit { 620 log.Info("Signed recently, must wait for others") 621 return nil 622 } 623 } 624 } 625 // Sweet, the protocol permits us to sign the block, wait for our time 626 delay := time.Unix(header.Time.Int64(), 0).Sub(time.Now()) // nolint: gosimple 627 if header.Difficulty.Cmp(diffNoTurn) == 0 { 628 // It's not our turn explicitly to sign, delay it a bit 629 wiggle := time.Duration(len(snap.Signers)/2+1) * wiggleTime 630 delay += time.Duration(rand.Int63n(int64(wiggle))) 631 632 log.Trace("Out-of-turn signing requested", "wiggle", common.PrettyDuration(wiggle)) 633 } 634 // Sign all the things! 635 sighash, err := signFn(accounts.Account{Address: signer}, sigHash(header).Bytes()) 636 if err != nil { 637 return err 638 } 639 copy(header.Extra[len(header.Extra)-extraSeal:], sighash) 640 // Wait until sealing is terminated or delay timeout. 641 log.Trace("Waiting for slot to sign and propagate", "delay", common.PrettyDuration(delay)) 642 go func() { 643 select { 644 case <-stop: 645 return 646 case <-time.After(delay): 647 } 648 649 select { 650 case results <- block.WithSeal(header): 651 default: 652 log.Warn("Sealing result is not read by miner", "sealhash", c.SealHash(header)) 653 } 654 }() 655 656 return nil 657 } 658 659 // CalcDifficulty is the difficulty adjustment algorithm. It returns the difficulty 660 // that a new block should have based on the previous blocks in the chain and the 661 // current signer. 662 func (c *Clique) CalcDifficulty(chain consensus.ChainReader, time uint64, parent *types.Header) *big.Int { 663 snap, err := c.snapshot(chain, parent.Number.Uint64(), parent.Hash(), nil) 664 if err != nil { 665 return nil 666 } 667 return CalcDifficulty(snap, c.signer) 668 } 669 670 // CalcDifficulty is the difficulty adjustment algorithm. It returns the difficulty 671 // that a new block should have based on the previous blocks in the chain and the 672 // current signer. 673 func CalcDifficulty(snap *Snapshot, signer common.Address) *big.Int { 674 if snap.inturn(snap.Number+1, signer) { 675 return new(big.Int).Set(diffInTurn) 676 } 677 return new(big.Int).Set(diffNoTurn) 678 } 679 680 // SealHash returns the hash of a block prior to it being sealed. 681 func (c *Clique) SealHash(header *types.Header) common.Hash { 682 return sigHash(header) 683 } 684 685 // Close implements consensus.Engine. It's a noop for clique as there is are no background threads. 686 func (c *Clique) Close() error { 687 return nil 688 } 689 690 // APIs implements consensus.Engine, returning the user facing RPC API to allow 691 // controlling the signer voting. 692 func (c *Clique) APIs(chain consensus.ChainReader) []rpc.API { 693 return []rpc.API{{ 694 Namespace: "clique", 695 Version: "1.0", 696 Service: &API{chain: chain, clique: c}, 697 Public: false, 698 }} 699 }