From 24a8d6aced396189af4456fd8e8956a1d9bf34d7 Mon Sep 17 00:00:00 2001
From: Boris Nagaev <bnagaev@gmail.com>
Date: Sat, 6 Jul 2024 12:56:59 -0300
Subject: [PATCH] chanbackup: add function SignCloseTx

The method will be used in itest to make sure it is possible to sign a
transaction from SCB backup, and in "chantools scbforceclose" command.
---
 chanbackup/recover.go | 135 ++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 135 insertions(+)

diff --git a/chanbackup/recover.go b/chanbackup/recover.go
index ebd48dccfd..61933ea06c 100644
--- a/chanbackup/recover.go
+++ b/chanbackup/recover.go
@@ -1,12 +1,21 @@
 package chanbackup
 
 import (
+	"errors"
+	"fmt"
 	"net"
 
 	"github.com/btcsuite/btcd/btcec/v2"
+	"github.com/btcsuite/btcd/btcutil"
+	"github.com/btcsuite/btcd/chaincfg/chainhash"
+	"github.com/btcsuite/btcd/txscript"
+	"github.com/btcsuite/btcd/wire"
 	"github.com/davecgh/go-spew/spew"
 	"github.com/lightningnetwork/lnd/channeldb"
+	"github.com/lightningnetwork/lnd/input"
 	"github.com/lightningnetwork/lnd/keychain"
+	"github.com/lightningnetwork/lnd/lnwallet"
+	"github.com/lightningnetwork/lnd/shachain"
 )
 
 // ChannelRestorer is an interface that allows the Recover method to map the
@@ -121,3 +130,129 @@ func UnpackAndRecoverMulti(packedMulti PackedMulti,
 
 	return Recover(chanBackups.StaticBackups, restorer, peerConnector)
 }
+
+// SignCloseTx produces a signed commit tx from a channel backup.
+func SignCloseTx(s Single, keyRing keychain.KeyRing, ecdher keychain.ECDHRing,
+	signer input.Signer) (*wire.MsgTx, error) {
+
+	if s.CloseTxInputs == nil {
+		return nil, errors.New("channel backup does not have data " +
+			"needed to sign force close tx")
+	}
+
+	// Each of the keys in our local channel config only have their
+	// locators populate, so we'll re-derive the raw key now.
+	localMultiSigKey, err := keyRing.DeriveKey(
+		s.LocalChanCfg.MultiSigKey.KeyLocator,
+	)
+	if err != nil {
+		return nil, fmt.Errorf("unable to derive multisig key: %w", err)
+	}
+
+	signDesc, err := createSignDesc(
+		localMultiSigKey, s.RemoteChanCfg.MultiSigKey.PubKey,
+		s.Version, s.Capacity,
+	)
+	if err != nil {
+		return nil, fmt.Errorf("failed to create signDesc: %w", err)
+	}
+
+	inputs := lnwallet.SignedCommitTxInputs{
+		CommitTx:  s.CloseTxInputs.CommitTx,
+		CommitSig: s.CloseTxInputs.CommitSig,
+		OurKey:    localMultiSigKey,
+		TheirKey:  s.RemoteChanCfg.MultiSigKey,
+		SignDesc:  signDesc,
+	}
+
+	if s.Version.IsTaproot() {
+		producer, err := createTaprootNonceProducer(
+			s.ShaChainRootDesc, localMultiSigKey.PubKey, ecdher,
+		)
+		if err != nil {
+			return nil, err
+		}
+		inputs.Taproot = &lnwallet.TaprootSignedCommitTxInputs{
+			CommitHeight:         s.CloseTxInputs.CommitHeight,
+			TaprootNonceProducer: producer,
+		}
+	}
+
+	return lnwallet.GetSignedCommitTx(inputs, signer)
+}
+
+// createSignDesc creates SignDescriptor from local and remote keys,
+// backup version and capacity.
+// See LightningChannel.createSignDesc on how signDesc is produced.
+func createSignDesc(localMultiSigKey keychain.KeyDescriptor,
+	remoteKey *btcec.PublicKey, version SingleBackupVersion,
+	capacity btcutil.Amount) (*input.SignDescriptor, error) {
+
+	var fundingPkScript, multiSigScript []byte
+
+	localKey := localMultiSigKey.PubKey
+
+	var err error
+	if version.IsTaproot() {
+		fundingPkScript, _, err = input.GenTaprootFundingScript(
+			localKey, remoteKey, int64(capacity),
+		)
+		if err != nil {
+			return nil, err
+		}
+	} else {
+		multiSigScript, err = input.GenMultiSigScript(
+			localKey.SerializeCompressed(),
+			remoteKey.SerializeCompressed(),
+		)
+		if err != nil {
+			return nil, err
+		}
+
+		fundingPkScript, err = input.WitnessScriptHash(multiSigScript)
+		if err != nil {
+			return nil, err
+		}
+	}
+
+	return &input.SignDescriptor{
+		KeyDesc:       localMultiSigKey,
+		WitnessScript: multiSigScript,
+		Output: &wire.TxOut{
+			PkScript: fundingPkScript,
+			Value:    int64(capacity),
+		},
+		HashType: txscript.SigHashAll,
+		PrevOutputFetcher: txscript.NewCannedPrevOutputFetcher(
+			fundingPkScript, int64(capacity),
+		),
+		InputIndex: 0,
+	}, nil
+}
+
+// createTaprootNonceProducer makes taproot nonce producer from a
+// ShaChainRootDesc and our public multisig key.
+func createTaprootNonceProducer(shaChainRootDesc keychain.KeyDescriptor,
+	localKey *btcec.PublicKey, ecdher keychain.ECDHRing) (shachain.Producer,
+	error) {
+
+	if shaChainRootDesc.PubKey != nil {
+		return nil, errors.New("taproot channels always use ECDH, " +
+			"but legacy ShaChainRootDesc with pubkey found")
+	}
+
+	// This is the scheme in which the shachain root is derived via an ECDH
+	// operation on the private key of ShaChainRootDesc and our public
+	// multisig key.
+	ecdh, err := ecdher.ECDH(shaChainRootDesc, localKey)
+	if err != nil {
+		return nil, fmt.Errorf("ecdh failed: %w", err)
+	}
+
+	// The shachain root that seeds RevocationProducer for this channel.
+	revRoot := chainhash.Hash(ecdh)
+
+	revocationProducer := shachain.NewRevocationProducer(revRoot)
+
+	return channeldb.DeriveMusig2Shachain(revocationProducer)
+}