moved akka conf to eclair-node application.conf

use a local queue for outgoing rpc requests. this should be a better solution than
inceasing the number of concurrent requests.
see https://doc.akka.io/docs/akka-http/current/scala/http/client-side/host-level.html#using-the-host-level-api-with-a-queue
for more information.

.travis.yml

@@ -2,7 +2,7 @@ sudo: required
 dist: trusty
 language: scala
 scala:
- - 2.11.8
+ - 2.11.11
 env:
  - export LD_LIBRARY_PATH=/usr/local/lib
 script:

BUILD.md

@@ -10,7 +10,12 @@ To build the project, simply run:
 ```shell
 $ mvn package
 ```
-or
+To skip the tests, run:
 ```shell
 $ mvn package -DskipTests
 ```
+To generate the windows installer along with the build, run the following command:
+```shell
+$ mvn package -DskipTests -Pinstaller
+```
+The generated installer will be located in `eclair-node-gui/target/jfx/installer`

README.md

@@ -13,6 +13,8 @@ This software follows the [Lightning Network Specifications (BOLTs)](https://git
  :construction: Both the BOLTs and Eclair itself are a work in progress. Expect things to break/change!
  
  :warning: Eclair currently only runs on regtest or testnet. We recommend testing in regtest, as it allows you to generate blocks manually and not wait for confirmations.
+ 
+ :rotating_light: We had reports of Eclair being tested on various segwit-enabled blockchains. Keep in mind that Eclair is still alpha quality software, by using it with actual coins you are putting your funds at risk!
 
 ---
 
@@ -25,11 +27,11 @@ Please see the latest [release note](https://github.com/ACINQ/eclair/releases) f
 
 ## Installation
 
-:warning: **Those are valid for the most up-to-date, unreleased, version of eclair. Here are the [instructions for Eclair 0.2-alpha2](https://github.com/ACINQ/eclair/blob/v0.2-alpha2/README.md#installation)**.
+:warning: **Those are valid for the most up-to-date, unreleased, version of eclair. Here are the [instructions for Eclair 0.2-alpha5](https://github.com/ACINQ/eclair/blob/v0.2-alpha5/README.md#installation)**.
 
 ### Configuring Bitcoin Core
 
-Eclair needs a _synchronized_, _segwit-ready_, **_zeromq-enabled_**, _non-pruning_, _tx-indexing_ [Bitcoin Core](https://github.com/bitcoin/bitcoin) node. This means that on Windows you will need Bitcoin Core 0.14.0.
+Eclair needs a _synchronized_, _segwit-ready_, **_zeromq-enabled_**, _non-pruning_, _tx-indexing_ [Bitcoin Core](https://github.com/bitcoin/bitcoin) node. This means that on Windows you will need Bitcoin Core 0.14+.
 
 Run bitcoind with the following minimal `bitcoin.conf`:
 ```
@@ -44,6 +46,8 @@ zmqpubrawtx=tcp://127.0.0.1:29000
 
 ### Installing Eclair
 
+The released binaries can be downloaded [here](https://github.com/ACINQ/eclair/releases).
+
 #### Windows
 
 Just use the windows installer, it should create a shortcut on your desktop.
@@ -52,52 +56,79 @@ Just use the windows installer, it should create a shortcut on your desktop.
 
 You need to first install java, more precisely a [JRE 1.8](http://www.oracle.com/technetwork/java/javase/downloads/jre8-downloads-2133155.html).
 
- :warning: If you are using the OpenJDK JRE, you will need to build OpenJFX yourself, or run the application in `--headless` mode.
+ :warning: If you are using the OpenJDK JRE, you will need to build OpenJFX yourself, or run the application in headless mode (see below).
 
-Then download the latest fat jar and run:
+Then download the latest fat jar and depending on whether or not you want a GUI run the following command:
+* with GUI:
 ```shell
-java -jar eclair-node_xxxxxx-fat.jar
+java -jar eclair-node-gui-<version>-<commit_id>.jar
+```
+* without GUI:
+```shell
+java -jar eclair-node-<version>-<commit_id>.jar
 ```
 
 ### Configuring Eclair
 
-#### Command-line parameters
-
-option         | description                     | default value
----------------|---------------------------------|--------------
---datadir      | Path to the data directory      | ~/.eclair
---headless     | Run Eclair without the GUI      |
---help, -h     | Display usage text              |
-
-
-:warning: Using separate `datadir` is mandatory if you want to run **several instances of eclair** on the same machine. You will also have to change ports in the configuration (see below).
-
 #### Configuration file
 
-To change your node configuration, edit the file `eclair.conf` in `datadir`.
+Eclair reads its configuration file, and write its logs, to a `datadir` directory, located in `~/.eclair` by default.
 
-option                       | description               | default value
+To change your node's configuration, create a file named `eclair.conf` in `datadir`. Here's an example configuration file:
+
+```
+eclair.server.port=9735
+eclair.node-alias=eclair
+eclair.node-color=49daaa
+```
+
+Here are some of the most common options:
+
+name                         | description               | default value
 -----------------------------|---------------------------|--------------
- eclair.server.port          | TCP port                  | 9735
- eclair.api.port             | HTTP port                 | 8080
+ eclair.server.port          | Lightning TCP port        | 9735
+ eclair.api.port             | API HTTP port             | 8080
  eclair.bitcoind.rpcuser     | Bitcoin Core RPC user     | foo
  eclair.bitcoind.rpcpassword | Bitcoin Core RPC password | bar
  eclair.bitcoind.zmq         | Bitcoin Core ZMQ address  | tcp://127.0.0.1:29000
 
-&rarr; see [`application.conf`](eclair-node/src/main/resources/application.conf) for full reference.
+Quotes are not required unless the value contains special characters. Full syntax guide [here](https://github.com/lightbend/config/blob/master/HOCON.md).
+
+&rarr; see [`reference.conf`](eclair-core/src/main/resources/reference.conf) for full reference. There are many more options!
+
+#### Java Environment Variables
+
+Some advanced parameters can be changed with java environment variables. Most users won't need this and can skip this section.
+
+:warning: Using separate `datadir` is mandatory if you want to run **several instances of eclair** on the same machine. You will also have to change ports in eclair.conf (see above).
+
+name                  | description                                | default value
+----------------------|--------------------------------------------|--------------
+eclair.datadir        | Path to the data directory                 | ~/.eclair
+eclair.headless       | Run eclair without a GUI                   | 
+eclair.printToConsole | Log to stdout (in addition to eclair.log)  |
+
+For example, to specify a different data directory you would run the following command:
+```shell
+java -Declair.datadir=/tmp/node1 -jar eclair-node-gui-<version>-<commit_id>.jar
+```
 
 ## JSON-RPC API
 
  method       |  params                                       | description
  -------------|-----------------------------------------------|-----------------------------------------------------------
-  connect     | host, port, pubkey                            | connect to another lightning node through a secure connection
-  open        | host, port, pubkey, fundingSatoshis, pushMsat | opens a channel with another lightning node
+  getinfo     |                                               | return basic node information (id, chain hash, current block height) 
+  connect     | nodeId, host, port                            | connect to another lightning node through a secure connection
+  open        | nodeId, host, port, fundingSatoshis, pushMsat | opens a channel with another lightning node
   peers       |                                               | list existing local peers
   channels    |                                               | list existing local channels
   channel     | channelId                                     | retrieve detailed information about a given channel
-  network     |                                               | list all nodes that have been announced
-  genh        |                                               | generate a payment H
+  allnodes    |                                               | list all known nodes
+  allchannels |                                               | list all known channels
+  receive     | amountMsat, description                       | generate a payment request for a given amount
   send        | amountMsat, paymentHash, nodeId               | send a payment to a lightning node
+  send        | paymentRequest                                | send a payment to a lightning node using a BOLT11 payment request
+  send        | paymentRequest, amountMsat                    | send a payment to a lightning node using a BOLT11 payment request and a custom amount
   close       | channelId                                     | close a channel
   close       | channelId, scriptPubKey (optional)            | close a channel and send the funds to the given scriptPubKey
   help        |                                               | display available methods

TESTING.md

@@ -1,120 +0,0 @@
-# Testing eclair and lightningd
-
-## Configure bitcoind to run in regtest mode
-Important: you need a segwit version of bitcoin core for this test (see https://github.com/sipa/bitcoin/tree/segwit-master).
-Make sure that bitcoin-cli is on the path and edit ~/.bitcoin/bitcoin.conf and add:
-```shell
-server=1
-regtest=1
-rpcuser=***
-rpcpassword=***
-```
-
-To check that segwit is enabled run:
-```shell
-bitcoin-cli getblockchaininfo
-```
-and check bip9_softforks:
-
-```
-...
-"bip9_softforks": {
-    "csv": {
-      "status": "active",
-      "startTime": 0,
-      "timeout": 999999999999
-    },
-    "witness": {
-      "status": "active",
-      "startTime": 0,
-      "timeout": 999999999999
-    }
-  }
-```
-
-## Start bitcoind
-Mine enough blocks to activate segwit blocks:
-```shell
-bitcoin-cli generate 500
-```
-##
-Start lightningd (here we’ll use port 46000)
-```shell
-lightningd --port 46000
-```
-##
-Start eclair:
-```shell
-mvn exec:java -Dexec.mainClass=fr.acinq.eclair.Boot
-```
-## Tell eclair to connect to lightningd
-
-```shell
-curl -X POST -H "Content-Type: application/json" -d '{
-     "method": "connect",
-     "params" : [ "localhost", 46000, 3000000 ]
- }' http://localhost:8080
-```
-Since eclair is funder, it will create and publish the funding tx
-
-Mine a few blocks to confirm the funding tx:
-```shell
-bitcoin-cli generate 10
-```
-eclair and lightningd are now both in NORMAL state.
-You can check this by running:
-```shell
-lightning-cli getpeers
-```
-or
-```shell
-curl -X POST -H "Content-Type: application/json" -d '{
-     "method": "list",
-     "params" : [ ]
- }' http://localhost:8080
- ```
-
-
-## Tell eclair to send a htlc
-We’ll use the following values for R and H:
-```
-R = 0102030405060708010203040506070801020304050607080102030405060708
-H = 8cf3e5f40cf025a984d8e00b307bbab2b520c91b2bde6fa86958f8f4e7d8a609
-```
-
-You’ll need a unix timestamp that is not too far into the future. Now + 100000 is fine:
-```shell
-curl -X POST -H "Content-Type: application/json" -d "{
-    \"method\": \"addhtlc\",
-    \"params\" : [ 70000000, \"8cf3e5f40cf025a984d8e00b307bbab2b520c91b2bde6fa86958f8f4e7d8a609\", $((`date +%s` + 100000)), \"021acf75c92318d3723098294d2a6a4b08d9abba2ebb5f2df2b4a8e9153e96a5f4\"  ]
-}" http://localhost:8080
-```
-
-## Tell eclair to commit its changes
-```shell
-curl -X POST -H "Content-Type: application/json" -d "{
-    \"method\": \"sign\",
-    \"params\" : [ \"d3f056a084e266ad06ea1ca28a1e080ca07c6b61fac7ce116e48a5c31d688eee\" ]
-}" http://localhost:8080
-```
-## Tell lightningd to fulfill the HTLC:
-```shell
-./lightning-cli fulfillhtlc 03befb4f8ad1d87d4c41acbb316791fe157f305caf2123c848f448975aaf85c1bb 0102030405060708010203040506070801020304050607080102030405060708
-```
-Check balances on both eclair and lightningd
-
-## Close the channel
-```shell
-./lightning-cli close 03befb4f8ad1d87d4c41acbb316791fe157f305caf2123c848f448975aaf85c1bb
-```
-Mine a few blocks to bury the closing tx
-```shell
-bitcoin-cli generate 10
-```
-The channel is now in CLOSED state
-
-
-
-
-
-

eclair-core/eclair-cli

@@ -0,0 +1,42 @@
+#!/bin/bash
+
+[ -z "$1" ] && (
+echo "usage: "
+echo "  eclair-cli help"
+) && exit 1
+
+URL="http://localhost:8080"
+CURL_OPTS="-sS -X POST -H \"Content-Type: application/json\""
+
+case $1 in
+"help")
+        eval curl "$CURL_OPTS -d '{ \"method\": \"help\", \"params\" : [] }' $URL" | jq -r ".result[]"
+        ;;
+"getinfo")
+        eval curl "$CURL_OPTS -d '{ \"method\": \"getinfo\", \"params\" : [] }' $URL" | jq ".result"
+        ;;
+"channels")
+        eval curl "$CURL_OPTS -d '{ \"method\": \"channels\", \"params\" : [] }' $URL" | jq ".result[]"
+        ;;
+"channel")
+        eval curl "$CURL_OPTS -d '{ \"method\": \"channel\", \"params\" : [\"${2?"missing channel id"}\"] }' $URL" | jq ".result | { nodeid, channelId, state, balanceMsat: .data.commitments.localCommit.spec.toLocalMsat, capacitySat: .data.commitments.commitInput.txOut.amount.amount }"
+        ;;
+"open")
+        eval curl "$CURL_OPTS -d '{ \"method\": \"open\", \"params\" : [\"${2?"missing node id"}\", \"${3?"missing ip"}\", ${4?"missing port"}, ${5?"missing amount (sat)"}, ${6?"missing push amount (msat)"}] }' $URL" | jq -r "if .error == null then .result else .error.message end"
+        ;;
+"close")
+        eval curl "$CURL_OPTS -d '{ \"method\": \"close\", \"params\" : [\"${2?"missing channel id"}\"] }' $URL"
+        ;;
+"receive")
+        eval curl "$CURL_OPTS -d '{ \"method\": \"receive\", \"params\" : [${2?"missing amount"}, \"something\"] }' $URL" | jq -r "if .error == null then .result else .error.message end"
+        ;;
+"send")
+        eval curl "$CURL_OPTS -d '{ \"method\": \"send\", \"params\" : [\"${2?"missing request"}\"] }' $URL" | jq -r "if .error == null then .result else .error.message end"
+        ;;
+"network")
+        eval curl "$CURL_OPTS -d '{ \"method\": \"network\", \"params\" : [] }' $URL" | jq ".result"
+        ;;
+"peers")
+        eval curl "$CURL_OPTS -d '{ \"method\": \"peers\", \"params\" : [] }' $URL" | jq ".result"
+        ;;
+esac

eclair-core/pom.xml

@@ -0,0 +1,216 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+         xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/maven-v4_0_0.xsd">
+    <modelVersion>4.0.0</modelVersion>
+    <parent>
+        <groupId>fr.acinq.eclair</groupId>
+        <artifactId>eclair_2.11</artifactId>
+        <version>0.2-SNAPSHOT</version>
+    </parent>
+
+    <artifactId>eclair-core_2.11</artifactId>
+    <packaging>jar</packaging>
+
+    <name>${project.artifactId}</name>
+
+    <build>
+        <plugins>
+            <plugin>
+                <groupId>pl.project13.maven</groupId>
+                <artifactId>git-commit-id-plugin</artifactId>
+                <executions>
+                    <execution>
+                        <goals>
+                            <goal>revision</goal>
+                        </goals>
+                    </execution>
+                </executions>
+            </plugin>
+            <plugin>
+                <groupId>com.googlecode.maven-download-plugin</groupId>
+                <artifactId>download-maven-plugin</artifactId>
+                <version>1.3.0</version>
+                <executions>
+                    <execution>
+                        <id>download-bitcoind</id>
+                        <phase>generate-test-resources</phase>
+                        <goals>
+                            <goal>wget</goal>
+                        </goals>
+                        <configuration>
+                            <url>${bitcoind.url}</url>
+                            <unpack>true</unpack>
+                            <outputDirectory>${project.build.directory}</outputDirectory>
+                            <md5>${bitcoind.md5}</md5>
+                            <sha1>${bitcoind.sha1}</sha1>
+                        </configuration>
+                    </execution>
+                </executions>
+            </plugin>
+            <plugin>
+                <groupId>org.apache.maven.plugins</groupId>
+                <artifactId>maven-jar-plugin</artifactId>
+                <configuration>
+                    <archive>
+                        <manifest>
+                            <addClasspath>true</addClasspath>
+                            <addDefaultImplementationEntries>true</addDefaultImplementationEntries>
+                        </manifest>
+                        <manifestEntries>
+                            <!-- we hide the git commit in the Specification-Version standard field-->
+                            <Specification-Version>${git.commit.id}</Specification-Version>
+                            <Url>${project.parent.url}</Url>
+                        </manifestEntries>
+                    </archive>
+                </configuration>
+            </plugin>
+        </plugins>
+    </build>
+
+    <profiles>
+        <profile>
+            <id>default</id>
+            <activation>
+                <activeByDefault>true</activeByDefault>
+            </activation>
+            <properties>
+                <bitcoind.url>https://bitcoin.org/bin/bitcoin-core-0.14.0/bitcoin-0.14.0-x86_64-linux-gnu.tar.gz
+                </bitcoind.url>
+                <bitcoind.md5>c811c157d4d618f7d7f4b9f24834551c</bitcoind.md5>
+                <bitcoind.sha1>3ab7e537bd00bf35e6a78fca108d0d886f8289c1</bitcoind.sha1>
+            </properties>
+        </profile>
+        <profile>
+            <id>Mac</id>
+            <activation>
+                <os>
+                    <family>mac</family>
+                </os>
+            </activation>
+            <properties>
+                <bitcoind.url>https://bitcoin.org/bin/bitcoin-core-0.14.0/bitcoin-0.14.0-osx64.tar.gz
+                </bitcoind.url>
+                <bitcoind.md5>1521e1d0901169004b9c1c9b552868b7</bitcoind.md5>
+                <bitcoind.sha1>7216298f77162618f322fdf499f1f1b67a0048b7</bitcoind.sha1>
+            </properties>
+        </profile>
+        <profile>
+            <id>Windows</id>
+            <activation>
+                <os>
+                    <family>Windows</family>
+                </os>
+            </activation>
+            <properties>
+                <bitcoind.url>https://bitcoin.org/bin/bitcoin-core-0.14.0/bitcoin-0.14.0-win64.zip</bitcoind.url>
+                <bitcoind.md5>e84bc3a81ad3d1776299419eb7a04935</bitcoind.md5>
+                <bitcoind.sha1>d2e64fcabf6f85d56d64a52c76e007b6defc32ef</bitcoind.sha1>
+            </properties>
+        </profile>
+    </profiles>
+
+    <dependencies>
+        <!-- AKKA -->
+        <dependency>
+            <groupId>com.typesafe.akka</groupId>
+            <artifactId>akka-actor_${scala.version.short}</artifactId>
+            <version>${akka.version}</version>
+        </dependency>
+        <dependency>
+            <groupId>com.typesafe.akka</groupId>
+            <artifactId>akka-slf4j_${scala.version.short}</artifactId>
+            <version>${akka.version}</version>
+        </dependency>
+        <dependency>
+            <groupId>com.typesafe.akka</groupId>
+            <artifactId>akka-http-core_${scala.version.short}</artifactId>
+            <version>10.0.7</version>
+        </dependency>
+        <!-- JSON -->
+        <dependency>
+            <groupId>org.json4s</groupId>
+            <artifactId>json4s-jackson_${scala.version.short}</artifactId>
+            <version>3.5.2</version>
+        </dependency>
+        <dependency>
+            <groupId>de.heikoseeberger</groupId>
+            <artifactId>akka-http-json4s_${scala.version.short}</artifactId>
+            <version>1.16.1</version>
+        </dependency>
+        <!-- BITCOIN -->
+        <dependency>
+            <groupId>fr.acinq</groupId>
+            <artifactId>bitcoin-lib_${scala.version.short}</artifactId>
+            <version>${bitcoinlib.version}</version>
+            <exclusions>
+                <exclusion>
+                    <groupId>com.google.protobuf</groupId>
+                    <artifactId>protobuf-java</artifactId>
+                </exclusion>
+            </exclusions>
+        </dependency>
+        <dependency>
+            <groupId>org.zeromq</groupId>
+            <artifactId>jeromq</artifactId>
+            <version>0.4.0</version>
+        </dependency>
+        <dependency>
+            <groupId>fr.acinq</groupId>
+            <artifactId>bitcoinj-core</artifactId>
+            <version>${bitcoinj.version}</version>
+        </dependency>
+        <!-- SERIALIZATION -->
+        <dependency>
+            <groupId>org.scodec</groupId>
+            <artifactId>scodec-core_${scala.version.short}</artifactId>
+            <version>1.10.3</version>
+        </dependency>
+        <!-- LOGGING -->
+        <dependency>
+            <groupId>org.clapper</groupId>
+            <artifactId>grizzled-slf4j_${scala.version.short}</artifactId>
+            <version>1.3.1</version>
+        </dependency>
+        <!-- OTHER -->
+        <dependency>
+            <groupId>org.xerial</groupId>
+            <artifactId>sqlite-jdbc</artifactId>
+            <version>3.20.0</version>
+        </dependency>
+        <dependency>
+            <groupId>org.jgrapht</groupId>
+            <artifactId>jgrapht-core</artifactId>
+            <version>1.0.1</version>
+        </dependency>
+        <dependency>
+            <groupId>org.jgrapht</groupId>
+            <artifactId>jgrapht-ext</artifactId>
+            <version>1.0.1</version>
+            <exclusions>
+                <exclusion>
+                    <groupId>org.tinyjee.jgraphx</groupId>
+                    <artifactId>jgraphx</artifactId>
+                </exclusion>
+            </exclusions>
+        </dependency>
+        <dependency>
+            <!-- This is to get rid of '[WARNING] warning: Class javax.annotation.Nonnull not found - continuing with a stub.' compile errors -->
+            <groupId>com.google.code.findbugs</groupId>
+            <artifactId>jsr305</artifactId>
+            <version>3.0.2</version>
+        </dependency>
+        <!-- TESTS -->
+        <dependency>
+            <groupId>com.typesafe.akka</groupId>
+            <artifactId>akka-testkit_${scala.version.short}</artifactId>
+            <version>${akka.version}</version>
+            <scope>test</scope>
+        </dependency>
+        <dependency>
+            <groupId>ch.qos.logback</groupId>
+            <artifactId>logback-classic</artifactId>
+            <version>1.2.3</version>
+            <scope>test</scope>
+        </dependency>
+    </dependencies>
+</project>

eclair-core/src/main/resources/electrum/servers_regtest.json

@@ -0,0 +1,10 @@
+{
+  "127.0.0.1": {
+    "t": "51001",
+    "s": "51002"
+  },
+  "10.0.2.2": {
+    "t": "51001",
+    "s": "51002"
+  }
+}

eclair-core/src/main/resources/electrum/servers_testnet.json

@@ -0,0 +1,14 @@
+{
+  "testnetnode.arihanc.com": {
+    "t": "51001",
+    "s": "51002"
+  },
+  "testnet.hsmiths.com": {
+    "t": "53011",
+    "s": "53012"
+  },
+  "electrum.akinbo.org": {
+    "t": "51001",
+    "s": "51002"
+  }
+}

eclair-core/src/main/resources/reference.conf

@@ -0,0 +1,84 @@
+eclair {
+
+  chain = "test" // "regtest" for regtest, "test" for testnet. Livenet is not supported.
+
+  server {
+    public-ips = [] // external ips, will be announced on the network
+    binding-ip = "0.0.0.0"
+    port = 9735
+  }
+
+  api {
+    binding-ip = "127.0.0.1"
+    port = 8080
+  }
+
+  watcher-type = "bitcoind" // other *experimental* values include "bitcoinj" or "electrum"
+
+  bitcoind {
+    host = "localhost"
+    rpcport = 18332
+    rpcuser = "foo"
+    rpcpassword = "bar"
+    zmq = "tcp://127.0.0.1:29000"
+  }
+
+  bitcoinj {
+    static-peers = [
+      #{ // currently used in integration tests to override default port
+      #  host = "localhost"
+      #  port = 28333
+      #}
+    ]
+  }
+
+  default-feerates { // those are in satoshis per byte
+    delay-blocks {
+      1 = 210
+      2 = 180
+      6 = 150
+      12 = 110
+      36 = 50
+      72 = 20
+    }
+  }
+
+  node-alias = "eclair"
+  node-color = "49daaa"
+  global-features = ""
+  local-features = "08" // initial_routing_sync
+  channel-flags = 1 // announce channels
+  dust-limit-satoshis = 542
+  default-feerate-per-kb = 20000  // default bitcoin core value
+
+  max-htlc-value-in-flight-msat = 100000000000 // 1 BTC ~= unlimited
+  htlc-minimum-msat = 1000000
+  max-accepted-htlcs = 30
+
+  reserve-to-funding-ratio = 0.01 // recommended by BOLT #2
+  max-reserve-to-funding-ratio = 0.05 // channel reserve can't be more than 5% of the funding amount (recommended: 1%)
+
+  delay-blocks = 144
+  mindepth-blocks = 2
+  expiry-delta-blocks = 144
+
+  fee-base-msat = 546000
+  fee-proportional-millionth = 10
+
+  // maximum local vs remote feerate mismatch; 1.0 means 100%
+  // actual check is abs((local feerate - remote fee rate) / (local fee rate + remote fee rate)/2) > fee rate mismatch
+  max-feerate-mismatch = 1.5
+
+  // funder will send an UpdateFee message if the difference between current commitment fee and actual current network fee is greater
+  // than this ratio.
+  update-fee_min-diff-ratio = 0.1
+
+  channel-exclude-duration = 60 seconds // when a temporary channel failure is returned, we exclude the channel from our payment routes for this duration
+  router-broadcast-interval = 10 seconds // this should be 60 seconds on mainnet
+  router-validate-interval = 2 seconds // this should be high enough to have a decent level of parallelism
+
+  ping-interval = 30 seconds
+  auto-reconnect = true
+
+  payment-handler = "local"
+}

eclair-core/src/main/scala/fr/acinq/eclair/DBCompatChecker.scala

@@ -0,0 +1,21 @@
+package fr.acinq.eclair
+
+import grizzled.slf4j.Logging
+
+import scala.util.{Failure, Success, Try}
+
+object DBCompatChecker extends Logging {
+
+  /**
+    * Tests if the DB files are compatible with the current version of eclair; throws an exception if incompatible.
+    *
+    * @param nodeParams
+    */
+  def checkDBCompatibility(nodeParams: NodeParams): Unit =
+    Try(nodeParams.networkDb.listChannels() ++ nodeParams.networkDb.listNodes() ++ nodeParams.peersDb.listPeers() ++ nodeParams.channelsDb.listChannels()) match {
+      case Success(_) => {}
+      case Failure(_) => throw IncompatibleDBException
+    }
+}
+
+case object IncompatibleDBException extends RuntimeException("DB files are not compatible with this version of eclair.")

eclair-core/src/main/scala/fr/acinq/eclair/FSMDiagnosticActorLogging.scala

@@ -0,0 +1,26 @@
+package fr.acinq.eclair
+
+import akka.actor.{Actor, FSM}
+import akka.event.{DiagnosticLoggingAdapter, LoggingAdapter}
+
+/**
+  * A version of akka.actor.DiagnosticActorLogging compatible with an FSM
+  * See https://groups.google.com/forum/#!topic/akka-user/0CxR8CImr4Q
+  */
+trait FSMDiagnosticActorLogging[S, D] extends FSM[S, D] {
+
+  import akka.event.Logging._
+
+  val diagLog: DiagnosticLoggingAdapter = akka.event.Logging(this)
+
+  def mdc(currentMessage: Any): MDC = emptyMDC
+
+  override def log: LoggingAdapter = diagLog
+
+  override def aroundReceive(receive: Actor.Receive, msg: Any): Unit = try {
+    diagLog.mdc(mdc(msg))
+    super.aroundReceive(receive, msg)
+  } finally {
+    diagLog.clearMDC()
+  }
+}

eclair-core/src/main/scala/fr/acinq/eclair/Features.scala

@@ -0,0 +1,48 @@
+package fr.acinq.eclair
+
+
+import java.util.BitSet
+
+import fr.acinq.bitcoin.BinaryData
+
+
+/**
+  * Created by PM on 13/02/2017.
+  */
+object Features {
+  // reserved but not used as per lightningnetwork/lightning-rfc/pull/178
+  val INITIAL_ROUTING_SYNC_BIT_MANDATORY = 2
+  val INITIAL_ROUTING_SYNC_BIT_OPTIONAL = 3
+
+  /**
+    *
+    * @param features feature bits
+    * @return true if an initial dump of the routing table is requested
+    */
+  def initialRoutingSync(features: BitSet): Boolean = features.get(INITIAL_ROUTING_SYNC_BIT_OPTIONAL)
+
+  /**
+    *
+    * @param features feature bits
+    * @return true if an initial dump of the routing table is requested
+    */
+  def initialRoutingSync(features: BinaryData): Boolean = initialRoutingSync(BitSet.valueOf(features.reverse.toArray))
+
+  /**
+    * Check that the features that we understand are correctly specified, and that there are no mandatory features that
+    * we don't understand (even bits)
+    */
+  def areSupported(bitset: BitSet): Boolean = {
+    // for now there is no mandatory feature bit, so we don't support features with any even bit set
+    for (i <- 0 until bitset.length() by 2) {
+      if (bitset.get(i)) return false
+    }
+    return true
+  }
+
+  /**
+    * A feature set is supported if all even bits are supported.
+    * We just ignore unknown odd bits.
+    */
+  def areSupported(features: BinaryData): Boolean = areSupported(BitSet.valueOf(features.reverse.toArray))
+}

eclair-core/src/main/scala/fr/acinq/eclair/Globals.scala

@@ -0,0 +1,32 @@
+package fr.acinq.eclair
+
+import java.util.concurrent.atomic.{AtomicLong, AtomicReference}
+
+import fr.acinq.eclair.blockchain.fee.{FeeratesPerByte, FeeratesPerKw}
+
+/**
+  * Created by PM on 25/01/2016.
+  */
+object Globals {
+
+  /**
+    * This counter holds the current blockchain height.
+    * It is mainly used to calculate htlc expiries.
+    * The value is read by all actors, hence it needs to be thread-safe.
+    */
+  val blockCount = new AtomicLong(0)
+
+  /**
+    * This holds the current feerates, in satoshi-per-bytes.
+    * The value is read by all actors, hence it needs to be thread-safe.
+    */
+  val feeratesPerByte = new AtomicReference[FeeratesPerByte](null)
+
+  /**
+    * This holds the current feerates, in satoshi-per-kw.
+    * The value is read by all actors, hence it needs to be thread-safe.
+    */
+  val feeratesPerKw = new AtomicReference[FeeratesPerKw](null)
+}
+
+

eclair-core/src/main/scala/fr/acinq/eclair/NodeParams.scala

@@ -0,0 +1,152 @@
+package fr.acinq.eclair
+
+import java.io.File
+import java.net.InetSocketAddress
+import java.nio.file.Files
+import java.sql.DriverManager
+import java.util.concurrent.TimeUnit
+
+import com.typesafe.config.{Config, ConfigFactory}
+import fr.acinq.bitcoin.Crypto.PrivateKey
+import fr.acinq.bitcoin.DeterministicWallet.ExtendedPrivateKey
+import fr.acinq.bitcoin.{BinaryData, Block, DeterministicWallet}
+import fr.acinq.eclair.NodeParams.WatcherType
+import fr.acinq.eclair.db._
+import fr.acinq.eclair.db.sqlite.{SqliteChannelsDb, SqliteNetworkDb, SqlitePeersDb, SqlitePreimagesDb}
+
+import scala.collection.JavaConversions._
+import scala.concurrent.duration.FiniteDuration
+
+/**
+  * Created by PM on 26/02/2017.
+  */
+case class NodeParams(extendedPrivateKey: ExtendedPrivateKey,
+                      privateKey: PrivateKey,
+                      alias: String,
+                      color: (Byte, Byte, Byte),
+                      publicAddresses: List[InetSocketAddress],
+                      globalFeatures: BinaryData,
+                      localFeatures: BinaryData,
+                      dustLimitSatoshis: Long,
+                      maxHtlcValueInFlightMsat: UInt64,
+                      maxAcceptedHtlcs: Int,
+                      expiryDeltaBlocks: Int,
+                      htlcMinimumMsat: Int,
+                      delayBlocks: Int,
+                      minDepthBlocks: Int,
+                      smartfeeNBlocks: Int,
+                      feeBaseMsat: Int,
+                      feeProportionalMillionth: Int,
+                      reserveToFundingRatio: Double,
+                      maxReserveToFundingRatio: Double,
+                      channelsDb: ChannelsDb,
+                      peersDb: PeersDb,
+                      networkDb: NetworkDb,
+                      preimagesDb: PreimagesDb,
+                      routerBroadcastInterval: FiniteDuration,
+                      routerValidateInterval: FiniteDuration,
+                      pingInterval: FiniteDuration,
+                      maxFeerateMismatch: Double,
+                      updateFeeMinDiffRatio: Double,
+                      autoReconnect: Boolean,
+                      chainHash: BinaryData,
+                      channelFlags: Byte,
+                      channelExcludeDuration: FiniteDuration,
+                      watcherType: WatcherType)
+
+object NodeParams {
+
+  sealed trait WatcherType
+
+  object BITCOIND extends WatcherType
+
+  object BITCOINJ extends WatcherType
+
+  object ELECTRUM extends WatcherType
+
+  /**
+    * Order of precedence for the configuration parameters:
+    * 1) Java environment variables (-D...)
+    * 2) Configuration file eclair.conf
+    * 3) Optionally provided config
+    * 4) Default values in reference.conf
+    */
+  def loadConfiguration(datadir: File, overrideDefaults: Config = ConfigFactory.empty()) =
+    ConfigFactory.parseProperties(System.getProperties)
+      .withFallback(ConfigFactory.parseFile(new File(datadir, "eclair.conf")))
+      .withFallback(overrideDefaults)
+      .withFallback(ConfigFactory.load()).getConfig("eclair")
+
+  def makeNodeParams(datadir: File, config: Config): NodeParams = {
+
+    datadir.mkdirs()
+
+    val seedPath = new File(datadir, "seed.dat")
+    val seed: BinaryData = seedPath.exists() match {
+      case true => Files.readAllBytes(seedPath.toPath)
+      case false =>
+        val seed = randomKey.toBin
+        Files.write(seedPath.toPath, seed)
+        seed
+    }
+    val master = DeterministicWallet.generate(seed)
+    val extendedPrivateKey = DeterministicWallet.derivePrivateKey(master, DeterministicWallet.hardened(46) :: DeterministicWallet.hardened(0) :: Nil)
+
+    val chain = config.getString("chain")
+    val chainHash = chain match {
+      case "test" => Block.TestnetGenesisBlock.hash
+      case "regtest" => Block.RegtestGenesisBlock.hash
+      case _ => throw new RuntimeException("only regtest and testnet are supported for now")
+    }
+
+    val sqlite = DriverManager.getConnection(s"jdbc:sqlite:${new File(datadir, "eclair.sqlite")}")
+    val channelsDb = new SqliteChannelsDb(sqlite)
+    val peersDb = new SqlitePeersDb(sqlite)
+    val networkDb = new SqliteNetworkDb(sqlite)
+    val preimagesDb = new SqlitePreimagesDb(sqlite)
+
+    val color = BinaryData(config.getString("node-color"))
+    require(color.size == 3, "color should be a 3-bytes hex buffer")
+
+    val watcherType = config.getString("watcher-type") match {
+      case "bitcoinj" => BITCOINJ
+      case "electrum" => ELECTRUM
+      case _ => BITCOIND
+    }
+
+    NodeParams(
+      extendedPrivateKey = extendedPrivateKey,
+      privateKey = extendedPrivateKey.privateKey,
+      alias = config.getString("node-alias").take(32),
+      color = (color.data(0), color.data(1), color.data(2)),
+      publicAddresses = config.getStringList("server.public-ips").toList.map(ip => new InetSocketAddress(ip, config.getInt("server.port"))),
+      globalFeatures = BinaryData(config.getString("global-features")),
+      localFeatures = BinaryData(config.getString("local-features")),
+      dustLimitSatoshis = config.getLong("dust-limit-satoshis"),
+      maxHtlcValueInFlightMsat = UInt64(config.getLong("max-htlc-value-in-flight-msat")),
+      maxAcceptedHtlcs = config.getInt("max-accepted-htlcs"),
+      expiryDeltaBlocks = config.getInt("expiry-delta-blocks"),
+      htlcMinimumMsat = config.getInt("htlc-minimum-msat"),
+      delayBlocks = config.getInt("delay-blocks"),
+      minDepthBlocks = config.getInt("mindepth-blocks"),
+      smartfeeNBlocks = 3,
+      feeBaseMsat = config.getInt("fee-base-msat"),
+      feeProportionalMillionth = config.getInt("fee-proportional-millionth"),
+      reserveToFundingRatio = config.getDouble("reserve-to-funding-ratio"),
+      maxReserveToFundingRatio = config.getDouble("max-reserve-to-funding-ratio"),
+      channelsDb = channelsDb,
+      peersDb = peersDb,
+      networkDb = networkDb,
+      preimagesDb = preimagesDb,
+      routerBroadcastInterval = FiniteDuration(config.getDuration("router-broadcast-interval").getSeconds, TimeUnit.SECONDS),
+      routerValidateInterval = FiniteDuration(config.getDuration("router-validate-interval").getSeconds, TimeUnit.SECONDS),
+      pingInterval = FiniteDuration(config.getDuration("ping-interval").getSeconds, TimeUnit.SECONDS),
+      maxFeerateMismatch = config.getDouble("max-feerate-mismatch"),
+      updateFeeMinDiffRatio = config.getDouble("update-fee_min-diff-ratio"),
+      autoReconnect = config.getBoolean("auto-reconnect"),
+      chainHash = chainHash,
+      channelFlags = config.getInt("channel-flags").toByte,
+      channelExcludeDuration = FiniteDuration(config.getDuration("channel-exclude-duration").getSeconds, TimeUnit.SECONDS),
+      watcherType = watcherType)
+  }
+}

eclair-core/src/main/scala/fr/acinq/eclair/PortChecker.scala

@@ -0,0 +1,26 @@
+package fr.acinq.eclair
+
+import java.net.{InetAddress, ServerSocket}
+
+import scala.util.{Failure, Success, Try}
+
+object PortChecker {
+
+  /**
+    * Tests if a port is open
+    * See https://stackoverflow.com/questions/434718/sockets-discover-port-availability-using-java#435579
+    *
+    * @return
+    */
+  def checkAvailable(host: String, port: Int): Unit = {
+    Try(new ServerSocket(port, 50, InetAddress.getByName(host))) match {
+      case Success(socket) =>
+        Try(socket.close())
+      case Failure(_) =>
+        throw TCPBindException(port)
+    }
+  }
+
+}
+
+case class TCPBindException(port: Int) extends RuntimeException

eclair-core/src/main/scala/fr/acinq/eclair/Setup.scala

@@ -0,0 +1,215 @@
+package fr.acinq.eclair
+
+import java.io.File
+import java.net.InetSocketAddress
+
+import akka.actor.{ActorRef, ActorSystem, Props, SupervisorStrategy}
+import akka.http.scaladsl.Http
+import akka.pattern.after
+import akka.stream.{ActorMaterializer, BindFailedException}
+import akka.util.Timeout
+import com.typesafe.config.{Config, ConfigFactory}
+import fr.acinq.bitcoin.{BinaryData, Block}
+import fr.acinq.eclair.NodeParams.{BITCOIND, BITCOINJ, ELECTRUM}
+import fr.acinq.eclair.api.{GetInfoResponse, Service}
+import fr.acinq.eclair.blockchain.bitcoind.rpc.{BitcoinJsonRPCClient, ExtendedBitcoinClient}
+import fr.acinq.eclair.blockchain.bitcoind.zmq.ZMQActor
+import fr.acinq.eclair.blockchain.bitcoind.{BitcoinCoreWallet, ZmqWatcher}
+import fr.acinq.eclair.blockchain.bitcoinj.{BitcoinjKit, BitcoinjWallet, BitcoinjWatcher}
+import fr.acinq.eclair.blockchain.electrum.{ElectrumClient, ElectrumEclairWallet, ElectrumWallet, ElectrumWatcher}
+import fr.acinq.eclair.blockchain.fee.{ConstantFeeProvider, _}
+import fr.acinq.eclair.blockchain.{EclairWallet, _}
+import fr.acinq.eclair.channel.Register
+import fr.acinq.eclair.io.{Server, Switchboard}
+import fr.acinq.eclair.payment._
+import fr.acinq.eclair.router._
+import grizzled.slf4j.Logging
+
+import scala.collection.JavaConversions._
+import scala.concurrent.duration._
+import scala.concurrent.{Await, ExecutionContext, Future, Promise}
+
+/**
+  * Created by PM on 25/01/2016.
+  */
+class Setup(datadir: File, overrideDefaults: Config = ConfigFactory.empty(), actorSystem: ActorSystem = ActorSystem()) extends Logging {
+
+  logger.info(s"hello!")
+  logger.info(s"version=${getClass.getPackage.getImplementationVersion} commit=${getClass.getPackage.getSpecificationVersion}")
+
+  val config = NodeParams.loadConfiguration(datadir, overrideDefaults)
+  val nodeParams = NodeParams.makeNodeParams(datadir, config)
+  val chain = config.getString("chain")
+
+  // early checks
+  DBCompatChecker.checkDBCompatibility(nodeParams)
+  PortChecker.checkAvailable(config.getString("server.binding-ip"), config.getInt("server.port"))
+
+  logger.info(s"nodeid=${nodeParams.privateKey.publicKey.toBin} alias=${nodeParams.alias}")
+  logger.info(s"using chain=$chain chainHash=${nodeParams.chainHash}")
+
+  logger.info(s"initializing secure random generator")
+  // this will force the secure random instance to initialize itself right now, making sure it doesn't hang later (see comment in package.scala)
+  secureRandom.nextInt()
+
+  implicit val system = actorSystem
+  implicit val materializer = ActorMaterializer()
+  implicit val timeout = Timeout(30 seconds)
+  implicit val formats = org.json4s.DefaultFormats
+  implicit val ec = ExecutionContext.Implicits.global
+
+  val bitcoin = nodeParams.watcherType match {
+    case BITCOIND =>
+      val bitcoinClient = new ExtendedBitcoinClient(new BitcoinJsonRPCClient(
+        user = config.getString("bitcoind.rpcuser"),
+        password = config.getString("bitcoind.rpcpassword"),
+        host = config.getString("bitcoind.host"),
+        port = config.getInt("bitcoind.rpcport")))
+      val future = for {
+        json <- bitcoinClient.rpcClient.invoke("getblockchaininfo").recover { case _ => throw BitcoinRPCConnectionException }
+        progress = (json \ "verificationprogress").extract[Double]
+        chainHash <- bitcoinClient.rpcClient.invoke("getblockhash", 0).map(_.extract[String]).map(BinaryData(_)).map(x => BinaryData(x.reverse))
+        bitcoinVersion <- bitcoinClient.rpcClient.invoke("getnetworkinfo").map(json => (json \ "version")).map(_.extract[String])
+      } yield (progress, chainHash, bitcoinVersion)
+      // blocking sanity checks
+      val (progress, chainHash, bitcoinVersion) = Await.result(future, 10 seconds)
+      assert(chainHash == nodeParams.chainHash, s"chainHash mismatch (conf=${nodeParams.chainHash} != bitcoind=$chainHash)")
+      assert(progress > 0.99, "bitcoind should be synchronized")
+      // TODO: add a check on bitcoin version?
+      Bitcoind(bitcoinClient)
+    case BITCOINJ =>
+      logger.warn("EXPERIMENTAL BITCOINJ MODE ENABLED!!!")
+      val staticPeers = config.getConfigList("bitcoinj.static-peers").map(c => new InetSocketAddress(c.getString("host"), c.getInt("port"))).toList
+      logger.info(s"using staticPeers=$staticPeers")
+      val bitcoinjKit = new BitcoinjKit(chain, datadir, staticPeers)
+      bitcoinjKit.startAsync()
+      Await.ready(bitcoinjKit.initialized, 10 seconds)
+      Bitcoinj(bitcoinjKit)
+    case ELECTRUM =>
+      logger.warn("EXPERIMENTAL ELECTRUM MODE ENABLED!!!")
+      val addressesFile = chain match {
+        case "test" => "/electrum/servers_testnet.json"
+        case "regtest" => "/electrum/servers_regtest.json"
+      }
+      val stream = classOf[Setup].getResourceAsStream(addressesFile)
+      val addresses = ElectrumClient.readServerAddresses(stream)
+      val electrumClient = system.actorOf(SimpleSupervisor.props(Props(new ElectrumClient(addresses)), "electrum-client", SupervisorStrategy.Resume))
+      Electrum(electrumClient)
+  }
+
+  def bootstrap: Future[Kit] = {
+    val zmqConnected = Promise[Boolean]()
+    val tcpBound = Promise[Unit]()
+
+    val defaultFeerates = FeeratesPerByte(block_1 = config.getLong("default-feerates.delay-blocks.1"), blocks_2 = config.getLong("default-feerates.delay-blocks.2"), blocks_6 = config.getLong("default-feerates.delay-blocks.6"), blocks_12 = config.getLong("default-feerates.delay-blocks.12"), blocks_36 = config.getLong("default-feerates.delay-blocks.36"), blocks_72 = config.getLong("default-feerates.delay-blocks.72"))
+    Globals.feeratesPerByte.set(defaultFeerates)
+    Globals.feeratesPerKw.set(FeeratesPerKw(defaultFeerates))
+    logger.info(s"initial feeratesPerByte=${Globals.feeratesPerByte.get()}")
+    val feeProvider = (chain, bitcoin) match {
+      case ("regtest", _) => new ConstantFeeProvider(defaultFeerates)
+      case (_, Bitcoind(client)) => new FallbackFeeProvider(new EarnDotComFeeProvider() :: new BitcoinCoreFeeProvider(client.rpcClient, defaultFeerates) :: new ConstantFeeProvider(defaultFeerates) :: Nil) // order matters!
+      case _ => new FallbackFeeProvider(new EarnDotComFeeProvider() :: new ConstantFeeProvider(defaultFeerates) :: Nil) // order matters!
+    }
+    system.scheduler.schedule(0 seconds, 10 minutes)(feeProvider.getFeerates.map {
+      case feerates: FeeratesPerByte =>
+        Globals.feeratesPerByte.set(feerates)
+        Globals.feeratesPerKw.set(FeeratesPerKw(defaultFeerates))
+        system.eventStream.publish(CurrentFeerates(Globals.feeratesPerKw.get))
+        logger.info(s"current feeratesPerByte=${Globals.feeratesPerByte.get()}")
+    })
+
+    val watcher = bitcoin match {
+      case Bitcoind(bitcoinClient) =>
+        system.actorOf(SimpleSupervisor.props(Props(new ZMQActor(config.getString("bitcoind.zmq"), Some(zmqConnected))), "zmq", SupervisorStrategy.Restart))
+        system.actorOf(SimpleSupervisor.props(ZmqWatcher.props(bitcoinClient), "watcher", SupervisorStrategy.Resume))
+      case Bitcoinj(bitcoinj) =>
+        zmqConnected.success(true)
+        system.actorOf(SimpleSupervisor.props(BitcoinjWatcher.props(bitcoinj), "watcher", SupervisorStrategy.Resume))
+      case Electrum(electrumClient) =>
+        zmqConnected.success(true)
+        system.actorOf(SimpleSupervisor.props(Props(new ElectrumWatcher(electrumClient)), "watcher", SupervisorStrategy.Resume))
+    }
+
+    val wallet = bitcoin match {
+      case Bitcoind(bitcoinClient) => new BitcoinCoreWallet(bitcoinClient.rpcClient, watcher)
+      case Bitcoinj(bitcoinj) => new BitcoinjWallet(bitcoinj.initialized.map(_ => bitcoinj.wallet()))
+      case Electrum(electrumClient) =>
+        val electrumSeedPath = new File(datadir, "electrum_seed.dat")
+        val electrumWallet = system.actorOf(ElectrumWallet.props(electrumSeedPath, electrumClient, ElectrumWallet.WalletParameters(Block.RegtestGenesisBlock.hash, allowSpendUnconfirmed = true)), "electrum-wallet")
+        new ElectrumEclairWallet(electrumWallet)
+    }
+    wallet.getFinalAddress.map {
+      case address => logger.info(s"initial wallet address=$address")
+    }
+
+    val paymentHandler = system.actorOf(SimpleSupervisor.props(config.getString("payment-handler") match {
+      case "local" => LocalPaymentHandler.props(nodeParams)
+      case "noop" => Props[NoopPaymentHandler]
+    }, "payment-handler", SupervisorStrategy.Resume))
+    val register = system.actorOf(SimpleSupervisor.props(Props(new Register), "register", SupervisorStrategy.Resume))
+    val relayer = system.actorOf(SimpleSupervisor.props(Relayer.props(nodeParams, register, paymentHandler), "relayer", SupervisorStrategy.Resume))
+    val router = system.actorOf(SimpleSupervisor.props(Router.props(nodeParams, watcher), "router", SupervisorStrategy.Resume))
+    val switchboard = system.actorOf(SimpleSupervisor.props(Switchboard.props(nodeParams, watcher, router, relayer, wallet), "switchboard", SupervisorStrategy.Resume))
+    val paymentInitiator = system.actorOf(SimpleSupervisor.props(PaymentInitiator.props(nodeParams.privateKey.publicKey, router, register), "payment-initiator", SupervisorStrategy.Restart))
+    val server = system.actorOf(SimpleSupervisor.props(Server.props(nodeParams, switchboard, new InetSocketAddress(config.getString("server.binding-ip"), config.getInt("server.port")), Some(tcpBound)), "server", SupervisorStrategy.Restart))
+
+    val kit = Kit(
+      nodeParams = nodeParams,
+      system = system,
+      watcher = watcher,
+      paymentHandler = paymentHandler,
+      register = register,
+      relayer = relayer,
+      router = router,
+      switchboard = switchboard,
+      paymentInitiator = paymentInitiator,
+      server = server,
+      wallet = wallet)
+
+    val api = new Service {
+
+      override def getInfoResponse: Future[GetInfoResponse] = Future.successful(GetInfoResponse(nodeId = nodeParams.privateKey.publicKey, alias = nodeParams.alias, port = config.getInt("server.port"), chainHash = nodeParams.chainHash, blockHeight = Globals.blockCount.intValue()))
+
+      override def appKit = kit
+    }
+    val httpBound = Http().bindAndHandle(api.route, config.getString("api.binding-ip"), config.getInt("api.port")).recover {
+      case _: BindFailedException => throw TCPBindException(config.getInt("api.port"))
+    }
+
+    val zmqTimeout = after(5 seconds, using = system.scheduler)(Future.failed(BitcoinZMQConnectionTimeoutException))
+    val tcpTimeout = after(5 seconds, using = system.scheduler)(Future.failed(TCPBindException(config.getInt("server.port"))))
+    val httpTimeout = after(5 seconds, using = system.scheduler)(Future.failed(TCPBindException(config.getInt("api.port"))))
+
+    for {
+      _ <- Future.firstCompletedOf(zmqConnected.future :: zmqTimeout :: Nil)
+      _ <- Future.firstCompletedOf(tcpBound.future :: tcpTimeout :: Nil)
+      _ <- Future.firstCompletedOf(httpBound :: httpTimeout :: Nil)
+    } yield kit
+
+  }
+
+}
+
+
+// @formatter:off
+sealed trait Bitcoin
+case class Bitcoind(extendedBitcoinClient: ExtendedBitcoinClient) extends Bitcoin
+case class Bitcoinj(bitcoinjKit: BitcoinjKit) extends Bitcoin
+case class Electrum(electrumClient: ActorRef) extends Bitcoin
+// @formatter:on
+
+case class Kit(nodeParams: NodeParams,
+               system: ActorSystem,
+               watcher: ActorRef,
+               paymentHandler: ActorRef,
+               register: ActorRef,
+               relayer: ActorRef,
+               router: ActorRef,
+               switchboard: ActorRef,
+               paymentInitiator: ActorRef,
+               server: ActorRef,
+               wallet: EclairWallet)
+
+case object BitcoinZMQConnectionTimeoutException extends RuntimeException("could not connect to bitcoind using zeromq")
+
+case object BitcoinRPCConnectionException extends RuntimeException("could not connect to bitcoind using json-rpc")

eclair-core/src/main/scala/fr/acinq/eclair/UInt64.scala

@@ -0,0 +1,35 @@
+package fr.acinq.eclair
+
+import java.math.BigInteger
+
+import fr.acinq.bitcoin.BinaryData
+
+case class UInt64(underlying: BigInt) extends Ordered[UInt64] {
+
+  require(underlying >= 0, s"uint64 must be positive (actual=$underlying)")
+  require(underlying <= UInt64.MaxValueBigInt, s"uint64 must be < 2^64 -1 (actual=$underlying)")
+
+  override def compare(o: UInt64): Int = underlying.compare(o.underlying)
+
+  override def toString: String = underlying.toString
+}
+
+
+object UInt64 {
+
+  private val MaxValueBigInt = BigInt(new BigInteger("ffffffffffffffff", 16))
+
+  val MaxValue = UInt64(MaxValueBigInt)
+
+  def apply(bin: BinaryData) = new UInt64(new BigInteger(1, bin))
+
+  def apply(value: Long) = new UInt64(BigInt(value))
+
+  object Conversions {
+
+    implicit def intToUint64(l: Int) = UInt64(l)
+
+    implicit def longToUint64(l: Long) = UInt64(l)
+  }
+
+}

eclair-core/src/main/scala/fr/acinq/eclair/api/JsonSerializers.scala

@@ -1,7 +1,7 @@
 package fr.acinq.eclair.api
 
-import fr.acinq.bitcoin.{BinaryData, Script, ScriptElt, Transaction}
 import fr.acinq.bitcoin.Crypto.{Point, PrivateKey, PublicKey, Scalar}
+import fr.acinq.bitcoin.{BinaryData, Transaction}
 import fr.acinq.eclair.channel.State
 import fr.acinq.eclair.crypto.ShaChain
 import fr.acinq.eclair.transactions.Transactions.TransactionWithInputInfo

eclair-core/src/main/scala/fr/acinq/eclair/api/Service.scala

@@ -0,0 +1,148 @@
+package fr.acinq.eclair.api
+
+import java.net.InetSocketAddress
+
+import akka.actor.ActorRef
+import akka.http.scaladsl.model.HttpMethods._
+import akka.http.scaladsl.model.StatusCodes
+import akka.http.scaladsl.model.headers.CacheDirectives.{`max-age`, `no-store`, public}
+import akka.http.scaladsl.model.headers.HttpOriginRange.*
+import akka.http.scaladsl.model.headers._
+import akka.http.scaladsl.server.Directives._
+import akka.pattern.ask
+import akka.util.Timeout
+import de.heikoseeberger.akkahttpjson4s.Json4sSupport
+import de.heikoseeberger.akkahttpjson4s.Json4sSupport.ShouldWritePretty
+import fr.acinq.bitcoin.Crypto.PublicKey
+import fr.acinq.bitcoin.{BinaryData, MilliSatoshi, Satoshi}
+import fr.acinq.eclair.Kit
+import fr.acinq.eclair.channel._
+import fr.acinq.eclair.io.Switchboard.{NewChannel, NewConnection}
+import fr.acinq.eclair.payment.{PaymentRequest, PaymentResult, ReceivePayment, SendPayment}
+import fr.acinq.eclair.wire.{ChannelAnnouncement, NodeAnnouncement}
+import grizzled.slf4j.Logging
+import org.json4s.JsonAST.{JInt, JString}
+import org.json4s.{JValue, jackson}
+
+import scala.concurrent.duration._
+import scala.concurrent.{ExecutionContext, Future}
+import scala.util.{Failure, Success}
+
+/**
+  * Created by PM on 25/01/2016.
+  */
+
+// @formatter:off
+case class JsonRPCBody(jsonrpc: String = "1.0", id: String = "scala-client", method: String, params: Seq[JValue])
+case class Error(code: Int, message: String)
+case class JsonRPCRes(result: AnyRef, error: Option[Error], id: String)
+case class Status(node_id: String)
+case class GetInfoResponse(nodeId: PublicKey, alias: String, port: Int, chainHash: BinaryData, blockHeight: Int)
+case class ChannelInfo(shortChannelId: String, nodeId1: PublicKey , nodeId2: PublicKey)
+// @formatter:on
+
+trait Service extends Logging {
+
+  implicit def ec: ExecutionContext = ExecutionContext.Implicits.global
+
+  implicit val serialization = jackson.Serialization
+  implicit val formats = org.json4s.DefaultFormats + new BinaryDataSerializer + new StateSerializer + new ShaChainSerializer + new PublicKeySerializer + new PrivateKeySerializer + new ScalarSerializer + new PointSerializer + new TransactionWithInputInfoSerializer
+  implicit val timeout = Timeout(30 seconds)
+  implicit val shouldWritePretty: ShouldWritePretty = ShouldWritePretty.True
+
+  import Json4sSupport.{marshaller, unmarshaller}
+
+  def appKit: Kit
+
+  def getInfoResponse: Future[GetInfoResponse]
+
+  val customHeaders = `Access-Control-Allow-Origin`(*) ::
+    `Access-Control-Allow-Headers`("Content-Type, Authorization") ::
+    `Access-Control-Allow-Methods`(PUT, GET, POST, DELETE, OPTIONS) ::
+    `Cache-Control`(public, `no-store`, `max-age`(0)) ::
+    `Access-Control-Allow-Headers`("x-requested-with") :: Nil
+
+  def getChannel(channelId: String): Future[ActorRef] =
+    for {
+      channels <- (appKit.register ? 'channels).mapTo[Map[BinaryData, ActorRef]]
+    } yield channels.get(BinaryData(channelId)).getOrElse(throw new RuntimeException("unknown channel"))
+
+  val route =
+    respondWithDefaultHeaders(customHeaders) {
+      pathSingleSlash {
+        post {
+          entity(as[JsonRPCBody]) {
+            req =>
+              val kit = appKit
+              import kit._
+              val f_res: Future[AnyRef] = req match {
+                case JsonRPCBody(_, _, "getinfo", _) => getInfoResponse
+                case JsonRPCBody(_, _, "connect", JString(nodeId) :: JString(host) :: JInt(port) :: Nil) =>
+                  (switchboard ? NewConnection(PublicKey(nodeId), new InetSocketAddress(host, port.toInt), None)).mapTo[String]
+                case JsonRPCBody(_, _, "open", JString(nodeId) :: JString(host) :: JInt(port) :: JInt(fundingSatoshi) :: JInt(pushMsat) :: options) =>
+                  val channelFlags = options match {
+                    case JInt(value) :: Nil => Some(value.toByte)
+                    case _ => None // TODO: too lax?
+                  }
+                  (switchboard ? NewConnection(PublicKey(nodeId), new InetSocketAddress(host, port.toInt), Some(NewChannel(Satoshi(fundingSatoshi.toLong), MilliSatoshi(pushMsat.toLong), channelFlags)))).mapTo[String]
+                case JsonRPCBody(_, _, "peers", _) =>
+                  (switchboard ? 'peers).mapTo[Map[PublicKey, ActorRef]].map(_.map(_._1.toBin))
+                case JsonRPCBody(_, _, "channels", _) =>
+                  (register ? 'channels).mapTo[Map[Long, ActorRef]].map(_.keys)
+                case JsonRPCBody(_, _, "channel", JString(channelId) :: Nil) =>
+                  getChannel(channelId).flatMap(_ ? CMD_GETINFO).mapTo[RES_GETINFO]
+                case JsonRPCBody(_, _, "allnodes", _) =>
+                  (router ? 'nodes).mapTo[Iterable[NodeAnnouncement]].map(_.map(_.nodeId))
+                case JsonRPCBody(_, _, "allchannels", _) =>
+                  (router ? 'channels).mapTo[Iterable[ChannelAnnouncement]].map(_.map(c => ChannelInfo(c.shortChannelId.toHexString, c.nodeId1, c.nodeId2)))
+                case JsonRPCBody(_, _, "receive", JInt(amountMsat) :: JString(description) :: Nil) =>
+                  (paymentHandler ? ReceivePayment(MilliSatoshi(amountMsat.toLong), description)).mapTo[PaymentRequest].map(PaymentRequest.write)
+                case JsonRPCBody(_, _, "send", JInt(amountMsat) :: JString(paymentHash) :: JString(nodeId) :: Nil) =>
+                  (paymentInitiator ? SendPayment(amountMsat.toLong, paymentHash, PublicKey(nodeId))).mapTo[PaymentResult]
+                case JsonRPCBody(_, _, "send", JString(paymentRequest) :: rest) =>
+                  for {
+                    req <- Future(PaymentRequest.read(paymentRequest))
+                    amount = (req.amount, rest) match {
+                      case (Some(_), JInt(amt) :: Nil) => amt.toLong // overriding payment request amount with the one provided
+                      case (Some(amt), _) => amt.amount
+                      case (None, JInt(amt) :: Nil) => amt.toLong // amount wasn't specified in request, using custom one
+                      case (None, _) => throw new RuntimeException("you need to manually specify an amount for this payment request")
+                    }
+                    sendPayment = req.minFinalCltvExpiry match {
+                      case None => SendPayment(amount, req.paymentHash, req.nodeId)
+                      case Some(value) => SendPayment(amount, req.paymentHash, req.nodeId, value)
+                    }
+                    res <- (paymentInitiator ? sendPayment).mapTo[PaymentResult]
+                  } yield res
+                case JsonRPCBody(_, _, "close", JString(channelId) :: JString(scriptPubKey) :: Nil) =>
+                  getChannel(channelId).flatMap(_ ? CMD_CLOSE(scriptPubKey = Some(scriptPubKey))).mapTo[String]
+                case JsonRPCBody(_, _, "close", JString(channelId) :: Nil) =>
+                  getChannel(channelId).flatMap(_ ? CMD_CLOSE(scriptPubKey = None)).mapTo[String]
+                case JsonRPCBody(_, _, "help", _) =>
+                  Future.successful(List(
+                    "connect (nodeId, host, port): connect to another lightning node through a secure connection",
+                    "open (nodeId, host, port, fundingSatoshi, pushMsat, channelFlags = 0x01): open a channel with another lightning node",
+                    "peers: list existing local peers",
+                    "channels: list existing local channels",
+                    "channel (channelId): retrieve detailed information about a given channel",
+                    "allnodes: list all known nodes",
+                    "allchannels: list all known channels",
+                    "receive (amountMsat, description): generate a payment request for a given amount",
+                    "send (amountMsat, paymentHash, nodeId): send a payment to a lightning node",
+                    "send (paymentRequest): send a payment to a lightning node using a BOLT11 payment request",
+                    "send (paymentRequest, amountMsat): send a payment to a lightning node using a BOLT11 payment request and a custom amount",
+                    "close (channelId): close a channel",
+                    "close (channelId, scriptPubKey): close a channel and send the funds to the given scriptPubKey",
+                    "help: display this message"))
+                case _ => Future.failed(new RuntimeException("method not found"))
+              }
+
+              onComplete(f_res) {
+                case Success(res) => complete(JsonRPCRes(res, None, req.id))
+                case Failure(t) => complete(StatusCodes.InternalServerError, JsonRPCRes(null, Some(Error(-1, t.getMessage)), req.id))
+              }
+          }
+        }
+      }
+    }
+}

eclair-core/src/main/scala/fr/acinq/eclair/blockchain/BlockchainEvents.scala

@@ -1,6 +1,7 @@
 package fr.acinq.eclair.blockchain
 
 import fr.acinq.bitcoin.{Block, Transaction}
+import fr.acinq.eclair.blockchain.fee.FeeratesPerKw
 
 /**
   * Created by PM on 24/08/2016.
@@ -14,6 +15,4 @@ case class NewTransaction(tx: Transaction) extends BlockchainEvent
 
 case class CurrentBlockCount(blockCount: Long) extends BlockchainEvent
 
-case class CurrentFeerate(feeratePerKw: Long) extends BlockchainEvent
-
-case class MempoolTransaction(tx: Transaction)
+case class CurrentFeerates(feeratesPerKw: FeeratesPerKw) extends BlockchainEvent

eclair-core/src/main/scala/fr/acinq/eclair/blockchain/EclairWallet.scala

@@ -0,0 +1,41 @@
+package fr.acinq.eclair.blockchain
+
+import fr.acinq.bitcoin.{BinaryData, Satoshi, Transaction}
+
+import scala.concurrent.Future
+
+/**
+  * Created by PM on 06/07/2017.
+  */
+trait EclairWallet {
+
+  def getBalance: Future[Satoshi]
+
+  def getFinalAddress: Future[String]
+
+  def makeFundingTx(pubkeyScript: BinaryData, amount: Satoshi, feeRatePerKw: Long): Future[MakeFundingTxResponse]
+
+  /**
+    * Committing *must* include publishing the transaction on the network.
+    *
+    * We need to be very careful here, we don't want to consider a commit 'failed' if we are not absolutely sure that the
+    * funding tx won't end up on the blockchain: if that happens and we have cancelled the channel, then we would lose our
+    * funds!
+    *
+    * @param tx
+    * @return true if success
+    *         false IF AND ONLY IF *HAS NOT BEEN PUBLISHED* otherwise funds are at risk!!!
+    */
+  def commit(tx: Transaction): Future[Boolean]
+
+  /**
+    * Cancels this transaction: this probably translates to "release locks on utxos".
+    *
+    * @param tx
+    * @return
+    */
+  def rollback(tx: Transaction): Future[Boolean]
+
+}
+
+final case class MakeFundingTxResponse(fundingTx: Transaction, fundingTxOutputIndex: Int)

eclair-core/src/main/scala/fr/acinq/eclair/blockchain/WatcherTypes.scala

@@ -0,0 +1,67 @@
+package fr.acinq.eclair.blockchain
+
+import akka.actor.ActorRef
+import fr.acinq.bitcoin.Crypto.PublicKey
+import fr.acinq.bitcoin.{BinaryData, Script, ScriptWitness, Transaction}
+import fr.acinq.eclair.channel.BitcoinEvent
+import fr.acinq.eclair.wire.ChannelAnnouncement
+
+import scala.util.{Failure, Success, Try}
+
+/**
+  * Created by PM on 19/01/2016.
+  */
+
+// @formatter:off
+
+sealed trait Watch {
+  def channel: ActorRef
+  def event: BitcoinEvent
+}
+// we need a public key script to use bitcoinj or electrum apis
+final case class WatchConfirmed(channel: ActorRef, txId: BinaryData, publicKeyScript: BinaryData, minDepth: Long, event: BitcoinEvent) extends Watch
+object WatchConfirmed {
+  // if we have the entire transaction, we can get the redeemScript from the witness, and re-compute the publicKeyScript
+  // we support both p2pkh and p2wpkh scripts
+  def apply(channel: ActorRef, tx: Transaction, minDepth: Long, event: BitcoinEvent): WatchConfirmed = WatchConfirmed(channel, tx.txid, extractPublicKeyScript(tx.txIn.head.witness), minDepth, event)
+
+  def extractPublicKeyScript(witness: ScriptWitness): BinaryData = Try(PublicKey(witness.stack.last)) match {
+    case Success(pubKey) =>
+      // if last element of the witness is a public key, then this is a p2wpkh
+      Script.write(Script.pay2wpkh(pubKey))
+    case Failure(_) =>
+      // otherwise this is a p2wsh
+      witness.stack.last
+  }
+}
+
+final case class WatchSpent(channel: ActorRef, txId: BinaryData, outputIndex: Int, publicKeyScript: BinaryData, event: BitcoinEvent) extends Watch
+object WatchSpent {
+  // if we have the entire transaction, we can get the publicKeyScript from the relevant output
+  def apply(channel: ActorRef, tx: Transaction, outputIndex: Int, event: BitcoinEvent): WatchSpent = WatchSpent(channel, tx.txid, outputIndex, tx.txOut(outputIndex).publicKeyScript, event)
+}
+final case class WatchSpentBasic(channel: ActorRef, txId: BinaryData, outputIndex: Int, publicKeyScript: BinaryData, event: BitcoinEvent) extends Watch // we use this when we don't care about the spending tx, and we also assume txid already exists
+object WatchSpentBasic {
+  // if we have the entire transaction, we can get the publicKeyScript from the relevant output
+  def apply(channel: ActorRef, tx: Transaction, outputIndex: Int, event: BitcoinEvent): WatchSpentBasic = WatchSpentBasic(channel, tx.txid, outputIndex, tx.txOut(outputIndex).publicKeyScript, event)
+}
+// TODO: notify me if confirmation number gets below minDepth?
+final case class WatchLost(channel: ActorRef, txId: BinaryData, minDepth: Long, event: BitcoinEvent) extends Watch
+
+trait WatchEvent {
+  def event: BitcoinEvent
+}
+final case class WatchEventConfirmed(event: BitcoinEvent, blockHeight: Int, txIndex: Int) extends WatchEvent
+final case class WatchEventSpent(event: BitcoinEvent, tx: Transaction) extends WatchEvent
+final case class WatchEventSpentBasic(event: BitcoinEvent) extends WatchEvent
+final case class WatchEventLost(event: BitcoinEvent) extends WatchEvent
+
+/**
+  * Publish the provided tx as soon as possible depending on locktime and csv
+  */
+final case class PublishAsap(tx: Transaction)
+final case class ParallelGetRequest(ann: Seq[ChannelAnnouncement])
+final case class IndividualResult(c: ChannelAnnouncement, tx: Option[Transaction], unspent: Boolean)
+final case class ParallelGetResponse(r: Seq[IndividualResult])
+
+// @formatter:on

eclair-core/src/main/scala/fr/acinq/eclair/blockchain/bitcoind/BitcoinCoreWallet.scala

@@ -0,0 +1,214 @@
+package fr.acinq.eclair.blockchain.bitcoind
+
+import akka.actor.{Actor, ActorRef, ActorSystem, Props}
+import fr.acinq.bitcoin.Crypto.PrivateKey
+import fr.acinq.bitcoin.{Base58Check, BinaryData, OP_PUSHDATA, OutPoint, SIGHASH_ALL, Satoshi, Script, ScriptFlags, ScriptWitness, SigVersion, Transaction, TxIn, TxOut}
+import fr.acinq.eclair.blockchain._
+import fr.acinq.eclair.blockchain.bitcoind.rpc.{BitcoinJsonRPCClient, JsonRPCError}
+import fr.acinq.eclair.channel.{BITCOIN_OUTPUT_SPENT, BITCOIN_TX_CONFIRMED}
+import fr.acinq.eclair.transactions.Transactions
+import grizzled.slf4j.Logging
+import org.json4s.JsonAST.{JBool, JDouble, JInt, JString}
+
+import scala.concurrent.duration._
+import scala.concurrent.{ExecutionContext, Future, Promise}
+
+/**
+  * Due to bitcoin-core wallet not fully supporting segwit txes yet, our current scheme is:
+  * utxos <- parent-tx <- funding-tx
+  *
+  * With:
+  *   - utxos may be non-segwit
+  *   - parent-tx pays to a p2wpkh segwit output
+  *   - funding-tx is a segwit tx
+  *
+  * Created by PM on 06/07/2017.
+  */
+class BitcoinCoreWallet(rpcClient: BitcoinJsonRPCClient, watcher: ActorRef)(implicit system: ActorSystem, ec: ExecutionContext) extends EclairWallet with Logging {
+
+  override def getBalance: Future[Satoshi] = ???
+
+  override def getFinalAddress: Future[String] = rpcClient.invoke("getnewaddress").map(json => {
+    val JString(address) = json
+    address
+  })
+
+  case class FundTransactionResponse(tx: Transaction, changepos: Int, fee: Double)
+
+  case class SignTransactionResponse(tx: Transaction, complete: Boolean)
+
+  case class MakeFundingTxResponseWithParent(parentTx: Transaction, fundingTx: Transaction, fundingTxOutputIndex: Int, priv: PrivateKey)
+
+  def fundTransaction(hex: String, lockUnspents: Boolean): Future[FundTransactionResponse] = {
+    rpcClient.invoke("fundrawtransaction", hex, BitcoinCoreWallet.Options(lockUnspents)).map(json => {
+      val JString(hex) = json \ "hex"
+      val JInt(changepos) = json \ "changepos"
+      val JDouble(fee) = json \ "fee"
+      FundTransactionResponse(Transaction.read(hex), changepos.intValue(), fee)
+    })
+  }
+
+  def fundTransaction(tx: Transaction, lockUnspents: Boolean): Future[FundTransactionResponse] =
+    fundTransaction(Transaction.write(tx).toString(), lockUnspents)
+
+  def signTransaction(hex: String): Future[SignTransactionResponse] =
+    rpcClient.invoke("signrawtransaction", hex).map(json => {
+      val JString(hex) = json \ "hex"
+      val JBool(complete) = json \ "complete"
+      SignTransactionResponse(Transaction.read(hex), complete)
+    })
+
+  def signTransaction(tx: Transaction): Future[SignTransactionResponse] =
+    signTransaction(Transaction.write(tx).toString())
+
+  def getTransaction(txid: BinaryData): Future[Transaction] = {
+    rpcClient.invoke("getrawtransaction", txid.toString()).map(json => {
+      val JString(hex) = json
+      Transaction.read(hex)
+    })
+  }
+
+  def publishTransaction(tx: Transaction)(implicit ec: ExecutionContext): Future[String] =
+    publishTransaction(Transaction.write(tx).toString())
+
+  def publishTransaction(hex: String)(implicit ec: ExecutionContext): Future[String] =
+    rpcClient.invoke("sendrawtransaction", hex) collect {
+      case JString(txid) => txid
+    }
+
+  /**
+    *
+    * @param fundingTxResponse a funding tx response
+    * @return an updated funding tx response that is properly sign
+    */
+  def sign(fundingTxResponse: MakeFundingTxResponseWithParent): MakeFundingTxResponseWithParent = {
+    // find the output that we are spending from
+    val utxo = fundingTxResponse.parentTx.txOut(fundingTxResponse.fundingTx.txIn(0).outPoint.index.toInt)
+
+    val pub = fundingTxResponse.priv.publicKey
+    val pubKeyScript = Script.pay2pkh(pub)
+    val sig = Transaction.signInput(fundingTxResponse.fundingTx, 0, pubKeyScript, SIGHASH_ALL, utxo.amount, SigVersion.SIGVERSION_WITNESS_V0, fundingTxResponse.priv)
+    val witness = ScriptWitness(Seq(sig, pub.toBin))
+    val fundingTx1 = fundingTxResponse.fundingTx.updateSigScript(0, OP_PUSHDATA(Script.write(Script.pay2wpkh(pub))) :: Nil).updateWitness(0, witness)
+
+    Transaction.correctlySpends(fundingTx1, fundingTxResponse.parentTx :: Nil, ScriptFlags.STANDARD_SCRIPT_VERIFY_FLAGS)
+    fundingTxResponse.copy(fundingTx = fundingTx1)
+  }
+
+  /**
+    *
+    * @param fundingTxResponse funding transaction response, which includes a funding tx, its parent, and the private key
+    *                          that we need to re-sign the funding
+    * @param newParentTx       new parent tx
+    * @return an updated funding transaction response where the funding tx now spends from newParentTx
+    */
+  def replaceParent(fundingTxResponse: MakeFundingTxResponseWithParent, newParentTx: Transaction): MakeFundingTxResponseWithParent = {
+    // find the output that we are spending from
+    val utxo = newParentTx.txOut(fundingTxResponse.fundingTx.txIn(0).outPoint.index.toInt)
+
+    // check that it matches what we expect, which is a P2WPKH output to our public key
+    require(utxo.publicKeyScript == Script.write(Script.pay2sh(Script.pay2wpkh(fundingTxResponse.priv.publicKey))))
+
+    // update our tx input we the hash of the new parent
+    val input = fundingTxResponse.fundingTx.txIn(0)
+    val input1 = input.copy(outPoint = input.outPoint.copy(hash = newParentTx.hash))
+    val unsignedFundingTx = fundingTxResponse.fundingTx.copy(txIn = Seq(input1))
+
+    // and re-sign it
+    sign(MakeFundingTxResponseWithParent(newParentTx, unsignedFundingTx, fundingTxResponse.fundingTxOutputIndex, fundingTxResponse.priv))
+  }
+
+  def makeParentAndFundingTx(pubkeyScript: BinaryData, amount: Satoshi, feeRatePerKw: Long): Future[MakeFundingTxResponseWithParent] =
+    for {
+      // ask for a new address and the corresponding private key
+      JString(address) <- rpcClient.invoke("getnewaddress")
+      JString(wif) <- rpcClient.invoke("dumpprivkey", address)
+      JString(segwitAddress) <- rpcClient.invoke("addwitnessaddress", address)
+      (prefix, raw) = Base58Check.decode(wif)
+      priv = PrivateKey(raw, compressed = true)
+      pub = priv.publicKey
+      // create a tx that sends money to a P2SH(WPKH) output that matches our private key
+      parentFee = Satoshi(250 * 2 * 2 * feeRatePerKw / 1024)
+      partialParentTx = Transaction(
+        version = 2,
+        txIn = Nil,
+        txOut = TxOut(amount + parentFee, Script.pay2sh(Script.pay2wpkh(pub))) :: Nil,
+        lockTime = 0L)
+      FundTransactionResponse(unsignedParentTx, _, _) <- fundTransaction(partialParentTx, lockUnspents = true)
+      // this is the first tx that we will publish, a standard tx which send money to our p2wpkh address
+      SignTransactionResponse(parentTx, true) <- signTransaction(unsignedParentTx)
+      // now we create the funding tx
+      partialFundingTx = Transaction(
+        version = 2,
+        txIn = Seq.empty[TxIn],
+        txOut = TxOut(amount, pubkeyScript) :: Nil,
+        lockTime = 0)
+      // and update it to spend from our segwit tx
+      pos = Transactions.findPubKeyScriptIndex(parentTx, Script.pay2sh(Script.pay2wpkh(pub)))
+      unsignedFundingTx = partialFundingTx.copy(txIn = TxIn(OutPoint(parentTx, pos), sequence = TxIn.SEQUENCE_FINAL, signatureScript = Nil) :: Nil)
+    } yield sign(MakeFundingTxResponseWithParent(parentTx, unsignedFundingTx, 0, priv))
+
+  /**
+    * This is a workaround for malleability
+    *
+    * @param pubkeyScript
+    * @param amount
+    * @param feeRatePerKw
+    * @return
+    */
+  override def makeFundingTx(pubkeyScript: BinaryData, amount: Satoshi, feeRatePerKw: Long): Future[MakeFundingTxResponse] = {
+    val promise = Promise[MakeFundingTxResponse]()
+    (for {
+      fundingTxResponse@MakeFundingTxResponseWithParent(parentTx, _, _, _) <- makeParentAndFundingTx(pubkeyScript, amount, feeRatePerKw)
+      input0 = parentTx.txIn.head
+      parentOfParentTx <- getTransaction(input0.outPoint.txid)
+      _ = logger.debug(s"built parentTxid=${parentTx.txid}, initializing temporary actor")
+      tempActor = system.actorOf(Props(new Actor {
+        override def receive: Receive = {
+          case WatchEventSpent(BITCOIN_OUTPUT_SPENT, spendingTx) =>
+            if (parentTx.txid != spendingTx.txid) {
+              // an input of our parent tx was spent by a tx that we're not aware of (i.e. a malleated version of our parent tx)
+              // set a new watch; if it is confirmed, we'll use it as the new parent for our funding tx
+              logger.warn(s"parent tx has been malleated: originalParentTxid=${parentTx.txid} malleated=${spendingTx.txid}")
+            }
+            watcher ! WatchConfirmed(self, spendingTx.txid, spendingTx.txOut(0).publicKeyScript, minDepth = 1, BITCOIN_TX_CONFIRMED(spendingTx))
+
+          case WatchEventConfirmed(BITCOIN_TX_CONFIRMED(tx), _, _) =>
+            // a potential parent for our funding tx has been confirmed, let's update our funding tx
+            val finalFundingTx = replaceParent(fundingTxResponse, tx)
+            promise.success(MakeFundingTxResponse(finalFundingTx.fundingTx, finalFundingTx.fundingTxOutputIndex))
+        }
+      }))
+      // we watch the first input of the parent tx, so that we can detect when it is spent by a malleated avatar
+      _ = watcher ! WatchSpent(tempActor, input0.outPoint.txid, input0.outPoint.index.toInt, parentOfParentTx.txOut(input0.outPoint.index.toInt).publicKeyScript, BITCOIN_OUTPUT_SPENT)
+      // and we publish the parent tx
+      _ = logger.info(s"publishing parent tx: txid=${parentTx.txid} tx=${Transaction.write(parentTx)}")
+      // we use a small delay so that we are sure Publish doesn't race with WatchSpent (which is ok but generates unnecessary warnings)
+      _ = system.scheduler.scheduleOnce(100 milliseconds, watcher, PublishAsap(parentTx))
+    } yield {}) onFailure {
+      case t: Throwable => promise.failure(t)
+    }
+    promise.future
+  }
+
+  override def commit(tx: Transaction): Future[Boolean] = publishTransaction(tx)
+    .map(_ => true) // if bitcoind says OK, then we consider the tx succesfully published
+    .recoverWith { case JsonRPCError(_) => getTransaction(tx.txid).map(_ => true).recover { case _ => false } } // if we get a parseable error from bitcoind AND the tx is NOT in the mempool/blockchain, then we consider that the tx was not published
+    .recover { case _ => true } // in all other cases we consider that the tx has been published
+
+
+  /**
+    * We currently only put a lock on the parent tx inputs, and we publish the parent tx immediately so there is nothing
+    * to do here.
+    *
+    * @param tx
+    * @return
+    */
+  override def rollback(tx: Transaction): Future[Boolean] = Future.successful(true)
+}
+
+object BitcoinCoreWallet {
+
+  case class Options(lockUnspents: Boolean)
+
+}

eclair-core/src/main/scala/fr/acinq/eclair/blockchain/bitcoind/ZmqWatcher.scala

@@ -1,13 +1,15 @@
-package fr.acinq.eclair.blockchain
+package fr.acinq.eclair.blockchain.bitcoind
 
 import java.util.concurrent.Executors
 
 import akka.actor.{Actor, ActorLogging, Cancellable, Props, Terminated}
 import akka.pattern.pipe
 import fr.acinq.bitcoin._
+import fr.acinq.eclair.Globals
+import fr.acinq.eclair.blockchain._
+import fr.acinq.eclair.blockchain.bitcoind.rpc.ExtendedBitcoinClient
 import fr.acinq.eclair.channel.BITCOIN_PARENT_TX_CONFIRMED
 import fr.acinq.eclair.transactions.Scripts
-import fr.acinq.eclair.{Globals, NodeParams, feerateKB2Kw}
 
 import scala.collection.SortedMap
 import scala.concurrent.duration._
@@ -20,10 +22,15 @@ import scala.util.Try
   * - also uses bitcoin-core rpc api, most notably for tx confirmation count and blockcount (because reorgs)
   * Created by PM on 21/02/2016.
   */
-class PeerWatcher(nodeParams: NodeParams, client: ExtendedBitcoinClient)(implicit ec: ExecutionContext = ExecutionContext.global) extends Actor with ActorLogging {
+class ZmqWatcher(client: ExtendedBitcoinClient)(implicit ec: ExecutionContext = ExecutionContext.global) extends Actor with ActorLogging {
+
+  import ZmqWatcher.TickNewBlock
 
   context.system.eventStream.subscribe(self, classOf[BlockchainEvent])
 
+  // this is to initialize block count
+  self ! TickNewBlock
+
   case class TriggerEvent(w: Watch, e: WatchEvent)
 
   def receive: Receive = watching(Set(), SortedMap(), None)
@@ -33,39 +40,39 @@ class PeerWatcher(nodeParams: NodeParams, client: ExtendedBitcoinClient)(implici
     case NewTransaction(tx) =>
       //log.debug(s"analyzing txid=${tx.txid} tx=${Transaction.write(tx)}")
       watches.collect {
-        case w@WatchSpentBasic(_, txid, outputIndex, event) if tx.txIn.exists(i => i.outPoint.txid == txid && i.outPoint.index == outputIndex) =>
+        case w@WatchSpentBasic(_, txid, outputIndex, _, event) if tx.txIn.exists(i => i.outPoint.txid == txid && i.outPoint.index == outputIndex) =>
           self ! TriggerEvent(w, WatchEventSpentBasic(event))
-        case w@WatchSpent(_, txid, outputIndex, event) if tx.txIn.exists(i => i.outPoint.txid == txid && i.outPoint.index == outputIndex) =>
+        case w@WatchSpent(_, txid, outputIndex, _, event) if tx.txIn.exists(i => i.outPoint.txid == txid && i.outPoint.index == outputIndex) =>
           self ! TriggerEvent(w, WatchEventSpent(event, tx))
       }
 
     case NewBlock(block) =>
       // using a Try because in tests we generate fake blocks
       log.debug(s"received blockid=${Try(block.blockId).getOrElse(BinaryData(""))}")
-      nextTick.map(_.cancel()) // this may fail or succeed, worse case scenario we will have two 'ticks in a row (no big deal)
+      nextTick.map(_.cancel()) // this may fail or succeed, worse case scenario we will have two ticks in a row (no big deal)
       log.debug(s"scheduling a new task to check on tx confirmations")
       // we do this to avoid herd effects in testing when generating a lots of blocks in a row
-      val task = context.system.scheduler.scheduleOnce(2 seconds, self, 'tick)
+      val task = context.system.scheduler.scheduleOnce(2 seconds, self, TickNewBlock)
       context become watching(watches, block2tx, Some(task))
 
-    case 'tick =>
+    case TickNewBlock =>
       client.getBlockCount.map {
         case count =>
           log.debug(s"setting blockCount=$count")
           Globals.blockCount.set(count)
           context.system.eventStream.publish(CurrentBlockCount(count))
       }
-      client.estimateSmartFee(nodeParams.smartfeeNBlocks).map {
+      /*client.estimateSmartFee(nodeParams.smartfeeNBlocks).map {
         case feeratePerKB if feeratePerKB > 0 =>
           val feeratePerKw = feerateKB2Kw(feeratePerKB)
           log.debug(s"setting feeratePerKB=$feeratePerKB -> feeratePerKw=$feeratePerKw")
           Globals.feeratePerKw.set(feeratePerKw)
           context.system.eventStream.publish(CurrentFeerate(feeratePerKw))
         case _ => () // bitcoind cannot estimate feerate
-      }
+      }*/
       // TODO: beware of the herd effect
       watches.collect {
-        case w@WatchConfirmed(_, txId, minDepth, event) =>
+        case w@WatchConfirmed(_, txId, _, minDepth, event) =>
           log.debug(s"checking confirmations of txid=$txId")
           client.getTxConfirmations(txId.toString).map {
             case Some(confirmations) if confirmations >= minDepth =>
@@ -99,10 +106,11 @@ class PeerWatcher(nodeParams: NodeParams, client: ExtendedBitcoinClient)(implici
         require(tx.txIn.size == 1, s"watcher only supports tx with 1 input, this tx has ${tx.txIn.size} inputs")
         val parentTxid = tx.txIn(0).outPoint.txid
         log.info(s"txid=${tx.txid} has a relative timeout of $csvTimeout blocks, watching parenttxid=$parentTxid tx=${Transaction.write(tx)}")
-        self ! WatchConfirmed(self, parentTxid, minDepth = 1, BITCOIN_PARENT_TX_CONFIRMED(tx))
+        val parentPublicKey = fr.acinq.bitcoin.Script.write(fr.acinq.bitcoin.Script.pay2wsh(tx.txIn.head.witness.stack.last))
+        self ! WatchConfirmed(self, parentTxid, parentPublicKey, minDepth = 1, BITCOIN_PARENT_TX_CONFIRMED(tx))
       } else if (cltvTimeout > blockCount) {
         log.info(s"delaying publication of txid=${tx.txid} until block=$cltvTimeout (curblock=$blockCount)")
-        val block2tx1 = block2tx.updated(cltvTimeout, tx +: block2tx.getOrElse(cltvTimeout, Seq.empty[Transaction]))
+        val block2tx1 = block2tx.updated(cltvTimeout, block2tx.getOrElse(cltvTimeout, Seq.empty[Transaction]) :+ tx)
         context.become(watching(watches, block2tx1, None))
       } else publish(tx)
 
@@ -113,13 +121,10 @@ class PeerWatcher(nodeParams: NodeParams, client: ExtendedBitcoinClient)(implici
       val absTimeout = blockHeight + csvTimeout
       if (absTimeout > blockCount) {
         log.info(s"delaying publication of txid=${tx.txid} until block=$absTimeout (curblock=$blockCount)")
-        val block2tx1 = block2tx.updated(absTimeout, tx +: block2tx.getOrElse(absTimeout, Seq.empty[Transaction]))
+        val block2tx1 = block2tx.updated(absTimeout, block2tx.getOrElse(absTimeout, Seq.empty[Transaction]) :+ tx)
         context.become(watching(watches, block2tx1, None))
       } else publish(tx)
 
-    case MakeFundingTx(ourCommitPub, theirCommitPub, amount, feeRatePerKw) =>
-      client.makeFundingTx(ourCommitPub, theirCommitPub, amount, feeRatePerKw).pipeTo(sender)
-
     case ParallelGetRequest(ann) => client.getParallel(ann).pipeTo(sender)
 
     case Terminated(channel) =>
@@ -127,11 +132,13 @@ class PeerWatcher(nodeParams: NodeParams, client: ExtendedBitcoinClient)(implici
       val deprecatedWatches = watches.filter(_.channel == channel)
       context.become(watching(watches -- deprecatedWatches, block2tx, None))
 
+    case 'watches => sender ! watches
+
   }
 
   def addWatch(w: Watch, watches: Set[Watch], block2tx: SortedMap[Long, Seq[Transaction]]) = {
     w match {
-      case WatchSpentBasic(_, txid, outputIndex, _) =>
+      case WatchSpentBasic(_, txid, outputIndex, _, _) =>
         // not: we assume parent tx was published, we just need to make sure this particular output has not been spent
         client.isTransactionOuputSpendable(txid.toString(), outputIndex, true).collect {
           case false =>
@@ -139,7 +146,7 @@ class PeerWatcher(nodeParams: NodeParams, client: ExtendedBitcoinClient)(implici
             self ! TriggerEvent(w, WatchEventSpentBasic(w.event))
         }
 
-      case w@WatchSpent(_, txid, outputIndex, _) =>
+      case w@WatchSpent(_, txid, outputIndex, _, _) =>
         // first let's see if the parent tx was published or not
         client.getTxConfirmations(txid.toString()).collect {
           case Some(_) =>
@@ -154,6 +161,8 @@ class PeerWatcher(nodeParams: NodeParams, client: ExtendedBitcoinClient)(implici
                       case txs =>
                         log.warning(s"found ${txs.size} txs since blockhash=$blockhash")
                         txs.foreach(tx => self ! NewTransaction(tx))
+                    } onFailure {
+                      case t: Throwable => log.error(t, "")
                     }
                 }
                 client.getMempool().map {
@@ -164,7 +173,7 @@ class PeerWatcher(nodeParams: NodeParams, client: ExtendedBitcoinClient)(implici
             }
         }
 
-      case w: WatchConfirmed => self ! 'tick
+      case w: WatchConfirmed => self ! TickNewBlock
 
       case w => log.warning(s"ignoring $w (not implemented)")
     }
@@ -184,14 +193,17 @@ class PeerWatcher(nodeParams: NodeParams, client: ExtendedBitcoinClient)(implici
         import akka.pattern.after
 
         import scala.concurrent.duration._
-        after(3 seconds, context.system.scheduler)(Future.successful()).map(x => publish(tx, isRetry = true))
+        after(3 seconds, context.system.scheduler)(Future.successful({})).map(x => publish(tx, isRetry = true))
       case t: Throwable => log.error(s"cannot publish tx: reason=${t.getMessage} txid=${tx.txid} tx=${BinaryData(Transaction.write(tx))}")
     }
   }
+
 }
 
-object PeerWatcher {
+object ZmqWatcher {
 
-  def props(nodeParams: NodeParams, client: ExtendedBitcoinClient)(implicit ec: ExecutionContext = ExecutionContext.global) = Props(new PeerWatcher(nodeParams, client)(ec))
+  def props(client: ExtendedBitcoinClient)(implicit ec: ExecutionContext = ExecutionContext.global) = Props(new ZmqWatcher(client)(ec))
+
+  case object TickNewBlock
 
 }

eclair-core/src/main/scala/fr/acinq/eclair/blockchain/bitcoind/rpc/BitcoinJsonRPCClient.scala

@@ -1,4 +1,4 @@
-package fr.acinq.eclair.blockchain.rpc
+package fr.acinq.eclair.blockchain.bitcoind.rpc
 
 import java.io.IOException
 
@@ -8,12 +8,15 @@ import akka.http.scaladsl.marshalling.Marshal
 import akka.http.scaladsl.model._
 import akka.http.scaladsl.model.headers.{Authorization, BasicHttpCredentials}
 import akka.http.scaladsl.unmarshalling.Unmarshal
-import akka.stream.ActorMaterializer
+import akka.stream.{ActorMaterializer, OverflowStrategy, QueueOfferResult}
+import akka.stream.scaladsl.{Keep, Sink, Source}
 import de.heikoseeberger.akkahttpjson4s.Json4sSupport._
 import org.json4s.JsonAST.JValue
 import org.json4s.{DefaultFormats, jackson}
 
-import scala.concurrent.{ExecutionContext, Future}
+import scala.concurrent.{ExecutionContext, Future, Promise}
+import scala.concurrent.ExecutionContext.Implicits.global
+import scala.util.{Failure, Success}
 
 // @formatter:off
 case class JsonRPCRequest(jsonrpc: String = "1.0", id: String = "scala-client", method: String, params: Seq[Any])
@@ -26,16 +29,35 @@ class BitcoinJsonRPCClient(user: String, password: String, host: String = "127.0
 
   val scheme = if (ssl) "https" else "http"
   val uri = Uri(s"$scheme://$host:$port")
-
-  implicit val materializer = ActorMaterializer()
-  val httpClient = Http(system)
   implicit val serialization = jackson.Serialization
   implicit val formats = DefaultFormats
 
+  implicit val materializer = ActorMaterializer()
+  val httpClientFlow = Http().cachedHostConnectionPool[Promise[HttpResponse]](host, port)
+
+  val queueSize = 512
+  val queue = Source.queue[(HttpRequest, Promise[HttpResponse])](queueSize, OverflowStrategy.dropNew)
+      .via(httpClientFlow)
+      .toMat(Sink.foreach({
+        case ((Success(resp), p)) => p.success(resp)
+        case ((Failure(e), p))    => p.failure(e)
+      }))(Keep.left)
+      .run()
+
+  def queueRequest(request: HttpRequest): Future[HttpResponse] = {
+    val responsePromise = Promise[HttpResponse]()
+    queue.offer(request -> responsePromise).flatMap {
+      case QueueOfferResult.Enqueued    => responsePromise.future
+      case QueueOfferResult.Dropped     => Future.failed(new RuntimeException("Queue overflowed. Try again later."))
+      case QueueOfferResult.Failure(ex) => Future.failed(ex)
+      case QueueOfferResult.QueueClosed => Future.failed(new RuntimeException("Queue was closed (pool shut down) while running the request. Try again later."))
+    }
+  }
+
   def invoke(method: String, params: Any*)(implicit ec: ExecutionContext): Future[JValue] =
     for {
       entity <- Marshal(JsonRPCRequest(method = method, params = params)).to[RequestEntity]
-      httpRes <- httpClient.singleRequest(HttpRequest(uri = uri, method = HttpMethods.POST).addHeader(Authorization(BasicHttpCredentials(user, password))).withEntity(entity))
+      httpRes <- queueRequest(HttpRequest(uri = "/", method = HttpMethods.POST).addHeader(Authorization(BasicHttpCredentials(user, password))).withEntity(entity))
       jsonRpcRes <- Unmarshal(httpRes).to[JsonRPCResponse].map {
         case JsonRPCResponse(_, Some(error), _) => throw JsonRPCError(error)
         case o => o
@@ -47,7 +69,7 @@ class BitcoinJsonRPCClient(user: String, password: String, host: String = "127.0
   def invoke(request: Seq[(String, Seq[Any])])(implicit ec: ExecutionContext): Future[Seq[JValue]] =
     for {
       entity <- Marshal(request.map(r => JsonRPCRequest(method = r._1, params = r._2))).to[RequestEntity]
-      httpRes <- httpClient.singleRequest(HttpRequest(uri = uri, method = HttpMethods.POST).addHeader(Authorization(BasicHttpCredentials(user, password))).withEntity(entity))
+      httpRes <- queueRequest(HttpRequest(uri = "/", method = HttpMethods.POST).addHeader(Authorization(BasicHttpCredentials(user, password))).withEntity(entity))
       jsonRpcRes <- Unmarshal(httpRes).to[Seq[JsonRPCResponse]].map {
         //case JsonRPCResponse(_, Some(error), _) => throw JsonRPCError(error)
         case o => o

eclair-core/src/main/scala/fr/acinq/eclair/blockchain/bitcoind/rpc/ExtendedBitcoinClient.scala

@@ -1,13 +1,9 @@
-package fr.acinq.eclair.blockchain
+package fr.acinq.eclair.blockchain.bitcoind.rpc
 
-import fr.acinq.bitcoin.Crypto.{PrivateKey, PublicKey}
 import fr.acinq.bitcoin._
-import fr.acinq.eclair.blockchain.rpc.{BitcoinJsonRPCClient, JsonRPCError}
-import fr.acinq.eclair.channel.Helpers
+import fr.acinq.eclair.blockchain.{IndividualResult, ParallelGetResponse}
 import fr.acinq.eclair.fromShortId
-import fr.acinq.eclair.transactions.Transactions
 import fr.acinq.eclair.wire.ChannelAnnouncement
-import org.bouncycastle.util.encoders.Hex
 import org.json4s.JsonAST._
 
 import scala.concurrent.{ExecutionContext, Future}
@@ -16,28 +12,26 @@ import scala.util.Try
 /**
   * Created by PM on 26/04/2016.
   */
-class ExtendedBitcoinClient(val client: BitcoinJsonRPCClient) {
-
-  import ExtendedBitcoinClient._
+class ExtendedBitcoinClient(val rpcClient: BitcoinJsonRPCClient) {
 
   implicit val formats = org.json4s.DefaultFormats
 
   // TODO: this will probably not be needed once segwit is merged into core
   val protocolVersion = Protocol.PROTOCOL_VERSION
 
-  def tx2Hex(tx: Transaction): String = Hex.toHexString(Transaction.write(tx, protocolVersion))
+  def tx2Hex(tx: Transaction): String = toHexString(Transaction.write(tx, protocolVersion))
 
   def hex2tx(hex: String): Transaction = Transaction.read(hex, protocolVersion)
 
   def getTxConfirmations(txId: String)(implicit ec: ExecutionContext): Future[Option[Int]] =
-    client.invoke("getrawtransaction", txId, 1) // we choose verbose output to get the number of confirmations
+    rpcClient.invoke("getrawtransaction", txId, 1) // we choose verbose output to get the number of confirmations
       .map(json => Some((json \ "confirmations").extractOrElse[Int](0)))
       .recover {
         case t: JsonRPCError if t.error.code == -5 => None
       }
 
   def getTxBlockHash(txId: String)(implicit ec: ExecutionContext): Future[Option[String]] =
-    client.invoke("getrawtransaction", txId, 1) // we choose verbose output to get the number of confirmations
+    rpcClient.invoke("getrawtransaction", txId, 1) // we choose verbose output to get the number of confirmations
       .map(json => (json \ "blockhash").extractOpt[String])
       .recover {
         case t: JsonRPCError if t.error.code == -5 => None
@@ -45,7 +39,7 @@ class ExtendedBitcoinClient(val client: BitcoinJsonRPCClient) {
 
   def getBlockHashesSinceBlockHash(blockHash: String, previous: Seq[String] = Nil)(implicit ec: ExecutionContext): Future[Seq[String]] =
     for {
-      nextblockhash_opt <- client.invoke("getblock", blockHash).map(json => ((json \ "nextblockhash").extractOpt[String]))
+      nextblockhash_opt <- rpcClient.invoke("getblock", blockHash).map(json => ((json \ "nextblockhash").extractOpt[String]))
       res <- nextblockhash_opt match {
         case Some(nextBlockHash) => getBlockHashesSinceBlockHash(nextBlockHash, previous :+ nextBlockHash)
         case None => Future.successful(previous)
@@ -54,7 +48,7 @@ class ExtendedBitcoinClient(val client: BitcoinJsonRPCClient) {
 
   def getTxsSinceBlockHash(blockHash: String, previous: Seq[Transaction] = Nil)(implicit ec: ExecutionContext): Future[Seq[Transaction]] =
     for {
-      (nextblockhash_opt, txids) <- client.invoke("getblock", blockHash).map(json => ((json \ "nextblockhash").extractOpt[String], (json \ "tx").extract[List[String]]))
+      (nextblockhash_opt, txids) <- rpcClient.invoke("getblock", blockHash).map(json => ((json \ "nextblockhash").extractOpt[String], (json \ "tx").extract[List[String]]))
       next <- Future.sequence(txids.map(getTransaction(_)))
       res <- nextblockhash_opt match {
         case Some(nextBlockHash) => getTxsSinceBlockHash(nextBlockHash, previous ++ next)
@@ -64,7 +58,7 @@ class ExtendedBitcoinClient(val client: BitcoinJsonRPCClient) {
 
   def getMempool()(implicit ec: ExecutionContext): Future[Seq[Transaction]] =
     for {
-      txids <- client.invoke("getrawmempool").map(json => json.extract[List[String]])
+      txids <- rpcClient.invoke("getrawmempool").map(json => json.extract[List[String]])
       txs <- Future.sequence(txids.map(getTransaction(_)))
     } yield txs
 
@@ -79,7 +73,7 @@ class ExtendedBitcoinClient(val client: BitcoinJsonRPCClient) {
     * @return a Future[txid] where txid (a String) is the is of the tx that sends the bitcoins
     */
   def sendFromAccount(account: String, destination: String, amount: Double)(implicit ec: ExecutionContext): Future[String] =
-    client.invoke("sendfrom", account, destination, amount) collect {
+    rpcClient.invoke("sendfrom", account, destination, amount) collect {
       case JString(txid) => txid
     }
 
@@ -89,7 +83,7 @@ class ExtendedBitcoinClient(val client: BitcoinJsonRPCClient) {
     * @return
     */
   def getRawTransaction(txId: String)(implicit ec: ExecutionContext): Future[String] =
-    client.invoke("getrawtransaction", txId) collect {
+    rpcClient.invoke("getrawtransaction", txId) collect {
       case JString(raw) => raw
     }
 
@@ -98,8 +92,8 @@ class ExtendedBitcoinClient(val client: BitcoinJsonRPCClient) {
 
   def getTransaction(height: Int, index: Int)(implicit ec: ExecutionContext): Future[Transaction] =
     for {
-      hash <- client.invoke("getblockhash", height).map(json => json.extract[String])
-      json <- client.invoke("getblock", hash)
+      hash <- rpcClient.invoke("getblockhash", height).map(json => json.extract[String])
+      json <- rpcClient.invoke("getblock", hash)
       JArray(txs) = json \ "tx"
       txid = txs(index).extract[String]
       tx <- getTransaction(txid)
@@ -107,7 +101,7 @@ class ExtendedBitcoinClient(val client: BitcoinJsonRPCClient) {
 
   def isTransactionOuputSpendable(txId: String, ouputIndex: Int, includeMempool: Boolean)(implicit ec: ExecutionContext): Future[Boolean] =
     for {
-      json <- client.invoke("gettxout", txId, ouputIndex, includeMempool)
+      json <- rpcClient.invoke("gettxout", txId, ouputIndex, includeMempool)
     } yield json != JNull
 
 
@@ -121,7 +115,7 @@ class ExtendedBitcoinClient(val client: BitcoinJsonRPCClient) {
   def getTransactionShortId(txId: String)(implicit ec: ExecutionContext): Future[(Int, Int)] = {
     val future = for {
       Some(blockHash) <- getTxBlockHash(txId)
-      json <- client.invoke("getblock", blockHash)
+      json <- rpcClient.invoke("getblock", blockHash)
       JInt(height) = json \ "height"
       JString(hash) = json \ "hash"
       JArray(txs) = json \ "tx"
@@ -131,60 +125,14 @@ class ExtendedBitcoinClient(val client: BitcoinJsonRPCClient) {
     future
   }
 
-  def fundTransaction(hex: String)(implicit ec: ExecutionContext): Future[FundTransactionResponse] = {
-    client.invoke("fundrawtransaction", hex /*hex.take(4) + "0000" + hex.drop(4)*/).map(json => {
-      val JString(hex) = json \ "hex"
-      val JInt(changepos) = json \ "changepos"
-      val JDouble(fee) = json \ "fee"
-      FundTransactionResponse(Transaction.read(hex), changepos.intValue(), fee)
-    })
-  }
-
-  def fundTransaction(tx: Transaction)(implicit ec: ExecutionContext): Future[FundTransactionResponse] =
-    fundTransaction(tx2Hex(tx))
-
-  def signTransaction(hex: String)(implicit ec: ExecutionContext): Future[SignTransactionResponse] =
-    client.invoke("signrawtransaction", hex).map(json => {
-      val JString(hex) = json \ "hex"
-      val JBool(complete) = json \ "complete"
-      SignTransactionResponse(Transaction.read(hex), complete)
-    })
-
-  def signTransaction(tx: Transaction)(implicit ec: ExecutionContext): Future[SignTransactionResponse] =
-    signTransaction(tx2Hex(tx))
-
   def publishTransaction(hex: String)(implicit ec: ExecutionContext): Future[String] =
-    client.invoke("sendrawtransaction", hex) collect {
+    rpcClient.invoke("sendrawtransaction", hex) collect {
       case JString(txid) => txid
     }
 
   def publishTransaction(tx: Transaction)(implicit ec: ExecutionContext): Future[String] =
     publishTransaction(tx2Hex(tx))
 
-
-  def makeFundingTx(localFundingPubkey: PublicKey, remoteFundingPubkey: PublicKey, amount: Satoshi, feeRatePerKw: Long)(implicit ec: ExecutionContext): Future[MakeFundingTxResponse] =
-    for {
-    // ask for a new address and the corresponding private key
-      JString(address) <- client.invoke("getnewaddress")
-      JString(wif) <- client.invoke("dumpprivkey", address)
-      JString(segwitAddress) <- client.invoke("addwitnessaddress", address)
-      priv = PrivateKey.fromBase58(wif, Base58.Prefix.SecretKeyTestnet)
-      pub = priv.publicKey
-      _ = require(segwitAddress == Base58Check.encode(Base58.Prefix.ScriptAddressTestnet, Crypto.hash160(Script.write(Script.pay2wpkh(priv.publicKey.hash160)))))
-      // create a tx that sends money to a P2SH(WPKH) output that matches our private key
-      parentFee = Satoshi(250 * 2 * 2 * feeRatePerKw / 1024)
-      partialParentTx = Transaction(version = 2, txIn = Nil, txOut = TxOut(amount + parentFee, Script.pay2sh(Script.pay2wpkh(pub))) :: Nil, lockTime = 0L)
-      FundTransactionResponse(unsignedParentTx, _, _) <- fundTransaction(partialParentTx)
-      // this is the first tx that we will publish, a standard tx which send money to our p2wpkh address
-      SignTransactionResponse(parentTx, true) <- signTransaction(unsignedParentTx)
-      // now we create the funding tx
-      (partialFundingTx, _) = Transactions.makePartialFundingTx(amount, localFundingPubkey, remoteFundingPubkey)
-      // and update it to spend from our segwit tx
-      pos = Transactions.findPubKeyScriptIndex(parentTx, Script.pay2sh(Script.pay2wpkh(pub)))
-      unsignedFundingTx = partialFundingTx.copy(txIn = TxIn(OutPoint(parentTx, pos), sequence = TxIn.SEQUENCE_FINAL, signatureScript = Nil) :: Nil)
-    } yield Helpers.Funding.sign(MakeFundingTxResponse(parentTx, unsignedFundingTx, 0, priv))
-
-
   /**
     * We need this to compute absolute timeouts expressed in number of blocks (where getBlockCount would be equivalent
     * to time.now())
@@ -193,26 +141,10 @@ class ExtendedBitcoinClient(val client: BitcoinJsonRPCClient) {
     * @return the current number of blocks in the active chain
     */
   def getBlockCount(implicit ec: ExecutionContext): Future[Long] =
-    client.invoke("getblockcount") collect {
+    rpcClient.invoke("getblockcount") collect {
       case JInt(count) => count.toLong
     }
 
-  /**
-    * We need this to keep commitment tx fees in sync with the state of the network
-    *
-    * @param nBlocks number of blocks until tx is confirmed
-    * @param ec
-    * @return the current
-    */
-  def estimateSmartFee(nBlocks: Int)(implicit ec: ExecutionContext): Future[Long] =
-    client.invoke("estimatesmartfee", nBlocks).map(json => {
-      json \ "feerate" match {
-        case JDouble(feerate) => Btc(feerate).toLong
-        case JInt(feerate) if feerate.toLong < 0 => feerate.toLong
-        case JInt(feerate) => Btc(feerate.toLong).toLong
-      }
-    })
-
   def getParallel(awaiting: Seq[ChannelAnnouncement]): Future[ParallelGetResponse] = {
     case class TxCoordinate(blockHeight: Int, txIndex: Int, outputIndex: Int)
 
@@ -226,8 +158,8 @@ class ExtendedBitcoinClient(val client: BitcoinJsonRPCClient) {
     implicit val formats = org.json4s.DefaultFormats
 
     for {
-      blockHashes: Seq[String] <- client.invoke(coordinates.map(coord => ("getblockhash", coord._1.blockHeight :: Nil))).map(_.map(_.extractOrElse[String]("00" * 32)))
-      txids: Seq[String] <- client.invoke(blockHashes.map(h => ("getblock", h :: Nil)))
+      blockHashes: Seq[String] <- rpcClient.invoke(coordinates.map(coord => ("getblockhash", coord._1.blockHeight :: Nil))).map(_.map(_.extractOrElse[String]("00" * 32)))
+      txids: Seq[String] <- rpcClient.invoke(blockHashes.map(h => ("getblock", h :: Nil)))
         .map(_.zipWithIndex)
         .map(_.map {
           case (json, idx) => Try {
@@ -235,24 +167,16 @@ class ExtendedBitcoinClient(val client: BitcoinJsonRPCClient) {
             txs(coordinates(idx)._1.txIndex).extract[String]
           } getOrElse ("00" * 32)
         })
-      txs <- client.invoke(txids.map(txid => ("getrawtransaction", txid :: Nil))).map(_.map {
+      txs <- rpcClient.invoke(txids.map(txid => ("getrawtransaction", txid :: Nil))).map(_.map {
         case JString(raw) => Some(Transaction.read(raw))
         case _ => None
       })
-      unspent <- client.invoke(txids.zipWithIndex.map(txid => ("gettxout", txid._1 :: coordinates(txid._2)._1.outputIndex :: true :: Nil))).map(_.map(_ != JNull))
+      unspent <- rpcClient.invoke(txids.zipWithIndex.map(txid => ("gettxout", txid._1 :: coordinates(txid._2)._1.outputIndex :: true :: Nil))).map(_.map(_ != JNull))
     } yield ParallelGetResponse(awaiting.zip(txs.zip(unspent)).map(x => IndividualResult(x._1, x._2._1, x._2._2)))
 
   }
 }
 
-object ExtendedBitcoinClient {
-
-  case class FundTransactionResponse(tx: Transaction, changepos: Int, fee: Double)
-
-  case class SignTransactionResponse(tx: Transaction, complete: Boolean)
-
-}
-
 
 /*object Test extends App {
 

eclair-core/src/main/scala/fr/acinq/eclair/blockchain/bitcoind/zmq/ZMQActor.scala

@@ -1,4 +1,4 @@
-package fr.acinq.eclair.blockchain.zmq
+package fr.acinq.eclair.blockchain.bitcoind.zmq
 
 import akka.actor.{Actor, ActorLogging}
 import fr.acinq.bitcoin.{Block, Transaction}
@@ -15,6 +15,8 @@ import scala.util.Try
   */
 class ZMQActor(address: String, connected: Option[Promise[Boolean]] = None) extends Actor with ActorLogging {
 
+  import ZMQActor._
+
   val ctx = new ZContext
 
   val subscriber = ctx.createSocket(ZMQ.SUB)
@@ -75,3 +77,13 @@ class ZMQActor(address: String, connected: Option[Promise[Boolean]] = None) exte
   }
 
 }
+
+object ZMQActor {
+
+  // @formatter:off
+  sealed trait ZMQEvent
+  case object ZMQConnected extends ZMQEvent
+  case object ZMQDisconnected extends ZMQEvent
+  // @formatter:on
+
+}

eclair-core/src/main/scala/fr/acinq/eclair/blockchain/bitcoinj/BitcoinjKit.scala

@@ -0,0 +1,152 @@
+package fr.acinq.eclair.blockchain.bitcoinj
+
+import java.io.File
+import java.net.InetSocketAddress
+
+import akka.actor.ActorSystem
+import com.google.common.util.concurrent.{FutureCallback, Futures}
+import fr.acinq.bitcoin.Transaction
+import fr.acinq.eclair.Globals
+import fr.acinq.eclair.blockchain.CurrentBlockCount
+import fr.acinq.eclair.blockchain.bitcoinj.BitcoinjKit._
+import grizzled.slf4j.Logging
+import org.bitcoinj.core.TransactionConfidence.ConfidenceType
+import org.bitcoinj.core.listeners._
+import org.bitcoinj.core.{Block, Context, FilteredBlock, NetworkParameters, Peer, PeerAddress, StoredBlock, VersionMessage, Transaction => BitcoinjTransaction}
+import org.bitcoinj.kits.WalletAppKit
+import org.bitcoinj.params.{RegTestParams, TestNet3Params}
+import org.bitcoinj.utils.Threading
+import org.bitcoinj.wallet.Wallet
+
+import scala.collection.JavaConversions._
+import scala.concurrent.Promise
+import scala.util.Try
+
+/**
+  * Created by PM on 09/07/2017.
+  */
+class BitcoinjKit(chain: String, datadir: File, staticPeers: List[InetSocketAddress] = Nil)(implicit system: ActorSystem) extends WalletAppKit(chain2Params(chain), datadir, "bitcoinj", true) with Logging {
+
+  if (staticPeers.size > 0) {
+    logger.info(s"using staticPeers=${staticPeers.mkString(",")}")
+    setPeerNodes(staticPeers.map(addr => new PeerAddress(params, addr)).head)
+  }
+
+  // tells us when the peerGroup/chain/wallet are accessible
+  private val initializedPromise = Promise[Boolean]()
+  val initialized = initializedPromise.future
+
+  // tells us as soon as we know the current block height
+  private val atCurrentHeightPromise = Promise[Boolean]()
+  val atCurrentHeight = atCurrentHeightPromise.future
+
+  // tells us when we are at current block height
+  //  private val syncedPromise = Promise[Boolean]()
+  //  val synced = syncedPromise.future
+
+  private def updateBlockCount(blockCount: Int) = {
+    // when synchronizing we don't want to advertise previous blocks
+    if (Globals.blockCount.get() < blockCount) {
+      logger.debug(s"current blockchain height=$blockCount")
+      system.eventStream.publish(CurrentBlockCount(blockCount))
+      Globals.blockCount.set(blockCount)
+    }
+  }
+
+  override def onSetupCompleted(): Unit = {
+
+    logger.info(s"peerGroup.getMinBroadcastConnections==${peerGroup().getMinBroadcastConnections}")
+    logger.info(s"peerGroup.getMinBroadcastConnections==${peerGroup().getMinBroadcastConnections}")
+
+    peerGroup().setMinRequiredProtocolVersion(70015) // bitcoin core 0.13
+    wallet().watchMode = true
+
+    //    setDownloadListener(new DownloadProgressTracker {
+    //      override def doneDownload(): Unit = {
+    //        super.doneDownload()
+    //        // may be called multiple times
+    //        syncedPromise.trySuccess(true)
+    //      }
+    //    })
+
+    // we set the blockcount to the previous stored block height
+    updateBlockCount(chain().getBestChainHeight)
+
+    // as soon as we are connected the peers will tell us their current height and we will advertise it immediately
+    peerGroup().addConnectedEventListener(new PeerConnectedEventListener {
+      override def onPeerConnected(peer: Peer, peerCount: Int): Unit = {
+        if ((peer.getPeerVersionMessage.localServices & VersionMessage.NODE_WITNESS) == 0) {
+          peer.close()
+        } else {
+          Context.propagate(wallet.getContext)
+          // we wait for at least 3 peers before relying on the information they are giving, but we trust localhost
+          if (peer.getAddress.getAddr.isLoopbackAddress || peerCount > 3) {
+            updateBlockCount(peerGroup().getMostCommonChainHeight)
+            // may be called multiple times
+            atCurrentHeightPromise.trySuccess(true)
+          }
+        }
+      }
+    })
+
+    peerGroup.addBlocksDownloadedEventListener(new BlocksDownloadedEventListener {
+      override def onBlocksDownloaded(peer: Peer, block: Block, filteredBlock: FilteredBlock, blocksLeft: Int): Unit = {
+        Context.propagate(wallet.getContext)
+        logger.debug(s"received block=${block.getHashAsString} (size=${block.bitcoinSerialize().size} txs=${Try(block.getTransactions.size).getOrElse(-1)}) filteredBlock=${Try(filteredBlock.getHash.toString).getOrElse("N/A")} (size=${Try(block.bitcoinSerialize().size).getOrElse(-1)} txs=${Try(filteredBlock.getTransactionCount).getOrElse(-1)})")
+        Try {
+          if (filteredBlock.getAssociatedTransactions.size() > 0) {
+            logger.info(s"retrieving full block ${block.getHashAsString}")
+            Futures.addCallback(peer.getBlock(block.getHash), new FutureCallback[Block] {
+              override def onFailure(throwable: Throwable) = logger.error(s"could not retrieve full block=${block.getHashAsString}")
+
+              override def onSuccess(fullBlock: Block) = {
+                Try {
+                  Context.propagate(wallet.getContext)
+                  fullBlock.getTransactions.foreach {
+                    case tx =>
+                      logger.debug(s"received tx=${tx.getHashAsString} witness=${Transaction.read(tx.bitcoinSerialize()).txIn(0).witness.stack.size} from fullBlock=${fullBlock.getHash} confidence=${tx.getConfidence}")
+                      val depthInBlocks = tx.getConfidence.getConfidenceType match {
+                        case ConfidenceType.DEAD => -1
+                        case _ => tx.getConfidence.getDepthInBlocks
+                      }
+                      system.eventStream.publish(NewConfidenceLevel(Transaction.read(tx.bitcoinSerialize()), 0, depthInBlocks))
+                  }
+                }
+              }
+            }, Threading.USER_THREAD)
+          }
+        }
+      }
+    })
+
+    chain().addNewBestBlockListener(new NewBestBlockListener {
+      override def notifyNewBestBlock(storedBlock: StoredBlock): Unit =
+        updateBlockCount(storedBlock.getHeight)
+    })
+
+    wallet().addTransactionConfidenceEventListener(new TransactionConfidenceEventListener {
+      override def onTransactionConfidenceChanged(wallet: Wallet, bitcoinjTx: BitcoinjTransaction): Unit = {
+        Context.propagate(wallet.getContext)
+        val tx = Transaction.read(bitcoinjTx.bitcoinSerialize())
+        logger.info(s"tx confidence changed for txid=${tx.txid} confidence=${bitcoinjTx.getConfidence} witness=${bitcoinjTx.getWitness(0)}")
+        val (blockHeight, confirmations) = bitcoinjTx.getConfidence.getConfidenceType match {
+          case ConfidenceType.DEAD => (-1, -1)
+          case ConfidenceType.BUILDING => (bitcoinjTx.getConfidence.getAppearedAtChainHeight, bitcoinjTx.getConfidence.getDepthInBlocks)
+          case _ => (-1, bitcoinjTx.getConfidence.getDepthInBlocks)
+        }
+        system.eventStream.publish(NewConfidenceLevel(tx, blockHeight, confirmations))
+      }
+    })
+
+    initializedPromise.success(true)
+  }
+
+}
+
+object BitcoinjKit {
+
+  def chain2Params(chain: String): NetworkParameters = chain match {
+    case "regtest" => RegTestParams.get()
+    case "test" => TestNet3Params.get()
+  }
+}

eclair-core/src/main/scala/fr/acinq/eclair/blockchain/bitcoinj/BitcoinjWallet.scala

@@ -0,0 +1,68 @@
+package fr.acinq.eclair.blockchain.bitcoinj
+
+import fr.acinq.bitcoin.{BinaryData, Satoshi, Transaction}
+import fr.acinq.eclair.blockchain.{EclairWallet, MakeFundingTxResponse}
+import grizzled.slf4j.Logging
+import org.bitcoinj.core.{Coin, Context, Transaction => BitcoinjTransaction}
+import org.bitcoinj.script.Script
+import org.bitcoinj.wallet.{SendRequest, Wallet}
+
+import scala.collection.JavaConversions._
+import scala.concurrent.{ExecutionContext, Future}
+
+/**
+  * Created by PM on 08/07/2017.
+  */
+class BitcoinjWallet(val fWallet: Future[Wallet])(implicit ec: ExecutionContext) extends EclairWallet with Logging {
+
+  fWallet.map(wallet => wallet.allowSpendingUnconfirmedTransactions())
+
+  override def getBalance: Future[Satoshi] = for {
+    wallet <- fWallet
+  } yield {
+    Context.propagate(wallet.getContext)
+    Satoshi(wallet.getBalance.longValue())
+  }
+
+  override def getFinalAddress: Future[String] = for {
+    wallet <- fWallet
+  } yield {
+    Context.propagate(wallet.getContext)
+    wallet.currentReceiveAddress().toBase58
+  }
+
+  override def makeFundingTx(pubkeyScript: BinaryData, amount: Satoshi, feeRatePerKw: Long): Future[MakeFundingTxResponse] = for {
+    wallet <- fWallet
+  } yield {
+    logger.info(s"building funding tx")
+    Context.propagate(wallet.getContext)
+    val script = new Script(pubkeyScript)
+    val tx = new BitcoinjTransaction(wallet.getParams)
+    tx.addOutput(Coin.valueOf(amount.amount), script)
+    val req = SendRequest.forTx(tx)
+    wallet.completeTx(req)
+    val txOutputIndex = tx.getOutputs.find(_.getScriptPubKey.equals(script)).get.getIndex
+    MakeFundingTxResponse(Transaction.read(tx.bitcoinSerialize()), txOutputIndex)
+  }
+
+  override def commit(tx: Transaction): Future[Boolean] = {
+    // we make sure that we haven't double spent our own tx (eg by opening 2 channels at the same time)
+    val serializedTx = Transaction.write(tx)
+    logger.info(s"committing tx: txid=${tx.txid} tx=$serializedTx")
+    for {
+      wallet <- fWallet
+      _ = Context.propagate(wallet.getContext)
+      bitcoinjTx = new org.bitcoinj.core.Transaction(wallet.getParams(), serializedTx)
+      canCommit = wallet.maybeCommitTx(bitcoinjTx)
+      _ = logger.info(s"commit txid=${tx.txid} result=$canCommit")
+    } yield canCommit
+  }
+
+  /**
+    * There are no locks on bitcoinj, this is a no-op
+    *
+    * @param tx
+    * @return
+    */
+  override def rollback(tx: Transaction) = Future.successful(true)
+}

eclair-core/src/main/scala/fr/acinq/eclair/blockchain/bitcoinj/BitcoinjWatcher.scala

@@ -0,0 +1,193 @@
+package fr.acinq.eclair.blockchain.bitcoinj
+
+import akka.actor.{Actor, ActorLogging, Props, Terminated}
+import com.google.common.collect.ImmutableList
+import com.google.common.util.concurrent.{FutureCallback, Futures}
+import fr.acinq.bitcoin.Crypto.PublicKey
+import fr.acinq.bitcoin.Script.{pay2wsh, write}
+import fr.acinq.bitcoin.{BinaryData, Satoshi, Transaction, TxIn, TxOut}
+import fr.acinq.eclair.blockchain._
+import fr.acinq.eclair.channel.BITCOIN_PARENT_TX_CONFIRMED
+import fr.acinq.eclair.transactions.Scripts
+import fr.acinq.eclair.{Globals, fromShortId}
+import org.bitcoinj.core.{Context, Transaction => BitcoinjTransaction}
+import org.bitcoinj.kits.WalletAppKit
+import org.bitcoinj.script.Script
+
+import scala.collection.SortedMap
+import scala.concurrent.ExecutionContext
+import scala.util.{Failure, Success, Try}
+
+final case class NewConfidenceLevel(tx: Transaction, blockHeight: Int, confirmations: Int) extends BlockchainEvent
+
+/**
+  * A blockchain watcher that:
+  * - receives bitcoin events (new blocks and new txes) directly from the bitcoin network
+  * - also uses bitcoin-core rpc api, most notably for tx confirmation count and blockcount (because reorgs)
+  * Created by PM on 21/02/2016.
+  */
+class BitcoinjWatcher(val kit: WalletAppKit)(implicit ec: ExecutionContext = ExecutionContext.global) extends Actor with ActorLogging {
+
+  context.system.eventStream.subscribe(self, classOf[BlockchainEvent])
+  context.system.eventStream.subscribe(self, classOf[NewConfidenceLevel])
+
+  val broadcaster = context.actorOf(Props(new Broadcaster(kit: WalletAppKit)), name = "broadcaster")
+
+  case class TriggerEvent(w: Watch, e: WatchEvent)
+
+  def receive: Receive = watching(Set(), SortedMap(), Nil, Nil)
+
+  def watching(watches: Set[Watch], block2tx: SortedMap[Long, Seq[Transaction]], oldEvents: Seq[NewConfidenceLevel], sent: Seq[TriggerEvent]): Receive = {
+
+    case event@NewConfidenceLevel(tx, blockHeight, confirmations) =>
+      log.debug(s"analyzing txid=${tx.txid} confirmations=$confirmations tx=${Transaction.write(tx)}")
+      watches.collect {
+        case w@WatchSpentBasic(_, txid, outputIndex, _, event) if tx.txIn.exists(i => i.outPoint.txid == txid && i.outPoint.index == outputIndex) =>
+          self ! TriggerEvent(w, WatchEventSpentBasic(event))
+        case w@WatchSpent(_, txid, outputIndex, _, event) if tx.txIn.exists(i => i.outPoint.txid == txid && i.outPoint.index == outputIndex) =>
+          self ! TriggerEvent(w, WatchEventSpent(event, tx))
+        case w@WatchConfirmed(_, txId, _, minDepth, event) if txId == tx.txid && confirmations >= minDepth =>
+          self ! TriggerEvent(w, WatchEventConfirmed(event, blockHeight, 0))
+      }
+      context become watching(watches, block2tx, oldEvents.filterNot(_.tx.txid == tx.txid) :+ event, sent)
+
+    case t@TriggerEvent(w, e) if watches.contains(w) && !sent.contains(t) =>
+      log.info(s"triggering $w")
+      w.channel ! e
+      // NB: WatchSpent are permanent because we need to detect multiple spending of the funding tx
+      // They are never cleaned up but it is not a big deal for now (1 channel == 1 watch)
+      val newWatches = if (!w.isInstanceOf[WatchSpent]) watches - w else watches
+      context.become(watching(newWatches, block2tx, oldEvents, sent :+ t))
+
+    case CurrentBlockCount(count) => {
+      val toPublish = block2tx.filterKeys(_ <= count)
+      toPublish.values.flatten.map(tx => publish(tx))
+      context.become(watching(watches, block2tx -- toPublish.keys, oldEvents, sent))
+    }
+
+    case w: Watch if !watches.contains(w) =>
+      w match {
+        case w: WatchConfirmed => addHint(w.publicKeyScript)
+        case w: WatchSpent => addHint(w.publicKeyScript)
+        case w: WatchSpentBasic => addHint(w.publicKeyScript)
+        case _ => ()
+      }
+      log.debug(s"adding watch $w for $sender")
+      log.info(s"resending ${oldEvents.size} events!")
+      oldEvents.foreach(self ! _)
+      context.watch(w.channel)
+      context.become(watching(watches + w, block2tx, oldEvents, sent))
+
+    case PublishAsap(tx) =>
+      val blockCount = Globals.blockCount.get()
+      val cltvTimeout = Scripts.cltvTimeout(tx)
+      val csvTimeout = Scripts.csvTimeout(tx)
+      if (csvTimeout > 0) {
+        require(tx.txIn.size == 1, s"watcher only supports tx with 1 input, this tx has ${tx.txIn.size} inputs")
+        val parentTxid = tx.txIn(0).outPoint.txid
+        log.info(s"txid=${tx.txid} has a relative timeout of $csvTimeout blocks, watching parenttxid=$parentTxid tx=${Transaction.write(tx)}")
+        val parentPublicKey = fr.acinq.bitcoin.Script.write(fr.acinq.bitcoin.Script.pay2wsh(tx.txIn.head.witness.stack.last))
+        self ! WatchConfirmed(self, parentTxid, parentPublicKey, minDepth = 1, BITCOIN_PARENT_TX_CONFIRMED(tx))
+      } else if (cltvTimeout > blockCount) {
+        log.info(s"delaying publication of txid=${tx.txid} until block=$cltvTimeout (curblock=$blockCount)")
+        val block2tx1 = block2tx.updated(cltvTimeout, block2tx.getOrElse(cltvTimeout, Seq.empty[Transaction]) :+ tx)
+        context.become(watching(watches, block2tx1, oldEvents, sent))
+      } else publish(tx)
+
+    case WatchEventConfirmed(BITCOIN_PARENT_TX_CONFIRMED(tx), blockHeight, _) =>
+      log.info(s"parent tx of txid=${tx.txid} has been confirmed")
+      val blockCount = Globals.blockCount.get()
+      val csvTimeout = Scripts.csvTimeout(tx)
+      val absTimeout = blockHeight + csvTimeout
+      if (absTimeout > blockCount) {
+        log.info(s"delaying publication of txid=${tx.txid} until block=$absTimeout (curblock=$blockCount)")
+        val block2tx1 = block2tx.updated(absTimeout, block2tx.getOrElse(absTimeout, Seq.empty[Transaction]) :+ tx)
+        context.become(watching(watches, block2tx1, oldEvents, sent))
+      } else publish(tx)
+
+    case ParallelGetRequest(announcements) => sender ! ParallelGetResponse(announcements.map {
+      case c =>
+        log.info(s"blindly validating channel=$c")
+        val pubkeyScript = write(pay2wsh(Scripts.multiSig2of2(PublicKey(c.bitcoinKey1), PublicKey(c.bitcoinKey2))))
+        val (_, _, outputIndex) = fromShortId(c.shortChannelId)
+        val fakeFundingTx = Transaction(
+          version = 2,
+          txIn = Seq.empty[TxIn],
+          txOut = List.fill(outputIndex + 1)(TxOut(Satoshi(0), pubkeyScript)), // quick and dirty way to be sure that the outputIndex'th output is of the expected format
+          lockTime = 0)
+        IndividualResult(c, Some(fakeFundingTx), true)
+    })
+
+    case Terminated(channel) =>
+      // we remove watches associated to dead actor
+      val deprecatedWatches = watches.filter(_.channel == channel)
+      context.become(watching(watches -- deprecatedWatches, block2tx, oldEvents, sent))
+
+    case 'watches => sender ! watches
+
+  }
+
+  /**
+    * Bitcoinj needs hints to be able to detect transactions
+    *
+    * @param pubkeyScript
+    * @return
+    */
+  def addHint(pubkeyScript: BinaryData) = {
+    Context.propagate(kit.wallet.getContext)
+    val script = new Script(pubkeyScript)
+    // set creation time to 2017/09/01, so bitcoinj can still use its checkpoints optimizations
+    script.setCreationTimeSeconds(1501538400L) // 2017-09-01
+    kit.wallet().addWatchedScripts(ImmutableList.of(script))
+  }
+
+  def publish(tx: Transaction): Unit = broadcaster ! tx
+
+}
+
+object BitcoinjWatcher {
+
+  def props(kit: WalletAppKit)(implicit ec: ExecutionContext = ExecutionContext.global) = Props(new BitcoinjWatcher(kit)(ec))
+
+}
+
+class Broadcaster(kit: WalletAppKit) extends Actor with ActorLogging {
+
+  override def receive: Receive = {
+    case tx: Transaction =>
+      broadcast(tx)
+      context become waiting(Nil)
+  }
+
+  def waiting(stash: Seq[Transaction]): Receive = {
+    case BroadcastResult(tx, result) =>
+      result match {
+        case Success(_) => log.info(s"broadcast success for txid=${tx.txid}")
+        case Failure(t) => log.error(t, s"broadcast failure for txid=${tx.txid}: ")
+      }
+      stash match {
+        case head :: rest =>
+          broadcast(head)
+          context become waiting(rest)
+        case Nil => context become receive
+      }
+    case tx: Transaction =>
+      log.info(s"stashing txid=${tx.txid} for broadcast")
+      context become waiting(stash :+ tx)
+  }
+
+  case class BroadcastResult(tx: Transaction, result: Try[Boolean])
+
+  def broadcast(tx: Transaction) = {
+    Context.propagate(kit.wallet().getContext)
+    val bitcoinjTx = new org.bitcoinj.core.Transaction(kit.wallet().getParams, Transaction.write(tx))
+    log.info(s"broadcasting txid=${tx.txid}")
+    Futures.addCallback(kit.peerGroup().broadcastTransaction(bitcoinjTx).future(), new FutureCallback[BitcoinjTransaction] {
+      override def onFailure(t: Throwable): Unit = self ! BroadcastResult(tx, Failure(t))
+
+      override def onSuccess(v: BitcoinjTransaction): Unit = self ! BroadcastResult(tx, Success(true))
+    }, context.dispatcher)
+  }
+
+
+}

eclair-core/src/main/scala/fr/acinq/eclair/blockchain/electrum/ElectrumClient.scala

@@ -0,0 +1,488 @@
+package fr.acinq.eclair.blockchain.electrum
+
+import java.io.InputStream
+import java.net.InetSocketAddress
+
+import akka.actor.{Actor, ActorLogging, ActorRef, Stash, Terminated}
+import akka.io.{IO, Tcp}
+import akka.util.ByteString
+import fr.acinq.bitcoin._
+import fr.acinq.eclair.Globals
+import fr.acinq.eclair.blockchain.CurrentBlockCount
+import fr.acinq.eclair.blockchain.bitcoind.rpc.{Error, JsonRPCRequest, JsonRPCResponse}
+import org.json4s.JsonAST._
+import org.json4s.jackson.JsonMethods
+import org.json4s.{DefaultFormats, JInt, JLong, JString}
+import org.spongycastle.util.encoders.Hex
+
+import scala.annotation.tailrec
+import scala.concurrent.ExecutionContext.Implicits.global
+import scala.concurrent.duration._
+import scala.util.Random
+
+class ElectrumClient(serverAddresses: Seq[InetSocketAddress]) extends Actor with Stash with ActorLogging {
+
+  import ElectrumClient._
+  import context.system
+
+  implicit val formats = DefaultFormats
+
+  val newline = "\n"
+  val connectionFailures = collection.mutable.HashMap.empty[InetSocketAddress, Long]
+
+  val version = ServerVersion("2.1.7", "1.1")
+  // we need to regularly send a ping in order not to get disconnected
+  context.system.scheduler.schedule(30 seconds, 30 seconds, self, version)
+
+  override def unhandled(message: Any): Unit = {
+    message match {
+      case _: Tcp.ConnectionClosed =>
+        val nextAddress = nextPeer()
+        log.warning(s"connection failed, trying $nextAddress")
+        self ! Tcp.Connect(nextAddress)
+        statusListeners.map(_ ! ElectrumDisconnected)
+        context.system.eventStream.publish(ElectrumDisconnected)
+        context become disconnected
+
+      case Terminated(deadActor) =>
+        val removeMe = addressSubscriptions collect {
+          case (address, actor) if actor == deadActor => address
+        }
+        addressSubscriptions --= removeMe
+
+        val removeMe1 = scriptHashSubscriptions collect {
+          case (scriptHash, actor) if actor == deadActor => scriptHash
+        }
+        scriptHashSubscriptions --= removeMe1
+        statusListeners -= deadActor
+        headerSubscriptions -= deadActor
+
+      case _: ServerVersion => () // we only handle this when connected
+
+      case _: ServerVersionResponse => () // we just ignore these messages, they are used as pings
+
+      case _ => log.warning(s"unhandled $message")
+    }
+  }
+
+  val statusListeners = collection.mutable.HashSet.empty[ActorRef]
+
+  def send(connection: ActorRef, request: JsonRPCRequest): Unit = {
+    import org.json4s.JsonDSL._
+    import org.json4s._
+    import org.json4s.jackson.JsonMethods._
+
+    log.debug(s"sending $request")
+    val json = ("method" -> request.method) ~ ("params" -> request.params.map {
+      case s: String => new JString(s)
+      case b: BinaryData => new JString(b.toString())
+      case t: Int => new JInt(t)
+      case t: Long => new JLong(t)
+      case t: Double => new JDouble(t)
+    }) ~ ("id" -> request.id) ~ ("jsonrpc" -> request.jsonrpc)
+    val serialized = compact(render(json))
+    val bytes = (serialized + newline).getBytes
+    connection ! Tcp.Write(ByteString.fromArray(bytes))
+  }
+
+  private def nextPeer() = {
+    val nextPos = Random.nextInt(serverAddresses.size)
+    serverAddresses(nextPos)
+  }
+
+  private def updateBlockCount(blockCount: Long) = {
+    // when synchronizing we don't want to advertise previous blocks
+    if (Globals.blockCount.get() < blockCount) {
+      log.debug(s"current blockchain height=$blockCount")
+      system.eventStream.publish(CurrentBlockCount(blockCount))
+      Globals.blockCount.set(blockCount)
+    }
+  }
+
+  val addressSubscriptions = collection.mutable.HashMap.empty[String, Set[ActorRef]]
+  val scriptHashSubscriptions = collection.mutable.HashMap.empty[BinaryData, Set[ActorRef]]
+  val headerSubscriptions = collection.mutable.HashSet.empty[ActorRef]
+
+  context.system.eventStream.publish(ElectrumDisconnected)
+  self ! Tcp.Connect(serverAddresses.head)
+
+  var reqId = 0L
+
+  def receive = disconnected
+
+  def disconnected: Receive = {
+    case c: Tcp.Connect =>
+      log.info(s"connecting to $c")
+      IO(Tcp) ! c
+
+    case Tcp.Connected(remote, _) =>
+      log.info(s"connected to $remote")
+      connectionFailures.clear()
+      val connection = sender()
+      connection ! Tcp.Register(self)
+      val request = version
+      send(connection, makeRequest(request, "" + reqId))
+      reqId = reqId + 1
+      context become waitingForVersion(connection, remote)
+
+    case AddStatusListener(actor) => statusListeners += actor
+
+    case Tcp.CommandFailed(Tcp.Connect(remoteAddress, _, _, _, _)) =>
+      val nextAddress = nextPeer()
+      log.warning(s"connection to $remoteAddress failed, trying $nextAddress")
+      connectionFailures.put(remoteAddress, connectionFailures.getOrElse(remoteAddress, 0L) + 1L)
+      val count = connectionFailures.getOrElse(nextAddress, 0L)
+      val delay = Math.min(Math.pow(2.0, count), 60.0) seconds;
+      context.system.scheduler.scheduleOnce(delay, self, Tcp.Connect(nextAddress))
+  }
+
+  def waitingForVersion(connection: ActorRef, remote: InetSocketAddress): Receive = {
+    case Tcp.Received(data) =>
+      val response = parseResponse(new String(data.toArray)).right.get
+      val serverVersion = parseJsonResponse(version, response)
+      log.debug(s"serverVersion=$serverVersion")
+      val request = HeaderSubscription(self)
+      send(connection, makeRequest(request, "" + reqId))
+      headerSubscriptions += self
+      log.debug("waiting for tip")
+      reqId = reqId + 1
+      context become waitingForTip(connection, remote: InetSocketAddress)
+
+    case AddStatusListener(actor) => statusListeners += actor
+  }
+
+  def waitingForTip(connection: ActorRef, remote: InetSocketAddress): Receive = {
+    case Tcp.Received(data) =>
+      val response = parseResponse(new String(data.toArray)).right.get
+      val header = parseHeader(response.result)
+      log.debug(s"connected, tip = ${header.block_hash} $header")
+      updateBlockCount(header.block_height)
+      statusListeners.map(_ ! ElectrumReady)
+      context.system.eventStream.publish(ElectrumConnected)
+      context become connected(connection, remote, header, "", Map.empty)
+
+    case AddStatusListener(actor) => statusListeners += actor
+  }
+
+  def connected(connection: ActorRef, remoteAddress: InetSocketAddress, tip: Header, buffer: String, requests: Map[String, (Request, ActorRef)]): Receive = {
+    case AddStatusListener(actor) =>
+      statusListeners += actor
+      actor ! ElectrumReady
+
+    case HeaderSubscription(actor) =>
+      headerSubscriptions += actor
+      actor ! HeaderSubscriptionResponse(tip)
+      context watch actor
+
+    case request: Request =>
+      val curReqId = "" + reqId
+      send(connection, makeRequest(request, curReqId))
+      request match {
+        case AddressSubscription(address, actor) =>
+          addressSubscriptions.update(address, addressSubscriptions.getOrElse(address, Set()) + actor)
+          context watch actor
+        case ScriptHashSubscription(scriptHash, actor) =>
+          scriptHashSubscriptions.update(scriptHash, scriptHashSubscriptions.getOrElse(scriptHash, Set()) + actor)
+          context watch actor
+        case _ => ()
+      }
+      reqId = reqId + 1
+      context become connected(connection, remoteAddress, tip, buffer, requests + (curReqId -> (request, sender())))
+
+    case Tcp.Received(data) =>
+      val buffer1 = buffer + new String(data.toArray)
+      val (jsons, buffer2) = buffer1.split(newline) match {
+        case chunks if buffer1.endsWith(newline) => (chunks, "")
+        case chunks => (chunks.dropRight(1), chunks.last)
+      }
+      jsons.map(parseResponse(_)).map(self ! _)
+      context become connected(connection, remoteAddress, tip, buffer2, requests)
+
+    case Right(json: JsonRPCResponse) =>
+      requests.get(json.id) match {
+        case Some((request, requestor)) =>
+          val response = parseJsonResponse(request, json)
+          log.debug(s"got response for reqId=${json.id} request=$request response=$response")
+          requestor ! response
+        case None =>
+          log.warning(s"could not find requestor for reqId=${json.id} response=$json")
+      }
+      context become connected(connection, remoteAddress, tip, buffer, requests - json.id)
+
+    case Left(response: HeaderSubscriptionResponse) => headerSubscriptions.map(_ ! response)
+
+    case Left(response: AddressSubscriptionResponse) => addressSubscriptions.get(response.address).map(listeners => listeners.map(_ ! response))
+
+    case Left(response: ScriptHashSubscriptionResponse) => scriptHashSubscriptions.get(response.scriptHash).map(listeners => listeners.map(_ ! response))
+
+    case HeaderSubscriptionResponse(newtip) =>
+      log.info(s"new tip $newtip")
+      updateBlockCount(newtip.block_height)
+      context become connected(connection, remoteAddress, newtip, buffer, requests)
+  }
+
+}
+
+object ElectrumClient {
+
+  def apply(addresses: java.util.List[InetSocketAddress]): ElectrumClient = {
+    import collection.JavaConversions._
+    new ElectrumClient(addresses)
+  }
+
+  /**
+    * Utility function to converts a publicKeyScript to electrum's scripthash
+    *
+    * @param publicKeyScript public key script
+    * @return the hash of the public key script, as used by ElectrumX's hash-based methods
+    */
+  def computeScriptHash(publicKeyScript: BinaryData): BinaryData = Crypto.sha256(publicKeyScript).reverse
+
+  // @formatter:off
+  sealed trait Request
+  sealed trait Response
+
+  case class ServerVersion(clientName: String, protocolVersion: String) extends Request
+  case class ServerVersionResponse(clientName: String, protocolVersion: String) extends Response
+
+  case class GetAddressHistory(address: String) extends Request
+  case class TransactionHistoryItem(height: Long, tx_hash: BinaryData)
+  case class GetAddressHistoryResponse(address: String, history: Seq[TransactionHistoryItem]) extends Response
+
+  case class GetScriptHashHistory(scriptHash: BinaryData) extends Request
+  case class GetScriptHashHistoryResponse(scriptHash: BinaryData, history: Seq[TransactionHistoryItem]) extends Response
+
+  case class AddressListUnspent(address: String) extends Request
+  case class UnspentItem(tx_hash: BinaryData, tx_pos: Int, value: Long, height: Long) {
+    lazy val outPoint = OutPoint(tx_hash.reverse, tx_pos)
+  }
+  case class AddressListUnspentResponse(address: String, unspents: Seq[UnspentItem]) extends Response
+
+  case class ScriptHashListUnspent(scriptHash: BinaryData) extends Request
+  case class ScriptHashListUnspentResponse(scriptHash: BinaryData, unspents: Seq[UnspentItem]) extends Response
+
+  case class BroadcastTransaction(tx: Transaction) extends Request
+  case class BroadcastTransactionResponse(tx: Transaction, error: Option[Error]) extends Response
+
+  case class GetTransaction(txid: BinaryData) extends Request
+  case class GetTransactionResponse(tx: Transaction) extends Response
+
+  case class GetMerkle(txid: BinaryData, height: Long) extends Request
+  case class GetMerkleResponse(txid: BinaryData, merkle: Seq[BinaryData], block_height: Long, pos: Int) extends Response {
+    lazy val root: BinaryData = {
+      @tailrec
+      def loop(pos: Int, hashes: Seq[BinaryData]): BinaryData = {
+        if (hashes.length == 1) hashes(0).reverse
+        else {
+          val h = if (pos % 2 == 1) Crypto.hash256(hashes(1) ++ hashes(0)) else Crypto.hash256(hashes(0) ++ hashes(1))
+          loop(pos / 2, h +: hashes.drop(2))
+        }
+      }
+      loop(pos, BinaryData(txid.reverse) +: merkle.map(b => BinaryData(b.reverse)))
+    }
+  }
+
+  case class AddressSubscription(address: String, actor: ActorRef) extends Request
+  case class AddressSubscriptionResponse(address: String, status: String) extends Response
+
+  case class ScriptHashSubscription(scriptHash: BinaryData, actor: ActorRef) extends Request
+  case class ScriptHashSubscriptionResponse(scriptHash: BinaryData, status: String) extends Response
+
+  case class HeaderSubscription(actor: ActorRef) extends Request
+  case class HeaderSubscriptionResponse(header: Header) extends Response
+
+  case class Header(block_height: Long, version: Long, prev_block_hash: BinaryData, merkle_root: BinaryData, timestamp: Long, bits: Long, nonce: Long) {
+    lazy val block_hash: BinaryData = {
+      val blockHeader = BlockHeader(version, prev_block_hash.reverse, merkle_root.reverse, timestamp, bits, nonce)
+      blockHeader.hash.reverse
+    }
+  }
+
+  object Header {
+    def makeHeader(height: Long, header: BlockHeader) = ElectrumClient.Header(0, header.version, header.hashPreviousBlock, header.hashMerkleRoot, header.time, header.bits, header.nonce)
+
+    val RegtestGenesisHeader = makeHeader(0, Block.RegtestGenesisBlock.header)
+    val TestnetGenesisHeader = makeHeader(0, Block.TestnetGenesisBlock.header)
+  }
+
+  case class TransactionHistory(history: Seq[TransactionHistoryItem]) extends Response
+
+  case class AddressStatus(address: String, status: String) extends Response
+
+  case class ServerError(request: Request, error: Error) extends Response
+  case class AddStatusListener(actor: ActorRef) extends Response
+
+  sealed trait ElectrumEvent
+  case object ElectrumConnected extends ElectrumEvent
+  case object ElectrumReady extends ElectrumEvent
+  case object ElectrumDisconnected extends ElectrumEvent
+
+  // @formatter:on
+
+  def parseResponse(input: String): Either[Response, JsonRPCResponse] = {
+    implicit val formats = DefaultFormats
+    val json = JsonMethods.parse(new String(input))
+    json \ "method" match {
+      case JString(method) =>
+        // this is a jsonrpc request, i.e. a subscription response
+        val JArray(params) = json \ "params"
+        Left(((method, params): @unchecked) match {
+          case ("blockchain.headers.subscribe", header :: Nil) => HeaderSubscriptionResponse(parseHeader(header))
+          case ("blockchain.address.subscribe", JString(address) :: JNull :: Nil) => AddressSubscriptionResponse(address, "")
+          case ("blockchain.address.subscribe", JString(address) :: JString(status) :: Nil) => AddressSubscriptionResponse(address, status)
+          case ("blockchain.scripthash.subscribe", JString(scriptHashHex) :: JNull :: Nil) => ScriptHashSubscriptionResponse(BinaryData(scriptHashHex), "")
+          case ("blockchain.scripthash.subscribe", JString(scriptHashHex) :: JString(status) :: Nil) => ScriptHashSubscriptionResponse(BinaryData(scriptHashHex), status)
+        })
+      case _ => Right(parseJsonRpcResponse(json))
+    }
+  }
+
+  def parseJsonRpcResponse(json: JValue): JsonRPCResponse = {
+    implicit val formats = DefaultFormats
+    val result = json \ "result"
+    val error = json \ "error" match {
+      case JNull => None
+      case JNothing => None
+      case other =>
+        val message = other \ "message" match {
+          case JString(value) => value
+          case _ => ""
+        }
+        val code = other \ " code" match {
+          case JInt(value) => value.intValue()
+          case JLong(value) => value.intValue()
+          case _ => 0
+        }
+        Some(Error(code, message))
+    }
+    val id = json \ "id" match {
+      case JString(value) => value
+      case JInt(value) => value.toString()
+      case JLong(value) => value.toString
+      case _ => ""
+    }
+    JsonRPCResponse(result, error, id)
+  }
+
+  def longField(jvalue: JValue, field: String): Long = (jvalue \ field: @unchecked) match {
+    case JLong(value) => value.longValue()
+    case JInt(value) => value.longValue()
+  }
+
+  def intField(jvalue: JValue, field: String): Int = (jvalue \ field: @unchecked) match {
+    case JLong(value) => value.intValue()
+    case JInt(value) => value.intValue()
+  }
+
+  def parseHeader(json: JValue): Header = {
+    val block_height = longField(json, "block_height")
+    val version = longField(json, "version")
+    val timestamp = longField(json, "timestamp")
+    val bits = longField(json, "bits")
+    val nonce = longField(json, "nonce")
+    val JString(prev_block_hash) = json \ "prev_block_hash"
+    val JString(merkle_root) = json \ "merkle_root"
+    Header(block_height, version, prev_block_hash, merkle_root, timestamp, bits, nonce)
+  }
+
+  def makeRequest(request: Request, reqId: String): JsonRPCRequest = request match {
+    case ServerVersion(clientName, protocolVersion) => JsonRPCRequest(id = reqId, method = "server.version", params = clientName :: protocolVersion :: Nil)
+    case GetAddressHistory(address) => JsonRPCRequest(id = reqId, method = "blockchain.address.get_history", params = address :: Nil)
+    case GetScriptHashHistory(scripthash) => JsonRPCRequest(id = reqId, method = "blockchain.scripthash.get_history", params = scripthash.toString() :: Nil)
+    case AddressListUnspent(address) => JsonRPCRequest(id = reqId, method = "blockchain.address.listunspent", params = address :: Nil)
+    case ScriptHashListUnspent(scripthash) => JsonRPCRequest(id = reqId, method = "blockchain.scripthash.listunspent", params = scripthash.toString() :: Nil)
+    case AddressSubscription(address, _) => JsonRPCRequest(id = reqId, method = "blockchain.address.subscribe", params = address :: Nil)
+    case ScriptHashSubscription(scriptHash, _) => JsonRPCRequest(id = reqId, method = "blockchain.scripthash.subscribe", params = scriptHash.toString() :: Nil)
+    case BroadcastTransaction(tx) => JsonRPCRequest(id = reqId, method = "blockchain.transaction.broadcast", params = Hex.toHexString(Transaction.write(tx)) :: Nil)
+    case GetTransaction(txid: BinaryData) => JsonRPCRequest(id = reqId, method = "blockchain.transaction.get", params = txid :: Nil)
+    case HeaderSubscription(_) => JsonRPCRequest(id = reqId, method = "blockchain.headers.subscribe", params = Nil)
+    case GetMerkle(txid, height) => JsonRPCRequest(id = reqId, method = "blockchain.transaction.get_merkle", params = txid :: height :: Nil)
+  }
+
+  def parseJsonResponse(request: Request, json: JsonRPCResponse): Response = {
+    implicit val formats = DefaultFormats
+    json.error match {
+      case Some(error) => (request: @unchecked) match {
+        case BroadcastTransaction(tx) => BroadcastTransactionResponse(tx, Some(error)) // for this request type, error are considered a "normal" response
+        case _ => ServerError(request, error)
+      }
+      case None => (request: @unchecked) match {
+        case s: ServerVersion =>
+          val JArray(jitems) = json.result
+          val JString(clientName) = jitems(0)
+          val JString(protocolVersion) = jitems(1)
+          ServerVersionResponse(clientName, protocolVersion)
+        case GetAddressHistory(address) =>
+          val JArray(jitems) = json.result
+          val items = jitems.map(jvalue => {
+            val JString(tx_hash) = jvalue \ "tx_hash"
+            val height = longField(jvalue, "height")
+            TransactionHistoryItem(height, tx_hash)
+          })
+          GetAddressHistoryResponse(address, items)
+        case GetScriptHashHistory(scripthash) =>
+          val JArray(jitems) = json.result
+          val items = jitems.map(jvalue => {
+            val JString(tx_hash) = jvalue \ "tx_hash"
+            val height = longField(jvalue, "height")
+            TransactionHistoryItem(height, tx_hash)
+          })
+          GetScriptHashHistoryResponse(scripthash, items)
+        case AddressListUnspent(address) =>
+          val JArray(jitems) = json.result
+          val items = jitems.map(jvalue => {
+            val JString(tx_hash) = jvalue \ "tx_hash"
+            val tx_pos = intField(jvalue, "tx_pos")
+            val height = longField(jvalue, "height")
+            val value = longField(jvalue, "value")
+            UnspentItem(tx_hash, tx_pos, value, height)
+          })
+          AddressListUnspentResponse(address, items)
+        case ScriptHashListUnspent(scripthash) =>
+          val JArray(jitems) = json.result
+          val items = jitems.map(jvalue => {
+            val JString(tx_hash) = jvalue \ "tx_hash"
+            val tx_pos = intField(jvalue, "tx_pos")
+            val height = longField(jvalue, "height")
+            val value = longField(jvalue, "value")
+            UnspentItem(tx_hash, tx_pos, value, height)
+          })
+          ScriptHashListUnspentResponse(scripthash, items)
+        case GetTransaction(_) =>
+          val JString(hex) = json.result
+          GetTransactionResponse(Transaction.read(hex))
+        case AddressSubscription(address, _) => json.result match {
+          case JString(status) => AddressSubscriptionResponse(address, status)
+          case _ => AddressSubscriptionResponse(address, "")
+        }
+        case ScriptHashSubscription(scriptHash, _) => json.result match {
+          case JString(status) => ScriptHashSubscriptionResponse(scriptHash, status)
+          case _ => ScriptHashSubscriptionResponse(scriptHash, "")
+        }
+        case BroadcastTransaction(tx) =>
+          val JString(txid) = json.result
+          require(BinaryData(txid) == tx.txid)
+          BroadcastTransactionResponse(tx, None)
+        case GetMerkle(txid, height) =>
+          val JArray(hashes) = json.result \ "merkle"
+          val leaves = hashes collect { case JString(value) => BinaryData(value) }
+          val blockHeight = longField(json.result, "block_height")
+          val JInt(pos) = json.result \ "pos"
+          GetMerkleResponse(txid, leaves, blockHeight, pos.toInt)
+      }
+    }
+  }
+
+  def readServerAddresses(stream: InputStream): Seq[InetSocketAddress] = try {
+    val JObject(values) = JsonMethods.parse(stream)
+    val addresses = values.map {
+      case (name, fields) =>
+        val JString(port) = fields \ "t"
+        new InetSocketAddress(name, port.toInt)
+    }
+    val randomized = Random.shuffle(addresses)
+    randomized
+  } finally {
+    stream.close()
+  }
+}

eclair-core/src/main/scala/fr/acinq/eclair/blockchain/electrum/ElectrumEclairWallet.scala

@@ -0,0 +1,69 @@
+package fr.acinq.eclair.blockchain.electrum
+
+import akka.actor.{ActorRef, ActorSystem}
+import akka.pattern.ask
+import fr.acinq.bitcoin.{Base58, Base58Check, BinaryData, OP_EQUAL, OP_HASH160, OP_PUSHDATA, Satoshi, Script, Transaction, TxOut}
+import fr.acinq.eclair.blockchain.electrum.ElectrumClient.BroadcastTransaction
+import fr.acinq.eclair.blockchain.electrum.ElectrumWallet._
+import fr.acinq.eclair.blockchain.{EclairWallet, MakeFundingTxResponse}
+import grizzled.slf4j.Logging
+
+import scala.concurrent.{ExecutionContext, Future}
+
+class ElectrumEclairWallet(val wallet: ActorRef)(implicit system: ActorSystem, ec: ExecutionContext, timeout: akka.util.Timeout) extends EclairWallet with Logging {
+
+  override def getBalance = (wallet ? GetBalance).mapTo[GetBalanceResponse].map(balance => balance.confirmed + balance.unconfirmed)
+
+  override def getFinalAddress = (wallet ? GetCurrentReceiveAddress).mapTo[GetCurrentReceiveAddressResponse].map(_.address)
+
+  override def makeFundingTx(pubkeyScript: BinaryData, amount: Satoshi, feeRatePerKw: Long) = {
+    val tx = Transaction(version = 2, txIn = Nil, txOut = TxOut(amount, pubkeyScript) :: Nil, lockTime = 0)
+    (wallet ? CompleteTransaction(tx, feeRatePerKw)).mapTo[CompleteTransactionResponse].map(response => response match {
+      case CompleteTransactionResponse(tx1, None) => MakeFundingTxResponse(tx1, 0)
+      case CompleteTransactionResponse(_, Some(error)) => throw error
+    })
+  }
+
+  override def commit(tx: Transaction): Future[Boolean] =
+    (wallet ? BroadcastTransaction(tx)) flatMap {
+      case ElectrumClient.BroadcastTransactionResponse(tx, None) =>
+        //tx broadcast successfully: commit tx
+        wallet ? CommitTransaction(tx)
+      case ElectrumClient.BroadcastTransactionResponse(tx, Some(error)) if error.message.contains("transaction already in block chain") =>
+        // tx was already in the blockchain, that's weird but it is OK
+        wallet ? CommitTransaction(tx)
+      case ElectrumClient.BroadcastTransactionResponse(_, Some(error)) =>
+        //tx broadcast failed: cancel tx
+        logger.error(s"cannot broadcast tx ${tx.txid}: $error")
+        wallet ? CancelTransaction(tx)
+      case ElectrumClient.ServerError(ElectrumClient.BroadcastTransaction(tx), error) =>
+        //tx broadcast failed: cancel tx
+        logger.error(s"cannot broadcast tx ${tx.txid}: $error")
+        wallet ? CancelTransaction(tx)
+    } map {
+      case CommitTransactionResponse(_) => true
+      case CancelTransactionResponse(_) => false
+    }
+
+  def sendPayment(amount: Satoshi, address: String, feeRatePerKw: Long): Future[String] = {
+    val publicKeyScript = Base58Check.decode(address) match {
+      case (Base58.Prefix.PubkeyAddressTestnet, pubKeyHash) => Script.pay2pkh(pubKeyHash)
+      case (Base58.Prefix.ScriptAddressTestnet, scriptHash) => OP_HASH160 :: OP_PUSHDATA(scriptHash) :: OP_EQUAL :: Nil
+    }
+    val tx = Transaction(version = 2, txIn = Nil, txOut = TxOut(amount, publicKeyScript) :: Nil, lockTime = 0)
+
+    (wallet ? CompleteTransaction(tx, feeRatePerKw))
+      .mapTo[CompleteTransactionResponse]
+      .flatMap {
+        case CompleteTransactionResponse(tx, None) => commit(tx).map {
+          case true => tx.txid.toString()
+          case false => throw new RuntimeException(s"could not commit tx=${Transaction.write(tx)}")
+        }
+        case CompleteTransactionResponse(_, Some(error)) => throw error
+      }
+  }
+
+  def getMnemonics: Future[Seq[String]] = (wallet ? GetMnemonicCode).mapTo[GetMnemonicCodeResponse].map(_.mnemonics)
+
+  override def rollback(tx: Transaction): Future[Boolean] = (wallet ? CancelTransaction(tx)).map(_ => true)
+}

eclair-core/src/main/scala/fr/acinq/eclair/blockchain/electrum/ElectrumWallet.scala

@@ -0,0 +1,693 @@
+package fr.acinq.eclair.blockchain.electrum
+
+import java.io.File
+
+import akka.actor.{ActorRef, LoggingFSM, Props}
+import com.google.common.io.Files
+import fr.acinq.bitcoin.Crypto.{PrivateKey, PublicKey}
+import fr.acinq.bitcoin.DeterministicWallet.{ExtendedPrivateKey, derivePrivateKey, hardened}
+import fr.acinq.bitcoin.{Base58, Base58Check, BinaryData, Block, Crypto, DeterministicWallet, MnemonicCode, OP_PUSHDATA, OutPoint, SIGHASH_ALL, Satoshi, Script, ScriptFlags, ScriptWitness, SigVersion, Transaction, TxIn, TxOut}
+import fr.acinq.eclair.blockchain.bitcoind.rpc.Error
+import fr.acinq.eclair.blockchain.electrum.ElectrumClient.{GetTransaction, GetTransactionResponse, TransactionHistoryItem, computeScriptHash}
+import fr.acinq.eclair.randomBytes
+import grizzled.slf4j.Logging
+
+import scala.annotation.tailrec
+import scala.util.{Failure, Success, Try}
+
+/**
+  * Simple electrum wallet
+  *
+  * Typical workflow:
+  *
+  * client ---- header update ----> wallet
+  * client ---- status update ----> wallet
+  * client <--- ask history   ----- wallet
+  * client ---- history       ----> wallet
+  * client <--- ask tx        ----- wallet
+  * client ---- tx            ----> wallet
+  *
+  * @param mnemonics
+  * @param client
+  * @param params
+  */
+class ElectrumWallet(mnemonics: Seq[String], client: ActorRef, params: ElectrumWallet.WalletParameters) extends LoggingFSM[ElectrumWallet.State, ElectrumWallet.Data] {
+
+  import ElectrumWallet._
+  import params._
+
+  val seed = MnemonicCode.toSeed(mnemonics, "")
+  val master = DeterministicWallet.generate(seed)
+
+  val accountMaster = accountKey(master)
+  val changeMaster = changeKey(master)
+
+  client ! ElectrumClient.AddStatusListener(self)
+
+  // disconnected --> waitingForTip --> running --
+  // ^                                            |
+  // |                                            |
+  //  --------------------------------------------
+
+  startWith(DISCONNECTED, {
+    val header = chainHash match {
+      case Block.RegtestGenesisBlock.hash => ElectrumClient.Header.RegtestGenesisHeader
+      case Block.TestnetGenesisBlock.hash => ElectrumClient.Header.TestnetGenesisHeader
+    }
+    val firstAccountKeys = (0 until params.swipeRange).map(i => derivePrivateKey(accountMaster, i)).toVector
+    val firstChangeKeys = (0 until params.swipeRange).map(i => derivePrivateKey(changeMaster, i)).toVector
+    val data = Data(params, header, firstAccountKeys, firstChangeKeys)
+    context.system.eventStream.publish(NewWalletReceiveAddress(data.currentReceiveAddress))
+    data
+  })
+
+  when(DISCONNECTED) {
+    case Event(ElectrumClient.ElectrumReady, data) =>
+      client ! ElectrumClient.HeaderSubscription(self)
+      goto(WAITING_FOR_TIP) using data
+  }
+
+  when(WAITING_FOR_TIP) {
+    case Event(ElectrumClient.HeaderSubscriptionResponse(header), data) =>
+      data.accountKeys.foreach(key => client ! ElectrumClient.ScriptHashSubscription(computeScriptHashFromPublicKey(key.publicKey), self))
+      data.changeKeys.foreach(key => client ! ElectrumClient.ScriptHashSubscription(computeScriptHashFromPublicKey(key.publicKey), self))
+      goto(RUNNING) using data.copy(tip = header)
+
+    case Event(ElectrumClient.ElectrumDisconnected, data) =>
+      log.info(s"wallet got disconnected")
+      goto(DISCONNECTED) using data
+  }
+
+  when(RUNNING) {
+    case Event(ElectrumClient.HeaderSubscriptionResponse(header), data) if data.tip == header => stay
+
+    case Event(ElectrumClient.HeaderSubscriptionResponse(header), data) =>
+      log.info(s"got new tip ${header.block_hash} at ${header.block_height}")
+      data.heights.collect {
+        case (txid, height) if height > 0 =>
+          val confirmations = computeDepth(header.block_height, height)
+          context.system.eventStream.publish(TransactionConfidenceChanged(txid, confirmations))
+      }
+      stay using data.copy(tip = header)
+
+    case Event(ElectrumClient.ScriptHashSubscriptionResponse(scriptHash, status), data) if data.status.get(scriptHash) == Some(status) => stay // we already have it
+
+    case Event(ElectrumClient.ScriptHashSubscriptionResponse(scriptHash, status), data) if !data.accountKeyMap.contains(scriptHash) && !data.changeKeyMap.contains(scriptHash) =>
+      log.warning(s"received status=$status for scriptHash=$scriptHash which does not match any of our keys")
+      stay
+
+    case Event(ElectrumClient.ScriptHashSubscriptionResponse(scriptHash, status), data) if status == "" =>
+      val data1 = data.copy(status = data.status + (scriptHash -> status)) // empty status, nothing to do
+      goto(stateName) using data1
+
+    case Event(ElectrumClient.ScriptHashSubscriptionResponse(scriptHash, status), data) =>
+      val key = data.accountKeyMap.getOrElse(scriptHash, data.changeKeyMap(scriptHash))
+      val isChange = data.changeKeyMap.contains(scriptHash)
+      log.info(s"received status=$status for scriptHash=$scriptHash key=${segwitAddress(key)} isChange=$isChange")
+
+      // let's retrieve the tx history for this key
+      client ! ElectrumClient.GetScriptHashHistory(scriptHash)
+
+      val (newAccountKeys, newChangeKeys) = data.status.get(status) match {
+        case None =>
+          // first time this script hash is used, need to generate a new key
+          val newKey = if (isChange) derivePrivateKey(changeMaster, data.changeKeys.last.path.lastChildNumber + 1) else derivePrivateKey(accountMaster, data.accountKeys.last.path.lastChildNumber + 1)
+          val newScriptHash = computeScriptHashFromPublicKey(newKey.publicKey)
+          log.info(s"generated key with index=${newKey.path.lastChildNumber} scriptHash=$newScriptHash key=${segwitAddress(newKey)} isChange=$isChange")
+          // listens to changes for the newly generated key
+          client ! ElectrumClient.ScriptHashSubscription(newScriptHash, self)
+          if (isChange) (data.accountKeys, data.changeKeys :+ newKey) else (data.accountKeys :+ newKey, data.changeKeys)
+        case Some(_) => (data.accountKeys, data.changeKeys)
+      }
+
+      val data1 = data.copy(
+        accountKeys = newAccountKeys,
+        changeKeys = newChangeKeys,
+        status = data.status + (scriptHash -> status),
+        pendingHistoryRequests = data.pendingHistoryRequests + scriptHash)
+
+      goto(stateName) using data1 // goto instead of stay because we want to fire transitions
+
+    case Event(ElectrumClient.GetScriptHashHistoryResponse(scriptHash, history), data) =>
+      log.debug(s"scriptHash=$scriptHash has history=$history")
+      val (heights1, pendingTransactionRequests1) = history.foldLeft((data.heights, data.pendingTransactionRequests)) {
+        case ((heights, hashes), item) if !data.transactions.contains(item.tx_hash) && !data.pendingTransactionRequests.contains(item.tx_hash) =>
+          // we retrieve the tx if we don't have it and haven't yet requested it
+          client ! GetTransaction(item.tx_hash)
+          (heights + (item.tx_hash -> item.height), hashes + item.tx_hash)
+        case ((heights, hashes), item) =>
+          // otherwise we just update the height
+          (heights + (item.tx_hash -> item.height), hashes)
+      }
+
+      // we now have updated height for all our transactions,
+      heights1.collect {
+        case (txid, height) =>
+          val confirmations = if (height <= 0) 0 else computeDepth(data.tip.block_height, height)
+          (data.heights.get(txid), height) match {
+            case (None, height) if height <= 0 =>
+            // height=0 => unconfirmed, height=-1 => unconfirmed and one input is unconfirmed
+            case (None, height) if height > 0 =>
+              // first time we get a height for this tx: either it was just confirmed, or we restarted the wallet
+              context.system.eventStream.publish(TransactionConfidenceChanged(txid, confirmations))
+            case (Some(previousHeight), height) if previousHeight != height =>
+              // there was a reorg
+              context.system.eventStream.publish(TransactionConfidenceChanged(txid, confirmations))
+            case (Some(previousHeight), height) if previousHeight == height =>
+            // no reorg, nothing to do
+          }
+      }
+      val data1 = data.copy(heights = heights1, history = data.history + (scriptHash -> history), pendingHistoryRequests = data.pendingHistoryRequests - scriptHash, pendingTransactionRequests = pendingTransactionRequests1)
+      goto(stateName) using data1 // goto instead of stay because we want to fire transitions
+
+    case Event(GetTransactionResponse(tx), data) =>
+      log.debug(s"received transaction ${tx.txid}")
+      data.computeTransactionDelta(tx) match {
+        case Some((received, sent, fee_opt)) =>
+          log.info(s"successfully connected txid=${tx.txid}")
+          context.system.eventStream.publish(TransactionReceived(tx, data.computeTransactionDepth(tx.txid), received, sent, fee_opt))
+          // when we have successfully processed a new tx, we retry all pending txes to see if they can be added now
+          data.pendingTransactions.foreach(self ! GetTransactionResponse(_))
+          val data1 = data.copy(transactions = data.transactions + (tx.txid -> tx), pendingTransactionRequests = data.pendingTransactionRequests - tx.txid, pendingTransactions = Nil)
+          goto(stateName) using data1 // goto instead of stay because we want to fire transitions
+        case None =>
+          // missing parents
+          log.info(s"couldn't connect txid=${tx.txid}")
+          val data1 = data.copy(pendingTransactions = data.pendingTransactions :+ tx)
+          stay using data1
+      }
+
+    case Event(CompleteTransaction(tx, feeRatePerKw), data) =>
+      Try(data.completeTransaction(tx, feeRatePerKw, minimumFee, dustLimit, allowSpendUnconfirmed)) match {
+        case Success((data1, tx1)) => stay using data1 replying CompleteTransactionResponse(tx1, None)
+        case Failure(t) => stay replying CompleteTransactionResponse(tx, Some(t))
+      }
+
+    case Event(CommitTransaction(tx), data) =>
+      log.info(s"committing txid=${tx.txid}")
+      val data1 = data.commitTransaction(tx)
+      // we use the initial state to compute the effect of the tx
+      // note: we know that computeTransactionDelta and the fee will be defined, because we built the tx ourselves so
+      // we know all the parents
+      val (received, sent, Some(fee)) = data.computeTransactionDelta(tx).get
+      // we notify here because the tx won't be downloaded again (it has been added to the state at commit)
+      context.system.eventStream.publish(TransactionReceived(tx, data1.computeTransactionDepth(tx.txid), received, sent, Some(fee)))
+      goto(stateName) using data1 replying CommitTransactionResponse(tx) // goto instead of stay because we want to fire transitions
+
+    case Event(CancelTransaction(tx), data) =>
+      log.info(s"cancelling txid=${tx.txid}")
+      stay using data.cancelTransaction(tx) replying CancelTransactionResponse(tx)
+
+    case Event(bc@ElectrumClient.BroadcastTransaction(tx), _) =>
+      log.info(s"broadcasting txid=${tx.txid}")
+      client forward bc
+      stay
+
+    case Event(ElectrumClient.ElectrumDisconnected, data) =>
+      log.info(s"wallet got disconnected")
+      goto(DISCONNECTED) using data
+  }
+
+  whenUnhandled {
+    case Event(GetMnemonicCode, _) => stay replying GetMnemonicCodeResponse(mnemonics)
+
+    case Event(GetCurrentReceiveAddress, data) => stay replying GetCurrentReceiveAddressResponse(data.currentReceiveAddress)
+
+    case Event(GetBalance, data) =>
+      val (confirmed, unconfirmed) = data.balance
+      stay replying GetBalanceResponse(confirmed, unconfirmed)
+
+    case Event(GetData, data) => stay replying GetDataResponse(data)
+
+    case Event(ElectrumClient.BroadcastTransaction(tx), _) => stay replying ElectrumClient.BroadcastTransactionResponse(tx, Some(Error(-1, "wallet is not connected")))
+  }
+
+  onTransition {
+    case _ -> _ if nextStateData.isReady(params.swipeRange) =>
+      val ready = nextStateData.readyMessage
+      log.info(s"wallet is ready with $ready")
+      context.system.eventStream.publish(ready)
+      context.system.eventStream.publish(NewWalletReceiveAddress(nextStateData.currentReceiveAddress))
+  }
+
+  initialize()
+
+}
+
+object ElectrumWallet {
+
+  // use 32 bytes seed, which will generate a 24 words mnemonic code
+  val SEED_BYTES_LENGTH = 32
+
+  def props(mnemonics: Seq[String], client: ActorRef, params: WalletParameters): Props = Props(new ElectrumWallet(mnemonics, client, params))
+
+  def props(file: File, client: ActorRef, params: WalletParameters): Props = {
+    val entropy: BinaryData = (file.exists(), file.canRead(), file.isFile) match {
+      case (true, true, true) => Files.toByteArray(file)
+      case (false, _, _) =>
+        val buffer = randomBytes(SEED_BYTES_LENGTH)
+        Files.write(buffer, file)
+        buffer
+      case _ => throw new IllegalArgumentException(s"cannot create wallet:$file exist but cannot read from")
+    }
+    val mnemonics = MnemonicCode.toMnemonics(entropy)
+    Props(new ElectrumWallet(mnemonics, client, params))
+  }
+
+  case class WalletParameters(chainHash: BinaryData, minimumFee: Satoshi = Satoshi(2000), dustLimit: Satoshi = Satoshi(546), swipeRange: Int = 10, allowSpendUnconfirmed: Boolean = true)
+
+  // @formatter:off
+  sealed trait State
+  case object DISCONNECTED extends State
+  case object WAITING_FOR_TIP extends State
+  case object RUNNING extends State
+
+  sealed trait Request
+  sealed trait Response
+
+  case object GetMnemonicCode extends RuntimeException
+  case class GetMnemonicCodeResponse(mnemonics: Seq[String]) extends Response
+
+  case object GetBalance extends Request
+  case class GetBalanceResponse(confirmed: Satoshi, unconfirmed: Satoshi) extends Response
+
+  case object GetCurrentReceiveAddress extends Request
+  case class GetCurrentReceiveAddressResponse(address: String) extends Response
+
+  case object GetData extends Request
+  case class GetDataResponse(state: Data) extends Response
+
+  case class CompleteTransaction(tx: Transaction, feeRatePerKw: Long) extends Request
+  case class CompleteTransactionResponse(tx: Transaction, error: Option[Throwable]) extends Response
+
+  case class CommitTransaction(tx: Transaction) extends Request
+  case class CommitTransactionResponse(tx: Transaction) extends Response
+
+  case class SendTransaction(tx: Transaction) extends Request
+  case class SendTransactionReponse(tx: Transaction) extends Response
+
+  case class CancelTransaction(tx: Transaction) extends Request
+  case class CancelTransactionResponse(tx: Transaction) extends Response
+
+  case object InsufficientFunds extends Response
+  case class AmountBelowDustLimit(dustLimit: Satoshi) extends Response
+
+  case class GetPrivateKey(address: String) extends Request
+  case class GetPrivateKeyResponse(address: String, key: Option[ExtendedPrivateKey]) extends Response
+
+
+  sealed trait WalletEvent
+  /**
+    *
+    * @param tx
+    * @param depth
+    * @param received
+    * @param sent
+    * @param feeOpt is set only when we know it (i.e. for outgoing transactions)
+    */
+  case class TransactionReceived(tx: Transaction, depth: Long, received: Satoshi, sent: Satoshi, feeOpt: Option[Satoshi]) extends WalletEvent
+  case class TransactionConfidenceChanged(txid: BinaryData, depth: Long) extends WalletEvent
+  case class NewWalletReceiveAddress(address: String) extends WalletEvent
+  case class WalletReady(confirmedBalance: Satoshi, unconfirmedBalance: Satoshi, height: Long) extends WalletEvent
+  // @formatter:on
+
+  /**
+    *
+    * @param key public key
+    * @return the address of the p2sh-of-p2wpkh script for this key
+    */
+  def segwitAddress(key: PublicKey): String = {
+    val script = Script.pay2wpkh(key)
+    val hash = Crypto.hash160(Script.write(script))
+    Base58Check.encode(Base58.Prefix.ScriptAddressTestnet, hash)
+  }
+
+  def segwitAddress(key: ExtendedPrivateKey): String = segwitAddress(key.publicKey)
+
+  def segwitAddress(key: PrivateKey): String = segwitAddress(key.publicKey)
+
+  /**
+    *
+    * @param key public key
+    * @return a p2sh-of-p2wpkh script for this key
+    */
+  def computePublicKeyScript(key: PublicKey) = Script.pay2sh(Script.pay2wpkh(key))
+
+  /**
+    *
+    * @param key public key
+    * @return the hash of the public key script for this key, as used by ElectrumX's hash-based methods
+    */
+  def computeScriptHashFromPublicKey(key: PublicKey): BinaryData = Crypto.sha256(Script.write(computePublicKeyScript(key))).reverse
+
+  /**
+    * use BIP49 (and not BIP44) since we use p2sh-of-p2wpkh
+    *
+    * @param master master key
+    * @return the BIP49 account key for this master key: m/49'/1'/0'/0
+    */
+  def accountKey(master: ExtendedPrivateKey) = DeterministicWallet.derivePrivateKey(master, hardened(49) :: hardened(1) :: hardened(0) :: 0L :: Nil)
+
+  /**
+    * use BIP49 (and not BIP44) since we use p2sh-of-p2wpkh
+    *
+    * @param master master key
+    * @return the BIP49 change key for this master key: m/49'/1'/0'/1
+    */
+  def changeKey(master: ExtendedPrivateKey) = DeterministicWallet.derivePrivateKey(master, hardened(49) :: hardened(1) :: hardened(0) :: 1L :: Nil)
+
+  def totalAmount(utxos: Seq[Utxo]): Satoshi = Satoshi(utxos.map(_.item.value).sum)
+
+  def totalAmount(utxos: Set[Utxo]): Satoshi = totalAmount(utxos.toSeq)
+
+  /**
+    *
+    * @param weight       transaction weight
+    * @param feeRatePerKw fee rate
+    * @return the fee for this tx weight
+    */
+  def computeFee(weight: Int, feeRatePerKw: Long): Satoshi = Satoshi((weight * feeRatePerKw) / 1000)
+
+  /**
+    *
+    * @param txIn transaction input
+    * @return Some(pubkey) if this tx input spends a p2sh-of-p2wpkh(pub), None otherwise
+    */
+  def extractPubKeySpentFrom(txIn: TxIn): Option[PublicKey] = {
+    Try {
+      // we're looking for tx that spend a pay2sh-of-p2wkph output
+      require(txIn.witness.stack.size == 2)
+      val sig = txIn.witness.stack(0)
+      val pub = txIn.witness.stack(1)
+      val OP_PUSHDATA(script, _) :: Nil = Script.parse(txIn.signatureScript)
+      val publicKey = PublicKey(pub)
+      if (Script.write(Script.pay2wpkh(publicKey)) == script) {
+        Some(publicKey)
+      } else None
+    } getOrElse None
+  }
+
+  def computeDepth(currentHeight: Long, txHeight: Long): Long = currentHeight - txHeight + 1
+
+  case class Utxo(key: ExtendedPrivateKey, item: ElectrumClient.UnspentItem) {
+    def outPoint: OutPoint = item.outPoint
+  }
+
+  /**
+    * Wallet state, which stores data returned by EletrumX servers.
+    * Most items are indexed by script hash (i.e. by pubkey script sha256 hash).
+    * Height follow ElectrumX's conventions:
+    * - h > 0 means that the tx was confirmed at block #h
+    * - 0 means unconfirmed, but all input are confirmed
+    * < 0 means unconfirmed, and sonme inputs are unconfirmed as well
+    *
+    * @param tip          current blockchain tip
+    * @param accountKeys  account keys
+    * @param changeKeys   change keys
+    * @param status       script hash -> status; "" means that the script hash has not been used
+    *                     yet
+    * @param transactions wallet transactions
+    * @param heights      transactions heights
+    * @param history      script hash -> history
+    * @param locks        transactions which lock some of our utxos.
+    */
+  case class Data(tip: ElectrumClient.Header,
+                  accountKeys: Vector[ExtendedPrivateKey],
+                  changeKeys: Vector[ExtendedPrivateKey],
+                  status: Map[BinaryData, String],
+                  transactions: Map[BinaryData, Transaction],
+                  heights: Map[BinaryData, Long],
+                  history: Map[BinaryData, Seq[ElectrumClient.TransactionHistoryItem]],
+                  locks: Set[Transaction],
+                  pendingHistoryRequests: Set[BinaryData],
+                  pendingTransactionRequests: Set[BinaryData],
+                  pendingTransactions: Seq[Transaction]) extends Logging {
+    lazy val accountKeyMap = accountKeys.map(key => computeScriptHashFromPublicKey(key.publicKey) -> key).toMap
+
+    lazy val changeKeyMap = changeKeys.map(key => computeScriptHashFromPublicKey(key.publicKey) -> key).toMap
+
+    lazy val firstUnusedAccountKeys = accountKeys.find(key => status.get(computeScriptHashFromPublicKey(key.publicKey)) == Some(""))
+
+    lazy val firstUnusedChangeKeys = changeKeys.find(key => status.get(computeScriptHashFromPublicKey(key.publicKey)) == Some(""))
+
+    lazy val publicScriptMap = (accountKeys ++ changeKeys).map(key => Script.write(computePublicKeyScript(key.publicKey)) -> key).toMap
+
+    lazy val utxos = history.keys.toSeq.map(scriptHash => getUtxos(scriptHash)).flatten
+
+    /**
+      * The wallet is ready if all current keys have an empty status, and we don't have
+      * any history/tx request pending
+      * NB: swipeRange * 2 because we have account keys and change keys
+      */
+    def isReady(swipeRange: Int) = status.filter(_._2 == "").size >= swipeRange * 2 && pendingHistoryRequests.isEmpty && pendingTransactionRequests.isEmpty
+
+    def readyMessage: WalletReady = {
+      val (confirmed, unconfirmed) = balance
+      WalletReady(confirmed, unconfirmed, tip.block_height)
+    }
+
+    /**
+      *
+      * @return the current receive key. In most cases it will be a key that has not
+      *         been used yet but it may be possible that we are still looking for
+      *         unused keys and none is available yet. In this case we will return
+      *         the latest account key.
+      */
+    def currentReceiveKey = firstUnusedAccountKeys.headOption.getOrElse {
+      // bad luck we are still looking for unused keys
+      // use the first account key
+      accountKeys.head
+    }
+
+    def currentReceiveAddress = segwitAddress(currentReceiveKey)
+
+    /**
+      *
+      * @return the current change key. In most cases it will be a key that has not
+      *         been used yet but it may be possible that we are still looking for
+      *         unused keys and none is available yet. In this case we will return
+      *         the latest change key.
+      */
+    def currentChangeKey = firstUnusedChangeKeys.headOption.getOrElse {
+      // bad luck we are still looking for unused keys
+      // use the first account key
+      changeKeys.head
+    }
+
+    def currentChangeAddress = segwitAddress(currentChangeKey)
+
+    def isMine(txIn: TxIn): Boolean = extractPubKeySpentFrom(txIn).exists(pub => publicScriptMap.contains(Script.write(computePublicKeyScript(pub))))
+
+    def isSpend(txIn: TxIn, publicKey: PublicKey): Boolean = extractPubKeySpentFrom(txIn).contains(publicKey)
+
+    /**
+      *
+      * @param txIn
+      * @param scriptHash
+      * @return true if txIn spends from an address that matches scriptHash
+      */
+    def isSpend(txIn: TxIn, scriptHash: BinaryData): Boolean = extractPubKeySpentFrom(txIn).exists(pub => computeScriptHashFromPublicKey(pub) == scriptHash)
+
+    def isReceive(txOut: TxOut, scriptHash: BinaryData): Boolean = publicScriptMap.get(txOut.publicKeyScript).exists(key => computeScriptHashFromPublicKey(key.publicKey) == scriptHash)
+
+    def isMine(txOut: TxOut): Boolean = publicScriptMap.contains(txOut.publicKeyScript)
+
+    def computeTransactionDepth(txid: BinaryData): Long = heights.get(txid).map(height => if (height > 0) computeDepth(tip.block_height, height) else 0).getOrElse(0)
+
+    /**
+      *
+      * @param scriptHash script hash
+      * @return the list of UTXOs for this script hash (including unconfirmed UTXOs)
+      */
+    def getUtxos(scriptHash: BinaryData) = {
+      history.get(scriptHash) match {
+        case None => Seq()
+        case Some(items) if items.isEmpty => Seq()
+        case Some(items) =>
+          // this is the private key for this script hash
+          val key = accountKeyMap.getOrElse(scriptHash, changeKeyMap(scriptHash))
+
+          // find all transactions that send to or receive from this script hash
+          // we use collect because we may not yet have received all transactions in the history
+          val txs = items collect { case item if transactions.contains(item.tx_hash) => transactions(item.tx_hash) }
+
+          // find all tx outputs that send to our script hash
+          val unspents = items collect { case item if transactions.contains(item.tx_hash) =>
+            val tx = transactions(item.tx_hash)
+            val outputs = tx.txOut.zipWithIndex.filter { case (txOut, index) => isReceive(txOut, scriptHash) }
+            outputs.map { case (txOut, index) => Utxo(key, ElectrumClient.UnspentItem(item.tx_hash, index, txOut.amount.toLong, item.height)) }
+          } flatten
+
+          // and remove the outputs that are being spent. this is needed because we may have unconfirmed UTXOs
+          // that are spend by unconfirmed transactions
+          unspents.filterNot(utxo => txs.exists(tx => tx.txIn.exists(_.outPoint == utxo.outPoint)))
+      }
+    }
+
+
+    /**
+      *
+      * @param scriptHash script hash
+      * @return the (confirmed, unconfirmed) balance for this script hash. This balance may not
+      *         be up-to-date if we have not received all data we've asked for yet.
+      */
+    def balance(scriptHash: BinaryData): (Satoshi, Satoshi) = {
+      history.get(scriptHash) match {
+        case None => (Satoshi(0), Satoshi(0))
+
+        case Some(items) if items.isEmpty => (Satoshi(0), Satoshi(0))
+
+        case Some(items) =>
+          val (confirmedItems, unconfirmedItems) = items.partition(_.height > 0)
+          val confirmedTxs = confirmedItems.collect { case item if transactions.contains(item.tx_hash) => transactions(item.tx_hash) }
+          val unconfirmedTxs = unconfirmedItems.collect { case item if transactions.contains(item.tx_hash) => transactions(item.tx_hash) }
+          if (confirmedTxs.size + unconfirmedTxs.size < confirmedItems.size + unconfirmedItems.size) logger.warn(s"we have not received all transactions yet, balance will not be up to date")
+
+          def findOurSpentOutputs(txs: Seq[Transaction]): Seq[TxOut] = {
+            val inputs = txs.map(_.txIn).flatten.filter(txIn => isSpend(txIn, scriptHash))
+            val spentOutputs = inputs.map(_.outPoint).map(outPoint => transactions.get(outPoint.txid).map(_.txOut(outPoint.index.toInt))).flatten
+            spentOutputs
+          }
+
+          val confirmedSpents = findOurSpentOutputs(confirmedTxs)
+          val confirmedReceived = confirmedTxs.map(_.txOut).flatten.filter(txOut => isReceive(txOut, scriptHash))
+
+          val unconfirmedSpents = findOurSpentOutputs(unconfirmedTxs)
+          val unconfirmedReceived = unconfirmedTxs.map(_.txOut).flatten.filter(txOut => isReceive(txOut, scriptHash))
+
+          val confirmedBalance = confirmedReceived.map(_.amount).sum - confirmedSpents.map(_.amount).sum
+          val unconfirmedBalance = unconfirmedReceived.map(_.amount).sum - unconfirmedSpents.map(_.amount).sum
+
+          (confirmedBalance, unconfirmedBalance)
+      }
+    }
+
+    /**
+      *
+      * @return the (confirmed, unconfirmed) balance for this wallet. This balance may not
+      *         be up-to-date if we have not received all data we've asked for yet.
+      */
+    lazy val balance: (Satoshi, Satoshi) = {
+      (accountKeyMap.keys ++ changeKeyMap.keys).map(scriptHash => balance(scriptHash)).foldLeft((Satoshi(0), Satoshi(0))) {
+        case ((confirmed, unconfirmed), (confirmed1, unconfirmed1)) => (confirmed + confirmed1, unconfirmed + unconfirmed1)
+      }
+    }
+
+    /**
+      * Computes the effect of this transaction on the wallet
+      *
+      * @param tx input transaction
+      * @return an option:
+      *         - Some(received, sent, fee) where sent if what the tx spends from us, received is what the tx sends to us,
+      *         and fee is the fee for the tx) tuple where sent if what the tx spends from us, and received is what the tx sends to us
+      *         - None if we are missing one or more parent txs
+      */
+    def computeTransactionDelta(tx: Transaction): Option[(Satoshi, Satoshi, Option[Satoshi])] = {
+      val ourInputs = tx.txIn.filter(isMine)
+      // we need to make sure that for all inputs spending an output we control, we already  have the parent tx
+      // (otherwise we can't estimate our balance)
+      val missingParent = ourInputs.exists(txIn => !transactions.contains(txIn.outPoint.txid))
+      if (missingParent) {
+        None
+      } else {
+        val sent = ourInputs.map(txIn => transactions(txIn.outPoint.txid).txOut(txIn.outPoint.index.toInt)).map(_.amount).sum
+        val received = tx.txOut.filter(isMine).map(_.amount).sum
+        // if all the inputs were ours, we can compute the fee, otherwise we can't
+        val fee_opt = if (ourInputs.size == tx.txIn.size) Some(sent - tx.txOut.map(_.amount).sum) else None
+        Some((received, sent, fee_opt))
+      }
+    }
+
+    /**
+      *
+      * @param tx           input tx that has no inputs
+      * @param feeRatePerKw fee rate per kiloweight
+      * @param minimumFee   minimum fee
+      * @param dustLimit    dust limit
+      * @return a (state, tx) tuple where state has been updated and tx is a complete,
+      *         fully signed transaction that can be broadcast.
+      *         our utxos spent by this tx are locked and won't be available for spending
+      *         until the tx has been cancelled. If the tx is committed, they will be removed
+      */
+    def completeTransaction(tx: Transaction, feeRatePerKw: Long, minimumFee: Satoshi, dustLimit: Satoshi, allowSpendUnconfirmed: Boolean): (Data, Transaction) = {
+      require(tx.txIn.isEmpty, "cannot complete a tx that already has inputs")
+      require(feeRatePerKw >= 0, "fee rate cannot be negative")
+      val amount = tx.txOut.map(_.amount).sum
+      require(amount > dustLimit, "amount to send is below dust limit")
+      val fee = {
+        val estimatedFee = computeFee(700, feeRatePerKw)
+        if (estimatedFee < minimumFee) minimumFee else estimatedFee
+      }
+
+      @tailrec
+      def select(chooseFrom: Seq[Utxo], selected: Set[Utxo]): Set[Utxo] = {
+        if (totalAmount(selected) >= amount + fee) selected
+        else if (chooseFrom.isEmpty) Set()
+        else select(chooseFrom.tail, selected + chooseFrom.head)
+      }
+
+      // select utxos that are not locked by pending txs
+      val lockedOutputs = locks.map(_.txIn.map(_.outPoint)).flatten
+      val unlocked = utxos.filterNot(utxo => lockedOutputs.contains(utxo.outPoint))
+      val unlocked1 = if (allowSpendUnconfirmed) unlocked else unlocked.filter(_.item.height > 0)
+      val selected = select(unlocked1, Set()).toSeq
+      require(totalAmount(selected) >= amount + fee, "insufficient funds")
+
+      // add inputs
+      var tx1 = tx.copy(txIn = selected.map(utxo => TxIn(utxo.outPoint, Nil, TxIn.SEQUENCE_FINAL)))
+
+      // add change output
+      val change = totalAmount(selected) - amount - fee
+      if (change >= dustLimit) tx1 = tx1.addOutput(TxOut(change, computePublicKeyScript(currentChangeKey.publicKey)))
+
+      // sign
+      for (i <- 0 until tx1.txIn.size) {
+        val key = selected(i).key
+        val sig = Transaction.signInput(tx1, i, Script.pay2pkh(key.publicKey), SIGHASH_ALL, Satoshi(selected(i).item.value), SigVersion.SIGVERSION_WITNESS_V0, key.privateKey)
+        tx1 = tx1.updateWitness(i, ScriptWitness(sig :: key.publicKey.toBin :: Nil)).updateSigScript(i, OP_PUSHDATA(Script.write(Script.pay2wpkh(key.publicKey))) :: Nil)
+      }
+      Transaction.correctlySpends(tx1, selected.map(utxo => utxo.outPoint -> TxOut(Satoshi(utxo.item.value), computePublicKeyScript(utxo.key.publicKey))).toMap, ScriptFlags.STANDARD_SCRIPT_VERIFY_FLAGS)
+
+      val data1 = this.copy(locks = this.locks + tx1)
+      (data1, tx1)
+    }
+
+    /**
+      * unlocks input locked by a pending tx. call this method if the tx will not be used after all
+      *
+      * @param tx pending transaction
+      * @return an updated state
+      */
+    def cancelTransaction(tx: Transaction): Data = this.copy(locks = this.locks - tx)
+
+    /**
+      * remove all our utxos spent by this tx. call this method if the tx was broadcast successfully
+      *
+      * @param tx pending transaction
+      * @return an updated state
+      */
+    def commitTransaction(tx: Transaction): Data = {
+      // HACK! since we base our utxos computation on the history as seen by the electrum server (so that it is
+      // reorg-proof out of the box), we need to update the history  right away if we want to be able to build chained
+      // unconfirmed transactions. A few seconds later electrum will notify us and the entry will be overwritten.
+      // Note that we need to take into account both inputs and outputs, because there may be change.
+      val history1 = (tx.txIn.filter(isMine).map(extractPubKeySpentFrom).flatten.map(computeScriptHashFromPublicKey) ++ tx.txOut.filter(isMine).map(_.publicKeyScript).map(computeScriptHash))
+        .foldLeft(this.history) {
+          case (history, scriptHash) =>
+            val entry = history.get(scriptHash) match {
+              case None => Seq(TransactionHistoryItem(0, tx.txid))
+              case Some(items) if items.map(_.tx_hash).contains(tx.txid) => items
+              case Some(items) => items :+ TransactionHistoryItem(0, tx.txid)
+            }
+            history + (scriptHash -> entry)
+        }
+      this.copy(locks = this.locks - tx, transactions = this.transactions + (tx.txid -> tx), heights = this.heights + (tx.txid -> 0L), history = history1)
+    }
+  }
+
+  object Data {
+    def apply(params: ElectrumWallet.WalletParameters, tip: ElectrumClient.Header, accountKeys: Vector[ExtendedPrivateKey], changeKeys: Vector[ExtendedPrivateKey]): Data
+    = Data(tip, accountKeys, changeKeys, Map(), Map(), Map(), Map(), Set(), Set(), Set(), Seq())
+  }
+
+}

eclair-core/src/main/scala/fr/acinq/eclair/blockchain/electrum/ElectrumWatcher.scala

@@ -0,0 +1,225 @@
+package fr.acinq.eclair.blockchain.electrum
+
+import java.net.InetSocketAddress
+
+import akka.actor.{Actor, ActorLogging, ActorRef, ActorSystem, Props, Stash, Terminated}
+import fr.acinq.bitcoin.Crypto.PublicKey
+import fr.acinq.bitcoin.{BinaryData, Satoshi, Script, Transaction, TxIn, TxOut}
+import fr.acinq.eclair.blockchain._
+import fr.acinq.eclair.blockchain.electrum.ElectrumClient._
+import fr.acinq.eclair.channel.{BITCOIN_FUNDING_DEPTHOK, BITCOIN_FUNDING_SPENT, BITCOIN_PARENT_TX_CONFIRMED}
+import fr.acinq.eclair.transactions.Scripts
+import fr.acinq.eclair.{Globals, fromShortId}
+
+import scala.collection.SortedMap
+
+
+class ElectrumWatcher(client: ActorRef) extends Actor with Stash with ActorLogging {
+
+  client ! ElectrumClient.AddStatusListener(self)
+
+  override def unhandled(message: Any): Unit = message match {
+    case ParallelGetRequest(announcements) => sender ! ParallelGetResponse(announcements.map {
+      case c =>
+        log.info(s"blindly validating channel=$c")
+        val pubkeyScript = Script.write(Script.pay2wsh(Scripts.multiSig2of2(PublicKey(c.bitcoinKey1), PublicKey(c.bitcoinKey2))))
+        val (_, _, outputIndex) = fromShortId(c.shortChannelId)
+        val fakeFundingTx = Transaction(
+          version = 2,
+          txIn = Seq.empty[TxIn],
+          txOut = List.fill(outputIndex + 1)(TxOut(Satoshi(0), pubkeyScript)), // quick and dirty way to be sure that the outputIndex'th output is of the expected format
+          lockTime = 0)
+        IndividualResult(c, Some(fakeFundingTx), true)
+    })
+    case _ => log.warning(s"unhandled message $message")
+  }
+
+  def receive = disconnected(Set.empty, Nil, SortedMap.empty)
+
+  def disconnected(watches: Set[Watch], publishQueue: Seq[PublishAsap], block2tx: SortedMap[Long, Seq[Transaction]]): Receive = {
+    case ElectrumClient.ElectrumReady =>
+      client ! ElectrumClient.HeaderSubscription(self)
+    case ElectrumClient.HeaderSubscriptionResponse(header) =>
+      watches.map(self ! _)
+      publishQueue.map(self ! _)
+      context become running(header, Set(), Map(), block2tx, Nil)
+    case watch: Watch => context become disconnected(watches + watch, publishQueue, block2tx)
+    case publish: PublishAsap => context become disconnected(watches, publishQueue :+ publish, block2tx)
+  }
+
+  def running(tip: ElectrumClient.Header, watches: Set[Watch], scriptHashStatus: Map[BinaryData, String], block2tx: SortedMap[Long, Seq[Transaction]], sent: Seq[Transaction]): Receive = {
+    case ElectrumClient.HeaderSubscriptionResponse(newtip) if tip == newtip => ()
+
+    case ElectrumClient.HeaderSubscriptionResponse(newtip) =>
+      log.info(s"new tip: ${newtip.block_hash} $newtip")
+      watches collect {
+        case watch: WatchConfirmed =>
+          val scriptHash = computeScriptHash(watch.publicKeyScript)
+          client ! ElectrumClient.GetScriptHashHistory(scriptHash)
+      }
+      val toPublish = block2tx.filterKeys(_ <= newtip.block_height)
+      toPublish.values.flatten.foreach(tx => self ! PublishAsap(tx))
+      context become running(newtip, watches, scriptHashStatus, block2tx -- toPublish.keys, sent)
+
+    case watch: Watch if watches.contains(watch) => ()
+
+    case watch@WatchSpent(_, txid, outputIndex, publicKeyScript, _) =>
+      val scriptHash = computeScriptHash(publicKeyScript)
+      log.info(s"added watch-spent on output=$txid:$outputIndex scriptHash=$scriptHash")
+      client ! ElectrumClient.ScriptHashSubscription(scriptHash, self)
+      context.watch(watch.channel)
+      context become running(tip, watches + watch, scriptHashStatus, block2tx, sent)
+
+    case watch@WatchSpentBasic(_, txid, outputIndex, publicKeyScript, _) =>
+      val scriptHash = computeScriptHash(publicKeyScript)
+      log.info(s"added watch-spent-basic on output=$txid:$outputIndex scriptHash=$scriptHash")
+      client ! ElectrumClient.ScriptHashSubscription(scriptHash, self)
+      context.watch(watch.channel)
+      context become running(tip, watches + watch, scriptHashStatus, block2tx, sent)
+
+    case watch@WatchConfirmed(_, txid, publicKeyScript, _, _) =>
+      val scriptHash = computeScriptHash(publicKeyScript)
+      log.info(s"added watch-confirmed on txid=$txid scriptHash=$scriptHash")
+      client ! ElectrumClient.GetScriptHashHistory(scriptHash)
+      context.watch(watch.channel)
+      context become running(tip, watches + watch, scriptHashStatus, block2tx, sent)
+
+    case Terminated(actor) =>
+      val watches1 = watches.filterNot(_.channel == actor)
+      context become running(tip, watches1, scriptHashStatus, block2tx, sent)
+
+    case ElectrumClient.ScriptHashSubscriptionResponse(scriptHash, status) =>
+      scriptHashStatus.get(scriptHash) match {
+        case Some(s) if s == status => log.debug(s"already have status=$status for scriptHash=$scriptHash")
+        case _ if status.isEmpty => log.info(s"empty status for scriptHash=$scriptHash")
+        case _ =>
+          log.info(s"new status=$status for scriptHash=$scriptHash")
+          client ! ElectrumClient.GetScriptHashHistory(scriptHash)
+      }
+      context become running(tip, watches, scriptHashStatus + (scriptHash -> status), block2tx, sent)
+
+    case ElectrumClient.GetScriptHashHistoryResponse(_, history) =>
+      // this is for WatchSpent/WatchSpentBasic
+      history.filter(_.height >= 0).map(item => client ! ElectrumClient.GetTransaction(item.tx_hash))
+      // this is for WatchConfirmed
+      history.collect {
+        case ElectrumClient.TransactionHistoryItem(height, tx_hash) if height > 0 => watches.collect {
+          case WatchConfirmed(_, txid, _, minDepth, _) if txid == tx_hash =>
+            val confirmations = tip.block_height - height + 1
+            log.info(s"txid=$txid was confirmed at height=$height and now has confirmations=$confirmations (currentHeight=${tip.block_height})")
+            if (confirmations >= minDepth) {
+              // we need to get the tx position in the block
+              client ! GetMerkle(tx_hash, height)
+            }
+        }
+      }
+
+    case ElectrumClient.GetMerkleResponse(tx_hash, _, height, pos) =>
+      val confirmations = tip.block_height - height + 1
+      val triggered = watches.collect {
+        case w@WatchConfirmed(channel, txid, _, minDepth, event) if txid == tx_hash && confirmations >= minDepth =>
+          log.info(s"txid=$txid had confirmations=$confirmations in block=$height pos=$pos")
+          channel ! WatchEventConfirmed(event, height.toInt, pos)
+          w
+      }
+      context become running(tip, watches -- triggered, scriptHashStatus, block2tx, sent)
+
+    case ElectrumClient.GetTransactionResponse(spendingTx) =>
+      val triggered = spendingTx.txIn.map(_.outPoint).flatMap(outPoint => watches.collect {
+        case WatchSpent(channel, txid, pos, _, event) if txid == outPoint.txid && pos == outPoint.index.toInt =>
+          log.info(s"output $txid:$pos spent by transaction ${spendingTx.txid}")
+          channel ! WatchEventSpent(event, spendingTx)
+          // NB: WatchSpent are permanent because we need to detect multiple spending of the funding tx
+          // They are never cleaned up but it is not a big deal for now (1 channel == 1 watch)
+          None
+        case w@WatchSpentBasic(channel, txid, pos, _, event) if txid == outPoint.txid && pos == outPoint.index.toInt =>
+          log.info(s"output $txid:$pos spent by transaction ${spendingTx.txid}")
+          channel ! WatchEventSpentBasic(event)
+          Some(w)
+      }).flatten
+      context become running(tip, watches -- triggered, scriptHashStatus, block2tx, sent)
+
+    case PublishAsap(tx) =>
+      val blockCount = Globals.blockCount.get()
+      val cltvTimeout = Scripts.cltvTimeout(tx)
+      val csvTimeout = Scripts.csvTimeout(tx)
+      if (csvTimeout > 0) {
+        require(tx.txIn.size == 1, s"watcher only supports tx with 1 input, this tx has ${tx.txIn.size} inputs")
+        val parentTxid = tx.txIn(0).outPoint.txid
+        log.info(s"txid=${tx.txid} has a relative timeout of $csvTimeout blocks, watching parenttxid=$parentTxid tx=${Transaction.write(tx)}")
+        val parentPublicKeyScript = WatchConfirmed.extractPublicKeyScript(tx.txIn.head.witness)
+        self ! WatchConfirmed(self, parentTxid, parentPublicKeyScript, minDepth = 1, BITCOIN_PARENT_TX_CONFIRMED(tx))
+      } else if (cltvTimeout > blockCount) {
+        log.info(s"delaying publication of txid=${tx.txid} until block=$cltvTimeout (curblock=$blockCount)")
+        val block2tx1 = block2tx.updated(cltvTimeout, block2tx.getOrElse(cltvTimeout, Seq.empty[Transaction]) :+ tx)
+        context become running(tip, watches, scriptHashStatus, block2tx1, sent)
+      } else {
+        log.info(s"publishing tx=${Transaction.write(tx)}")
+        client ! BroadcastTransaction(tx)
+        context become running(tip, watches, scriptHashStatus, block2tx, sent :+ tx)
+      }
+
+    case WatchEventConfirmed(BITCOIN_PARENT_TX_CONFIRMED(tx), blockHeight, _) =>
+      log.info(s"parent tx of txid=${tx.txid} has been confirmed")
+      val blockCount = Globals.blockCount.get()
+      val csvTimeout = Scripts.csvTimeout(tx)
+      val absTimeout = blockHeight + csvTimeout
+      if (absTimeout > blockCount) {
+        log.info(s"delaying publication of txid=${tx.txid} until block=$absTimeout (curblock=$blockCount)")
+        val block2tx1 = block2tx.updated(absTimeout, block2tx.getOrElse(absTimeout, Seq.empty[Transaction]) :+ tx)
+        context become running(tip, watches, scriptHashStatus, block2tx1, sent)
+      } else {
+        log.info(s"publishing tx=${Transaction.write(tx)}")
+        client ! BroadcastTransaction(tx)
+        context become running(tip, watches, scriptHashStatus, block2tx, sent :+ tx)
+      }
+
+    case ElectrumClient.BroadcastTransactionResponse(tx, error_opt) =>
+      error_opt match {
+        case None => log.info(s"broadcast succeeded for txid=${tx.txid} tx=${Transaction.write(tx)}")
+        case Some(error) if error.message.contains("transaction already in block chain") => log.info(s"broadcast ignored for txid=${tx.txid} tx=${Transaction.write(tx)} (tx was already in blockchain)")
+        case Some(error) => log.error(s"broadcast failed for txid=${tx.txid} tx=${Transaction.write(tx)} with error=$error")
+      }
+      context become running(tip, watches, scriptHashStatus, block2tx, sent diff Seq(tx))
+
+    case ElectrumClient.ElectrumDisconnected =>
+      // we remember watches and keep track of tx that have not yet been published
+      // we also re-send the txes that we previsouly sent but hadn't yet received the confirmation
+      context become disconnected(watches, sent.map(PublishAsap(_)), block2tx)
+  }
+
+}
+
+object ElectrumWatcher extends App {
+
+  val system = ActorSystem()
+
+  class Root extends Actor with ActorLogging {
+    val serverAddresses = Seq(new InetSocketAddress("localhost", 51000), new InetSocketAddress("localhost", 51001))
+    val client = context.actorOf(Props(new ElectrumClient(serverAddresses)), "client")
+    client ! ElectrumClient.AddStatusListener(self)
+
+    override def unhandled(message: Any): Unit = {
+      super.unhandled(message)
+      log.warning(s"unhandled message $message")
+    }
+
+    def receive = {
+      case ElectrumClient.ElectrumReady =>
+        log.info(s"starting watcher")
+        context become running(context.actorOf(Props(new ElectrumWatcher(client)), "watcher"))
+    }
+
+    def running(watcher: ActorRef): Receive = {
+      case watch: Watch => watcher forward watch
+    }
+  }
+
+  val root = system.actorOf(Props[Root], "root")
+  val scanner = new java.util.Scanner(System.in)
+  while (true) {
+    val tx = Transaction.read(scanner.nextLine())
+    root ! WatchSpent(root, tx.txid, 0, tx.txOut(0).publicKeyScript, BITCOIN_FUNDING_SPENT)
+    root ! WatchConfirmed(root, tx.txid, tx.txOut(0).publicKeyScript, 4L, BITCOIN_FUNDING_DEPTHOK)
+  }
+}

eclair-core/src/main/scala/fr/acinq/eclair/blockchain/fee/BitcoinCoreFeeProvider.scala

@@ -0,0 +1,44 @@
+package fr.acinq.eclair.blockchain.fee
+
+import fr.acinq.bitcoin.Btc
+import fr.acinq.eclair.blockchain.bitcoind.rpc.BitcoinJsonRPCClient
+import org.json4s.JsonAST.{JDouble, JInt}
+
+import scala.concurrent.{ExecutionContext, Future}
+
+/**
+  * Created by PM on 09/07/2017.
+  */
+class BitcoinCoreFeeProvider(rpcClient: BitcoinJsonRPCClient, defaultFeerates: FeeratesPerByte)(implicit ec: ExecutionContext) extends FeeProvider {
+
+  /**
+    * We need this to keep commitment tx fees in sync with the state of the network
+    *
+    * @param nBlocks number of blocks until tx is confirmed
+    * @return the current
+    */
+  def estimateSmartFee(nBlocks: Int): Future[Long] =
+    rpcClient.invoke("estimatesmartfee", nBlocks).map(json => {
+      json \ "feerate" match {
+        case JDouble(feerate) => Btc(feerate).toLong
+        case JInt(feerate) if feerate.toLong < 0 => feerate.toLong
+        case JInt(feerate) => Btc(feerate.toLong).toLong
+      }
+    })
+
+  override def getFeerates: Future[FeeratesPerByte] = for {
+    block_1 <- estimateSmartFee(1)
+    blocks_2 <- estimateSmartFee(2)
+    blocks_6 <- estimateSmartFee(6)
+    blocks_12 <- estimateSmartFee(12)
+    blocks_36 <- estimateSmartFee(36)
+    blocks_72 <- estimateSmartFee(72)
+  } yield FeeratesPerByte(
+    block_1 = if (block_1 > 0) block_1 else defaultFeerates.block_1,
+    blocks_2 = if (blocks_2 > 0) blocks_2 else defaultFeerates.blocks_2,
+    blocks_6 = if (blocks_6 > 0) blocks_6 else defaultFeerates.blocks_6,
+    blocks_12 = if (blocks_12 > 0) blocks_12 else defaultFeerates.blocks_12,
+    blocks_36 = if (blocks_36 > 0) blocks_36 else defaultFeerates.blocks_36,
+    blocks_72 = if (blocks_72 > 0) blocks_72 else defaultFeerates.blocks_72)
+
+}

eclair-core/src/main/scala/fr/acinq/eclair/blockchain/fee/ConstantFeeProvider.scala

@@ -0,0 +1,12 @@
+package fr.acinq.eclair.blockchain.fee
+
+import scala.concurrent.Future
+
+/**
+  * Created by PM on 09/07/2017.
+  */
+class ConstantFeeProvider(feerates: FeeratesPerByte) extends FeeProvider {
+
+  override def getFeerates: Future[FeeratesPerByte] = Future.successful(feerates)
+
+}

eclair-core/src/main/scala/fr/acinq/eclair/blockchain/fee/EarnDotComFeeProvider.scala

@@ -0,0 +1,66 @@
+package fr.acinq.eclair.blockchain.fee
+
+import akka.actor.ActorSystem
+import akka.http.scaladsl.Http
+import akka.http.scaladsl.model._
+import akka.http.scaladsl.unmarshalling.Unmarshal
+import akka.stream.ActorMaterializer
+import de.heikoseeberger.akkahttpjson4s.Json4sSupport._
+import org.json4s.JsonAST.{JArray, JInt, JValue}
+import org.json4s.{DefaultFormats, jackson}
+
+import scala.concurrent.{ExecutionContext, Future}
+
+/**
+  * Created by PM on 16/11/2017.
+  */
+class EarnDotComFeeProvider(implicit system: ActorSystem, ec: ExecutionContext) extends FeeProvider {
+
+  import EarnDotComFeeProvider._
+
+  implicit val materializer = ActorMaterializer()
+  val httpClient = Http(system)
+  implicit val serialization = jackson.Serialization
+  implicit val formats = DefaultFormats
+
+  override def getFeerates: Future[FeeratesPerByte] =
+    for {
+      httpRes <- httpClient.singleRequest(HttpRequest(uri = Uri("https://bitcoinfees.earn.com/api/v1/fees/list"), method = HttpMethods.GET))
+      json <- Unmarshal(httpRes).to[JValue]
+      feeRanges = parseFeeRanges(json)
+    } yield extractFeerates(feeRanges)
+}
+
+object EarnDotComFeeProvider {
+
+  case class FeeRange(minFee: Long, maxFee: Long, memCount: Long, minDelay: Long, maxDelay: Long)
+
+  def parseFeeRanges(json: JValue): Seq[FeeRange] = {
+    val JArray(items) = json \ "fees"
+    items.map(item => {
+      val JInt(minFee) = item \ "minFee"
+      val JInt(maxFee) = item \ "maxFee"
+      val JInt(memCount) = item \ "memCount"
+      val JInt(minDelay) = item \ "minDelay"
+      val JInt(maxDelay) = item \ "maxDelay"
+      FeeRange(minFee = minFee.toLong, maxFee = maxFee.toLong, memCount = memCount.toLong, minDelay = minDelay.toLong, maxDelay = maxDelay.toLong)
+    })
+  }
+
+  def extractFeerate(feeRanges: Seq[FeeRange], maxBlockDelay: Int): Long = {
+    // first we keep only fee ranges with a max block delay below the limit
+    val belowLimit = feeRanges.filter(_.maxDelay <= maxBlockDelay)
+    // out of all the remaining fee ranges, we select the one with the minimum higher bound
+    belowLimit.minBy(_.maxFee).maxFee
+  }
+
+  def extractFeerates(feeRanges: Seq[FeeRange]): FeeratesPerByte =
+    FeeratesPerByte(
+      block_1 = extractFeerate(feeRanges, 1),
+      blocks_2 = extractFeerate(feeRanges, 2),
+      blocks_6 = extractFeerate(feeRanges, 6),
+      blocks_12 = extractFeerate(feeRanges, 12),
+      blocks_36 = extractFeerate(feeRanges, 36),
+      blocks_72 = extractFeerate(feeRanges, 72))
+
+}

eclair-core/src/main/scala/fr/acinq/eclair/blockchain/fee/FallbackFeeProvider.scala

@@ -0,0 +1,20 @@
+package fr.acinq.eclair.blockchain.fee
+
+import scala.concurrent.{ExecutionContext, Future}
+
+/**
+  * This provider will try all child providers in sequence, until one of them works
+  */
+class FallbackFeeProvider(providers: Seq[FeeProvider])(implicit ec: ExecutionContext) extends FeeProvider {
+
+  require(providers.size >= 1, "need at least one fee provider")
+
+  def getFeerates(fallbacks: Seq[FeeProvider]): Future[FeeratesPerByte] =
+    fallbacks match {
+      case last +: Nil => last.getFeerates
+      case head +: remaining => head.getFeerates.recoverWith { case _ => getFeerates(remaining) }
+    }
+
+  override def getFeerates: Future[FeeratesPerByte] = getFeerates(providers)
+
+}

eclair-core/src/main/scala/fr/acinq/eclair/blockchain/fee/FeeProvider.scala

@@ -0,0 +1,42 @@
+package fr.acinq.eclair.blockchain.fee
+
+import fr.acinq.eclair.feerateByte2Kw
+
+import scala.concurrent.Future
+
+/**
+  * Created by PM on 09/07/2017.
+  */
+trait FeeProvider {
+
+  def getFeerates: Future[FeeratesPerByte]
+
+}
+
+case class FeeratesPerByte(block_1: Long, blocks_2: Long, blocks_6: Long, blocks_12: Long, blocks_36: Long, blocks_72: Long)
+
+case class FeeratesPerKw(block_1: Long, blocks_2: Long, blocks_6: Long, blocks_12: Long, blocks_36: Long, blocks_72: Long)
+
+object FeeratesPerKw {
+  def apply(feerates: FeeratesPerByte): FeeratesPerKw = FeeratesPerKw(
+    block_1 = feerateByte2Kw(feerates.block_1),
+    blocks_2 = feerateByte2Kw(feerates.blocks_2),
+    blocks_6 = feerateByte2Kw(feerates.blocks_6),
+    blocks_12 = feerateByte2Kw(feerates.blocks_12),
+    blocks_36 = feerateByte2Kw(feerates.blocks_36),
+    blocks_72 = feerateByte2Kw(feerates.blocks_72))
+
+  /**
+    * Used in tests
+    *
+    * @param feeratePerKw
+    * @return
+    */
+  def single(feeratePerKw: Long): FeeratesPerKw = FeeratesPerKw(
+    block_1 = feeratePerKw,
+    blocks_2 = feeratePerKw,
+    blocks_6 = feeratePerKw,
+    blocks_12 = feeratePerKw,
+    blocks_36 = feeratePerKw,
+    blocks_72 = feeratePerKw)
+}

eclair-core/src/main/scala/fr/acinq/eclair/channel/ChannelExceptions.scala

@@ -0,0 +1,43 @@
+package fr.acinq.eclair.channel
+
+import fr.acinq.bitcoin.BinaryData
+import fr.acinq.eclair.UInt64
+
+/**
+  * Created by PM on 11/04/2017.
+  */
+
+class ChannelException(channelId: BinaryData, message: String) extends RuntimeException(message)
+// @formatter:off
+case class DebugTriggeredException             (channelId: BinaryData) extends ChannelException(channelId, "debug-mode triggered failure")
+case class ChannelReserveTooHigh               (channelId: BinaryData, channelReserveSatoshis: Long, reserveToFundingRatio: Double, maxReserveToFundingRatio: Double) extends ChannelException(channelId, s"channelReserveSatoshis too high: reserve=$channelReserveSatoshis fundingRatio=$reserveToFundingRatio maxFundingRatio=$maxReserveToFundingRatio")
+case class ClosingInProgress                   (channelId: BinaryData) extends ChannelException(channelId, "cannot send new htlcs, closing in progress")
+case class ClosingAlreadyInProgress            (channelId: BinaryData) extends ChannelException(channelId, "closing already in progress")
+case class CannotCloseWithUnsignedOutgoingHtlcs(channelId: BinaryData) extends ChannelException(channelId, "cannot close when there are unsigned outgoing htlcs")
+case class ChannelUnavailable                  (channelId: BinaryData) extends ChannelException(channelId, "channel is unavailable (offline or closing)")
+case class InvalidFinalScript                  (channelId: BinaryData) extends ChannelException(channelId, "invalid final script")
+case class HtlcTimedout                        (channelId: BinaryData) extends ChannelException(channelId, s"one or more htlcs timed out")
+case class FeerateTooDifferent                 (channelId: BinaryData, localFeeratePerKw: Long, remoteFeeratePerKw: Long) extends ChannelException(channelId, s"local/remote feerates are too different: remoteFeeratePerKw=$remoteFeeratePerKw localFeeratePerKw=$localFeeratePerKw")
+case class InvalidCloseSignature               (channelId: BinaryData) extends ChannelException(channelId, "cannot verify their close signature")
+case class InvalidCommitmentSignature          (channelId: BinaryData) extends ChannelException(channelId, "invalid commitment signature")
+case class ForcedLocalCommit                   (channelId: BinaryData, reason: String) extends ChannelException(channelId, s"forced local commit: reason")
+case class UnexpectedHtlcId                    (channelId: BinaryData, expected: Long, actual: Long) extends ChannelException(channelId, s"unexpected htlc id: expected=$expected actual=$actual")
+case class InvalidPaymentHash                  (channelId: BinaryData) extends ChannelException(channelId, "invalid payment hash")
+case class ExpiryTooSmall                      (channelId: BinaryData, minimum: Long, actual: Long, blockCount: Long) extends ChannelException(channelId, s"expiry too small: required=$minimum actual=$actual blockCount=$blockCount")
+case class ExpiryCannotBeInThePast             (channelId: BinaryData, expiry: Long, blockCount: Long) extends ChannelException(channelId, s"expiry can't be in the past: expiry=$expiry blockCount=$blockCount")
+case class HtlcValueTooSmall                   (channelId: BinaryData, minimum: Long, actual: Long) extends ChannelException(channelId, s"htlc value too small: minimum=$minimum actual=$actual")
+case class HtlcValueTooHighInFlight            (channelId: BinaryData, maximum: UInt64, actual: UInt64) extends ChannelException(channelId, s"in-flight htlcs hold too much value: maximum=$maximum actual=$actual")
+case class TooManyAcceptedHtlcs                (channelId: BinaryData, maximum: Long) extends ChannelException(channelId, s"too many accepted htlcs: maximum=$maximum")
+case class InsufficientFunds                   (channelId: BinaryData, amountMsat: Long, missingSatoshis: Long, reserveSatoshis: Long, feesSatoshis: Long) extends ChannelException(channelId, s"insufficient funds: missingSatoshis=$missingSatoshis reserveSatoshis=$reserveSatoshis fees=$feesSatoshis")
+case class InvalidHtlcPreimage                 (channelId: BinaryData, id: Long) extends ChannelException(channelId, s"invalid htlc preimage for htlc id=$id")
+case class UnknownHtlcId                       (channelId: BinaryData, id: Long) extends ChannelException(channelId, s"unknown htlc id=$id")
+case class FundeeCannotSendUpdateFee           (channelId: BinaryData) extends ChannelException(channelId, s"only the funder should send update_fee messages")
+case class CannotAffordFees                    (channelId: BinaryData, missingSatoshis: Long, reserveSatoshis: Long, feesSatoshis: Long) extends ChannelException(channelId, s"can't pay the fee: missingSatoshis=$missingSatoshis reserveSatoshis=$reserveSatoshis feesSatoshis=$feesSatoshis")
+case class CannotSignWithoutChanges            (channelId: BinaryData) extends ChannelException(channelId, "cannot sign when there are no changes")
+case class CannotSignBeforeRevocation          (channelId: BinaryData) extends ChannelException(channelId, "cannot sign until next revocation hash is received")
+case class UnexpectedRevocation                (channelId: BinaryData) extends ChannelException(channelId, "received unexpected RevokeAndAck message")
+case class InvalidRevocation                   (channelId: BinaryData) extends ChannelException(channelId, "invalid revocation")
+case class CommitmentSyncError                 (channelId: BinaryData) extends ChannelException(channelId, "commitment sync error")
+case class RevocationSyncError                 (channelId: BinaryData) extends ChannelException(channelId, "revocation sync error")
+case class InvalidFailureCode                  (channelId: BinaryData) extends ChannelException(channelId, "UpdateFailMalformedHtlc message doesn't have BADONION bit set")
+// @formatter:on

eclair-core/src/main/scala/fr/acinq/eclair/channel/ChannelTypes.scala

@@ -2,12 +2,12 @@ package fr.acinq.eclair.channel
 
 import akka.actor.ActorRef
 import fr.acinq.bitcoin.Crypto.{Point, PrivateKey, PublicKey, Scalar}
-import fr.acinq.bitcoin.{BinaryData, Transaction}
-import fr.acinq.eclair.blockchain.MakeFundingTxResponse
+import fr.acinq.bitcoin.{BinaryData, OutPoint, Transaction}
+import fr.acinq.eclair.UInt64
 import fr.acinq.eclair.crypto.Sphinx
 import fr.acinq.eclair.transactions.CommitmentSpec
 import fr.acinq.eclair.transactions.Transactions.CommitTx
-import fr.acinq.eclair.wire.{AcceptChannel, ClosingSigned, FailureMessage, FundingCreated, FundingLocked, FundingSigned, Init, OpenChannel, Shutdown, UpdateAddHtlc}
+import fr.acinq.eclair.wire.{AcceptChannel, AnnouncementSignatures, ClosingSigned, FailureMessage, FundingCreated, FundingLocked, FundingSigned, Init, OpenChannel, Shutdown, UpdateAddHtlc}
 
 
 /**
@@ -31,9 +31,9 @@ case object WAIT_FOR_INIT_INTERNAL extends State
 case object WAIT_FOR_OPEN_CHANNEL extends State
 case object WAIT_FOR_ACCEPT_CHANNEL extends State
 case object WAIT_FOR_FUNDING_INTERNAL extends State
-case object WAIT_FOR_FUNDING_PARENT extends State
 case object WAIT_FOR_FUNDING_CREATED extends State
 case object WAIT_FOR_FUNDING_SIGNED extends State
+case object WAIT_FOR_FUNDING_PUBLISHED extends State
 case object WAIT_FOR_FUNDING_CONFIRMED extends State
 case object WAIT_FOR_FUNDING_LOCKED extends State
 case object NORMAL extends State
@@ -42,6 +42,8 @@ case object NEGOTIATING extends State
 case object CLOSING extends State
 case object CLOSED extends State
 case object OFFLINE extends State
+case object SYNCING extends State
+case object ERR_FUNDING_PUBLISH_FAILED extends State
 case object ERR_FUNDING_LOST extends State
 case object ERR_FUNDING_TIMEOUT extends State
 case object ERR_INFORMATION_LEAK extends State
@@ -57,7 +59,7 @@ case object ERR_INFORMATION_LEAK extends State
       8888888888     Y8P     8888888888 888    Y888     888     "Y8888P"
  */
 
-case class INPUT_INIT_FUNDER(temporaryChannelId: BinaryData, fundingSatoshis: Long, pushMsat: Long, initialFeeratePerKw: Long, localParams: LocalParams, remote: ActorRef, remoteInit: Init)
+case class INPUT_INIT_FUNDER(temporaryChannelId: BinaryData, fundingSatoshis: Long, pushMsat: Long, initialFeeratePerKw: Long, localParams: LocalParams, remote: ActorRef, remoteInit: Init, channelFlags: Byte)
 case class INPUT_INIT_FUNDEE(temporaryChannelId: BinaryData, localParams: LocalParams, remote: ActorRef, remoteInit: Init)
 case object INPUT_CLOSE_COMPLETE_TIMEOUT // when requesting a mutual close, we wait for as much as this timeout, then unilateral close
 case object INPUT_PUBLISH_LOCALCOMMIT // used in tests
@@ -66,21 +68,16 @@ case class INPUT_RECONNECTED(remote: ActorRef)
 case class INPUT_RESTORED(data: HasCommitments)
 
 sealed trait BitcoinEvent
+case object BITCOIN_FUNDING_PUBLISH_FAILED extends BitcoinEvent
 case object BITCOIN_FUNDING_DEPTHOK extends BitcoinEvent
 case object BITCOIN_FUNDING_DEEPLYBURIED extends BitcoinEvent
 case object BITCOIN_FUNDING_LOST extends BitcoinEvent
 case object BITCOIN_FUNDING_TIMEOUT extends BitcoinEvent
 case object BITCOIN_FUNDING_SPENT extends BitcoinEvent
-case object BITCOIN_HTLC_SPENT extends BitcoinEvent
-case object BITCOIN_LOCALCOMMIT_DONE extends BitcoinEvent
-case object BITCOIN_REMOTECOMMIT_DONE extends BitcoinEvent
-case object BITCOIN_NEXTREMOTECOMMIT_DONE extends BitcoinEvent
-case object BITCOIN_PENALTY_DONE extends BitcoinEvent
-case object BITCOIN_CLOSE_DONE extends BitcoinEvent
-case class BITCOIN_FUNDING_OTHER_CHANNEL_SPENT(shortChannelId: Long) extends BitcoinEvent
+case object BITCOIN_OUTPUT_SPENT extends BitcoinEvent
 case class BITCOIN_TX_CONFIRMED(tx: Transaction) extends BitcoinEvent
+case class BITCOIN_FUNDING_EXTERNAL_CHANNEL_SPENT(shortChannelId: Long) extends BitcoinEvent
 case class BITCOIN_PARENT_TX_CONFIRMED(childTx: Transaction) extends BitcoinEvent
-case class BITCOIN_INPUT_SPENT(tx: Transaction) extends BitcoinEvent
 
 /*
        .d8888b.   .d88888b.  888b     d888 888b     d888        d8888 888b    888 8888888b.   .d8888b.
@@ -94,7 +91,7 @@ case class BITCOIN_INPUT_SPENT(tx: Transaction) extends BitcoinEvent
  */
 
 sealed trait Command
-final case class CMD_ADD_HTLC(amountMsat: Long, paymentHash: BinaryData, expiry: Long, onion: BinaryData = Sphinx.LAST_PACKET, upstream_opt: Option[UpdateAddHtlc] = None, commit: Boolean = false) extends Command
+final case class CMD_ADD_HTLC(amountMsat: Long, paymentHash: BinaryData, expiry: Long, onion: BinaryData = Sphinx.LAST_PACKET.serialize, upstream_opt: Option[UpdateAddHtlc] = None, commit: Boolean = false) extends Command
 final case class CMD_FULFILL_HTLC(id: Long, r: BinaryData, commit: Boolean = false) extends Command
 final case class CMD_FAIL_HTLC(id: Long, reason: Either[BinaryData, FailureMessage], commit: Boolean = false) extends Command
 final case class CMD_FAIL_MALFORMED_HTLC(id: Long, onionHash: BinaryData, failureCode: Int, commit: Boolean = false) extends Command
@@ -126,19 +123,22 @@ trait HasCommitments extends Data {
   def channelId = commitments.channelId
 }
 
-case class LocalCommitPublished(commitTx: Transaction, claimMainDelayedOutputTx: Option[Transaction], htlcSuccessTxs: Seq[Transaction], htlcTimeoutTxs: Seq[Transaction], claimHtlcDelayedTx: Seq[Transaction])
-case class RemoteCommitPublished(commitTx: Transaction, claimMainOutputTx: Option[Transaction], claimHtlcSuccessTxs: Seq[Transaction], claimHtlcTimeoutTxs: Seq[Transaction])
-case class RevokedCommitPublished(commitTx: Transaction, claimMainOutputTx: Option[Transaction], mainPenaltyTx: Option[Transaction], claimHtlcTimeoutTxs: Seq[Transaction], htlcTimeoutTxs: Seq[Transaction], htlcPenaltyTxs: Seq[Transaction])
+case class LocalCommitPublished(commitTx: Transaction, claimMainDelayedOutputTx: Option[Transaction], htlcSuccessTxs: List[Transaction], htlcTimeoutTxs: List[Transaction], claimHtlcDelayedTx: List[Transaction], spent: Map[OutPoint, BinaryData])
+case class RemoteCommitPublished(commitTx: Transaction, claimMainOutputTx: Option[Transaction], claimHtlcSuccessTxs: List[Transaction], claimHtlcTimeoutTxs: List[Transaction], spent: Map[OutPoint, BinaryData])
+case class RevokedCommitPublished(commitTx: Transaction, claimMainOutputTx: Option[Transaction], mainPenaltyTx: Option[Transaction], claimHtlcTimeoutTxs: List[Transaction], htlcTimeoutTxs: List[Transaction], htlcPenaltyTxs: List[Transaction], spent: Map[OutPoint, BinaryData])
 
 final case class DATA_WAIT_FOR_OPEN_CHANNEL(initFundee: INPUT_INIT_FUNDEE) extends Data
 final case class DATA_WAIT_FOR_ACCEPT_CHANNEL(initFunder: INPUT_INIT_FUNDER, lastSent: OpenChannel) extends Data
 final case class DATA_WAIT_FOR_FUNDING_INTERNAL(temporaryChannelId: BinaryData, localParams: LocalParams, remoteParams: RemoteParams, fundingSatoshis: Long, pushMsat: Long, initialFeeratePerKw: Long, remoteFirstPerCommitmentPoint: Point, lastSent: OpenChannel) extends Data
-final case class DATA_WAIT_FOR_FUNDING_PARENT(fundingResponse: MakeFundingTxResponse, parentCandidates: Seq[Transaction], data: DATA_WAIT_FOR_FUNDING_INTERNAL) extends Data
-final case class DATA_WAIT_FOR_FUNDING_CREATED(temporaryChannelId: BinaryData, localParams: LocalParams, remoteParams: RemoteParams, fundingSatoshis: Long, pushMsat: Long, initialFeeratePerKw: Long, remoteFirstPerCommitmentPoint: Point, lastSent: AcceptChannel) extends Data
-final case class DATA_WAIT_FOR_FUNDING_SIGNED(channelId: BinaryData, localParams: LocalParams, remoteParams: RemoteParams, fundingTx: Transaction, localSpec: CommitmentSpec, localCommitTx: CommitTx, remoteCommit: RemoteCommit, lastSent: FundingCreated) extends Data
+final case class DATA_WAIT_FOR_FUNDING_CREATED(temporaryChannelId: BinaryData, localParams: LocalParams, remoteParams: RemoteParams, fundingSatoshis: Long, pushMsat: Long, initialFeeratePerKw: Long, remoteFirstPerCommitmentPoint: Point, channelFlags: Byte, lastSent: AcceptChannel) extends Data
+final case class DATA_WAIT_FOR_FUNDING_SIGNED(channelId: BinaryData, localParams: LocalParams, remoteParams: RemoteParams, fundingTx: Transaction, localSpec: CommitmentSpec, localCommitTx: CommitTx, remoteCommit: RemoteCommit, channelFlags: Byte, lastSent: FundingCreated) extends Data
 final case class DATA_WAIT_FOR_FUNDING_CONFIRMED(commitments: Commitments, deferred: Option[FundingLocked], lastSent: Either[FundingCreated, FundingSigned]) extends Data with HasCommitments
 final case class DATA_WAIT_FOR_FUNDING_LOCKED(commitments: Commitments, lastSent: FundingLocked) extends Data with HasCommitments
-final case class DATA_NORMAL(commitments: Commitments, shortChannelId: Option[Long]) extends Data with HasCommitments
+final case class DATA_NORMAL(commitments: Commitments,
+                             shortChannelId: Option[Long],
+                             localAnnouncementSignatures: Option[AnnouncementSignatures],
+                             localShutdown: Option[Shutdown],
+                             remoteShutdown: Option[Shutdown]) extends Data with HasCommitments
 final case class DATA_SHUTDOWN(commitments: Commitments,
                                localShutdown: Shutdown, remoteShutdown: Shutdown) extends Data with HasCommitments
 final case class DATA_NEGOTIATING(commitments: Commitments,
@@ -148,30 +148,37 @@ final case class DATA_CLOSING(commitments: Commitments,
                               localCommitPublished: Option[LocalCommitPublished] = None,
                               remoteCommitPublished: Option[RemoteCommitPublished] = None,
                               nextRemoteCommitPublished: Option[RemoteCommitPublished] = None,
-                              revokedCommitPublished: Seq[RevokedCommitPublished] = Nil) extends Data with HasCommitments {
+                              revokedCommitPublished: List[RevokedCommitPublished] = Nil) extends Data with HasCommitments {
   require(mutualClosePublished.isDefined || localCommitPublished.isDefined || remoteCommitPublished.isDefined || nextRemoteCommitPublished.isDefined || revokedCommitPublished.size > 0, "there should be at least one tx published in this state")
 }
 
 final case class LocalParams(nodeId: PublicKey,
                              dustLimitSatoshis: Long,
-                             maxHtlcValueInFlightMsat: Long,
+                             maxHtlcValueInFlightMsat: UInt64,
                              channelReserveSatoshis: Long,
                              htlcMinimumMsat: Long,
                              toSelfDelay: Int,
                              maxAcceptedHtlcs: Int,
                              fundingPrivKey: PrivateKey,
                              revocationSecret: Scalar,
-                             paymentKey: PrivateKey,
+                             paymentKey: Scalar,
                              delayedPaymentKey: Scalar,
+                             htlcKey: Scalar,
                              defaultFinalScriptPubKey: BinaryData,
                              shaSeed: BinaryData,
                              isFunder: Boolean,
                              globalFeatures: BinaryData,
-                             localFeatures: BinaryData)
+                             localFeatures: BinaryData) {
+  // precomputed for performance reasons
+  val paymentBasepoint = paymentKey.toPoint
+  val delayedPaymentBasepoint = delayedPaymentKey.toPoint
+  val revocationBasepoint = revocationSecret.toPoint
+  val htlcBasepoint = htlcKey.toPoint
+}
 
 final case class RemoteParams(nodeId: PublicKey,
                               dustLimitSatoshis: Long,
-                              maxHtlcValueInFlightMsat: Long,
+                              maxHtlcValueInFlightMsat: UInt64,
                               channelReserveSatoshis: Long,
                               htlcMinimumMsat: Long,
                               toSelfDelay: Int,
@@ -180,7 +187,12 @@ final case class RemoteParams(nodeId: PublicKey,
                               revocationBasepoint: Point,
                               paymentBasepoint: Point,
                               delayedPaymentBasepoint: Point,
+                              htlcBasepoint: Point,
                               globalFeatures: BinaryData,
                               localFeatures: BinaryData)
 
+object ChannelFlags {
+  val AnnounceChannel = 0x01.toByte
+  val Empty = 0x00.toByte
+}
 // @formatter:on

eclair-core/src/main/scala/fr/acinq/eclair/channel/Commitments.scala

@@ -0,0 +1,524 @@
+package fr.acinq.eclair.channel
+
+import fr.acinq.bitcoin.Crypto.{Point, PrivateKey, sha256}
+import fr.acinq.bitcoin.{BinaryData, Crypto, Satoshi, Transaction}
+import fr.acinq.eclair.crypto.{Generators, ShaChain, Sphinx}
+import fr.acinq.eclair.payment.Origin
+import fr.acinq.eclair.transactions.Transactions._
+import fr.acinq.eclair.transactions._
+import fr.acinq.eclair.wire._
+import fr.acinq.eclair.{Globals, UInt64}
+import grizzled.slf4j.Logging
+
+// @formatter:off
+case class LocalChanges(proposed: List[UpdateMessage], signed: List[UpdateMessage], acked: List[UpdateMessage]) {
+  def all: List[UpdateMessage] = proposed ++ signed ++ acked
+}
+case class RemoteChanges(proposed: List[UpdateMessage], acked: List[UpdateMessage], signed: List[UpdateMessage])
+case class Changes(ourChanges: LocalChanges, theirChanges: RemoteChanges)
+case class HtlcTxAndSigs(txinfo: TransactionWithInputInfo, localSig: BinaryData, remoteSig: BinaryData)
+case class PublishableTxs(commitTx: CommitTx, htlcTxsAndSigs: List[HtlcTxAndSigs])
+case class LocalCommit(index: Long, spec: CommitmentSpec, publishableTxs: PublishableTxs)
+case class RemoteCommit(index: Long, spec: CommitmentSpec, txid: BinaryData, remotePerCommitmentPoint: Point)
+case class WaitingForRevocation(nextRemoteCommit: RemoteCommit, sent: CommitSig, sentAfterLocalCommitIndex: Long, reSignAsap: Boolean = false)
+// @formatter:on
+
+/**
+  * about remoteNextCommitInfo:
+  * we either:
+  * - have built and signed their next commit tx with their next revocation hash which can now be discarded
+  * - have their next per-commitment point
+  * So, when we've signed and sent a commit message and are waiting for their revocation message,
+  * theirNextCommitInfo is their next commit tx. The rest of the time, it is their next per-commitment point
+  */
+case class Commitments(localParams: LocalParams, remoteParams: RemoteParams,
+                       channelFlags: Byte,
+                       localCommit: LocalCommit, remoteCommit: RemoteCommit,
+                       localChanges: LocalChanges, remoteChanges: RemoteChanges,
+                       localNextHtlcId: Long, remoteNextHtlcId: Long,
+                       originChannels: Map[Long, Origin], // for outgoing htlcs relayed through us, the id of the previous channel
+                       remoteNextCommitInfo: Either[WaitingForRevocation, Point],
+                       commitInput: InputInfo,
+                       remotePerCommitmentSecrets: ShaChain, channelId: BinaryData) {
+
+  def hasNoPendingHtlcs: Boolean = localCommit.spec.htlcs.isEmpty && remoteCommit.spec.htlcs.isEmpty && remoteNextCommitInfo.isRight
+
+  def hasTimedoutOutgoingHtlcs(blockheight: Long): Boolean =
+    localCommit.spec.htlcs.exists(htlc => htlc.direction == OUT && blockheight >= htlc.add.expiry) ||
+      remoteCommit.spec.htlcs.exists(htlc => htlc.direction == IN && blockheight >= htlc.add.expiry)
+
+  def addLocalProposal(proposal: UpdateMessage): Commitments = Commitments.addLocalProposal(this, proposal)
+
+  def addRemoteProposal(proposal: UpdateMessage): Commitments = Commitments.addRemoteProposal(this, proposal)
+
+  def announceChannel: Boolean = (channelFlags & 0x01) != 0
+}
+
+object Commitments extends Logging {
+  /**
+    * add a change to our proposed change list
+    *
+    * @param commitments
+    * @param proposal
+    * @return an updated commitment instance
+    */
+  private def addLocalProposal(commitments: Commitments, proposal: UpdateMessage): Commitments =
+    commitments.copy(localChanges = commitments.localChanges.copy(proposed = commitments.localChanges.proposed :+ proposal))
+
+  private def addRemoteProposal(commitments: Commitments, proposal: UpdateMessage): Commitments =
+    commitments.copy(remoteChanges = commitments.remoteChanges.copy(proposed = commitments.remoteChanges.proposed :+ proposal))
+
+  /**
+    *
+    * @param commitments current commitments
+    * @param cmd         add HTLC command
+    * @return either Left(failure, error message) where failure is a failure message (see BOLT #4 and the Failure Message class) or Right((new commitments, updateAddHtlc)
+    */
+  def sendAdd(commitments: Commitments, cmd: CMD_ADD_HTLC, origin: Origin): Either[ChannelException, (Commitments, UpdateAddHtlc)] = {
+
+    if (cmd.paymentHash.size != 32) {
+      return Left(InvalidPaymentHash(commitments.channelId))
+    }
+
+    val blockCount = Globals.blockCount.get()
+    if (cmd.expiry <= blockCount) {
+      return Left(ExpiryCannotBeInThePast(commitments.channelId, cmd.expiry, blockCount))
+    }
+
+    if (cmd.amountMsat < commitments.remoteParams.htlcMinimumMsat) {
+      return Left(HtlcValueTooSmall(commitments.channelId, minimum = commitments.remoteParams.htlcMinimumMsat, actual = cmd.amountMsat))
+    }
+
+    // let's compute the current commitment *as seen by them* with this change taken into account
+    val add = UpdateAddHtlc(commitments.channelId, commitments.localNextHtlcId, cmd.amountMsat, cmd.paymentHash, cmd.expiry, cmd.onion)
+    // we increment the local htlc index and add an entry to the origins map
+    val commitments1 = addLocalProposal(commitments, add).copy(localNextHtlcId = commitments.localNextHtlcId + 1, originChannels = commitments.originChannels + (add.id -> origin))
+    // we need to base the next current commitment on the last sig we sent, even if we didn't yet receive their revocation
+    val remoteCommit1 = commitments1.remoteNextCommitInfo.left.toOption.map(_.nextRemoteCommit).getOrElse(commitments1.remoteCommit)
+    val reduced = CommitmentSpec.reduce(remoteCommit1.spec, commitments1.remoteChanges.acked, commitments1.localChanges.proposed)
+
+    val htlcValueInFlight = UInt64(reduced.htlcs.map(_.add.amountMsat).sum)
+    if (htlcValueInFlight > commitments1.remoteParams.maxHtlcValueInFlightMsat) {
+      // TODO: this should be a specific UPDATE error
+      return Left(HtlcValueTooHighInFlight(commitments.channelId, maximum = commitments1.remoteParams.maxHtlcValueInFlightMsat, actual = htlcValueInFlight))
+    }
+
+    // the HTLC we are about to create is outgoing, but from their point of view it is incoming
+    val acceptedHtlcs = reduced.htlcs.count(_.direction == IN)
+    if (acceptedHtlcs > commitments1.remoteParams.maxAcceptedHtlcs) {
+      return Left(TooManyAcceptedHtlcs(commitments.channelId, maximum = commitments1.remoteParams.maxAcceptedHtlcs))
+    }
+
+    // a node cannot spend pending incoming htlcs, and need to keep funds above the reserve required by the counterparty, after paying the fee
+    // we look from remote's point of view, so if local is funder remote doesn't pay the fees
+    val fees = if (commitments1.localParams.isFunder) Transactions.commitTxFee(Satoshi(commitments1.remoteParams.dustLimitSatoshis), reduced).amount else 0
+    val missing = reduced.toRemoteMsat / 1000 - commitments1.remoteParams.channelReserveSatoshis - fees
+    if (missing < 0) {
+      return Left(InsufficientFunds(commitments.channelId, amountMsat = cmd.amountMsat, missingSatoshis = -1 * missing, reserveSatoshis = commitments1.remoteParams.channelReserveSatoshis, feesSatoshis = fees))
+    }
+
+    Right(commitments1, add)
+  }
+
+  def receiveAdd(commitments: Commitments, add: UpdateAddHtlc): Commitments = {
+    if (add.id != commitments.remoteNextHtlcId) {
+      throw UnexpectedHtlcId(commitments.channelId, expected = commitments.remoteNextHtlcId, actual = add.id)
+    }
+
+    if (add.paymentHash.size != 32) {
+      throw InvalidPaymentHash(commitments.channelId)
+    }
+
+    val blockCount = Globals.blockCount.get()
+    // we need a reasonable amount of time to pull the funds before the sender can get refunded
+    val minExpiry = blockCount + 3
+    if (add.expiry < minExpiry) {
+      throw ExpiryTooSmall(commitments.channelId, minimum = minExpiry, actual = add.expiry, blockCount = blockCount)
+    }
+
+    if (add.amountMsat < commitments.localParams.htlcMinimumMsat) {
+      throw HtlcValueTooSmall(commitments.channelId, minimum = commitments.localParams.htlcMinimumMsat, actual = add.amountMsat)
+    }
+
+    // let's compute the current commitment *as seen by us* including this change
+    val commitments1 = addRemoteProposal(commitments, add).copy(remoteNextHtlcId = commitments.remoteNextHtlcId + 1)
+    val reduced = CommitmentSpec.reduce(commitments1.localCommit.spec, commitments1.localChanges.acked, commitments1.remoteChanges.proposed)
+
+    val htlcValueInFlight = UInt64(reduced.htlcs.map(_.add.amountMsat).sum)
+    if (htlcValueInFlight > commitments1.localParams.maxHtlcValueInFlightMsat) {
+      throw HtlcValueTooHighInFlight(commitments.channelId, maximum = commitments1.localParams.maxHtlcValueInFlightMsat, actual = htlcValueInFlight)
+    }
+
+    val acceptedHtlcs = reduced.htlcs.count(_.direction == IN)
+    if (acceptedHtlcs > commitments1.localParams.maxAcceptedHtlcs) {
+      throw TooManyAcceptedHtlcs(commitments.channelId, maximum = commitments1.localParams.maxAcceptedHtlcs)
+    }
+
+    // a node cannot spend pending incoming htlcs, and need to keep funds above the reserve required by the counterparty, after paying the fee
+    val fees = if (commitments1.localParams.isFunder) 0 else Transactions.commitTxFee(Satoshi(commitments1.localParams.dustLimitSatoshis), reduced).amount
+    val missing = reduced.toRemoteMsat / 1000 - commitments1.localParams.channelReserveSatoshis - fees
+    if (missing < 0) {
+      throw InsufficientFunds(commitments.channelId, amountMsat = add.amountMsat, missingSatoshis = -1 * missing, reserveSatoshis = commitments1.localParams.channelReserveSatoshis, feesSatoshis = fees)
+    }
+
+    commitments1
+  }
+
+  def getHtlcCrossSigned(commitments: Commitments, directionRelativeToLocal: Direction, htlcId: Long): Option[UpdateAddHtlc] = {
+    val remoteSigned = commitments.localCommit.spec.htlcs.find(htlc => htlc.direction == directionRelativeToLocal && htlc.add.id == htlcId)
+    val localSigned = commitments.remoteNextCommitInfo.left.toOption.map(_.nextRemoteCommit).getOrElse(commitments.remoteCommit)
+      .spec.htlcs.find(htlc => htlc.direction == directionRelativeToLocal.opposite && htlc.add.id == htlcId)
+    for {
+      htlc_out <- remoteSigned
+      htlc_in <- localSigned
+    } yield htlc_in.add
+  }
+
+  def sendFulfill(commitments: Commitments, cmd: CMD_FULFILL_HTLC): (Commitments, UpdateFulfillHtlc) =
+    getHtlcCrossSigned(commitments, IN, cmd.id) match {
+      case Some(htlc) if commitments.localChanges.proposed.exists {
+        case u: UpdateFulfillHtlc if htlc.id == u.id => true
+        case u: UpdateFailHtlc if htlc.id == u.id => true
+        case u: UpdateFailMalformedHtlc if htlc.id == u.id => true
+        case _ => false
+      } =>
+        // we have already sent a fail/fulfill for this htlc
+        throw UnknownHtlcId(commitments.channelId, cmd.id)
+      case Some(htlc) if htlc.paymentHash == sha256(cmd.r) =>
+        val fulfill = UpdateFulfillHtlc(commitments.channelId, cmd.id, cmd.r)
+        val commitments1 = addLocalProposal(commitments, fulfill)
+        (commitments1, fulfill)
+      case Some(htlc) => throw InvalidHtlcPreimage(commitments.channelId, cmd.id)
+      case None => throw UnknownHtlcId(commitments.channelId, cmd.id)
+    }
+
+  def receiveFulfill(commitments: Commitments, fulfill: UpdateFulfillHtlc): Either[Commitments, (Commitments, Origin)] =
+    getHtlcCrossSigned(commitments, OUT, fulfill.id) match {
+      case Some(htlc) if htlc.paymentHash == sha256(fulfill.paymentPreimage) => Right((addRemoteProposal(commitments, fulfill), commitments.originChannels(fulfill.id)))
+      case Some(htlc) => throw InvalidHtlcPreimage(commitments.channelId, fulfill.id)
+      case None => throw UnknownHtlcId(commitments.channelId, fulfill.id)
+    }
+
+  def sendFail(commitments: Commitments, cmd: CMD_FAIL_HTLC, nodeSecret: PrivateKey): (Commitments, UpdateFailHtlc) =
+    getHtlcCrossSigned(commitments, IN, cmd.id) match {
+      case Some(htlc) if commitments.localChanges.proposed.exists {
+        case u: UpdateFulfillHtlc if htlc.id == u.id => true
+        case u: UpdateFailHtlc if htlc.id == u.id => true
+        case u: UpdateFailMalformedHtlc if htlc.id == u.id => true
+        case _ => false
+      } =>
+        // we have already sent a fail/fulfill for this htlc
+        throw UnknownHtlcId(commitments.channelId, cmd.id)
+      case Some(htlc) =>
+        // we need the shared secret to build the error packet
+        val sharedSecret = Sphinx.parsePacket(nodeSecret, htlc.paymentHash, htlc.onionRoutingPacket).sharedSecret
+        val reason = cmd.reason match {
+          case Left(forwarded) => Sphinx.forwardErrorPacket(forwarded, sharedSecret)
+          case Right(failure) => Sphinx.createErrorPacket(sharedSecret, failure)
+        }
+        val fail = UpdateFailHtlc(commitments.channelId, cmd.id, reason)
+        val commitments1 = addLocalProposal(commitments, fail)
+        (commitments1, fail)
+      case None => throw UnknownHtlcId(commitments.channelId, cmd.id)
+    }
+
+  def sendFailMalformed(commitments: Commitments, cmd: CMD_FAIL_MALFORMED_HTLC): (Commitments, UpdateFailMalformedHtlc) = {
+    // BADONION bit must be set in failure_code
+    if ((cmd.failureCode & FailureMessageCodecs.BADONION) == 0) {
+      throw InvalidFailureCode(commitments.channelId)
+    }
+    getHtlcCrossSigned(commitments, IN, cmd.id) match {
+      case Some(htlc) if commitments.localChanges.proposed.exists {
+        case u: UpdateFulfillHtlc if htlc.id == u.id => true
+        case u: UpdateFailHtlc if htlc.id == u.id => true
+        case u: UpdateFailMalformedHtlc if htlc.id == u.id => true
+        case _ => false
+      } =>
+        // we have already sent a fail/fulfill for this htlc
+        throw UnknownHtlcId(commitments.channelId, cmd.id)
+      case Some(htlc) =>
+        val fail = UpdateFailMalformedHtlc(commitments.channelId, cmd.id, cmd.onionHash, cmd.failureCode)
+        val commitments1 = addLocalProposal(commitments, fail)
+        (commitments1, fail)
+      case None => throw UnknownHtlcId(commitments.channelId, cmd.id)
+    }
+  }
+
+  def receiveFail(commitments: Commitments, fail: UpdateFailHtlc): Either[Commitments, (Commitments, Origin)] =
+    getHtlcCrossSigned(commitments, OUT, fail.id) match {
+      case Some(htlc) => Right((addRemoteProposal(commitments, fail), commitments.originChannels(fail.id)))
+      case None => throw UnknownHtlcId(commitments.channelId, fail.id)
+    }
+
+  def receiveFailMalformed(commitments: Commitments, fail: UpdateFailMalformedHtlc): Either[Commitments, (Commitments, Origin)] = {
+    // A receiving node MUST fail the channel if the BADONION bit in failure_code is not set for update_fail_malformed_htlc.
+    if ((fail.failureCode & FailureMessageCodecs.BADONION) == 0) {
+      throw InvalidFailureCode(commitments.channelId)
+    }
+
+    getHtlcCrossSigned(commitments, OUT, fail.id) match {
+      case Some(htlc) => Right((addRemoteProposal(commitments, fail), commitments.originChannels(fail.id)))
+      case None => throw UnknownHtlcId(commitments.channelId, fail.id)
+    }
+  }
+
+  def sendFee(commitments: Commitments, cmd: CMD_UPDATE_FEE): (Commitments, UpdateFee) = {
+    if (!commitments.localParams.isFunder) {
+      throw FundeeCannotSendUpdateFee(commitments.channelId)
+    }
+    // let's compute the current commitment *as seen by them* with this change taken into account
+    val fee = UpdateFee(commitments.channelId, cmd.feeratePerKw)
+    val commitments1 = addLocalProposal(commitments, fee)
+    val reduced = CommitmentSpec.reduce(commitments1.remoteCommit.spec, commitments1.remoteChanges.acked, commitments1.localChanges.proposed)
+
+    // a node cannot spend pending incoming htlcs, and need to keep funds above the reserve required by the counterparty, after paying the fee
+    // we look from remote's point of view, so if local is funder remote doesn't pay the fees
+    val fees = Transactions.commitTxFee(Satoshi(commitments1.remoteParams.dustLimitSatoshis), reduced).amount
+    val missing = reduced.toRemoteMsat / 1000 - commitments1.remoteParams.channelReserveSatoshis - fees
+    if (missing < 0) {
+      throw CannotAffordFees(commitments.channelId, missingSatoshis = -1 * missing, reserveSatoshis = commitments1.localParams.channelReserveSatoshis, feesSatoshis = fees)
+    }
+
+    (commitments1, fee)
+  }
+
+  def receiveFee(commitments: Commitments, fee: UpdateFee, maxFeerateMismatch: Double): Commitments = {
+    if (commitments.localParams.isFunder) {
+      throw FundeeCannotSendUpdateFee(commitments.channelId)
+    }
+
+    val localFeeratePerKw = Globals.feeratesPerKw.get.block_1
+    if (Helpers.isFeeDiffTooHigh(fee.feeratePerKw, localFeeratePerKw, maxFeerateMismatch)) {
+      throw FeerateTooDifferent(commitments.channelId, localFeeratePerKw = localFeeratePerKw, remoteFeeratePerKw = fee.feeratePerKw)
+    }
+
+    // NB: we check that the funder can afford this new fee even if spec allows to do it at next signature
+    // It is easier to do it here because under certain (race) conditions spec allows a lower-than-normal fee to be paid,
+    // and it would be tricky to check if the conditions are met at signing
+    // (it also means that we need to check the fee of the initial commitment tx somewhere)
+
+    // let's compute the current commitment *as seen by us* including this change
+    val commitments1 = addRemoteProposal(commitments, fee)
+    val reduced = CommitmentSpec.reduce(commitments1.localCommit.spec, commitments1.localChanges.acked, commitments1.remoteChanges.proposed)
+
+    // a node cannot spend pending incoming htlcs, and need to keep funds above the reserve required by the counterparty, after paying the fee
+    val fees = Transactions.commitTxFee(Satoshi(commitments1.remoteParams.dustLimitSatoshis), reduced).amount
+    val missing = reduced.toRemoteMsat / 1000 - commitments1.localParams.channelReserveSatoshis - fees
+    if (missing < 0) {
+      throw CannotAffordFees(commitments.channelId, missingSatoshis = -1 * missing, reserveSatoshis = commitments1.localParams.channelReserveSatoshis, feesSatoshis = fees)
+    }
+
+    commitments1
+  }
+
+  def localHasUnsignedOutgoingHtlcs(commitments: Commitments): Boolean = commitments.localChanges.proposed.collectFirst { case u: UpdateAddHtlc => u }.isDefined
+
+  def remoteHasUnsignedOutgoingHtlcs(commitments: Commitments): Boolean = commitments.remoteChanges.proposed.collectFirst { case u: UpdateAddHtlc => u }.isDefined
+
+  def localHasChanges(commitments: Commitments): Boolean = commitments.remoteChanges.acked.size > 0 || commitments.localChanges.proposed.size > 0
+
+  def remoteHasChanges(commitments: Commitments): Boolean = commitments.localChanges.acked.size > 0 || commitments.remoteChanges.proposed.size > 0
+
+  def revocationPreimage(seed: BinaryData, index: Long): BinaryData = ShaChain.shaChainFromSeed(seed, 0xFFFFFFFFFFFFFFFFL - index)
+
+  def revocationHash(seed: BinaryData, index: Long): BinaryData = Crypto.sha256(revocationPreimage(seed, index))
+
+  def sendCommit(commitments: Commitments): (Commitments, CommitSig) = {
+    import commitments._
+    commitments.remoteNextCommitInfo match {
+      case Right(_) if !localHasChanges(commitments) =>
+        throw CannotSignWithoutChanges(commitments.channelId)
+      case Right(remoteNextPerCommitmentPoint) =>
+        // remote commitment will includes all local changes + remote acked changes
+        val spec = CommitmentSpec.reduce(remoteCommit.spec, remoteChanges.acked, localChanges.proposed)
+        val (remoteCommitTx, htlcTimeoutTxs, htlcSuccessTxs) = makeRemoteTxs(remoteCommit.index + 1, localParams, remoteParams, commitInput, remoteNextPerCommitmentPoint, spec)
+        val sig = Transactions.sign(remoteCommitTx, localParams.fundingPrivKey)
+
+        val sortedHtlcTxs: Seq[TransactionWithInputInfo] = (htlcTimeoutTxs ++ htlcSuccessTxs).sortBy(_.input.outPoint.index)
+        val htlcKey = Generators.derivePrivKey(localParams.htlcKey, remoteNextPerCommitmentPoint)
+        val htlcSigs = sortedHtlcTxs.map(Transactions.sign(_, htlcKey))
+
+        // don't sign if they don't get paid
+        val commitSig = CommitSig(
+          channelId = commitments.channelId,
+          signature = sig,
+          htlcSignatures = htlcSigs.toList
+        )
+
+        val commitments1 = commitments.copy(
+          remoteNextCommitInfo = Left(WaitingForRevocation(RemoteCommit(remoteCommit.index + 1, spec, remoteCommitTx.tx.txid, remoteNextPerCommitmentPoint), commitSig, commitments.localCommit.index)),
+          localChanges = localChanges.copy(proposed = Nil, signed = localChanges.proposed),
+          remoteChanges = remoteChanges.copy(acked = Nil, signed = remoteChanges.acked))
+        (commitments1, commitSig)
+      case Left(_) =>
+        throw CannotSignBeforeRevocation(commitments.channelId)
+    }
+  }
+
+  def receiveCommit(commitments: Commitments, commit: CommitSig): (Commitments, RevokeAndAck) = {
+    import commitments._
+    // they sent us a signature for *their* view of *our* next commit tx
+    // so in terms of rev.hashes and indexes we have:
+    // ourCommit.index -> our current revocation hash, which is about to become our old revocation hash
+    // ourCommit.index + 1 -> our next revocation hash, used by *them* to build the sig we've just received, and which
+    // is about to become our current revocation hash
+    // ourCommit.index + 2 -> which is about to become our next revocation hash
+    // we will reply to this sig with our old revocation hash preimage (at index) and our next revocation hash (at index + 1)
+    // and will increment our index
+
+    if (!remoteHasChanges(commitments))
+      throw CannotSignWithoutChanges(commitments.channelId)
+
+    // check that their signature is valid
+    // signatures are now optional in the commit message, and will be sent only if the other party is actually
+    // receiving money i.e its commit tx has one output for them
+
+    val spec = CommitmentSpec.reduce(localCommit.spec, localChanges.acked, remoteChanges.proposed)
+    val localPerCommitmentPoint = Generators.perCommitPoint(localParams.shaSeed, commitments.localCommit.index + 1)
+    val (localCommitTx, htlcTimeoutTxs, htlcSuccessTxs) = makeLocalTxs(localCommit.index + 1, localParams, remoteParams, commitInput, localPerCommitmentPoint, spec)
+    val sig = Transactions.sign(localCommitTx, localParams.fundingPrivKey)
+
+    // TODO: should we have optional sig? (original comment: this tx will NOT be signed if our output is empty)
+
+    // no need to compute htlc sigs if commit sig doesn't check out
+    val signedCommitTx = Transactions.addSigs(localCommitTx, localParams.fundingPrivKey.publicKey, remoteParams.fundingPubKey, sig, commit.signature)
+    if (Transactions.checkSpendable(signedCommitTx).isFailure) {
+      throw InvalidCommitmentSignature(commitments.channelId)
+    }
+
+    val sortedHtlcTxs: Seq[TransactionWithInputInfo] = (htlcTimeoutTxs ++ htlcSuccessTxs).sortBy(_.input.outPoint.index)
+    require(commit.htlcSignatures.size == sortedHtlcTxs.size, s"htlc sig count mismatch (received=${commit.htlcSignatures.size}, expected=${sortedHtlcTxs.size})")
+    val localHtlcKey = Generators.derivePrivKey(localParams.htlcKey, localPerCommitmentPoint)
+    val htlcSigs = sortedHtlcTxs.map(Transactions.sign(_, localHtlcKey))
+    val remoteHtlcPubkey = Generators.derivePubKey(remoteParams.htlcBasepoint, localPerCommitmentPoint)
+    // combine the sigs to make signed txes
+    val htlcTxsAndSigs = (sortedHtlcTxs, htlcSigs, commit.htlcSignatures).zipped.toList.collect {
+      case (htlcTx: HtlcTimeoutTx, localSig, remoteSig) =>
+        require(Transactions.checkSpendable(Transactions.addSigs(htlcTx, localSig, remoteSig)).isSuccess, "bad sig")
+        HtlcTxAndSigs(htlcTx, localSig, remoteSig)
+      case (htlcTx: HtlcSuccessTx, localSig, remoteSig) =>
+        // we can't check that htlc-success tx are spendable because we need the payment preimage; thus we only check the remote sig
+        require(Transactions.checkSig(htlcTx, remoteSig, remoteHtlcPubkey), "bad sig")
+        HtlcTxAndSigs(htlcTx, localSig, remoteSig)
+    }
+
+    // we will send our revocation preimage + our next revocation hash
+    val localPerCommitmentSecret = Generators.perCommitSecret(localParams.shaSeed, commitments.localCommit.index)
+    val localNextPerCommitmentPoint = Generators.perCommitPoint(localParams.shaSeed, commitments.localCommit.index + 2)
+    val revocation = RevokeAndAck(
+      channelId = commitments.channelId,
+      perCommitmentSecret = localPerCommitmentSecret,
+      nextPerCommitmentPoint = localNextPerCommitmentPoint
+    )
+
+    // update our commitment data
+    val localCommit1 = LocalCommit(
+      index = localCommit.index + 1,
+      spec,
+      publishableTxs = PublishableTxs(signedCommitTx, htlcTxsAndSigs))
+    val ourChanges1 = localChanges.copy(acked = Nil)
+    val theirChanges1 = remoteChanges.copy(proposed = Nil, acked = remoteChanges.acked ++ remoteChanges.proposed)
+    // the outgoing following htlcs have been completed (fulfilled or failed) when we received this sig
+    val completedOutgoingHtlcs = commitments.localCommit.spec.htlcs.filter(_.direction == OUT).map(_.add.id) -- localCommit1.spec.htlcs.filter(_.direction == OUT).map(_.add.id)
+    // we remove the newly completed htlcs from the origin map
+    val originChannels1 = commitments.originChannels -- completedOutgoingHtlcs
+    val commitments1 = commitments.copy(localCommit = localCommit1, localChanges = ourChanges1, remoteChanges = theirChanges1, originChannels = originChannels1)
+
+    logger.debug(s"current commit: index=${localCommit1.index} htlc_in=${localCommit1.spec.htlcs.filter(_.direction == IN).size} htlc_out=${localCommit1.spec.htlcs.filter(_.direction == OUT).size} txid=${localCommit1.publishableTxs.commitTx.tx.txid} tx=${Transaction.write(localCommit1.publishableTxs.commitTx.tx)}")
+
+    (commitments1, revocation)
+  }
+
+  def receiveRevocation(commitments: Commitments, revocation: RevokeAndAck): Commitments = {
+    import commitments._
+    // we receive a revocation because we just sent them a sig for their next commit tx
+    remoteNextCommitInfo match {
+      case Left(_) if revocation.perCommitmentSecret.toPoint != remoteCommit.remotePerCommitmentPoint =>
+        throw InvalidRevocation(commitments.channelId)
+      case Left(WaitingForRevocation(theirNextCommit, _, _, _)) =>
+        val commitments1 = commitments.copy(
+          localChanges = localChanges.copy(signed = Nil, acked = localChanges.acked ++ localChanges.signed),
+          remoteChanges = remoteChanges.copy(signed = Nil),
+          remoteCommit = theirNextCommit,
+          remoteNextCommitInfo = Right(revocation.nextPerCommitmentPoint),
+          remotePerCommitmentSecrets = commitments.remotePerCommitmentSecrets.addHash(revocation.perCommitmentSecret, 0xFFFFFFFFFFFFL - commitments.remoteCommit.index))
+
+        commitments1
+      case Right(_) =>
+        throw UnexpectedRevocation(commitments.channelId)
+    }
+  }
+
+  def makeLocalTxs(commitTxNumber: Long, localParams: LocalParams, remoteParams: RemoteParams, commitmentInput: InputInfo, localPerCommitmentPoint: Point, spec: CommitmentSpec): (CommitTx, Seq[HtlcTimeoutTx], Seq[HtlcSuccessTx]) = {
+    val localPaymentPubkey = Generators.derivePubKey(localParams.paymentBasepoint, localPerCommitmentPoint)
+    val localDelayedPaymentPubkey = Generators.derivePubKey(localParams.delayedPaymentBasepoint, localPerCommitmentPoint)
+    val localHtlcPubkey = Generators.derivePubKey(localParams.htlcBasepoint, localPerCommitmentPoint)
+    val remotePaymentPubkey = Generators.derivePubKey(remoteParams.paymentBasepoint, localPerCommitmentPoint)
+    val remoteHtlcPubkey = Generators.derivePubKey(remoteParams.htlcBasepoint, localPerCommitmentPoint)
+    val localRevocationPubkey = Generators.revocationPubKey(remoteParams.revocationBasepoint, localPerCommitmentPoint)
+    val commitTx = Transactions.makeCommitTx(commitmentInput, commitTxNumber, localParams.paymentBasepoint, remoteParams.paymentBasepoint, localParams.isFunder, Satoshi(localParams.dustLimitSatoshis), localRevocationPubkey, remoteParams.toSelfDelay, localDelayedPaymentPubkey, remotePaymentPubkey, localHtlcPubkey, remoteHtlcPubkey, spec)
+    val (htlcTimeoutTxs, htlcSuccessTxs) = Transactions.makeHtlcTxs(commitTx.tx, Satoshi(localParams.dustLimitSatoshis), localRevocationPubkey, remoteParams.toSelfDelay, localDelayedPaymentPubkey, localHtlcPubkey, remoteHtlcPubkey, spec)
+    (commitTx, htlcTimeoutTxs, htlcSuccessTxs)
+  }
+
+  def makeRemoteTxs(commitTxNumber: Long, localParams: LocalParams, remoteParams: RemoteParams, commitmentInput: InputInfo, remotePerCommitmentPoint: Point, spec: CommitmentSpec): (CommitTx, Seq[HtlcTimeoutTx], Seq[HtlcSuccessTx]) = {
+    val localPaymentPubkey = Generators.derivePubKey(localParams.paymentBasepoint, remotePerCommitmentPoint)
+    val localHtlcPubkey = Generators.derivePubKey(localParams.htlcBasepoint, remotePerCommitmentPoint)
+    val remotePaymentPubkey = Generators.derivePubKey(remoteParams.paymentBasepoint, remotePerCommitmentPoint)
+    val remoteDelayedPaymentPubkey = Generators.derivePubKey(remoteParams.delayedPaymentBasepoint, remotePerCommitmentPoint)
+    val remoteHtlcPubkey = Generators.derivePubKey(remoteParams.htlcBasepoint, remotePerCommitmentPoint)
+    val remoteRevocationPubkey = Generators.revocationPubKey(localParams.revocationBasepoint, remotePerCommitmentPoint)
+    val commitTx = Transactions.makeCommitTx(commitmentInput, commitTxNumber, remoteParams.paymentBasepoint, localParams.paymentBasepoint, !localParams.isFunder, Satoshi(remoteParams.dustLimitSatoshis), remoteRevocationPubkey, localParams.toSelfDelay, remoteDelayedPaymentPubkey, localPaymentPubkey, remoteHtlcPubkey, localHtlcPubkey, spec)
+    val (htlcTimeoutTxs, htlcSuccessTxs) = Transactions.makeHtlcTxs(commitTx.tx, Satoshi(remoteParams.dustLimitSatoshis), remoteRevocationPubkey, localParams.toSelfDelay, remoteDelayedPaymentPubkey, remoteHtlcPubkey, localHtlcPubkey, spec)
+    (commitTx, htlcTimeoutTxs, htlcSuccessTxs)
+  }
+
+  def msg2String(msg: LightningMessage): String = msg match {
+    case u: UpdateAddHtlc => s"add-${u.id}"
+    case u: UpdateFulfillHtlc => s"ful-${u.id}"
+    case u: UpdateFailHtlc => s"fail-${u.id}"
+    case _: UpdateFee => s"fee"
+    case _: CommitSig => s"sig"
+    case _: RevokeAndAck => s"rev"
+    case _: Error => s"err"
+    case _: FundingLocked => s"funding_locked"
+    case _ => "???"
+  }
+
+  def changes2String(commitments: Commitments): String = {
+    import commitments._
+    s"""commitments:
+       |    localChanges:
+       |        proposed: ${localChanges.proposed.map(msg2String(_)).mkString(" ")}
+       |        signed: ${localChanges.signed.map(msg2String(_)).mkString(" ")}
+       |        acked: ${localChanges.acked.map(msg2String(_)).mkString(" ")}
+       |    remoteChanges:
+       |        proposed: ${remoteChanges.proposed.map(msg2String(_)).mkString(" ")}
+       |        acked: ${remoteChanges.acked.map(msg2String(_)).mkString(" ")}
+       |        signed: ${remoteChanges.signed.map(msg2String(_)).mkString(" ")}
+       |    nextHtlcId:
+       |        local: $localNextHtlcId
+       |        remote: $remoteNextHtlcId""".stripMargin
+  }
+
+  def specs2String(commitments: Commitments): String = {
+    s"""specs:
+       |localcommit:
+       |  toLocal: ${commitments.localCommit.spec.toLocalMsat}
+       |  toRemote: ${commitments.localCommit.spec.toRemoteMsat}
+       |  htlcs:
+       |${commitments.localCommit.spec.htlcs.map(h => s"    ${h.direction} ${h.add.id} ${h.add.expiry}").mkString("\n")}
+       |remotecommit:
+       |  toLocal: ${commitments.remoteCommit.spec.toLocalMsat}
+       |  toRemote: ${commitments.remoteCommit.spec.toRemoteMsat}
+       |  htlcs:
+       |${commitments.remoteCommit.spec.htlcs.map(h => s"    ${h.direction} ${h.add.id} ${h.add.expiry}").mkString("\n")}
+       |next remotecommit:
+       |  toLocal: ${commitments.remoteNextCommitInfo.left.toOption.map(_.nextRemoteCommit.spec.toLocalMsat).getOrElse("N/A")}
+       |  toRemote: ${commitments.remoteNextCommitInfo.left.toOption.map(_.nextRemoteCommit.spec.toRemoteMsat).getOrElse("N/A")}
+       |  htlcs:
+       |${commitments.remoteNextCommitInfo.left.toOption.map(_.nextRemoteCommit.spec.htlcs.map(h => s"    ${h.direction} ${h.add.id} ${h.add.expiry}").mkString("\n")).getOrElse("N/A")}""".stripMargin
+  }
+}
+
+

eclair-core/src/main/scala/fr/acinq/eclair/channel/Forwarder.scala

@@ -0,0 +1,24 @@
+package fr.acinq.eclair.channel
+
+import akka.actor.{Actor, ActorLogging, ActorRef}
+import fr.acinq.eclair.NodeParams
+import fr.acinq.eclair.wire.LightningMessage
+
+/**
+  * Created by fabrice on 27/02/17.
+  */
+
+class Forwarder(nodeParams: NodeParams) extends Actor with ActorLogging {
+
+  // caller is responsible for sending the destination before anything else
+  // the general case is that destination can die anytime and it is managed by the caller
+  def receive = main(context.system.deadLetters)
+
+  def main(destination: ActorRef): Receive = {
+
+    case destination: ActorRef => context become main(destination)
+
+    case msg: LightningMessage => destination forward msg
+
+  }
+}

eclair-core/src/main/scala/fr/acinq/eclair/channel/Helpers.scala

@@ -0,0 +1,545 @@
+package fr.acinq.eclair.channel
+
+import fr.acinq.bitcoin.Crypto.{Point, PublicKey, Scalar, sha256}
+import fr.acinq.bitcoin.Script._
+import fr.acinq.bitcoin.{OutPoint, _}
+import fr.acinq.eclair.blockchain.EclairWallet
+import fr.acinq.eclair.crypto.Generators
+import fr.acinq.eclair.router.Announcements
+import fr.acinq.eclair.transactions.Scripts._
+import fr.acinq.eclair.transactions.Transactions._
+import fr.acinq.eclair.transactions._
+import fr.acinq.eclair.wire.{AnnouncementSignatures, ClosingSigned, UpdateAddHtlc, UpdateFulfillHtlc}
+import fr.acinq.eclair.{Globals, NodeParams}
+import grizzled.slf4j.Logging
+
+import scala.concurrent.Await
+import scala.util.{Failure, Success, Try}
+
+/**
+  * Created by PM on 20/05/2016.
+  */
+
+object Helpers {
+
+  /**
+    * Depending on the state, returns the current temporaryChannelId or channelId
+    *
+    * @param stateData
+    * @return
+    */
+  def getChannelId(stateData: Data): BinaryData = stateData match {
+    case Nothing => BinaryData("00" * 32)
+    case d: DATA_WAIT_FOR_OPEN_CHANNEL => d.initFundee.temporaryChannelId
+    case d: DATA_WAIT_FOR_ACCEPT_CHANNEL => d.initFunder.temporaryChannelId
+    case d: DATA_WAIT_FOR_FUNDING_INTERNAL => d.temporaryChannelId
+    case d: DATA_WAIT_FOR_FUNDING_CREATED => d.temporaryChannelId
+    case d: DATA_WAIT_FOR_FUNDING_SIGNED => d.channelId
+    case d: HasCommitments => d.channelId
+  }
+
+  def validateParamsFunder(temporaryChannelId: BinaryData, nodeParams: NodeParams, channelReserveSatoshis: Long, fundingSatoshis: Long): Unit = {
+    val reserveToFundingRatio = channelReserveSatoshis.toDouble / fundingSatoshis
+    if (reserveToFundingRatio > nodeParams.maxReserveToFundingRatio) {
+      throw new ChannelReserveTooHigh(temporaryChannelId, channelReserveSatoshis, reserveToFundingRatio, nodeParams.maxReserveToFundingRatio)
+    }
+  }
+
+  def validateParamsFundee(temporaryChannelId: BinaryData, nodeParams: NodeParams, channelReserveSatoshis: Long, fundingSatoshis: Long, chainHash: BinaryData, initialFeeratePerKw: Long): Unit = {
+    require(nodeParams.chainHash == chainHash, s"invalid chain hash $chainHash (we are on ${nodeParams.chainHash})")
+    val localFeeratePerKw = Globals.feeratesPerKw.get.block_1
+    // we are fundee => initialFeeratePerKw has been set by remote
+    if (isFeeDiffTooHigh(initialFeeratePerKw, localFeeratePerKw, nodeParams.maxFeerateMismatch)) {
+      throw new FeerateTooDifferent(temporaryChannelId, localFeeratePerKw, initialFeeratePerKw)
+    }
+    validateParamsFunder(temporaryChannelId, nodeParams, channelReserveSatoshis, fundingSatoshis)
+  }
+
+  /**
+    *
+    * @param remoteFeeratePerKw remote fee rate per kiloweight
+    * @param localFeeratePerKw  local fee rate per kiloweight
+    * @return the "normalized" difference between local and remote fee rate, i.e. |remote - local| / avg(local, remote)
+    */
+  def feeRateMismatch(remoteFeeratePerKw: Long, localFeeratePerKw: Long): Double =
+    Math.abs((2.0 * (remoteFeeratePerKw - localFeeratePerKw)) / (localFeeratePerKw + remoteFeeratePerKw))
+
+  def shouldUpdateFee(commitmentFeeratePerKw: Long, networkFeeratePerKw: Long, updateFeeMinDiffRatio: Double): Boolean =
+  // negative feerate can happen in regtest mode
+    networkFeeratePerKw > 0 && feeRateMismatch(networkFeeratePerKw, commitmentFeeratePerKw) > updateFeeMinDiffRatio
+
+  /**
+    *
+    * @param remoteFeeratePerKw      remote fee rate per kiloweight
+    * @param localFeeratePerKw       local fee rate per kiloweight
+    * @param maxFeerateMismatchRatio maximum fee rate mismatch ratio
+    * @return true if the difference between local and remote fee rates is too high.
+    *         the actual check is |remote - local| / avg(local, remote) > mismatch ratio
+    */
+  def isFeeDiffTooHigh(remoteFeeratePerKw: Long, localFeeratePerKw: Long, maxFeerateMismatchRatio: Double): Boolean = {
+    // negative feerate can happen in regtest mode
+    remoteFeeratePerKw > 0 && feeRateMismatch(remoteFeeratePerKw, localFeeratePerKw) > maxFeerateMismatchRatio
+  }
+
+  def makeAnnouncementSignatures(nodeParams: NodeParams, commitments: Commitments, shortChannelId: Long) = {
+    // TODO: empty features
+    val features = BinaryData("")
+    val (localNodeSig, localBitcoinSig) = Announcements.signChannelAnnouncement(nodeParams.chainHash, shortChannelId, nodeParams.privateKey, commitments.remoteParams.nodeId, commitments.localParams.fundingPrivKey, commitments.remoteParams.fundingPubKey, features)
+    AnnouncementSignatures(commitments.channelId, shortChannelId, localNodeSig, localBitcoinSig)
+  }
+
+  def getFinalScriptPubKey(wallet: EclairWallet): BinaryData = {
+    import scala.concurrent.duration._
+    val finalAddress = Await.result(wallet.getFinalAddress, 40 seconds)
+    val finalScriptPubKey = Base58Check.decode(finalAddress) match {
+      case (Base58.Prefix.PubkeyAddressTestnet, hash) => Script.write(OP_DUP :: OP_HASH160 :: OP_PUSHDATA(hash) :: OP_EQUALVERIFY :: OP_CHECKSIG :: Nil)
+      case (Base58.Prefix.ScriptAddressTestnet, hash) => Script.write(OP_HASH160 :: OP_PUSHDATA(hash) :: OP_EQUAL :: Nil)
+    }
+    finalScriptPubKey
+  }
+
+  object Funding {
+
+    def makeFundingInputInfo(fundingTxId: BinaryData, fundingTxOutputIndex: Int, fundingSatoshis: Satoshi, fundingPubkey1: PublicKey, fundingPubkey2: PublicKey): InputInfo = {
+      val fundingScript = multiSig2of2(fundingPubkey1, fundingPubkey2)
+      val fundingTxOut = TxOut(fundingSatoshis, pay2wsh(fundingScript))
+      InputInfo(OutPoint(fundingTxId, fundingTxOutputIndex), fundingTxOut, write(fundingScript))
+    }
+
+    /**
+      * Creates both sides's first commitment transaction
+      *
+      * @param localParams
+      * @param remoteParams
+      * @param pushMsat
+      * @param fundingTxHash
+      * @param fundingTxOutputIndex
+      * @param remoteFirstPerCommitmentPoint
+      * @return (localSpec, localTx, remoteSpec, remoteTx, fundingTxOutput)
+      */
+    def makeFirstCommitTxs(temporaryChannelId: BinaryData, localParams: LocalParams, remoteParams: RemoteParams, fundingSatoshis: Long, pushMsat: Long, initialFeeratePerKw: Long, fundingTxHash: BinaryData, fundingTxOutputIndex: Int, remoteFirstPerCommitmentPoint: Point, maxFeerateMismatch: Double): (CommitmentSpec, CommitTx, CommitmentSpec, CommitTx) = {
+      val toLocalMsat = if (localParams.isFunder) fundingSatoshis * 1000 - pushMsat else pushMsat
+      val toRemoteMsat = if (localParams.isFunder) pushMsat else fundingSatoshis * 1000 - pushMsat
+
+      val localSpec = CommitmentSpec(Set.empty[DirectedHtlc], feeratePerKw = initialFeeratePerKw, toLocalMsat = toLocalMsat, toRemoteMsat = toRemoteMsat)
+      val remoteSpec = CommitmentSpec(Set.empty[DirectedHtlc], feeratePerKw = initialFeeratePerKw, toLocalMsat = toRemoteMsat, toRemoteMsat = toLocalMsat)
+
+      if (!localParams.isFunder) {
+        // they are funder, therefore they pay the fee: we need to make sure they can afford it!
+        val toRemoteMsat = remoteSpec.toLocalMsat
+        val fees = Transactions.commitTxFee(Satoshi(remoteParams.dustLimitSatoshis), remoteSpec).amount
+        val missing = toRemoteMsat / 1000 - localParams.channelReserveSatoshis - fees
+        if (missing < 0) {
+          throw CannotAffordFees(temporaryChannelId, missingSatoshis = -1 * missing, reserveSatoshis = localParams.channelReserveSatoshis, feesSatoshis = fees)
+        }
+      }
+
+      val commitmentInput = makeFundingInputInfo(fundingTxHash, fundingTxOutputIndex, Satoshi(fundingSatoshis), localParams.fundingPrivKey.publicKey, remoteParams.fundingPubKey)
+      val localPerCommitmentPoint = Generators.perCommitPoint(localParams.shaSeed, 0)
+      val (localCommitTx, _, _) = Commitments.makeLocalTxs(0, localParams, remoteParams, commitmentInput, localPerCommitmentPoint, localSpec)
+      val (remoteCommitTx, _, _) = Commitments.makeRemoteTxs(0, localParams, remoteParams, commitmentInput, remoteFirstPerCommitmentPoint, remoteSpec)
+
+      (localSpec, localCommitTx, remoteSpec, remoteCommitTx)
+    }
+
+  }
+
+  object Closing extends Logging {
+
+    def isValidFinalScriptPubkey(scriptPubKey: BinaryData): Boolean = {
+      Try(Script.parse(scriptPubKey)) match {
+        case Success(OP_DUP :: OP_HASH160 :: OP_PUSHDATA(pubkeyHash, _) :: OP_EQUALVERIFY :: OP_CHECKSIG :: Nil) if pubkeyHash.size == 20 => true
+        case Success(OP_HASH160 :: OP_PUSHDATA(scriptHash, _) :: OP_EQUAL :: Nil) if scriptHash.size == 20 => true
+        case Success(OP_0 :: OP_PUSHDATA(pubkeyHash, _) :: Nil) if pubkeyHash.size == 20 => true
+        case Success(OP_0 :: OP_PUSHDATA(scriptHash, _) :: Nil) if scriptHash.size == 32 => true
+        case _ => false
+      }
+    }
+
+    def makeFirstClosingTx(commitments: Commitments, localScriptPubkey: BinaryData, remoteScriptPubkey: BinaryData): ClosingSigned = {
+      logger.debug(s"making first closing tx with commitments:\n${Commitments.specs2String(commitments)}")
+      import commitments._
+      val closingFee = {
+        // this is just to estimate the weight, it depends on size of the pubkey scripts
+        val dummyClosingTx = Transactions.makeClosingTx(commitInput, localScriptPubkey, remoteScriptPubkey, localParams.isFunder, Satoshi(0), Satoshi(0), localCommit.spec)
+        val closingWeight = Transaction.weight(Transactions.addSigs(dummyClosingTx, localParams.fundingPrivKey.publicKey, remoteParams.fundingPubKey, "aa" * 71, "bb" * 71).tx)
+        // no need to use a very high fee here
+        val feeratePerKw = Globals.feeratesPerKw.get.blocks_6
+        logger.info(s"using feeratePerKw=$feeratePerKw for closing tx")
+        Transactions.weight2fee(feeratePerKw, closingWeight)
+      }
+      val (_, closingSigned) = makeClosingTx(commitments, localScriptPubkey, remoteScriptPubkey, closingFee)
+      closingSigned
+    }
+
+    def makeClosingTx(commitments: Commitments, localScriptPubkey: BinaryData, remoteScriptPubkey: BinaryData, closingFee: Satoshi): (ClosingTx, ClosingSigned) = {
+      import commitments._
+      require(isValidFinalScriptPubkey(localScriptPubkey), "invalid localScriptPubkey")
+      require(isValidFinalScriptPubkey(remoteScriptPubkey), "invalid remoteScriptPubkey")
+      // TODO: check that
+      val dustLimitSatoshis = Satoshi(Math.max(localParams.dustLimitSatoshis, remoteParams.dustLimitSatoshis))
+      val closingTx = Transactions.makeClosingTx(commitInput, localScriptPubkey, remoteScriptPubkey, localParams.isFunder, dustLimitSatoshis, closingFee, localCommit.spec)
+      val localClosingSig = Transactions.sign(closingTx, commitments.localParams.fundingPrivKey)
+      val closingSigned = ClosingSigned(channelId, closingFee.amount, localClosingSig)
+      logger.debug(s"closingTx=${Transaction.write(closingTx.tx)}")
+      (closingTx, closingSigned)
+    }
+
+    def checkClosingSignature(commitments: Commitments, localScriptPubkey: BinaryData, remoteScriptPubkey: BinaryData, remoteClosingFee: Satoshi, remoteClosingSig: BinaryData): Try[Transaction] = {
+      import commitments._
+      val (closingTx, closingSigned) = makeClosingTx(commitments, localScriptPubkey, remoteScriptPubkey, remoteClosingFee)
+      val signedClosingTx = Transactions.addSigs(closingTx, localParams.fundingPrivKey.publicKey, remoteParams.fundingPubKey, closingSigned.signature, remoteClosingSig)
+      Transactions.checkSpendable(signedClosingTx).map(x => signedClosingTx.tx)
+    }
+
+    def nextClosingFee(localClosingFee: Satoshi, remoteClosingFee: Satoshi): Satoshi = ((localClosingFee + remoteClosingFee) / 4) * 2
+
+    def generateTx(desc: String)(attempt: Try[TransactionWithInputInfo]): Option[TransactionWithInputInfo] = {
+      attempt match {
+        case Success(txinfo) =>
+          logger.warn(s"tx generation success: desc=$desc txid=${txinfo.tx.txid} amount=${txinfo.tx.txOut.map(_.amount.amount).sum} tx=${Transaction.write(txinfo.tx)}")
+          Some(txinfo)
+        case Failure(t) =>
+          logger.warn(s"tx generation failure: desc=$desc reason: ${t.getMessage}")
+          None
+      }
+    }
+
+    /**
+      *
+      * Claim all the HTLCs that we've received from our current commit tx. This will be
+      * done using 2nd stage HTLC transactions
+      *
+      * @param commitments our commitment data, which include payment preimages
+      * @return a list of transactions (one per HTLC that we can claim)
+      */
+    def claimCurrentLocalCommitTxOutputs(commitments: Commitments, tx: Transaction): LocalCommitPublished = {
+      import commitments._
+      require(localCommit.publishableTxs.commitTx.tx.txid == tx.txid, "txid mismatch, provided tx is not the current local commit tx")
+
+      val localPerCommitmentPoint = Generators.perCommitPoint(localParams.shaSeed, commitments.localCommit.index.toInt)
+      val localRevocationPubkey = Generators.revocationPubKey(remoteParams.revocationBasepoint, localPerCommitmentPoint)
+      val localDelayedPrivkey = Generators.derivePrivKey(localParams.delayedPaymentKey, localPerCommitmentPoint)
+
+      // no need to use a high fee rate for delayed transactions (we are the only one who can spend them)
+      val feeratePerKwDelayed = Globals.feeratesPerKw.get.blocks_6
+
+      // first we will claim our main output as soon as the delay is over
+      val mainDelayedTx = generateTx("main-delayed-output")(Try {
+        val claimDelayed = Transactions.makeClaimDelayedOutputTx(tx, Satoshi(localParams.dustLimitSatoshis), localRevocationPubkey, localParams.toSelfDelay, localDelayedPrivkey.publicKey, localParams.defaultFinalScriptPubKey, feeratePerKwDelayed)
+        val sig = Transactions.sign(claimDelayed, localDelayedPrivkey)
+        Transactions.addSigs(claimDelayed, sig)
+      })
+
+      // those are the preimages to existing received htlcs
+      val preimages = commitments.localChanges.all.collect { case u: UpdateFulfillHtlc => u.paymentPreimage }
+
+      val htlcTxes = localCommit.publishableTxs.htlcTxsAndSigs.collect {
+        // incoming htlc for which we have the preimage: we spend it directly
+        case HtlcTxAndSigs(txinfo@HtlcSuccessTx(_, _, paymentHash), localSig, remoteSig) if preimages.exists(r => sha256(r) == paymentHash) =>
+          generateTx("htlc-success")(Try {
+            val preimage = preimages.find(r => sha256(r) == paymentHash).get
+            Transactions.addSigs(txinfo, localSig, remoteSig, preimage)
+          })
+
+        // (incoming htlc for which we don't have the preimage: nothing to do, it will timeout eventually and they will get their funds back)
+
+        // outgoing htlc: they may or may not have the preimage, the only thing to do is try to get back our funds after timeout
+        case HtlcTxAndSigs(txinfo: HtlcTimeoutTx, localSig, remoteSig) =>
+          generateTx("htlc-timeout")(Try {
+            Transactions.addSigs(txinfo, localSig, remoteSig)
+          })
+      }.flatten
+
+      // all htlc output to us are delayed, so we need to claim them as soon as the delay is over
+      val htlcDelayedTxes = htlcTxes.map {
+        case txinfo: TransactionWithInputInfo => generateTx("claim-delayed-output")(Try {
+          // TODO: we should use the current fee rate, not the initial fee rate that we get from localParams
+          val claimDelayed = Transactions.makeClaimDelayedOutputTx(txinfo.tx, Satoshi(localParams.dustLimitSatoshis), localRevocationPubkey, localParams.toSelfDelay, localDelayedPrivkey.publicKey, localParams.defaultFinalScriptPubKey, feeratePerKwDelayed)
+          val sig = Transactions.sign(claimDelayed, localDelayedPrivkey)
+          Transactions.addSigs(claimDelayed, sig)
+        })
+      }.flatten
+
+      // OPTIONAL: let's check transactions are actually spendable
+      //val txes = mainDelayedTx +: (htlcTxes ++ htlcDelayedTxes)
+      //require(txes.forall(Transactions.checkSpendable(_).isSuccess), "the tx we produced are not spendable!")
+
+      LocalCommitPublished(
+        commitTx = tx,
+        claimMainDelayedOutputTx = mainDelayedTx.map(_.tx),
+        htlcSuccessTxs = htlcTxes.collect { case c: HtlcSuccessTx => c.tx },
+        htlcTimeoutTxs = htlcTxes.collect { case c: HtlcTimeoutTx => c.tx },
+        claimHtlcDelayedTx = htlcDelayedTxes.map(_.tx),
+        spent = Map.empty)
+    }
+
+    /**
+      *
+      * Claim all the HTLCs that we've received from their current commit tx
+      *
+      * @param commitments our commitment data, which include payment preimages
+      * @return a list of transactions (one per HTLC that we can claim)
+      */
+    def claimRemoteCommitTxOutputs(commitments: Commitments, remoteCommit: RemoteCommit, tx: Transaction): RemoteCommitPublished = {
+      import commitments.{commitInput, localParams, remoteParams}
+      require(remoteCommit.txid == tx.txid, "txid mismatch, provided tx is not the current remote commit tx")
+      val (remoteCommitTx, htlcTimeoutTxs, htlcSuccessTxs) = Commitments.makeRemoteTxs(remoteCommit.index, localParams, remoteParams, commitInput, remoteCommit.remotePerCommitmentPoint, remoteCommit.spec)
+      require(remoteCommitTx.tx.txid == tx.txid, "txid mismatch, cannot recompute the current remote commit tx")
+
+      val localPaymentPrivkey = Generators.derivePrivKey(localParams.paymentKey, remoteCommit.remotePerCommitmentPoint)
+      val localHtlcPrivkey = Generators.derivePrivKey(localParams.htlcKey, remoteCommit.remotePerCommitmentPoint)
+      val remoteHtlcPubkey = Generators.derivePubKey(remoteParams.htlcBasepoint, remoteCommit.remotePerCommitmentPoint)
+      val localPerCommitmentPoint = Generators.perCommitPoint(localParams.shaSeed, commitments.localCommit.index.toInt)
+      val localRevocationPubKey = Generators.revocationPubKey(remoteParams.revocationBasepoint, localPerCommitmentPoint)
+      val remoteRevocationPubkey = Generators.revocationPubKey(localParams.revocationBasepoint, remoteCommit.remotePerCommitmentPoint)
+
+      // no need to use a high fee rate for our main output (we are the only one who can spend it)
+      val feeratePerKwMain = Globals.feeratesPerKw.get.blocks_6
+      // we need to use a rather high fee for htlc-claim because we compete with the counterparty
+      val feeratePerKwHtlc = Globals.feeratesPerKw.get.block_1
+
+      // first we will claim our main output right away
+      val mainTx = generateTx("claim-p2wpkh-output")(Try {
+        val claimMain = Transactions.makeClaimP2WPKHOutputTx(tx, Satoshi(localParams.dustLimitSatoshis), localPaymentPrivkey.publicKey, localParams.defaultFinalScriptPubKey, feeratePerKwMain)
+        val sig = Transactions.sign(claimMain, localPaymentPrivkey)
+        Transactions.addSigs(claimMain, localPaymentPrivkey.publicKey, sig)
+      })
+
+      // those are the preimages to existing received htlcs
+      val preimages = commitments.localChanges.all.collect { case u: UpdateFulfillHtlc => u.paymentPreimage }
+
+      // remember we are looking at the remote commitment so IN for them is really OUT for us and vice versa
+      val txes = commitments.remoteCommit.spec.htlcs.collect {
+        // incoming htlc for which we have the preimage: we spend it directly
+        case DirectedHtlc(OUT, add: UpdateAddHtlc) if preimages.exists(r => sha256(r) == add.paymentHash) => generateTx("claim-htlc-success")(Try {
+          val preimage = preimages.find(r => sha256(r) == add.paymentHash).get
+          val tx = Transactions.makeClaimHtlcSuccessTx(remoteCommitTx.tx, Satoshi(localParams.dustLimitSatoshis), localHtlcPrivkey.publicKey, remoteHtlcPubkey, remoteRevocationPubkey, localParams.defaultFinalScriptPubKey, add, feeratePerKwHtlc)
+          val sig = Transactions.sign(tx, localHtlcPrivkey)
+          Transactions.addSigs(tx, sig, preimage)
+        })
+
+        // (incoming htlc for which we don't have the preimage: nothing to do, it will timeout eventually and they will get their funds back)
+
+        // outgoing htlc: they may or may not have the preimage, the only thing to do is try to get back our funds after timeout
+        case DirectedHtlc(IN, add: UpdateAddHtlc) => generateTx("claim-htlc-timeout")(Try {
+          val tx = Transactions.makeClaimHtlcTimeoutTx(remoteCommitTx.tx, Satoshi(localParams.dustLimitSatoshis), localHtlcPrivkey.publicKey, remoteHtlcPubkey, remoteRevocationPubkey, localParams.defaultFinalScriptPubKey, add, feeratePerKwHtlc)
+          val sig = Transactions.sign(tx, localHtlcPrivkey)
+          Transactions.addSigs(tx, sig)
+        })
+      }.toSeq.flatten
+
+      // OPTIONAL: let's check transactions are actually spendable
+      //require(txes.forall(Transactions.checkSpendable(_).isSuccess), "the tx we produced are not spendable!")
+
+      RemoteCommitPublished(
+        commitTx = tx,
+        claimMainOutputTx = mainTx.map(_.tx),
+        claimHtlcSuccessTxs = txes.toList.collect { case c: ClaimHtlcSuccessTx => c.tx },
+        claimHtlcTimeoutTxs = txes.toList.collect { case c: ClaimHtlcTimeoutTx => c.tx },
+        spent = Map.empty
+      )
+
+    }
+
+    /**
+      * When an unexpected transaction spending the funding tx is detected:
+      * 1) we find out if the published transaction is one of remote's revoked txs
+      * 2) and then:
+      * a) if it is a revoked tx we build a set of transactions that will punish them by stealing all their funds
+      * b) otherwise there is nothing we can do
+      *
+      * @return a [[RevokedCommitPublished]] object containing penalty transactions if the tx is a revoked commitment
+      */
+    def claimRevokedRemoteCommitTxOutputs(commitments: Commitments, tx: Transaction): Option[RevokedCommitPublished] = {
+      import commitments._
+      require(tx.txIn.size == 1, "commitment tx should have 1 input")
+      val obscuredTxNumber = Transactions.decodeTxNumber(tx.txIn(0).sequence, tx.lockTime)
+      // this tx has been published by remote, so we need to invert local/remote params
+      val txnumber = Transactions.obscuredCommitTxNumber(obscuredTxNumber, !localParams.isFunder, remoteParams.paymentBasepoint, localParams.paymentBasepoint)
+      require(txnumber <= 0xffffffffffffL, "txnumber must be lesser than 48 bits long")
+      logger.warn(s"counterparty has published revoked commit txnumber=$txnumber")
+      // now we know what commit number this tx is referring to, we can derive the commitment point from the shachain
+      remotePerCommitmentSecrets.getHash(0xFFFFFFFFFFFFL - txnumber)
+        .map(d => Scalar(d))
+        .map { remotePerCommitmentSecret =>
+          val remotePerCommitmentPoint = remotePerCommitmentSecret.toPoint
+
+          val remoteDelayedPaymentPubkey = Generators.derivePubKey(remoteParams.delayedPaymentBasepoint, remotePerCommitmentPoint)
+          val remoteRevocationPrivkey = Generators.revocationPrivKey(localParams.revocationSecret, remotePerCommitmentSecret)
+          val localPrivkey = Generators.derivePrivKey(localParams.paymentKey, remotePerCommitmentPoint)
+
+          // no need to use a high fee rate for our main output (we are the only one who can spend it)
+          val feeratePerKwMain = Globals.feeratesPerKw.get.blocks_6
+          // we need to use a high fee here for punishment txes because after a delay they can be spent by the counterparty
+          val feeratePerKwPenalty = Globals.feeratesPerKw.get.block_1
+
+          // first we will claim our main output right away
+          val mainTx = generateTx("claim-p2wpkh-output")(Try {
+            val claimMain = Transactions.makeClaimP2WPKHOutputTx(tx, Satoshi(localParams.dustLimitSatoshis), localPrivkey.publicKey, localParams.defaultFinalScriptPubKey, feeratePerKwMain)
+            val sig = Transactions.sign(claimMain, localPrivkey)
+            Transactions.addSigs(claimMain, localPrivkey.publicKey, sig)
+          })
+
+          // then we punish them by stealing their main output
+          val mainPenaltyTx = generateTx("main-penalty")(Try {
+            // TODO: we should use the current fee rate, not the initial fee rate that we get from localParams
+            val txinfo = Transactions.makeMainPenaltyTx(tx, Satoshi(localParams.dustLimitSatoshis), remoteRevocationPrivkey.publicKey, localParams.defaultFinalScriptPubKey, remoteParams.toSelfDelay, remoteDelayedPaymentPubkey, feeratePerKwPenalty)
+            val sig = Transactions.sign(txinfo, remoteRevocationPrivkey)
+            Transactions.addSigs(txinfo, sig)
+          })
+
+          // TODO: we don't claim htlcs outputs yet
+
+          // OPTIONAL: let's check transactions are actually spendable
+          //val txes = mainDelayedRevokedTx :: Nil
+          //require(txes.forall(Transactions.checkSpendable(_).isSuccess), "the tx we produced are not spendable!")
+
+          RevokedCommitPublished(
+            commitTx = tx,
+            claimMainOutputTx = mainTx.map(_.tx),
+            mainPenaltyTx = mainPenaltyTx.map(_.tx),
+            claimHtlcTimeoutTxs = Nil,
+            htlcTimeoutTxs = Nil,
+            htlcPenaltyTxs = Nil,
+            spent = Map.empty
+          )
+        }
+    }
+
+    /**
+      * In CLOSING state, when we are notified that a transaction has been confirmed, we check if this tx belongs in the
+      * local commit scenario and keep track of it.
+      *
+      * We need to keep track of all transactions spending the outputs of the commitment tx, because some outputs can be
+      * spent both by us and our counterparty. Because of that, some of our transactions may never confirm and we don't
+      * want to wait forever before declaring that the channel is CLOSED.
+      *
+      * @param localCommitPublished
+      * @return
+      */
+    def updateLocalCommitPublished(localCommitPublished: LocalCommitPublished, tx: Transaction) = {
+      // even if our txes only have one input, maybe our counterparty uses a different scheme so we need to iterate
+      // over all of them to check if they are relevant
+      val relevantOutpoints = tx.txIn.map(_.outPoint).filter { outPoint =>
+        // is this the commit tx itself ? (we could do this outside of the loop...)
+        val isCommitTx = localCommitPublished.commitTx.txid == tx.txid
+        // does the tx spend an output of the local commitment tx?
+        val spendsTheCommitTx = localCommitPublished.commitTx.txid == outPoint.txid
+        // is the tx one of our 3rd stage delayed txes? (a 3rd stage tx is a tx spending the output of an htlc tx, which
+        // is itself spending the output of the commitment tx)
+        val is3rdStageDelayedTx = localCommitPublished.claimHtlcDelayedTx.map(_.txid).contains(outPoint.txid)
+        isCommitTx || spendsTheCommitTx || is3rdStageDelayedTx
+      }
+      // then we add the relevant outpoints to the map keeping track of which txid spends which outpoint
+      localCommitPublished.copy(spent = localCommitPublished.spent ++ relevantOutpoints.map(o => (o -> tx.txid)).toMap)
+    }
+
+    /**
+      * In CLOSING state, when we are notified that a transaction has been confirmed, we check if this tx belongs in the
+      * remote commit scenario and keep track of it.
+      *
+      * We need to keep track of all transactions spending the outputs of the commitment tx, because some outputs can be
+      * spent both by us and our counterparty. Because of that, some of our transactions may never confirm and we don't
+      * want to wait forever before declaring that the channel is CLOSED.
+      *
+      * @param remoteCommitPublished
+      * @return
+      */
+    def updateRemoteCommitPublished(remoteCommitPublished: RemoteCommitPublished, tx: Transaction) = {
+      // even if our txes only have one input, maybe our counterparty uses a different scheme so we need to iterate
+      // over all of them to check if they are relevant
+      val relevantOutpoints = tx.txIn.map(_.outPoint).filter { outPoint =>
+        // is this the commit tx itself ? (we could do this outside of the loop...)
+        val isCommitTx = remoteCommitPublished.commitTx.txid == tx.txid
+        // does the tx spend an output of the local commitment tx?
+        val spendsTheCommitTx = remoteCommitPublished.commitTx.txid == outPoint.txid
+        // TODO: we don't currently spend htlc transactions
+        isCommitTx || spendsTheCommitTx
+      }
+      // then we add the relevant outpoints to the map keeping track of which txid spends which outpoint
+      remoteCommitPublished.copy(spent = remoteCommitPublished.spent ++ relevantOutpoints.map(o => (o -> tx.txid)).toMap)
+    }
+
+    /**
+      * In CLOSING state, when we are notified that a transaction has been confirmed, we check if this tx belongs in the
+      * revoked commit scenario and keep track of it.
+      *
+      * We need to keep track of all transactions spending the outputs of the commitment tx, because some outputs can be
+      * spent both by us and our counterparty. Because of that, some of our transactions may never confirm and we don't
+      * want to wait forever before declaring that the channel is CLOSED.
+      *
+      * @param revokedCommitPublished
+      * @return
+      */
+    def updateRevokedCommitPublished(revokedCommitPublished: RevokedCommitPublished, tx: Transaction) = {
+      // even if our txes only have one input, maybe our counterparty uses a different scheme so we need to iterate
+      // over all of them to check if they are relevant
+      val relevantOutpoints = tx.txIn.map(_.outPoint).filter { outPoint =>
+        // is this the commit tx itself ? (we could do this outside of the loop...)
+        val isCommitTx = revokedCommitPublished.commitTx.txid == tx.txid
+        // does the tx spend an output of the local commitment tx?
+        val spendsTheCommitTx = revokedCommitPublished.commitTx.txid == outPoint.txid
+        isCommitTx || spendsTheCommitTx
+      }
+      // then we add the relevant outpoints to the map keeping track of which txid spends which outpoint
+      revokedCommitPublished.copy(spent = revokedCommitPublished.spent ++ relevantOutpoints.map(o => (o -> tx.txid)).toMap)
+    }
+
+    /**
+      * A local commit is considered done when:
+      * - all commitment tx outputs that we can spend have been spent and confirmed (even if the spending tx was not ours)
+      * - all 3rd stage txes (txes spending htlc txes) have been confirmed
+      *
+      * @param localCommitPublished
+      * @return
+      */
+    def isLocalCommitDone(localCommitPublished: LocalCommitPublished) = {
+      // is the commitment tx buried? (we need to check this because we may not have nay outputs)
+      val isCommitTxConfirmed = localCommitPublished.spent.values.toSet.contains(localCommitPublished.commitTx.txid)
+      // are there remaining spendable outputs from the commitment tx? we just substract all known spent outputs from the ones we control
+      val commitOutputsSpendableByUs = (localCommitPublished.claimMainDelayedOutputTx.toSeq ++ localCommitPublished.htlcSuccessTxs ++ localCommitPublished.htlcTimeoutTxs)
+        .flatMap(_.txIn.map(_.outPoint)).toSet -- localCommitPublished.spent.keys
+      // which htlc delayed txes can we expect to be confirmed?
+      val unconfirmedHtlcDelayedTxes = localCommitPublished.claimHtlcDelayedTx
+        .filter(tx => (tx.txIn.map(_.outPoint.txid).toSet -- localCommitPublished.spent.values).isEmpty) // only the txes which parents are already confirmed may get confirmed (note that this also eliminates outputs that have been double-spent by a competing tx)
+        .filterNot(tx => localCommitPublished.spent.values.toSet.contains(tx.txid)) // has the tx already been confirmed?
+      isCommitTxConfirmed && commitOutputsSpendableByUs.isEmpty && unconfirmedHtlcDelayedTxes.isEmpty
+    }
+
+    /**
+      * A remote commit is considered done when all commitment tx outputs that we can spend have been spent and confirmed
+      * (even if the spending tx was not ours).
+      *
+      * @param remoteCommitPublished
+      * @return
+      */
+    def isRemoteCommitDone(remoteCommitPublished: RemoteCommitPublished) = {
+      // is the commitment tx buried? (we need to check this because we may not have nay outputs)
+      val isCommitTxConfirmed = remoteCommitPublished.spent.values.toSet.contains(remoteCommitPublished.commitTx.txid)
+      // are there remaining spendable outputs from the commitment tx?
+      val commitOutputsSpendableByUs = (remoteCommitPublished.claimMainOutputTx.toSeq ++ remoteCommitPublished.claimHtlcSuccessTxs ++ remoteCommitPublished.claimHtlcTimeoutTxs)
+        .flatMap(_.txIn.map(_.outPoint)).toSet -- remoteCommitPublished.spent.keys
+      isCommitTxConfirmed && commitOutputsSpendableByUs.isEmpty
+    }
+
+    /**
+      * A remote commit is considered done when all commitment tx outputs that we can spend have been spent and confirmed
+      * (even if the spending tx was not ours).
+      *
+      * @param revokedCommitPublished
+      * @return
+      */
+    def isRevokedCommitDone(revokedCommitPublished: RevokedCommitPublished) = {
+      // is the commitment tx buried? (we need to check this because we may not have nay outputs)
+      val isCommitTxConfirmed = revokedCommitPublished.spent.values.toSet.contains(revokedCommitPublished.commitTx.txid)
+      // are there remaining spendable outputs from the commitment tx?
+      val commitOutputsSpendableByUs = (revokedCommitPublished.claimMainOutputTx.toSeq ++ revokedCommitPublished.mainPenaltyTx)
+        .flatMap(_.txIn.map(_.outPoint)).toSet -- revokedCommitPublished.spent.keys
+      // TODO: we don't currently spend htlc transactions
+      isCommitTxConfirmed && commitOutputsSpendableByUs.isEmpty
+    }
+
+  }
+
+}

eclair-core/src/main/scala/fr/acinq/eclair/channel/Register.scala

@@ -1,9 +1,9 @@
 package fr.acinq.eclair.channel
 
 import akka.actor.Status.Failure
-import akka.actor.{Actor, ActorContext, ActorLogging, ActorPath, ActorRef, Terminated}
+import akka.actor.{Actor, ActorLogging, ActorRef, Terminated}
 import fr.acinq.bitcoin.BinaryData
-import fr.acinq.eclair.channel.Register.{Forward, ForwardShortId}
+import fr.acinq.eclair.channel.Register.{Forward, ForwardFailure, ForwardShortId, ForwardShortIdFailure}
 
 /**
   * Created by PM on 26/01/2016.
@@ -42,23 +42,27 @@ class Register extends Actor with ActorLogging {
 
     case 'shortIds => sender ! shortIds
 
-    case Forward(channelId, msg) =>
+    case fwd@Forward(channelId, msg) =>
       channels.get(channelId) match {
         case Some(channel) => channel forward msg
-        case None => sender ! Failure(new RuntimeException(s"channel $channelId not found"))
+        case None => sender ! Failure(ForwardFailure(fwd))
       }
 
-    case ForwardShortId(shortChannelId, msg) =>
+    case fwd@ForwardShortId(shortChannelId, msg) =>
       shortIds.get(shortChannelId).flatMap(channels.get(_)) match {
         case Some(channel) => channel forward msg
-        case None => sender ! Failure(new RuntimeException(s"channel $shortChannelId not found"))
+        case None => sender ! Failure(ForwardShortIdFailure(fwd))
       }
   }
 }
 
 object Register {
+
   // @formatter:off
-  case class Forward(channelId: BinaryData, message: Any)
-  case class ForwardShortId(shortChannelId: Long, message: Any)
+  case class Forward[T](channelId: BinaryData, message: T)
+  case class ForwardShortId[T](shortChannelId: Long, message: T)
+
+  case class ForwardFailure[T](fwd: Forward[T]) extends RuntimeException(s"channel ${fwd.channelId} not found")
+  case class ForwardShortIdFailure[T](fwd: ForwardShortId[T]) extends RuntimeException(s"channel ${fwd.shortChannelId} not found")
   // @formatter:on
 }

eclair-core/src/main/scala/fr/acinq/eclair/crypto/BitStream.scala

@@ -0,0 +1,161 @@
+package fr.acinq.eclair.crypto
+
+import org.spongycastle.util.encoders.Hex
+
+import scala.annotation.tailrec
+
+/**
+  * Bit stream that can be written to and read at both ends (i.e. you can read from the end or the beginning of the stream)
+  *
+  * @param bytes    bits packed as bytes, the last byte is padded with 0s
+  * @param offstart offset at which the first bit is in the first byte
+  * @param offend   offset at which the last bit is in the last byte
+  */
+case class BitStream(bytes: Vector[Byte], offstart: Int, offend: Int) {
+
+  // offstart: 0 1 2 3 4 5 6 7
+  // offend: 7 6 5 4 3 2 1 0
+  import BitStream._
+
+  def bitCount = 8 * bytes.length - offstart - offend
+
+  def isEmpty = bitCount == 0
+
+  /**
+    * append a byte to a bitstream
+    *
+    * @param input byte to append
+    * @return an updated bitstream
+    */
+  def writeByte(input: Byte): BitStream = offend match {
+    case 0 => this.copy(bytes = this.bytes :+ input)
+    case shift =>
+      val input1 = input & 0xff
+      val last = ((bytes.last | (input1 >>> (8 - shift))) & 0xff).toByte
+      val next = ((input1 << shift) & 0xff).toByte
+      this.copy(bytes = bytes.dropRight(1) ++ Vector(last, next))
+  }
+
+  /**
+    * append bytes to a bitstream
+    *
+    * @param input bytes to append
+    * @return an udpdate bitstream
+    */
+  def writeBytes(input: Seq[Byte]): BitStream = input.foldLeft(this) { case (bs, b) => bs.writeByte(b) }
+
+  /**
+    * append a bit to a bistream
+    *
+    * @param bit bit to append
+    * @return an update bitstream
+    */
+  def writeBit(bit: Bit): BitStream = offend match {
+    case 0 if bit =>
+      BitStream(bytes :+ 0x80.toByte, offstart, 7)
+    case 0 =>
+      BitStream(bytes :+ 0x00.toByte, offstart, 7)
+    case n if bit =>
+      val last = (bytes.last + (1 << (offend - 1))).toByte
+      BitStream(bytes.updated(bytes.length - 1, last), offstart, offend - 1)
+    case n =>
+      BitStream(bytes, offstart, offend - 1)
+  }
+
+  /**
+    * append bits to a bistream
+    *
+    * @param input bits to append
+    * @return an update bitstream
+    */
+  def writeBits(input: Seq[Bit]): BitStream = input.foldLeft(this) { case (bs, b) => bs.writeBit(b) }
+
+  /**
+    * read the last bit from a bitstream
+    *
+    * @return a (stream, bit) pair where stream is an updated bitstream and bit is the last bit
+    */
+  def popBit: (BitStream, Bit) = offend match {
+    case 7 => BitStream(bytes.dropRight(1), offstart, 0) -> lastBit
+    case n =>
+      val shift = n + 1
+      val last = (bytes.last >>> shift) << shift
+      BitStream(bytes.updated(bytes.length - 1, last.toByte), offstart, offend + 1) -> lastBit
+  }
+
+  /**
+    * read the last byte from a bitstream
+    *
+    * @return a (stream, byte) pair where stream is an updated bitstream and byte is the last byte
+    */
+  def popByte: (BitStream, Byte) = offend match {
+    case 0 => BitStream(bytes.dropRight(1), offstart, offend) -> bytes.last
+    case shift =>
+      val a = bytes(bytes.length - 2) & 0xff
+      val b = bytes(bytes.length - 1) & 0xff
+      val byte = ((a << (8 - shift)) | (b >>> shift)) & 0xff
+      val a1 = (a >>> shift) << shift
+      BitStream(bytes.dropRight(2) :+ a1.toByte, offstart, offend) -> byte.toByte
+  }
+
+  def popBytes(n: Int): (BitStream, Seq[Byte]) = {
+    @tailrec
+    def loop(stream: BitStream, acc: Seq[Byte]): (BitStream, Seq[Byte]) =
+      if (acc.length == n) (stream, acc) else {
+        val (stream1, value) = stream.popByte
+        loop(stream1, acc :+ value)
+      }
+
+    loop(this, Nil)
+  }
+
+  /**
+    * read the first bit from a bitstream
+    *
+    * @return
+    */
+  def readBit: (BitStream, Bit) = offstart match {
+    case 7 => BitStream(bytes.tail, 0, offend) -> firstBit
+    case _ => BitStream(bytes, offstart + 1, offend) -> firstBit
+  }
+
+  def readBits(count: Int): (BitStream, Seq[Bit]) = {
+    @tailrec
+    def loop(stream: BitStream, acc: Seq[Bit]): (BitStream, Seq[Bit]) = if (acc.length == count) (stream, acc) else {
+      val (stream1, bit) = stream.readBit
+      loop(stream1, acc :+ bit)
+    }
+
+    loop(this, Nil)
+  }
+
+  /**
+    * read the first byte from a bitstream
+    *
+    * @return
+    */
+  def readByte: (BitStream, Byte) = {
+    val byte = ((bytes(0) << offstart) | (bytes(1) >>> (7 - offstart))) & 0xff
+    BitStream(bytes.tail, offstart, offend) -> byte.toByte
+  }
+
+  def isSet(pos: Int): Boolean = {
+    val pos1 = pos + offstart
+    (bytes(pos1 / 8) & (1 << (7 - (pos1 % 8)))) != 0
+  }
+
+  def firstBit = (bytes.head & (1 << (7 - offstart))) != 0
+
+  def lastBit = (bytes.last & (1 << offend)) != 0
+
+  def toBinString: String = "0b" + (for (i <- 0 until bitCount) yield if (isSet(i)) '1' else '0').mkString
+
+  def toHexString: String = "0x" + Hex.toHexString(bytes.toArray).toLowerCase
+}
+
+object BitStream {
+  type Bit = Boolean
+  val Zero = false
+  val One = true
+  val empty = BitStream(Vector.empty[Byte], 0, 0)
+}

eclair-core/src/main/scala/fr/acinq/eclair/crypto/ChaCha20Poly1305.scala

@@ -4,8 +4,8 @@ import java.nio.ByteOrder
 
 import fr.acinq.bitcoin.{BinaryData, Protocol}
 import grizzled.slf4j.Logging
-import org.bouncycastle.crypto.engines.{ChaCha7539Engine, ChaChaEngine}
-import org.bouncycastle.crypto.params.{KeyParameter, ParametersWithIV}
+import org.spongycastle.crypto.engines.{ChaCha7539Engine, ChaChaEngine}
+import org.spongycastle.crypto.params.{KeyParameter, ParametersWithIV}
 
 /**
   * Poly1305 authenticator
@@ -20,7 +20,7 @@ object Poly1305 {
     */
   def mac(key: BinaryData, data: BinaryData): BinaryData = {
     val out = new Array[Byte](16)
-    val poly = new org.bouncycastle.crypto.macs.Poly1305()
+    val poly = new org.spongycastle.crypto.macs.Poly1305()
     poly.init(new KeyParameter(key))
     poly.update(data, 0, data.length)
     poly.doFinal(out, 0)

eclair-core/src/main/scala/fr/acinq/eclair/crypto/Noise.scala

@@ -4,12 +4,11 @@ import java.math.BigInteger
 import java.nio.ByteOrder
 
 import fr.acinq.bitcoin.{BinaryData, Crypto, Protocol}
+import fr.acinq.eclair.randomBytes
 import grizzled.slf4j.Logging
-import org.bouncycastle.crypto.digests.SHA256Digest
-import org.bouncycastle.crypto.macs.HMac
-import org.bouncycastle.crypto.params.KeyParameter
-
-import scala.util.Random
+import org.spongycastle.crypto.digests.SHA256Digest
+import org.spongycastle.crypto.macs.HMac
+import org.spongycastle.crypto.params.KeyParameter
 
 /**
   * see http://noiseprotocol.org/
@@ -295,13 +294,8 @@ object Noise {
   }
 
   object RandomBytes extends ByteStream {
-    val random = Random
 
-    override def nextBytes(length: Int) = {
-      val buffer = new Array[Byte](length)
-      random.nextBytes(buffer)
-      buffer
-    }
+    override def nextBytes(length: Int) = randomBytes(length)
   }
 
   sealed trait HandshakeState

eclair-core/src/main/scala/fr/acinq/eclair/crypto/ShaChain.scala

@@ -97,7 +97,7 @@ object ShaChain {
   }
 
 
-  val shaChainCodec: Codec[ShaChain] =  {
+  val shaChainCodec: Codec[ShaChain] = {
     import scodec.Codec
     import scodec.bits.BitVector
     import scodec.codecs._
@@ -106,7 +106,7 @@ object ShaChain {
     val entryCodec = vectorOfN(uint16, bool) ~ LightningMessageCodecs.varsizebinarydata
 
     // codec for a Map[Vector[Boolean], BinaryData]: write all k ->v pairs using the codec defined above
-    val mapCodec: Codec[Map[Vector[Boolean], BinaryData]] = Codec[Map[Vector[Boolean], BinaryData]] (
+    val mapCodec: Codec[Map[Vector[Boolean], BinaryData]] = Codec[Map[Vector[Boolean], BinaryData]](
       (m: Map[Vector[Boolean], BinaryData]) => vectorOfN(uint16, entryCodec).encode(m.toVector),
       (b: BitVector) => vectorOfN(uint16, entryCodec).decode(b).map(_.map(_.toMap))
     )

eclair-core/src/main/scala/fr/acinq/eclair/crypto/Sphinx.scala

@@ -5,10 +5,11 @@ import java.nio.ByteOrder
 
 import fr.acinq.bitcoin.Crypto.{PrivateKey, PublicKey}
 import fr.acinq.bitcoin.{BinaryData, Crypto, Protocol}
-import fr.acinq.eclair.wire.{ChannelUpdate, FailureMessage, FailureMessageCodecs, LightningMessageCodecs}
-import org.bouncycastle.crypto.digests.SHA256Digest
-import org.bouncycastle.crypto.macs.HMac
-import org.bouncycastle.crypto.params.KeyParameter
+import fr.acinq.eclair.wire.{FailureMessage, FailureMessageCodecs}
+import grizzled.slf4j.Logging
+import org.spongycastle.crypto.digests.SHA256Digest
+import org.spongycastle.crypto.macs.HMac
+import org.spongycastle.crypto.params.KeyParameter
 import scodec.bits.BitVector
 
 import scala.annotation.tailrec
@@ -17,30 +18,23 @@ import scala.annotation.tailrec
   * Created by fabrice on 13/01/17.
   * see https://github.com/lightningnetwork/lightning-rfc/blob/master/04-onion-routing.md
   */
-object Sphinx {
-  // length of a MAC
-  val MacLength = 20
+object Sphinx extends Logging {
+  val Version = 0.toByte
 
-  // length of an address (hash160(publicKey))
-  val AddressLength = 20
+  // length of a MAC
+  val MacLength = 32
+
+  // length of a payload: 33 bytes (1 bytes for realm, 32 bytes for a realm-specific packet)
+  val PayloadLength = 33
 
   // max number of hops
   val MaxHops = 20
 
-  // per hop payload length
-  val PerHopPayloadLength = 20
-
-  // header length
-  val HeaderLength = 1 + 33 + MacLength + MaxHops * (AddressLength + MacLength)
-
   // onion packet length
-  val PacketLength = HeaderLength + MaxHops * PerHopPayloadLength
-
-  // last address; means that we are the final destination for an onion packet
-  val LAST_ADDRESS = zeroes(AddressLength)
+  val PacketLength = 1 + 33 + MacLength + MaxHops * (PayloadLength + MacLength)
 
   // last packet (all zeroes except for the version byte)
-  val LAST_PACKET: BinaryData = 1.toByte +: zeroes(PacketLength - 1)
+  val LAST_PACKET = Packet(Version, zeroes(33), zeroes(MacLength), zeroes(MaxHops * (PayloadLength + MacLength)))
 
   def hmac256(key: Seq[Byte], message: Seq[Byte]): Seq[Byte] = {
     val mac = new HMac(new SHA256Digest())
@@ -109,93 +103,90 @@ object Sphinx {
     })
   }
 
-  case class Header(version: Int, publicKey: BinaryData, hmac: BinaryData, routingInfo: BinaryData) {
-    require(publicKey.length == 33, "onion header public key length should be 33")
-    require(hmac.length == MacLength, s"onion header hmac length should be $MacLength")
-    require(routingInfo.length == MaxHops * (AddressLength + MacLength), s"onion header routing info length should be ${MaxHops * (AddressLength + MacLength)}")
+  case class Packet(version: Int, publicKey: BinaryData, hmac: BinaryData, routingInfo: BinaryData) {
+    require(publicKey.length == 33, "onion packet public key length should be 33")
+    require(hmac.length == MacLength, s"onion packet hmac length should be $MacLength")
+    require(routingInfo.length == MaxHops * (PayloadLength + MacLength), s"onion packet routing info length should be ${MaxHops * (PayloadLength + MacLength)}")
+
+    def isLastPacket: Boolean = hmac == zeroes(MacLength)
+
+    def serialize: BinaryData = Packet.write(this)
   }
 
-  object Header {
-    def read(in: InputStream): Header = {
+  object Packet {
+    def read(in: InputStream): Packet = {
       val version = in.read
       val publicKey = new Array[Byte](33)
       in.read(publicKey)
+      val routingInfo = new Array[Byte](MaxHops * (PayloadLength + MacLength))
+      in.read(routingInfo)
       val hmac = new Array[Byte](MacLength)
       in.read(hmac)
-      val routingInfo = new Array[Byte](MaxHops * (AddressLength + MacLength))
-      in.read(routingInfo)
-      Header(version, publicKey, hmac, routingInfo)
+      Packet(version, publicKey, hmac, routingInfo)
     }
 
-    def read(in: BinaryData): Header = read(new ByteArrayInputStream(in))
+    def read(in: BinaryData): Packet = read(new ByteArrayInputStream(in))
 
-    def write(header: Header, out: OutputStream): OutputStream = {
-      out.write(header.version)
-      out.write(header.publicKey)
-      out.write(header.hmac)
-      out.write(header.routingInfo)
+    def write(packet: Packet, out: OutputStream): OutputStream = {
+      out.write(packet.version)
+      out.write(packet.publicKey)
+      out.write(packet.routingInfo)
+      out.write(packet.hmac)
       out
     }
 
-    def write(header: Header): BinaryData = {
-      val out = new ByteArrayOutputStream(HeaderLength)
-      write(header, out)
+    def write(packet: Packet): BinaryData = {
+      val out = new ByteArrayOutputStream(PacketLength)
+      write(packet, out)
       out.toByteArray
     }
+
+    def isLastPacket(packet: BinaryData): Boolean = Packet.read(packet).hmac == zeroes(MacLength)
   }
 
   /**
     *
-    * @param payload      paylod for this node
-    * @param nextAddress  next address in the route (all 0s if we're the final destination)
+    * @param payload      payload for this node
     * @param nextPacket   packet for the next node
     * @param sharedSecret shared secret for the sending node, which we will need to return error messages
     */
-  case class ParsedPacket(payload: BinaryData, nextAddress: BinaryData, nextPacket: BinaryData, sharedSecret: BinaryData)
+  case class ParsedPacket(payload: BinaryData, nextPacket: Packet, sharedSecret: BinaryData)
 
   /**
     *
     * @param privateKey     this node's private key
     * @param associatedData associated data
-    * @param packet         packet received by this node
-    * @return a (payload, address, packet, shared secret) tuple where:
+    * @param rawPacket      packet received by this node
+    * @return a ParsedPacket(payload, packet, shared secret) object where:
     *         - payload is the per-hop payload for this node
-    *         - address is the next destination. 0x0000000000000000000000000000000000000000 means this node was the final
-    *         destination
-    *         - packet is the next packet, to be forwarded to address
-    *         - shared secret is the secret we share with the node that send the packet. We need it to propagate failure
+    *         - packet is the next packet, to be forwarded using the info that is given in payload (channel id for now)
+    *         - shared secret is the secret we share with the node that sent the packet. We need it to propagate failure
     *         messages upstream.
     */
-  def parsePacket(privateKey: PrivateKey, associatedData: BinaryData, packet: BinaryData): ParsedPacket = {
-    require(packet.length == PacketLength, "onion packet length should be 1254")
-    val header = Header.read(packet)
-    val perHopPayload = packet.drop(HeaderLength)
-    val sharedSecret = computeSharedSecret(PublicKey(header.publicKey), privateKey)
+  def parsePacket(privateKey: PrivateKey, associatedData: BinaryData, rawPacket: BinaryData): ParsedPacket = {
+    require(rawPacket.length == PacketLength, s"onion packet length is ${rawPacket.length}, it should be ${PacketLength}")
+    val packet = Packet.read(rawPacket)
+    val sharedSecret = computeSharedSecret(PublicKey(packet.publicKey), privateKey)
     val mu = generateKey("mu", sharedSecret)
-    val check: BinaryData = mac(mu, header.routingInfo ++ perHopPayload ++ associatedData)
-    require(check == header.hmac, "invalid header mac")
+    val check: BinaryData = mac(mu, packet.routingInfo ++ associatedData)
+    require(check == packet.hmac, "invalid header mac")
 
     val rho = generateKey("rho", sharedSecret)
-    val bin = xor(header.routingInfo ++ zeroes(AddressLength + MacLength), generateStream(rho, AddressLength + MacLength + MaxHops * (AddressLength + MacLength)))
-    val address = bin.take(AddressLength)
-    val hmac = bin.slice(AddressLength, AddressLength + MacLength)
-    val nextRoutinfo = bin.drop(AddressLength + MacLength)
+    val bin = xor(packet.routingInfo ++ zeroes(PayloadLength + MacLength), generateStream(rho, PayloadLength + MacLength + MaxHops * (PayloadLength + MacLength)))
+    val payload = bin.take(PayloadLength)
+    val hmac = bin.slice(PayloadLength, PayloadLength + MacLength)
+    val nextRoutinfo = bin.drop(PayloadLength + MacLength)
 
-    val nextPubKey = blind(PublicKey(header.publicKey), computeblindingFactor(PublicKey(header.publicKey), sharedSecret))
+    val nextPubKey = blind(PublicKey(packet.publicKey), computeblindingFactor(PublicKey(packet.publicKey), sharedSecret))
 
-    val gamma = generateKey("gamma", sharedSecret)
-    val bin1 = xor(perHopPayload ++ zeroes(PerHopPayloadLength), generateStream(gamma, PerHopPayloadLength + MaxHops * PerHopPayloadLength))
-    val payload = bin1.take(PerHopPayloadLength)
-    val nextPerHopPayloads = bin1.drop(PerHopPayloadLength)
-
-    ParsedPacket(payload, address, Header.write(Header(1, nextPubKey, hmac, nextRoutinfo)) ++ nextPerHopPayloads, sharedSecret)
+    ParsedPacket(payload, Packet(Version, nextPubKey, hmac, nextRoutinfo), sharedSecret)
   }
 
   @tailrec
   def extractSharedSecrets(packet: BinaryData, privateKey: PrivateKey, associatedData: BinaryData, acc: Seq[BinaryData] = Nil): Seq[BinaryData] = {
     parsePacket(privateKey, associatedData, packet) match {
-      case ParsedPacket(_, nextAddress, _, sharedSecret) if nextAddress == LAST_ADDRESS => acc :+ sharedSecret
-      case ParsedPacket(_, _, nextPacket, sharedSecret) => extractSharedSecrets(nextPacket, privateKey, associatedData, acc :+ sharedSecret)
+      case ParsedPacket(_, nextPacket, sharedSecret) if nextPacket.isLastPacket => acc :+ sharedSecret
+      case ParsedPacket(_, nextPacket, sharedSecret) => extractSharedSecrets(nextPacket.serialize, privateKey, associatedData, acc :+ sharedSecret)
     }
   }
 
@@ -206,47 +197,40 @@ object Sphinx {
     * - then you call makeNextPacket(...) until you've build the final onion packet that will be sent to the first node
     * in the route
     *
-    * @param address             next destination; all zeroes if this is the last packet
     * @param payload             payload for this packed
     * @param associatedData      associated data
     * @param ephemerealPublicKey ephemereal key for this packed
     * @param sharedSecret        shared secret
     * @param packet              current packet (1 + all zeroes if this is the last packet)
     * @param routingInfoFiller   optional routing info filler, needed only when you're constructing the last packet
-    * @param payloadsFiller      optional payload filler, needed only when you're constructing the last packet
     * @return the next packet
     */
-  def makeNextPacket(address: BinaryData, payload: BinaryData, associatedData: BinaryData, ephemerealPublicKey: BinaryData, sharedSecret: BinaryData, packet: BinaryData, routingInfoFiller: BinaryData = BinaryData.empty, payloadsFiller: BinaryData = BinaryData.empty): BinaryData = {
-    val header = Header.read(packet)
-    val hopPayloads = packet.drop(HeaderLength)
+  def makeNextPacket(payload: BinaryData, associatedData: BinaryData, ephemerealPublicKey: BinaryData, sharedSecret: BinaryData, packet: Packet, routingInfoFiller: BinaryData = BinaryData.empty): Packet = {
+    require(payload.length == PayloadLength)
 
     val nextRoutingInfo = {
-      val routingInfo1 = address ++ header.hmac ++ header.routingInfo.dropRight(AddressLength + MacLength)
-      val routingInfo2 = xor(routingInfo1, generateStream(generateKey("rho", sharedSecret), MaxHops * (AddressLength + MacLength)))
+      val routingInfo1 = payload ++ packet.hmac ++ packet.routingInfo.dropRight(PayloadLength + MacLength)
+      val routingInfo2 = xor(routingInfo1, generateStream(generateKey("rho", sharedSecret), MaxHops * (PayloadLength + MacLength)))
       routingInfo2.dropRight(routingInfoFiller.length) ++ routingInfoFiller
     }
-    val nexHopPayloads = {
-      val hopPayloads1 = payload ++ hopPayloads.dropRight(PerHopPayloadLength)
-      val hopPayloads2 = xor(hopPayloads1, generateStream(generateKey("gamma", sharedSecret), MaxHops * PerHopPayloadLength))
-      hopPayloads2.dropRight(payloadsFiller.length) ++ payloadsFiller
-    }
 
-    val nextHmac: BinaryData = mac(generateKey("mu", sharedSecret), nextRoutingInfo ++ nexHopPayloads ++ associatedData)
-    val nextHeader = Header(1, ephemerealPublicKey, nextHmac, nextRoutingInfo)
-    Header.write(nextHeader) ++ nexHopPayloads
+    val nextHmac: BinaryData = mac(generateKey("mu", sharedSecret), nextRoutingInfo ++ associatedData)
+    val nextPacket = Packet(Version, ephemerealPublicKey, nextHmac, nextRoutingInfo)
+    nextPacket
   }
 
 
   /**
     *
-    * @param onionPacket   onion packet
+    * @param packet        onion packet
     * @param sharedSecrets shared secrets (one per node in the route). Known (and needed) only if you're creating the
     *                      packet. Empty if you're just forwarding the packet to the next node
     */
-  case class OnionPacket(onionPacket: BinaryData, sharedSecrets: Seq[(BinaryData, PublicKey)])
+  case class PacketAndSecrets(packet: Packet, sharedSecrets: Seq[(BinaryData, PublicKey)])
 
   /**
     * A properly decoded error from a node in the route
+    *
     * @param originNode
     * @param failureMessage
     */
@@ -262,33 +246,33 @@ object Sphinx {
     * @return an OnionPacket(onion packet, shared secrets). the onion packet can be sent to the first node in the list, and the
     *         shared secrets (one per node) can be used to parse returned error messages if needed
     */
-  def makePacket(sessionKey: PrivateKey, publicKeys: Seq[PublicKey], payloads: Seq[BinaryData], associatedData: BinaryData): OnionPacket = {
+  def makePacket(sessionKey: PrivateKey, publicKeys: Seq[PublicKey], payloads: Seq[BinaryData], associatedData: BinaryData): PacketAndSecrets = {
     val (ephemerealPublicKeys, sharedsecrets) = computeEphemerealPublicKeysAndSharedSecrets(sessionKey, publicKeys)
-    val filler = generateFiller("rho", sharedsecrets.dropRight(1), AddressLength + MacLength, MaxHops)
-    val hopFiller = generateFiller("gamma", sharedsecrets.dropRight(1), PerHopPayloadLength, MaxHops)
+    val filler = generateFiller("rho", sharedsecrets.dropRight(1), PayloadLength + MacLength, MaxHops)
 
-    val lastPacket = makeNextPacket(LAST_ADDRESS, payloads.last, associatedData, ephemerealPublicKeys.last, sharedsecrets.last, LAST_PACKET, filler, hopFiller)
+    val lastPacket = makeNextPacket(payloads.last, associatedData, ephemerealPublicKeys.last, sharedsecrets.last, LAST_PACKET, filler)
 
     @tailrec
-    def loop(pubKeys: Seq[PublicKey], hoppayloads: Seq[BinaryData], ephkeys: Seq[PublicKey], sharedSecrets: Seq[BinaryData], packet: BinaryData): BinaryData = {
+    def loop(hoppayloads: Seq[BinaryData], ephkeys: Seq[PublicKey], sharedSecrets: Seq[BinaryData], packet: Packet): Packet = {
       if (hoppayloads.isEmpty) packet else {
-        val nextPacket = makeNextPacket(pubKeys.last.hash160, hoppayloads.last, associatedData, ephkeys.last, sharedSecrets.last, packet)
-        loop(pubKeys.dropRight(1), hoppayloads.dropRight(1), ephkeys.dropRight(1), sharedSecrets.dropRight(1), nextPacket)
+        val nextPacket = makeNextPacket(hoppayloads.last, associatedData, ephkeys.last, sharedSecrets.last, packet)
+        loop(hoppayloads.dropRight(1), ephkeys.dropRight(1), sharedSecrets.dropRight(1), nextPacket)
       }
     }
 
-    val packet = loop(publicKeys, payloads.dropRight(1), ephemerealPublicKeys.dropRight(1), sharedsecrets.dropRight(1), lastPacket)
-    OnionPacket(packet, sharedsecrets.zip(publicKeys))
+    val packet = loop(payloads.dropRight(1), ephemerealPublicKeys.dropRight(1), sharedsecrets.dropRight(1), lastPacket)
+    PacketAndSecrets(packet, sharedsecrets.zip(publicKeys))
   }
 
   /*
     error packet format:
     +----------------+----------------------------------+-----------------+----------------------+-----+
-    | HMAC(20 bytes) | failure message length (2 bytes) | failure message | pad length (2 bytes) | pad |
+    | HMAC(32 bytes) | failure message length (2 bytes) | failure message | pad length (2 bytes) | pad |
     +----------------+----------------------------------+-----------------+----------------------+-----+
-    with failure message length + pad length = 128
+    with failure message length + pad length = 256
    */
-  val ErrorPacketLength = MacLength + 128 + 2 + 2
+  val MaxErrorPayloadLength = 256
+  val ErrorPacketLength = MacLength + MaxErrorPayloadLength + 2 + 2
 
   /**
     *
@@ -299,10 +283,13 @@ object Sphinx {
     */
   def createErrorPacket(sharedSecret: BinaryData, failure: FailureMessage): BinaryData = {
     val message: BinaryData = FailureMessageCodecs.failureMessageCodec.encode(failure).require.toByteArray
-    require(message.length <= 128, s"error message length is ${message.length}, it must be less than 128")
+    require(message.length <= MaxErrorPayloadLength, s"error message length is ${message.length}, it must be less than $MaxErrorPayloadLength")
     val um = Sphinx.generateKey("um", sharedSecret)
-    val padlen = 128 - message.length
+    val padlen = MaxErrorPayloadLength - message.length
     val payload = Protocol.writeUInt16(message.length, ByteOrder.BIG_ENDIAN) ++ message ++ Protocol.writeUInt16(padlen, ByteOrder.BIG_ENDIAN) ++ Sphinx.zeroes(padlen)
+    logger.debug(s"um key: $um")
+    logger.debug(s"error payload: ${BinaryData(payload)}")
+    logger.debug(s"raw error packet: ${BinaryData(Sphinx.mac(um, payload) ++ payload)}")
     forwardErrorPacket(Sphinx.mac(um, payload) ++ payload, sharedSecret)
   }
 
@@ -315,7 +302,7 @@ object Sphinx {
     require(packet.length == ErrorPacketLength, s"invalid error packet length ${packet.length}, must be $ErrorPacketLength")
     val (mac, payload) = packet.splitAt(Sphinx.MacLength)
     val len = Protocol.uint16(payload, ByteOrder.BIG_ENDIAN)
-    require((len >= 0) && (len <= 128), "message length must be less than 128")
+    require((len >= 0) && (len <= MaxErrorPayloadLength), s"message length must be less than $MaxErrorPayloadLength")
     FailureMessageCodecs.failureMessageCodec.decode(BitVector(payload.drop(2).take(len))).require.value
   }
 
@@ -327,8 +314,11 @@ object Sphinx {
     */
   def forwardErrorPacket(packet: BinaryData, sharedSecret: BinaryData): BinaryData = {
     require(packet.length == ErrorPacketLength, s"invalid error packet length ${packet.length}, must be $ErrorPacketLength")
-    val filler = Sphinx.generateFiller("ammag", Seq(sharedSecret), ErrorPacketLength, 1)
-    Sphinx.xor(packet, filler)
+    val key = generateKey("ammag", sharedSecret)
+    val stream = generateStream(key, ErrorPacketLength)
+    logger.debug(s"ammag key: $key")
+    logger.debug(s"error stream: $stream")
+    Sphinx.xor(packet, stream)
   }
 
   /**

eclair-core/src/main/scala/fr/acinq/eclair/crypto/TransportHandler.scala

@@ -2,16 +2,18 @@ package fr.acinq.eclair.crypto
 
 import java.nio.ByteOrder
 
-import akka.actor.{Actor, ActorRef, FSM, LoggingFSM, Terminated}
+import akka.actor.{Actor, ActorRef, FSM, Props, Terminated}
 import akka.io.Tcp.{PeerClosed, _}
 import akka.util.ByteString
 import fr.acinq.bitcoin.Crypto.PublicKey
 import fr.acinq.bitcoin.{BinaryData, Protocol}
 import fr.acinq.eclair.crypto.Noise._
+import fr.acinq.eclair.io.WriteAckSender
+import scodec.bits.BitVector
+import scodec.{Attempt, Codec, DecodeResult}
 
 import scala.annotation.tailrec
 import scala.reflect.ClassTag
-import scala.util.{Failure, Success, Try}
 
 /**
   * see BOLT #8
@@ -22,14 +24,20 @@ import scala.util.{Failure, Success, Try}
   * Once the initial handshake has been completed successfully, the handler will create a listener actor with the
   * provided factory, and will forward it all decrypted messages
   *
-  * @param keyPair private/public key pair for this node
-  * @param rs      remote node static public key (which must be known before we initiate communication)
-  * @param connection    actor that represents the other node's
+  * @param keyPair    private/public key pair for this node
+  * @param rs         remote node static public key (which must be known before we initiate communication)
+  * @param connection actor that represents the other node's
   */
-class TransportHandler[T: ClassTag](keyPair: KeyPair, rs: Option[BinaryData], connection: ActorRef, serializer: TransportHandler.Serializer[T]) extends Actor with LoggingFSM[TransportHandler.State, TransportHandler.Data] {
+class TransportHandler[T: ClassTag](keyPair: KeyPair, rs: Option[BinaryData], connection: ActorRef, codec: Codec[T]) extends Actor with FSM[TransportHandler.State, TransportHandler.Data] {
 
   import TransportHandler._
 
+  connection ! akka.io.Tcp.Register(self)
+
+  val out = context.actorOf(Props(new WriteAckSender(connection)))
+
+  def buf(message: BinaryData): ByteString = ByteString.fromArray(message)
+
   // it means we initiate the dialog
   val isWriter = rs.isDefined
 
@@ -39,7 +47,7 @@ class TransportHandler[T: ClassTag](keyPair: KeyPair, rs: Option[BinaryData], co
     val state = makeWriter(keyPair, rs.get)
     val (state1, message, None) = state.write(BinaryData.empty)
     log.debug(s"sending prefix + $message")
-    connection ! Write(TransportHandler.prefix +: message)
+    out ! buf(TransportHandler.prefix +: message)
     state1
   } else {
     makeReader(keyPair)
@@ -47,10 +55,9 @@ class TransportHandler[T: ClassTag](keyPair: KeyPair, rs: Option[BinaryData], co
 
   def sendToListener(listener: ActorRef, plaintextMessages: Seq[BinaryData]) = {
     plaintextMessages.map(plaintext => {
-      Try(serializer.deserialize(plaintext)) match {
-        case Success(message) => listener ! message
-        case Failure(t) =>
-          log.error(t, s"cannot deserialize $plaintext")
+      codec.decode(BitVector(plaintext.data)) match {
+        case Attempt.Successful(DecodeResult(message, _)) => listener ! message
+        case Attempt.Failure(err) => log.error(s"cannot deserialize $plaintext: $err")
       }
     })
   }
@@ -59,6 +66,7 @@ class TransportHandler[T: ClassTag](keyPair: KeyPair, rs: Option[BinaryData], co
 
   when(Handshake) {
     case Event(Received(data), HandshakeData(reader, buffer)) =>
+      log.debug(s"received ${BinaryData(data)}")
       val buffer1 = buffer ++ data
       if (buffer1.length < expectedLength(reader))
         stay using HandshakeData(reader, buffer1)
@@ -79,11 +87,11 @@ class TransportHandler[T: ClassTag](keyPair: KeyPair, rs: Option[BinaryData], co
                 // we're still in the middle of the handshake process and the other end must first received our next
                 // message before they can reply
                 require(remainder.isEmpty, "unexpected additional data received during handshake")
-                connection ! Write(TransportHandler.prefix +: message)
+                out ! buf(TransportHandler.prefix +: message)
                 stay using HandshakeData(reader1, remainder)
               }
               case (_, message, Some((enc, dec, ck))) => {
-                connection ! Write(TransportHandler.prefix +: message)
+                out ! buf(TransportHandler.prefix +: message)
                 val remoteNodeId = PublicKey(writer.rs)
                 context.parent ! HandshakeCompleted(self, remoteNodeId)
                 val nextStateData = WaitingForListenerData(ExtendedCipherState(enc, ck), ExtendedCipherState(dec, ck), remainder)
@@ -115,9 +123,9 @@ class TransportHandler[T: ClassTag](keyPair: KeyPair, rs: Option[BinaryData], co
       stay using nextStateData
 
     case Event(t: T, WaitingForCyphertextData(enc, dec, length, buffer, listener)) =>
-      val blob = serializer.serialize(t)
+      val blob = codec.encode(t).require.toByteArray
       val (enc1, ciphertext) = TransportHandler.encrypt(enc, blob)
-      connection ! Write(ByteString.fromArray(ciphertext.toArray))
+      out ! buf(ciphertext)
       stay using WaitingForCyphertextData(enc1, dec, length, buffer, listener)
   }
 
@@ -132,13 +140,15 @@ class TransportHandler[T: ClassTag](keyPair: KeyPair, rs: Option[BinaryData], co
       stop(FSM.Normal)
 
     case Event(Terminated(actor), _) if actor == connection =>
+      log.warning(s"connection terminated, stopping the transport")
       // this can be the connection or the listener, either way it is a cause of death
       stop(FSM.Normal)
-
-    case Event(message, _) =>
-      log.warning(s"unhandled $message")
-      stay()
   }
+
+  override def aroundPostStop(): Unit = connection ! Close
+
+  initialize()
+
 }
 
 object TransportHandler {
@@ -205,6 +215,7 @@ object TransportHandler {
   // @formatter:on
 
   case class Listener(listener: ActorRef)
+
   case class HandshakeCompleted(transport: ActorRef, remoteNodeId: PublicKey)
 
   sealed trait Data
@@ -278,16 +289,4 @@ object TransportHandler {
     }
   }
 
-  trait Serializer[T] {
-    def serialize(t: T): BinaryData
-
-    def deserialize(bin: BinaryData): T
-  }
-
-  object Noop extends Serializer[BinaryData] {
-    override def serialize(t: BinaryData): BinaryData = t
-
-    override def deserialize(bin: BinaryData): BinaryData = bin
-  }
-
 }

eclair-core/src/main/scala/fr/acinq/eclair/db/ChannelsDb.scala

@@ -0,0 +1,14 @@
+package fr.acinq.eclair.db
+
+import fr.acinq.bitcoin.BinaryData
+import fr.acinq.eclair.channel.HasCommitments
+
+trait ChannelsDb {
+
+  def addOrUpdateChannel(state: HasCommitments)
+
+  def removeChannel(channelId: BinaryData)
+
+  def listChannels(): List[HasCommitments]
+
+}

eclair-core/src/main/scala/fr/acinq/eclair/db/NetworkDb.scala

@@ -0,0 +1,34 @@
+package fr.acinq.eclair.db
+
+import fr.acinq.bitcoin.Crypto.PublicKey
+import fr.acinq.eclair.wire.{ChannelAnnouncement, ChannelUpdate, NodeAnnouncement}
+
+trait NetworkDb {
+
+  def addNode(n: NodeAnnouncement)
+
+  def updateNode(n: NodeAnnouncement)
+
+  def removeNode(nodeId: PublicKey)
+
+  def listNodes(): List[NodeAnnouncement]
+
+  def addChannel(c: ChannelAnnouncement)
+
+  /**
+    * This method removes 1 channel announcement and 2 channel updates (at both ends of the same channel)
+    *
+    * @param shortChannelId
+    * @return
+    */
+  def removeChannel(shortChannelId: Long)
+
+  def listChannels(): List[ChannelAnnouncement]
+
+  def addChannelUpdate(u: ChannelUpdate)
+
+  def updateChannelUpdate(u: ChannelUpdate)
+
+  def listChannelUpdates(): List[ChannelUpdate]
+
+}

eclair-core/src/main/scala/fr/acinq/eclair/db/PeersDb.scala

@@ -0,0 +1,15 @@
+package fr.acinq.eclair.db
+
+import java.net.InetSocketAddress
+
+import fr.acinq.bitcoin.Crypto.PublicKey
+
+trait PeersDb {
+
+  def addOrUpdatePeer(nodeId: PublicKey, address: InetSocketAddress)
+
+  def removePeer(nodeId: PublicKey)
+
+  def listPeers(): List[(PublicKey, InetSocketAddress)]
+
+}

eclair-core/src/main/scala/fr/acinq/eclair/db/PreimagesDb.scala

@@ -0,0 +1,25 @@
+package fr.acinq.eclair.db
+
+import fr.acinq.bitcoin.BinaryData
+
+/**
+  * This database stores the preimages that we have received from downstream
+  * (either directly via UpdateFulfillHtlc or by extracting the value from the
+  * blockchain).
+  *
+  * This means that this database is only used in the context of *relaying* payments.
+  *
+  * We need to be sure that if downstream is able to pulls funds from us, we can always
+  * do the same from upstream, otherwise we lose money. Hence the need for persistence
+  * to handle all corner cases.
+  *
+  */
+trait PreimagesDb {
+
+  def addPreimage(channelId: BinaryData, htlcId: Long, paymentPreimage: BinaryData)
+
+  def removePreimage(channelId: BinaryData, htlcId: Long)
+
+  def listPreimages(channelId: BinaryData): List[(BinaryData, Long, BinaryData)]
+
+}

eclair-core/src/main/scala/fr/acinq/eclair/db/sqlite/SqliteChannelsDb.scala

@@ -0,0 +1,46 @@
+package fr.acinq.eclair.db.sqlite
+
+import java.sql.Connection
+
+import fr.acinq.bitcoin.BinaryData
+import fr.acinq.eclair.channel.HasCommitments
+import fr.acinq.eclair.db.ChannelsDb
+import fr.acinq.eclair.wire.ChannelCodecs.stateDataCodec
+
+class SqliteChannelsDb(sqlite: Connection) extends ChannelsDb {
+
+  import SqliteUtils._
+
+  {
+    val statement = sqlite.createStatement
+    statement.executeUpdate("CREATE TABLE IF NOT EXISTS local_channels (channel_id BLOB NOT NULL PRIMARY KEY, data BLOB NOT NULL)")
+  }
+
+  override def addOrUpdateChannel(state: HasCommitments): Unit = {
+    val data = stateDataCodec.encode(state).require.toByteArray
+    val update = sqlite.prepareStatement("UPDATE local_channels SET data=? WHERE channel_id=?")
+    update.setBytes(1, data)
+    update.setBytes(2, state.channelId)
+    if (update.executeUpdate() == 0) {
+      val statement = sqlite.prepareStatement("INSERT INTO local_channels VALUES (?, ?)")
+      statement.setBytes(1, state.channelId)
+      statement.setBytes(2, data)
+      statement.executeUpdate()
+    }
+  }
+
+  override def removeChannel(channelId: BinaryData): Unit = {
+    val statement1 = sqlite.prepareStatement("DELETE FROM preimages WHERE channel_id=?")
+    statement1.setBytes(1, channelId)
+    statement1.executeUpdate()
+
+    val statement2 = sqlite.prepareStatement("DELETE FROM local_channels WHERE channel_id=?")
+    statement2.setBytes(1, channelId)
+    statement2.executeUpdate()
+  }
+
+  override def listChannels(): List[HasCommitments] = {
+    val rs = sqlite.createStatement.executeQuery("SELECT data FROM local_channels")
+    codecList(rs, stateDataCodec)
+  }
+}

eclair-core/src/main/scala/fr/acinq/eclair/db/sqlite/SqliteNetworkDb.scala

@@ -0,0 +1,90 @@
+package fr.acinq.eclair.db.sqlite
+
+import java.sql.Connection
+
+import fr.acinq.bitcoin.Crypto
+import fr.acinq.eclair.db.NetworkDb
+import fr.acinq.eclair.router.Announcements
+import fr.acinq.eclair.wire.LightningMessageCodecs.{channelAnnouncementCodec, channelUpdateCodec, nodeAnnouncementCodec}
+import fr.acinq.eclair.wire.{ChannelAnnouncement, ChannelUpdate, NodeAnnouncement}
+
+class SqliteNetworkDb(sqlite: Connection) extends NetworkDb {
+
+  import SqliteUtils._
+
+  {
+    val statement = sqlite.createStatement
+    statement.execute("PRAGMA foreign_keys = ON")
+    statement.executeUpdate("CREATE TABLE IF NOT EXISTS nodes (node_id BLOB NOT NULL PRIMARY KEY, data BLOB NOT NULL)")
+    statement.executeUpdate("CREATE TABLE IF NOT EXISTS channels (short_channel_id INTEGER NOT NULL PRIMARY KEY, data BLOB NOT NULL)")
+    statement.executeUpdate("CREATE TABLE IF NOT EXISTS channel_updates (short_channel_id INTEGER NOT NULL, node_flag INTEGER NOT NULL, data BLOB NOT NULL, PRIMARY KEY(short_channel_id, node_flag), FOREIGN KEY(short_channel_id) REFERENCES channels(short_channel_id))")
+    statement.executeUpdate("CREATE INDEX IF NOT EXISTS channel_updates_idx ON channel_updates(short_channel_id)")
+  }
+
+  override def addNode(n: NodeAnnouncement): Unit = {
+    val statement = sqlite.prepareStatement("INSERT OR IGNORE INTO nodes VALUES (?, ?)")
+    statement.setBytes(1, n.nodeId.toBin)
+    statement.setBytes(2, nodeAnnouncementCodec.encode(n).require.toByteArray)
+    statement.executeUpdate()
+  }
+
+  override def updateNode(n: NodeAnnouncement): Unit = {
+    val statement = sqlite.prepareStatement("UPDATE nodes SET data=? WHERE node_id=?")
+    statement.setBytes(1, nodeAnnouncementCodec.encode(n).require.toByteArray)
+    statement.setBytes(2, n.nodeId.toBin)
+    statement.executeUpdate()
+  }
+
+  override def removeNode(nodeId: Crypto.PublicKey): Unit = {
+    val statement = sqlite.prepareStatement("DELETE FROM nodes WHERE node_id=?")
+    statement.setBytes(1, nodeId.toBin)
+    statement.executeUpdate()
+  }
+
+  override def listNodes(): List[NodeAnnouncement] = {
+    val rs = sqlite.createStatement.executeQuery("SELECT data FROM nodes")
+    codecList(rs, nodeAnnouncementCodec)
+  }
+
+  override def addChannel(c: ChannelAnnouncement): Unit = {
+    val statement = sqlite.prepareStatement("INSERT OR IGNORE INTO channels VALUES (?, ?)")
+    statement.setLong(1, c.shortChannelId)
+    statement.setBytes(2, channelAnnouncementCodec.encode(c).require.toByteArray)
+    statement.executeUpdate()
+  }
+
+  override def removeChannel(shortChannelId: Long): Unit = {
+    val statement = sqlite.createStatement
+    statement.execute("BEGIN TRANSACTION")
+    statement.executeUpdate(s"DELETE FROM channel_updates WHERE short_channel_id=$shortChannelId")
+    statement.executeUpdate(s"DELETE FROM channels WHERE short_channel_id=$shortChannelId")
+    statement.execute("COMMIT TRANSACTION")
+  }
+
+  override def listChannels(): List[ChannelAnnouncement] = {
+    val rs = sqlite.createStatement.executeQuery("SELECT data FROM channels")
+    codecList(rs, channelAnnouncementCodec)
+  }
+
+  override def addChannelUpdate(u: ChannelUpdate): Unit = {
+    val statement = sqlite.prepareStatement("INSERT OR IGNORE INTO channel_updates VALUES (?, ?, ?)")
+    statement.setLong(1, u.shortChannelId)
+    statement.setBoolean(2, Announcements.isNode1(u.flags))
+    statement.setBytes(3, channelUpdateCodec.encode(u).require.toByteArray)
+    statement.executeUpdate()
+  }
+
+  override def updateChannelUpdate(u: ChannelUpdate): Unit = {
+    val statement = sqlite.prepareStatement("UPDATE channel_updates SET data=? WHERE short_channel_id=? AND node_flag=?")
+    statement.setBytes(1, channelUpdateCodec.encode(u).require.toByteArray)
+    statement.setLong(2, u.shortChannelId)
+    statement.setBoolean(3, Announcements.isNode1(u.flags))
+    statement.executeUpdate()
+  }
+
+  override def listChannelUpdates(): List[ChannelUpdate] = {
+    val rs = sqlite.createStatement.executeQuery("SELECT data FROM channel_updates")
+    codecList(rs, channelUpdateCodec)
+  }
+
+}

eclair-core/src/main/scala/fr/acinq/eclair/db/sqlite/SqlitePeersDb.scala

@@ -0,0 +1,46 @@
+package fr.acinq.eclair.db.sqlite
+
+import java.net.InetSocketAddress
+import java.sql.Connection
+
+import fr.acinq.bitcoin.Crypto
+import fr.acinq.bitcoin.Crypto.PublicKey
+import fr.acinq.eclair.db.PeersDb
+import fr.acinq.eclair.wire.LightningMessageCodecs.socketaddress
+import scodec.bits.BitVector
+
+class SqlitePeersDb(sqlite: Connection) extends PeersDb {
+
+  {
+    val statement = sqlite.createStatement
+    statement.executeUpdate("CREATE TABLE IF NOT EXISTS peers (node_id BLOB NOT NULL PRIMARY KEY, data BLOB NOT NULL)")
+  }
+
+  override def addOrUpdatePeer(nodeId: Crypto.PublicKey, address: InetSocketAddress): Unit = {
+    val data = socketaddress.encode(address).require.toByteArray
+    val update = sqlite.prepareStatement("UPDATE peers SET data=? WHERE node_id=?")
+    update.setBytes(1, data)
+    update.setBytes(2, nodeId.toBin)
+    if (update.executeUpdate() == 0) {
+      val statement = sqlite.prepareStatement("INSERT INTO peers VALUES (?, ?)")
+      statement.setBytes(1, nodeId.toBin)
+      statement.setBytes(2, data)
+      statement.executeUpdate()
+    }
+  }
+
+  override def removePeer(nodeId: Crypto.PublicKey): Unit = {
+    val statement = sqlite.prepareStatement("DELETE FROM peers WHERE node_id=?")
+    statement.setBytes(1, nodeId.toBin)
+    statement.executeUpdate()
+  }
+
+  override def listPeers(): List[(PublicKey, InetSocketAddress)] = {
+    val rs = sqlite.createStatement.executeQuery("SELECT node_id, data FROM peers")
+    var l: List[(PublicKey, InetSocketAddress)] = Nil
+    while (rs.next()) {
+      l = l :+ (PublicKey(rs.getBytes("node_id")), socketaddress.decode(BitVector(rs.getBytes("data"))).require.value)
+    }
+    l
+  }
+}

eclair-core/src/main/scala/fr/acinq/eclair/db/sqlite/SqlitePreimagesDb.scala

@@ -0,0 +1,41 @@
+package fr.acinq.eclair.db.sqlite
+
+import java.sql.Connection
+
+import fr.acinq.bitcoin.BinaryData
+import fr.acinq.eclair.db.PreimagesDb
+
+class SqlitePreimagesDb(sqlite: Connection) extends PreimagesDb {
+
+  {
+    val statement = sqlite.createStatement
+    // note: should we use a foreign key to local_channels table here?
+    statement.executeUpdate("CREATE TABLE IF NOT EXISTS preimages (channel_id BLOB NOT NULL, htlc_id INTEGER NOT NULL, preimage BLOB NOT NULL, PRIMARY KEY(channel_id, htlc_id))")
+  }
+
+  override def addPreimage(channelId: BinaryData, htlcId: Long, paymentPreimage: BinaryData): Unit = {
+    val statement = sqlite.prepareStatement("INSERT OR IGNORE INTO preimages VALUES (?, ?, ?)")
+    statement.setBytes(1, channelId)
+    statement.setLong(2, htlcId)
+    statement.setBytes(3, paymentPreimage)
+    statement.executeUpdate()
+  }
+
+  override def removePreimage(channelId: BinaryData, htlcId: Long): Unit = {
+    val statement = sqlite.prepareStatement("DELETE FROM preimages WHERE channel_id=? AND htlc_id=?")
+    statement.setBytes(1, channelId)
+    statement.setLong(2, htlcId)
+    statement.executeUpdate()
+  }
+
+  override def listPreimages(channelId: BinaryData): List[(BinaryData, Long, BinaryData)] = {
+    val statement = sqlite.prepareStatement("SELECT htlc_id, preimage FROM preimages WHERE channel_id=?")
+    statement.setBytes(1, channelId)
+    val rs = statement.executeQuery()
+    var l: List[(BinaryData, Long, BinaryData)] = Nil
+    while (rs.next()) {
+      l = l :+ (channelId, rs.getLong("htlc_id"), BinaryData(rs.getBytes("preimage")))
+    }
+    l
+  }
+}

eclair-core/src/main/scala/fr/acinq/eclair/db/sqlite/SqliteUtils.scala

@@ -0,0 +1,27 @@
+package fr.acinq.eclair.db.sqlite
+
+import java.sql.ResultSet
+
+import scodec.Codec
+import scodec.bits.BitVector
+
+object SqliteUtils {
+
+  /**
+    * This helper assumes that there is a "data" column available, decodable with the provided codec
+    *
+    * TODO: we should use an scala.Iterator instead
+    *
+    * @param rs
+    * @param codec
+    * @tparam T
+    * @return
+    */
+  def codecList[T](rs: ResultSet, codec: Codec[T]): List[T] = {
+    var l: List[T] = Nil
+    while (rs.next()) {
+      l = l :+ codec.decode(BitVector(rs.getBytes("data"))).require.value
+    }
+    l
+  }
+}

eclair-core/src/main/scala/fr/acinq/eclair/io/Client.scala

@@ -6,11 +6,11 @@ import akka.actor.{Props, _}
 import akka.io.Tcp.SO.KeepAlive
 import akka.io.{IO, Tcp}
 import fr.acinq.bitcoin.Crypto.PublicKey
-import fr.acinq.eclair.{Globals, NodeParams}
+import fr.acinq.eclair.NodeParams
 import fr.acinq.eclair.crypto.Noise.KeyPair
 import fr.acinq.eclair.crypto.TransportHandler
 import fr.acinq.eclair.crypto.TransportHandler.HandshakeCompleted
-import fr.acinq.eclair.wire.LightningMessage
+import fr.acinq.eclair.wire.{LightningMessage, LightningMessageCodecs}
 
 /**
   * Created by PM on 27/10/2015.
@@ -35,20 +35,28 @@ class Client(nodeParams: NodeParams, switchboard: ActorRef, address: InetSocketA
           KeyPair(nodeParams.privateKey.publicKey.toBin, nodeParams.privateKey.toBin),
           Some(remoteNodeId),
           connection = connection,
-          serializer = LightningMessageSerializer)))
-      connection ! akka.io.Tcp.Register(transport)
+          codec = LightningMessageCodecs.lightningMessageCodec)))
       context watch transport
-      context become connected(transport)
+      context become authenticating(transport)
   }
 
-  def connected(transport: ActorRef): Receive = {
+  def authenticating(transport: ActorRef): Receive = {
     case Terminated(actor) if actor == transport =>
       origin ! Status.Failure(new RuntimeException("authentication failed"))
       context stop self
 
     case h: HandshakeCompleted =>
+      log.info(s"handshake completed with ${h.remoteNodeId}")
       origin ! "connected"
       switchboard ! h
+      context become connected(transport)
+  }
+
+  def connected(transport: ActorRef): Receive = {
+    case Terminated(actor) if actor == transport =>
+      context stop self
+
+    case msg => log.warning(s"unexpected message $msg")
   }
 
   // we should not restart a failing transport

eclair-core/src/main/scala/fr/acinq/eclair/io/Peer.scala

@@ -5,16 +5,16 @@ import java.net.InetSocketAddress
 import akka.actor.{ActorRef, LoggingFSM, OneForOneStrategy, PoisonPill, Props, SupervisorStrategy, Terminated}
 import fr.acinq.bitcoin.Crypto.{PrivateKey, PublicKey}
 import fr.acinq.bitcoin.{BinaryData, Crypto, DeterministicWallet}
+import fr.acinq.eclair._
+import fr.acinq.eclair.blockchain.EclairWallet
 import fr.acinq.eclair.channel._
 import fr.acinq.eclair.crypto.TransportHandler.{HandshakeCompleted, Listener}
 import fr.acinq.eclair.io.Switchboard.{NewChannel, NewConnection}
-import fr.acinq.eclair.router.Router.Rebroadcast
-import fr.acinq.eclair.router.SendRoutingState
+import fr.acinq.eclair.router.{Rebroadcast, SendRoutingState}
 import fr.acinq.eclair.wire._
-import fr.acinq.eclair.{Features, Globals, NodeParams}
 
-import scala.util.Random
 import scala.concurrent.duration._
+import scala.util.Random
 
 // @formatter:off
 
@@ -23,84 +23,83 @@ case object Disconnect
 
 sealed trait OfflineChannel
 case class BrandNewChannel(c: NewChannel) extends OfflineChannel
-case class HotChannel(channelId: BinaryData, a: ActorRef) extends OfflineChannel
+case class HotChannel(channelId: ChannelId, a: ActorRef) extends OfflineChannel
+
+sealed trait ChannelId
+case class TemporaryChannelId(id: BinaryData) extends ChannelId
+case class FinalChannelId(id: BinaryData) extends ChannelId
 
 sealed trait Data
-case class DisconnectedData(offlineChannels: Seq[OfflineChannel]) extends Data
-case class InitializingData(transport: ActorRef, offlineChannels: Seq[OfflineChannel]) extends Data
-case class ConnectedData(transport: ActorRef, remoteInit: Init, channels: Map[BinaryData, ActorRef]) extends Data
+case class DisconnectedData(offlineChannels: Set[OfflineChannel], attempts: Int = 0) extends Data
+case class InitializingData(transport: ActorRef, offlineChannels: Set[OfflineChannel]) extends Data
+case class ConnectedData(transport: ActorRef, remoteInit: Init, channels: Map[ChannelId, ActorRef]) extends Data
 
 sealed trait State
 case object DISCONNECTED extends State
 case object INITIALIZING extends State
 case object CONNECTED extends State
 
-case class PeerRecord(id: PublicKey, address: InetSocketAddress)
-
 // @formatter:on
 
 /**
   * Created by PM on 26/08/2016.
   */
-class Peer(nodeParams: NodeParams, remoteNodeId: PublicKey, address_opt: Option[InetSocketAddress], watcher: ActorRef, router: ActorRef, relayer: ActorRef, defaultFinalScriptPubKey: BinaryData) extends LoggingFSM[State, Data] {
+class Peer(nodeParams: NodeParams, remoteNodeId: PublicKey, address_opt: Option[InetSocketAddress], watcher: ActorRef, router: ActorRef, relayer: ActorRef, wallet: EclairWallet, storedChannels: Set[HasCommitments]) extends LoggingFSM[State, Data] {
 
   import Peer._
-  import scala.concurrent.ExecutionContext.Implicits.global
 
-  startWith(DISCONNECTED, DisconnectedData(Nil))
-  context.system.scheduler.schedule(nodeParams.pingInterval, nodeParams.pingInterval, self, 'ping)
+  val RECONNECT_TIMER = "reconnect"
+
+  startWith(DISCONNECTED, DisconnectedData(offlineChannels = storedChannels.map { state =>
+    val channel = spawnChannel(nodeParams, context.system.deadLetters)
+    channel ! INPUT_RESTORED(state)
+    HotChannel(FinalChannelId(state.channelId), channel)
+  }, attempts = 0))
 
   when(DISCONNECTED) {
-    case Event(state: HasCommitments, d@DisconnectedData(offlineChannels)) =>
-      val channel = spawnChannel(nodeParams, context.system.deadLetters)
-      channel ! INPUT_RESTORED(state)
-      stay using d.copy(offlineChannels = offlineChannels :+ HotChannel(state.channelId, channel))
+    case Event(c: NewChannel, d@DisconnectedData(offlineChannels, _)) =>
+      stay using d.copy(offlineChannels = offlineChannels + BrandNewChannel(c))
 
-    case Event(c: NewChannel, d@DisconnectedData(offlineChannels)) =>
-      stay using d.copy(offlineChannels = offlineChannels :+ BrandNewChannel(c))
+    case Event(Reconnect, d@DisconnectedData(_, attempts)) =>
+      address_opt match {
+        case None => stay // no-op (this peer didn't initiate the connection and doesn't have the ip of the counterparty)
+        case _ if d.offlineChannels.size == 0 => stay // no-op (no more channels with this peer)
+        case Some(address) =>
+          context.parent forward NewConnection(remoteNodeId, address, None)
+          // exponential backoff retry with a finite max
+          setTimer(RECONNECT_TIMER, Reconnect, Math.min(Math.pow(2, attempts), 60) seconds, repeat = false)
+          stay using d.copy(attempts = attempts + 1)
+      }
 
-    case Event(Reconnect, _) if address_opt.isDefined =>
-      context.parent forward NewConnection(remoteNodeId, address_opt.get, None)
-      stay
-
-    case Event(HandshakeCompleted(transport, _), DisconnectedData(offlineChannels)) =>
+    case Event(HandshakeCompleted(transport, _), DisconnectedData(offlineChannels, _)) =>
       log.info(s"registering as a listener to $transport")
       transport ! Listener(self)
       context watch transport
       transport ! Init(globalFeatures = nodeParams.globalFeatures, localFeatures = nodeParams.localFeatures)
+      // we store the ip upon successful connection, keeping only the most recent one
+      address_opt.map(address => nodeParams.peersDb.addOrUpdatePeer(remoteNodeId, address))
       goto(INITIALIZING) using InitializingData(transport, offlineChannels)
 
-    case Event(Terminated(actor), d@DisconnectedData(offlineChannels)) if offlineChannels.collectFirst { case h: HotChannel if h.a == actor => h }.isDefined =>
-      val h = offlineChannels.collectFirst { case h: HotChannel if h.a == actor => h }.toSeq
-      stay using d.copy(offlineChannels = offlineChannels diff h)
+    case Event(Terminated(actor), d@DisconnectedData(offlineChannels, _)) if offlineChannels.collect { case h: HotChannel if h.a == actor => h }.size >= 0 =>
+      val h = offlineChannels.collect { case h: HotChannel if h.a == actor => h }
+      log.info(s"channel closed: channelId=${h.map(_.channelId).mkString("/")}")
+      stay using d.copy(offlineChannels = offlineChannels -- h)
 
-    case Event(Rebroadcast(announcements), _) => stay // ignored
-
-    case Event('ping, _) =>
-      log.debug(s"ignore ping message when disconnected")
-      stay()
+    case Event(_: Rebroadcast | "connected", _) => stay // ignored
   }
 
   when(INITIALIZING) {
-    case Event(state: HasCommitments, d@InitializingData(_, offlineChannels)) =>
-      val channel = spawnChannel(nodeParams, context.system.deadLetters)
-      channel ! INPUT_RESTORED(state)
-      stay using d.copy(offlineChannels = offlineChannels :+ HotChannel(state.channelId, channel))
-
     case Event(c: NewChannel, d@InitializingData(_, offlineChannels)) =>
-      stay using d.copy(offlineChannels = offlineChannels :+ BrandNewChannel(c))
+      stay using d.copy(offlineChannels = offlineChannels + BrandNewChannel(c))
 
     case Event(remoteInit: Init, InitializingData(transport, offlineChannels)) =>
-      // we store the ip upon successful connection
-      address_opt.foreach(address => nodeParams.peersDb.put(remoteNodeId, PeerRecord(remoteNodeId, address)))
-      import fr.acinq.eclair.Features._
-      log.info(s"$remoteNodeId has features: channelPublic=${Features.isSet(remoteInit.localFeatures, CHANNELS_PUBLIC_BIT)} initialRoutingSync=${Features.isSet(remoteInit.localFeatures, INITIAL_ROUTING_SYNC_BIT)}")
+      log.info(s"$remoteNodeId has features: initialRoutingSync=${Features.initialRoutingSync(remoteInit.localFeatures)}")
       if (Features.areSupported(remoteInit.localFeatures)) {
-        if (Features.isSet(remoteInit.localFeatures, INITIAL_ROUTING_SYNC_BIT)) {
+        if (Features.initialRoutingSync(remoteInit.localFeatures)) {
           router ! SendRoutingState(transport)
         }
         // let's bring existing/requested channels online
-        val channels = offlineChannels.map {
+        val channels: Map[ChannelId, ActorRef] = offlineChannels.map {
           case BrandNewChannel(c) =>
             self ! c
             None
@@ -119,13 +118,15 @@ class Peer(nodeParams: NodeParams, remoteNodeId: PublicKey, address_opt: Option[
       log.warning(s"lost connection to $remoteNodeId")
       goto(DISCONNECTED) using DisconnectedData(offlineChannels)
 
-    case Event(Terminated(actor), d@InitializingData(_, offlineChannels)) if offlineChannels.collectFirst { case h: HotChannel if h.a == actor => h }.isDefined =>
-      val h = offlineChannels.collectFirst { case h: HotChannel if h.a == actor => h }.toSeq
-      stay using d.copy(offlineChannels = offlineChannels diff h)
+    case Event(Terminated(actor), d@InitializingData(_, offlineChannels)) if offlineChannels.collect { case h: HotChannel if h.a == actor => h }.size > 0 =>
+      val h = offlineChannels.collect { case h: HotChannel if h.a == actor => h }
+      log.info(s"channel closed: channelId=${h.map(_.channelId).mkString("/")}")
+      stay using d.copy(offlineChannels = offlineChannels -- h)
   }
 
-  when(CONNECTED) {
-    case (Event('ping, ConnectedData(transport, _, _))) =>
+  when(CONNECTED, stateTimeout = nodeParams.pingInterval) {
+    case Event(StateTimeout, ConnectedData(transport, _, _)) =>
+      // no need to use secure random here
       val pingSize = Random.nextInt(1000)
       val pongSize = Random.nextInt(1000)
       transport ! Ping(pongSize, BinaryData("00" * pingSize))
@@ -143,48 +144,55 @@ class Peer(nodeParams: NodeParams, remoteNodeId: PublicKey, address_opt: Option[
       log.debug(s"received pong with ${data.length} bytes")
       stay
 
-    case Event(state: HasCommitments, d@ConnectedData(_, _, channels)) =>
-      val channel = spawnChannel(nodeParams, context.system.deadLetters)
-      channel ! INPUT_RESTORED(state)
-      stay using d.copy(channels = channels + (state.channelId -> channel))
-
     case Event(err@Error(channelId, reason), ConnectedData(transport, _, channels)) if channelId == CHANNELID_ZERO =>
       log.error(s"connection-level error, failing all channels! reason=${new String(reason)}")
       channels.values.foreach(_ forward err)
       transport ! PoisonPill
       stay
 
-    case Event(msg: HasTemporaryChannelId, ConnectedData(_, _, channels)) if channels.contains(msg.temporaryChannelId) =>
-      val channel = channels(msg.temporaryChannelId)
+    case Event(msg: Error, ConnectedData(_, _, channels)) =>
+      // error messages are a bit special because they can contain either temporaryChannelId or channelId (see BOLT 1)
+      channels.get(TemporaryChannelId(msg.channelId)).orElse(channels.get(FinalChannelId(msg.channelId))) match {
+        case Some(channel) => channel forward msg
+        case None => log.warning(s"couldn't resolve channel for $msg")
+      }
+      stay
+
+    case Event(msg: HasTemporaryChannelId, ConnectedData(_, _, channels)) if channels.contains(TemporaryChannelId(msg.temporaryChannelId)) =>
+      val channel = channels(TemporaryChannelId(msg.temporaryChannelId))
       channel forward msg
       stay
 
-    case Event(msg: HasChannelId, ConnectedData(_, _, channels)) if channels.contains(msg.channelId) =>
-      val channel = channels(msg.channelId)
+    case Event(msg: HasChannelId, ConnectedData(_, _, channels)) if channels.contains(FinalChannelId(msg.channelId)) =>
+      val channel = channels(FinalChannelId(msg.channelId))
       channel forward msg
       stay
 
-    case Event(ChannelIdAssigned(channel, temporaryChannelId, channelId), d@ConnectedData(_, _, channels)) if channels.contains(temporaryChannelId) =>
+    case Event(ChannelIdAssigned(channel, temporaryChannelId, channelId), d@ConnectedData(_, _, channels)) if channels.contains(TemporaryChannelId(temporaryChannelId)) =>
       log.info(s"channel id switch: previousId=$temporaryChannelId nextId=$channelId")
-      stay using d.copy(channels = channels - temporaryChannelId + (channelId -> channel))
+      // NB: we keep the temporary channel id because the switch is not always acknowledged at this point (see https://github.com/lightningnetwork/lightning-rfc/pull/151)
+      // we won't clean it up, but we won't remember the temporary id on channel termination
+      stay using d.copy(channels = channels + (FinalChannelId(channelId) -> channel))
 
     case Event(c: NewChannel, d@ConnectedData(transport, remoteInit, channels)) =>
       log.info(s"requesting a new channel to $remoteNodeId with fundingSatoshis=${c.fundingSatoshis} and pushMsat=${c.pushMsat}")
       val (channel, localParams) = createChannel(nodeParams, transport, funder = true, c.fundingSatoshis.toLong)
-      val temporaryChannelId = randomTemporaryChannelId
-      channel ! INPUT_INIT_FUNDER(temporaryChannelId, c.fundingSatoshis.amount, c.pushMsat.amount, Globals.feeratePerKw.get, localParams, transport, remoteInit)
-      stay using d.copy(channels = channels + (temporaryChannelId -> channel))
+      val temporaryChannelId = randomBytes(32)
+      val networkFeeratePerKw = Globals.feeratesPerKw.get.block_1
+      channel ! INPUT_INIT_FUNDER(temporaryChannelId, c.fundingSatoshis.amount, c.pushMsat.amount, networkFeeratePerKw, localParams, transport, remoteInit, c.channelFlags.getOrElse(nodeParams.channelFlags))
+      stay using d.copy(channels = channels + (TemporaryChannelId(temporaryChannelId) -> channel))
 
-    case Event(msg: OpenChannel, d@ConnectedData(transport, remoteInit, channels)) if !channels.contains(msg.temporaryChannelId) =>
+    case Event(msg: OpenChannel, d@ConnectedData(transport, remoteInit, channels)) if !channels.contains(TemporaryChannelId(msg.temporaryChannelId)) =>
       log.info(s"accepting a new channel to $remoteNodeId")
       val (channel, localParams) = createChannel(nodeParams, transport, funder = false, fundingSatoshis = msg.fundingSatoshis)
       val temporaryChannelId = msg.temporaryChannelId
       channel ! INPUT_INIT_FUNDEE(temporaryChannelId, localParams, transport, remoteInit)
       channel ! msg
-      stay using d.copy(channels = channels + (temporaryChannelId -> channel))
+      stay using d.copy(channels = channels + (TemporaryChannelId(temporaryChannelId) -> channel))
 
-    case Event(Rebroadcast(announcements), ConnectedData(transport, _, _)) =>
-      announcements.foreach(transport forward _)
+    case Event(Rebroadcast(announcements, origins), ConnectedData(transport, _, _)) =>
+      // we filter out announcements that we received from this node
+      announcements.filterNot(ann => origins.getOrElse(ann, context.system.deadLetters) == self).foreach(transport forward _)
       stay
 
     case Event(msg: RoutingMessage, _) =>
@@ -198,29 +206,43 @@ class Peer(nodeParams: NodeParams, remoteNodeId: PublicKey, address_opt: Option[
     case Event(Terminated(actor), ConnectedData(transport, _, channels)) if actor == transport =>
       log.warning(s"lost connection to $remoteNodeId")
       channels.values.foreach(_ ! INPUT_DISCONNECTED)
-      goto(DISCONNECTED) using DisconnectedData(channels.toSeq.map(c => HotChannel(c._1, c._2)))
+      val c: Set[OfflineChannel] = channels.map(c => HotChannel(c._1, c._2)).toSet
+      goto(DISCONNECTED) using DisconnectedData(c)
 
     case Event(Terminated(actor), d@ConnectedData(transport, _, channels)) if channels.values.toSet.contains(actor) =>
-      val channelId = channels.find(_._2 == actor).get._1
-      log.info(s"channel closed: channelId=$channelId")
-      if (channels.size == 1) {
+      // we will have at most 2 ids: a TemporaryChannelId and a FinalChannelId
+      val channelIds = channels.filter(_._2 == actor).map(_._1)
+      log.info(s"channel closed: channelId=${channelIds.mkString("/")}")
+      if (channels.values.toSet - actor == Set.empty) {
         log.info(s"that was the last open channel, closing the connection")
         transport ! PoisonPill
-        // NB: we could terminate the peer, but it would create a race issue with concurrent NewChannel requests that would go to DeadLetters without switchboard being aware
-        // for now we just leave it as-is
       }
-      stay using d.copy(channels = channels - channelId)
+      stay using d.copy(channels = channels -- channelIds)
 
+    case Event(h: HandshakeCompleted, ConnectedData(oldTransport, _, channels)) =>
+      log.info(s"got new transport while already connected, switching to new transport")
+      context unwatch oldTransport
+      oldTransport ! PoisonPill
+      channels.values.foreach(_ ! INPUT_DISCONNECTED)
+      val c: Set[OfflineChannel] = channels.map(c => HotChannel(c._1, c._2)).toSet
+      self ! h
+      goto(DISCONNECTED) using DisconnectedData(c)
+  }
+
+  onTransition {
+    case _ -> DISCONNECTED if nodeParams.autoReconnect && address_opt.isDefined => setTimer(RECONNECT_TIMER, Reconnect, 1 second, repeat = false)
+    case DISCONNECTED -> _ if nodeParams.autoReconnect && address_opt.isDefined => cancelTimer(RECONNECT_TIMER)
   }
 
   def createChannel(nodeParams: NodeParams, transport: ActorRef, funder: Boolean, fundingSatoshis: Long): (ActorRef, LocalParams) = {
+    val defaultFinalScriptPubKey = Helpers.getFinalScriptPubKey(wallet)
     val localParams = makeChannelParams(nodeParams, defaultFinalScriptPubKey, funder, fundingSatoshis)
     val channel = spawnChannel(nodeParams, transport)
     (channel, localParams)
   }
 
   def spawnChannel(nodeParams: NodeParams, transport: ActorRef): ActorRef = {
-    val channel = context.actorOf(Channel.props(nodeParams, remoteNodeId, watcher, router, relayer))
+    val channel = context.actorOf(Channel.props(nodeParams, wallet, remoteNodeId, watcher, router, relayer))
     context watch channel
     channel
   }
@@ -228,19 +250,22 @@ class Peer(nodeParams: NodeParams, remoteNodeId: PublicKey, address_opt: Option[
   // a failing channel won't be restarted, it should handle its states
   override val supervisorStrategy = OneForOneStrategy(loggingEnabled = true) { case _ => SupervisorStrategy.Stop }
 
+  initialize()
+
 }
 
 object Peer {
 
   val CHANNELID_ZERO = BinaryData("00" * 32)
 
-  def props(nodeParams: NodeParams, remoteNodeId: PublicKey, address_opt: Option[InetSocketAddress], watcher: ActorRef, router: ActorRef, relayer: ActorRef, defaultFinalScriptPubKey: BinaryData) = Props(new Peer(nodeParams, remoteNodeId, address_opt, watcher, router, relayer, defaultFinalScriptPubKey))
+  def props(nodeParams: NodeParams, remoteNodeId: PublicKey, address_opt: Option[InetSocketAddress], watcher: ActorRef, router: ActorRef, relayer: ActorRef, wallet: EclairWallet, storedChannels: Set[HasCommitments]) = Props(new Peer(nodeParams, remoteNodeId, address_opt, watcher, router, relayer, wallet: EclairWallet, storedChannels))
 
   def generateKey(nodeParams: NodeParams, keyPath: Seq[Long]): PrivateKey = DeterministicWallet.derivePrivateKey(nodeParams.extendedPrivateKey, keyPath).privateKey
 
   def makeChannelParams(nodeParams: NodeParams, defaultFinalScriptPubKey: BinaryData, isFunder: Boolean, fundingSatoshis: Long): LocalParams = {
     // all secrets are generated from the main seed
-    val keyIndex = Random.nextInt(1000).toLong
+    // TODO: check this
+    val keyIndex = secureRandom.nextInt(1000).toLong
     LocalParams(
       nodeId = nodeParams.privateKey.publicKey,
       dustLimitSatoshis = nodeParams.dustLimitSatoshis,
@@ -253,16 +278,12 @@ object Peer {
       revocationSecret = generateKey(nodeParams, keyIndex :: 1L :: Nil),
       paymentKey = generateKey(nodeParams, keyIndex :: 2L :: Nil),
       delayedPaymentKey = generateKey(nodeParams, keyIndex :: 3L :: Nil),
+      htlcKey = generateKey(nodeParams, keyIndex :: 4L :: Nil),
       defaultFinalScriptPubKey = defaultFinalScriptPubKey,
-      shaSeed = Crypto.sha256(generateKey(nodeParams, keyIndex :: 4L :: Nil).toBin), // TODO: check that
+      shaSeed = Crypto.sha256(generateKey(nodeParams, keyIndex :: 5L :: Nil).toBin), // TODO: check that
       isFunder = isFunder,
       globalFeatures = nodeParams.globalFeatures,
       localFeatures = nodeParams.localFeatures)
   }
 
-  def randomTemporaryChannelId: BinaryData = {
-    val bin = Array.fill[Byte](32)(0)
-    Random.nextBytes(bin)
-    bin
-  }
 }

eclair-core/src/main/scala/fr/acinq/eclair/io/Server.scala

@@ -9,7 +9,7 @@ import fr.acinq.eclair.NodeParams
 import fr.acinq.eclair.crypto.Noise.KeyPair
 import fr.acinq.eclair.crypto.TransportHandler
 import fr.acinq.eclair.crypto.TransportHandler.HandshakeCompleted
-import fr.acinq.eclair.wire.LightningMessage
+import fr.acinq.eclair.wire.{LightningMessage, LightningMessageCodecs}
 
 import scala.concurrent.Promise
 
@@ -23,11 +23,9 @@ class Server(nodeParams: NodeParams, switchboard: ActorRef, address: InetSocketA
 
   IO(Tcp) ! Bind(self, address, options = KeepAlive(true) :: Nil)
 
-  def receive() = main(Set())
-
-  def main(transports: Set[ActorRef]): Receive = {
+  def receive() = {
     case Bound(localAddress) =>
-      bound.map(_.success())
+      bound.map(_.success(Unit))
       log.info(s"bound on $localAddress")
 
     case CommandFailed(_: Bind) =>
@@ -37,16 +35,15 @@ class Server(nodeParams: NodeParams, switchboard: ActorRef, address: InetSocketA
     case Connected(remote, _) =>
       log.info(s"connected to $remote")
       val connection = sender
-      val transport = context.actorOf(Props(
+      context.actorOf(Props(
         new TransportHandler[LightningMessage](
           KeyPair(nodeParams.privateKey.publicKey.toBin, nodeParams.privateKey.toBin),
           None,
           connection = connection,
-          serializer = LightningMessageSerializer)))
-      connection ! akka.io.Tcp.Register(transport)
-      context become main(transports + transport)
+          codec = LightningMessageCodecs.lightningMessageCodec)))
 
     case h: HandshakeCompleted =>
+      log.info(s"handshake completed with ${h.remoteNodeId}")
       switchboard ! h
   }
 

eclair-core/src/main/scala/fr/acinq/eclair/io/Switchboard.scala

@@ -4,34 +4,41 @@ import java.net.InetSocketAddress
 
 import akka.actor.{Actor, ActorLogging, ActorRef, OneForOneStrategy, Props, Status, SupervisorStrategy, Terminated}
 import fr.acinq.bitcoin.Crypto.PublicKey
-import fr.acinq.bitcoin.{BinaryData, MilliSatoshi, Satoshi}
+import fr.acinq.bitcoin.{MilliSatoshi, Satoshi}
 import fr.acinq.eclair.NodeParams
+import fr.acinq.eclair.blockchain.EclairWallet
 import fr.acinq.eclair.channel.HasCommitments
 import fr.acinq.eclair.crypto.TransportHandler.HandshakeCompleted
-import fr.acinq.eclair.router.Router.Rebroadcast
+import fr.acinq.eclair.router.Rebroadcast
 
 /**
   * Ties network connections to peers.
   * Created by PM on 14/02/2017.
   */
-class Switchboard(nodeParams: NodeParams, watcher: ActorRef, router: ActorRef, relayer: ActorRef, defaultFinalScriptPubKey: BinaryData) extends Actor with ActorLogging {
+class Switchboard(nodeParams: NodeParams, watcher: ActorRef, router: ActorRef, relayer: ActorRef, wallet: EclairWallet) extends Actor with ActorLogging {
 
   import Switchboard._
 
-  def receive: Receive = main(Map(), Map())
+  // we load peers and channels from database
+  val initialPeers = {
+    val channels = nodeParams.channelsDb.listChannels().toList.groupBy(_.commitments.remoteParams.nodeId)
+    val peers = nodeParams.peersDb.listPeers().toMap
+    channels
+      .map {
+        case (remoteNodeId, states) => (remoteNodeId, states, peers.get(remoteNodeId))
+      }
+      .map {
+        case (remoteNodeId, states, address_opt) =>
+          // we might not have an address if we didn't initiate the connection in the first place
+          val peer = createOrGetPeer(Map(), remoteNodeId, address_opt, states.toSet)
+          (remoteNodeId -> peer)
+      }.toMap
+  }
+
+  def receive: Receive = main(initialPeers, Map())
 
   def main(peers: Map[PublicKey, ActorRef], connections: Map[PublicKey, ActorRef]): Receive = {
 
-    case PeerRecord(remoteNodeId, address) =>
-      val peer = createOrGetPeer(peers, remoteNodeId, Some(address))
-      context become main(peers + (remoteNodeId -> peer), connections)
-
-    case channelState: HasCommitments =>
-      val remoteNodeId = channelState.commitments.remoteParams.nodeId
-      val peer = createOrGetPeer(peers, remoteNodeId, None)
-      peer forward channelState
-      context become main(peers + (remoteNodeId -> peer), connections)
-
     case NewConnection(publicKey, _, _) if publicKey == nodeParams.privateKey.publicKey =>
       sender ! Status.Failure(new RuntimeException("cannot open connection with oneself"))
 
@@ -42,12 +49,12 @@ class Switchboard(nodeParams: NodeParams, watcher: ActorRef, router: ActorRef, r
           sender ! s"already connected to nodeId=$remoteNodeId"
           connection
         case None =>
-          log.info(s"connecting to $remoteNodeId @ $address")
+          log.info(s"connecting to $remoteNodeId @ $address on behalf of $sender")
           val connection = context.actorOf(Client.props(nodeParams, self, address, remoteNodeId, sender))
           context watch (connection)
           connection
       }
-      val peer = createOrGetPeer(peers, remoteNodeId, Some(address))
+      val peer = createOrGetPeer(peers, remoteNodeId, Some(address), Set.empty)
       newChannel_opt.foreach(peer forward _)
       context become main(peers + (remoteNodeId -> peer), connections + (remoteNodeId -> connection))
 
@@ -59,11 +66,11 @@ class Switchboard(nodeParams: NodeParams, watcher: ActorRef, router: ActorRef, r
     case Terminated(actor) if peers.values.toSet.contains(actor) =>
       log.info(s"$actor is dead, removing from peers/connections/db")
       val remoteNodeId = peers.find(_._2 == actor).get._1
-      nodeParams.peersDb.delete(remoteNodeId)
+      nodeParams.peersDb.removePeer(remoteNodeId)
       context become main(peers - remoteNodeId, connections - remoteNodeId)
 
     case h@HandshakeCompleted(_, remoteNodeId) =>
-      val peer = createOrGetPeer(peers, remoteNodeId, None)
+      val peer = createOrGetPeer(peers, remoteNodeId, None, Set.empty)
       peer forward h
       context become main(peers + (remoteNodeId -> peer), connections)
 
@@ -75,11 +82,11 @@ class Switchboard(nodeParams: NodeParams, watcher: ActorRef, router: ActorRef, r
 
   }
 
-  def createOrGetPeer(peers: Map[PublicKey, ActorRef], remoteNodeId: PublicKey, address_opt: Option[InetSocketAddress]) = {
+  def createOrGetPeer(peers: Map[PublicKey, ActorRef], remoteNodeId: PublicKey, address_opt: Option[InetSocketAddress], offlineChannels: Set[HasCommitments]) = {
     peers.get(remoteNodeId) match {
       case Some(peer) => peer
       case None =>
-        val peer = context.actorOf(Peer.props(nodeParams, remoteNodeId, address_opt, watcher, router, relayer, defaultFinalScriptPubKey), name = s"peer-$remoteNodeId")
+        val peer = context.actorOf(Peer.props(nodeParams, remoteNodeId, address_opt, watcher, router, relayer, wallet, offlineChannels), name = s"peer-$remoteNodeId")
         context watch (peer)
         peer
     }
@@ -91,10 +98,10 @@ class Switchboard(nodeParams: NodeParams, watcher: ActorRef, router: ActorRef, r
 
 object Switchboard {
 
-  def props(nodeParams: NodeParams, watcher: ActorRef, router: ActorRef, relayer: ActorRef, defaultFinalScriptPubKey: BinaryData) = Props(new Switchboard(nodeParams, watcher, router, relayer, defaultFinalScriptPubKey))
+  def props(nodeParams: NodeParams, watcher: ActorRef, router: ActorRef, relayer: ActorRef, wallet: EclairWallet) = Props(new Switchboard(nodeParams, watcher, router, relayer, wallet))
 
   // @formatter:off
-  case class NewChannel(fundingSatoshis: Satoshi, pushMsat: MilliSatoshi)
+  case class NewChannel(fundingSatoshis: Satoshi, pushMsat: MilliSatoshi, channelFlags: Option[Byte])
   case class NewConnection(remoteNodeId: PublicKey, address: InetSocketAddress, newChannel_opt: Option[NewChannel])
   // @formatter:on
 

eclair-core/src/main/scala/fr/acinq/eclair/io/WriteAckSender.scala

@@ -0,0 +1,48 @@
+package fr.acinq.eclair.io
+
+import akka.actor.{Actor, ActorLogging, ActorRef, PoisonPill}
+import akka.io.Tcp
+import akka.util.ByteString
+
+
+/**
+  * This implements an ACK-based throttling mechanism
+  * See https://doc.akka.io/docs/akka/snapshot/scala/io-tcp.html#throttling-reads-and-writes
+  */
+class WriteAckSender(connection: ActorRef) extends Actor with ActorLogging {
+
+  // Note: this actor should be killed if connection dies
+
+  case object Ack extends Tcp.Event
+
+  override def receive = idle
+
+  def idle: Receive = {
+    case data: ByteString =>
+      connection ! Tcp.Write(data, Ack)
+      context become buffering(Vector.empty[ByteString])
+  }
+
+  def buffering(buffer: Vector[ByteString]): Receive = {
+    case _: ByteString if buffer.size > MAX_BUFFERED =>
+      log.warning(s"buffer overrun, closing connection")
+      connection ! PoisonPill
+    case data: ByteString =>
+      log.debug(s"buffering write $data")
+      context become buffering(buffer :+ data)
+    case Ack =>
+      buffer.headOption match {
+        case Some(data) =>
+          connection ! Tcp.Write(data, Ack)
+          context become buffering(buffer.drop(1))
+        case None =>
+          log.debug(s"got last ack, back to idle")
+          context become idle
+      }
+  }
+
+  override def unhandled(message: Any): Unit = log.warning(s"unhandled message $message")
+
+  val MAX_BUFFERED = 100000L
+
+}

eclair-core/src/main/scala/fr/acinq/eclair/package.scala

@@ -1,14 +1,28 @@
 package fr.acinq
 
+import java.security.SecureRandom
+
 import fr.acinq.bitcoin.Crypto.PrivateKey
 import fr.acinq.bitcoin.{BinaryData, _}
 import scodec.Attempt
 import scodec.bits.BitVector
 
-import scala.util.Random
-
 package object eclair {
 
+  /**
+    * We are using 'new SecureRandom()' instead of 'SecureRandom.getInstanceStrong()' because the latter can hang on Linux
+    * See http://bugs.java.com/view_bug.do?bug_id=6521844 and https://tersesystems.com/2015/12/17/the-right-way-to-use-securerandom/
+    */
+  val secureRandom = new SecureRandom()
+
+  def randomBytes(length: Int): BinaryData = {
+    val buffer = new Array[Byte](length)
+    secureRandom.nextBytes(buffer)
+    buffer
+  }
+
+  def randomKey: PrivateKey = PrivateKey(randomBytes(32), compressed = true)
+
   def toLongId(fundingTxHash: BinaryData, fundingOutputIndex: Int): BinaryData = {
     require(fundingOutputIndex < 65536, "fundingOutputIndex must not be greater than FFFF")
     require(fundingTxHash.size == 32, "fundingTxHash must be of length 32B")
@@ -35,12 +49,6 @@ package object eclair {
   def fromShortId(id: Long): (Int, Int, Int) =
     (((id >> 40) & 0xFFFFFF).toInt, ((id >> 16) & 0xFFFFFF).toInt, (id & 0xFFFF).toInt)
 
-  def randomKey: PrivateKey = PrivateKey({
-    val bin = Array.fill[Byte](32)(0)
-    // TODO: use secure random
-    Random.nextBytes(bin)
-    bin
-  }, compressed = true)
 
   def serializationResult(attempt: Attempt[BitVector]): BinaryData = attempt match {
     case Attempt.Successful(bin) => BinaryData(bin.toByteArray)
@@ -48,12 +56,12 @@ package object eclair {
   }
 
   /**
-    * Converts fee-rate-per-kB to fee-rate-per-kw, *based on a standard commit tx*
+    * Converts feerate in satoshi-per-bytes to feerate in satoshi-per-kw
     *
-    * @param feeratePerKB
-    * @return
+    * @param feeratePerByte feerate in satoshi-per-bytes
+    * @return feerate in satoshi-per-kw
     */
-  def feerateKB2Kw(feeratePerKB: Long): Long = feeratePerKB / 2
+  def feerateByte2Kw(feeratePerByte: Long): Long = feeratePerByte * 1024 / 4
 
 
 }

eclair-core/src/main/scala/fr/acinq/eclair/payment/LocalPaymentHandler.scala

@@ -0,0 +1,59 @@
+package fr.acinq.eclair.payment
+
+import akka.actor.{Actor, ActorLogging, Props, Status}
+import fr.acinq.bitcoin.{BinaryData, Crypto, MilliSatoshi}
+import fr.acinq.eclair.channel.{CMD_FAIL_HTLC, CMD_FULFILL_HTLC}
+import fr.acinq.eclair.wire._
+import fr.acinq.eclair.{NodeParams, randomBytes}
+
+import scala.util.{Failure, Success, Try}
+
+/**
+  * Created by PM on 17/06/2016.
+  */
+class LocalPaymentHandler(nodeParams: NodeParams) extends Actor with ActorLogging {
+
+  override def receive: Receive = run(Map())
+
+  def run(h2r: Map[BinaryData, (BinaryData, PaymentRequest)]): Receive = {
+
+    case ReceivePayment(amount, desc) =>
+      Try {
+        val paymentPreimage = randomBytes(32)
+        val paymentHash = Crypto.sha256(paymentPreimage)
+        (paymentPreimage, paymentHash, PaymentRequest(nodeParams.chainHash, Some(amount), paymentHash, nodeParams.privateKey, desc))
+      } match {
+        case Success((r, h, pr)) =>
+          log.debug(s"generated payment request=${PaymentRequest.write(pr)} from amount=$amount")
+          sender ! pr
+          context.become(run(h2r + (h -> (r, pr))))
+        case Failure(t) =>
+          sender ! Status.Failure(t)
+      }
+
+    case htlc: UpdateAddHtlc =>
+      if (h2r.contains(htlc.paymentHash)) {
+        val r = h2r(htlc.paymentHash)._1
+        val pr = h2r(htlc.paymentHash)._2
+        // The htlc amount must be equal or greater than the requested amount. A slight overpaying is permitted, however
+        // it must not be greater than two times the requested amount.
+        // see https://github.com/lightningnetwork/lightning-rfc/blob/master/04-onion-routing.md#failure-messages
+        pr.amount match {
+          case Some(amount) if MilliSatoshi(htlc.amountMsat) < amount => sender ! CMD_FAIL_HTLC(htlc.id, Right(IncorrectPaymentAmount), commit = true)
+          case Some(amount) if MilliSatoshi(htlc.amountMsat) > amount * 2 => sender ! CMD_FAIL_HTLC(htlc.id, Right(IncorrectPaymentAmount), commit = true)
+          case _ =>
+            log.info(s"received payment for paymentHash=${htlc.paymentHash} amountMsat=${htlc.amountMsat}")
+            // amount is correct or was not specified in the payment request
+            sender ! CMD_FULFILL_HTLC(htlc.id, r, commit = true)
+            context.system.eventStream.publish(PaymentReceived(MilliSatoshi(htlc.amountMsat), htlc.paymentHash))
+            context.become(run(h2r - htlc.paymentHash))
+        }
+      } else {
+        sender ! CMD_FAIL_HTLC(htlc.id, Right(UnknownPaymentHash), commit = true)
+      }
+  }
+}
+
+object LocalPaymentHandler {
+  def props(nodeParams: NodeParams) = Props(new LocalPaymentHandler(nodeParams))
+}

eclair-core/src/main/scala/fr/acinq/eclair/payment/PaymentEvents.scala

@@ -11,6 +11,6 @@ sealed trait PaymentEvent {
 
 case class PaymentSent(amount: MilliSatoshi, feesPaid: MilliSatoshi, paymentHash: BinaryData) extends PaymentEvent
 
-case class PaymentRelayed(amount: MilliSatoshi, feesEarned: MilliSatoshi, paymentHash: BinaryData) extends PaymentEvent
+case class PaymentRelayed(amountIn: MilliSatoshi, amountOut: MilliSatoshi, paymentHash: BinaryData) extends PaymentEvent
 
 case class PaymentReceived(amount: MilliSatoshi, paymentHash: BinaryData) extends PaymentEvent

eclair-core/src/main/scala/fr/acinq/eclair/payment/PaymentHop.scala

@@ -0,0 +1,46 @@
+package fr.acinq.eclair.payment
+
+import fr.acinq.bitcoin.Crypto.PublicKey
+import fr.acinq.eclair.payment.PaymentRequest.ExtraHop
+import fr.acinq.eclair.wire.ChannelUpdate
+
+
+object PaymentHop {
+  /**
+    *
+    * @param baseMsat     fixed fee
+    * @param proportional proportional fee
+    * @param msat         amount in millisatoshi
+    * @return the fee (in msat) that a node should be paid to forward an HTLC of 'amount' millisatoshis
+    */
+  def nodeFee(baseMsat: Long, proportional: Long, msat: Long): Long = baseMsat + (proportional * msat) / 1000000
+
+  /**
+    *
+    * @param reversePath sequence of Hops from recipient to a start of assisted path
+    * @param msat        an amount to send to a payment recipient
+    * @return a sequence of extra hops with a pre-calculated fee for a given msat amount
+    */
+  def buildExtra(reversePath: Seq[Hop], msat: Long): Seq[ExtraHop] = (List.empty[ExtraHop] /: reversePath) {
+    case (Nil, hop) => ExtraHop(hop.nodeId, hop.shortChannelId, hop.nextFee(msat), hop.cltvExpiryDelta) :: Nil
+    case (head :: rest, hop) => ExtraHop(hop.nodeId, hop.shortChannelId, hop.nextFee(msat + head.fee), hop.cltvExpiryDelta) :: head :: rest
+  }
+}
+
+trait PaymentHop {
+  def nextFee(msat: Long): Long
+
+  def shortChannelId: Long
+
+  def cltvExpiryDelta: Int
+
+  def nodeId: PublicKey
+}
+
+case class Hop(nodeId: PublicKey, nextNodeId: PublicKey, lastUpdate: ChannelUpdate) extends PaymentHop {
+  def nextFee(msat: Long): Long = PaymentHop.nodeFee(lastUpdate.feeBaseMsat, lastUpdate.feeProportionalMillionths, msat)
+
+  def cltvExpiryDelta: Int = lastUpdate.cltvExpiryDelta
+
+  def shortChannelId: Long = lastUpdate.shortChannelId
+}

eclair-core/src/main/scala/fr/acinq/eclair/payment/PaymentInitiator.scala

@@ -1,7 +1,6 @@
 package fr.acinq.eclair.payment
 
 import akka.actor.{Actor, ActorLogging, ActorRef, Props}
-import fr.acinq.bitcoin.BinaryData
 import fr.acinq.bitcoin.Crypto.PublicKey
 
 /**
@@ -10,7 +9,7 @@ import fr.acinq.bitcoin.Crypto.PublicKey
 class PaymentInitiator(sourceNodeId: PublicKey, router: ActorRef, register: ActorRef) extends Actor with ActorLogging {
 
   override def receive: Receive = {
-    case c: CreatePayment =>
+    case c: SendPayment =>
       val payFsm = context.actorOf(PaymentLifecycle.props(sourceNodeId, router, register))
       payFsm forward c
   }

eclair-core/src/main/scala/fr/acinq/eclair/payment/PaymentLifecycle.scala

@@ -0,0 +1,201 @@
+package fr.acinq.eclair.payment
+
+import akka.actor.{ActorRef, FSM, LoggingFSM, Props, Status}
+import fr.acinq.bitcoin.Crypto.PublicKey
+import fr.acinq.bitcoin.{BinaryData, MilliSatoshi}
+import fr.acinq.eclair._
+import fr.acinq.eclair.channel.{CMD_ADD_HTLC, Register}
+import fr.acinq.eclair.crypto.Sphinx
+import fr.acinq.eclair.crypto.Sphinx.{ErrorPacket, Packet}
+import fr.acinq.eclair.router._
+import fr.acinq.eclair.wire._
+import scodec.Attempt
+
+// @formatter:off
+case class ReceivePayment(amountMsat: MilliSatoshi, description: String)
+case class SendPayment(amountMsat: Long, paymentHash: BinaryData, targetNodeId: PublicKey, minFinalCltvExpiry: Long = PaymentLifecycle.defaultMinFinalCltvExpiry, maxAttempts: Int = 5)
+
+sealed trait PaymentResult
+case class PaymentSucceeded(route: Seq[Hop], paymentPreimage: BinaryData) extends PaymentResult
+sealed trait PaymentFailure
+case class LocalFailure(t: Throwable) extends PaymentFailure
+case class RemoteFailure(route: Seq[Hop], e: ErrorPacket) extends PaymentFailure
+case class UnreadableRemoteFailure(route: Seq[Hop]) extends PaymentFailure
+case class PaymentFailed(paymentHash: BinaryData, failures: Seq[PaymentFailure]) extends PaymentResult
+
+sealed trait Data
+case object WaitingForRequest extends Data
+case class WaitingForRoute(sender: ActorRef, c: SendPayment, failures: Seq[PaymentFailure]) extends Data
+case class WaitingForComplete(sender: ActorRef, c: SendPayment, cmd: CMD_ADD_HTLC, failures: Seq[PaymentFailure], sharedSecrets: Seq[(BinaryData, PublicKey)], ignoreNodes: Set[PublicKey], ignoreChannels: Set[Long], hops: Seq[Hop]) extends Data
+
+sealed trait State
+case object WAITING_FOR_REQUEST extends State
+case object WAITING_FOR_ROUTE extends State
+case object WAITING_FOR_PAYMENT_COMPLETE extends State
+
+// @formatter:on
+
+/**
+  * Created by PM on 26/08/2016.
+  */
+class PaymentLifecycle(sourceNodeId: PublicKey, router: ActorRef, register: ActorRef) extends LoggingFSM[State, Data] {
+
+  import PaymentLifecycle._
+
+  startWith(WAITING_FOR_REQUEST, WaitingForRequest)
+
+  when(WAITING_FOR_REQUEST) {
+    case Event(c: SendPayment, WaitingForRequest) =>
+      router ! RouteRequest(sourceNodeId, c.targetNodeId)
+      goto(WAITING_FOR_ROUTE) using WaitingForRoute(sender, c, failures = Nil)
+  }
+
+  when(WAITING_FOR_ROUTE) {
+    case Event(RouteResponse(hops, ignoreNodes, ignoreChannels), WaitingForRoute(s, c, failures)) =>
+      log.info(s"route found: attempt=${failures.size + 1}/${c.maxAttempts} route=${hops.map(_.nextNodeId).mkString("->")} channels=${hops.map(_.lastUpdate.shortChannelId.toHexString).mkString("->")}")
+      val firstHop = hops.head
+      val finalExpiry = Globals.blockCount.get().toInt + c.minFinalCltvExpiry.toInt
+      val (cmd, sharedSecrets) = buildCommand(c.amountMsat, finalExpiry, c.paymentHash, hops)
+      // TODO: HACK!!!! see Router.scala (we actually store the first node id in the sig)
+      if (firstHop.lastUpdate.signature.size == 32) {
+        register ! Register.Forward(firstHop.lastUpdate.signature, cmd)
+      } else {
+        register ! Register.ForwardShortId(firstHop.lastUpdate.shortChannelId, cmd)
+      }
+      goto(WAITING_FOR_PAYMENT_COMPLETE) using WaitingForComplete(s, c, cmd, failures, sharedSecrets, ignoreNodes, ignoreChannels, hops)
+
+    case Event(Status.Failure(t), WaitingForRoute(s, c, failures)) =>
+      s ! PaymentFailed(c.paymentHash, failures = failures :+ LocalFailure(t))
+      stop(FSM.Normal)
+  }
+
+  when(WAITING_FOR_PAYMENT_COMPLETE) {
+    case Event("ok", _) => stay()
+
+    case Event(fulfill: UpdateFulfillHtlc, w: WaitingForComplete) =>
+      w.sender ! PaymentSucceeded(w.hops, fulfill.paymentPreimage)
+      context.system.eventStream.publish(PaymentSent(MilliSatoshi(w.c.amountMsat), MilliSatoshi(w.cmd.amountMsat - w.c.amountMsat), w.cmd.paymentHash))
+      stop(FSM.Normal)
+
+    case Event(fail: UpdateFailHtlc, WaitingForComplete(s, c, _, failures, sharedSecrets, ignoreNodes, ignoreChannels, hops)) =>
+      Sphinx.parseErrorPacket(fail.reason, sharedSecrets) match {
+        case None =>
+          log.warning(s"cannot parse returned error ${fail.reason}")
+          s ! PaymentFailed(c.paymentHash, failures = failures :+ UnreadableRemoteFailure(hops))
+          stop(FSM.Normal)
+        case Some(e@ErrorPacket(nodeId, failureMessage)) if nodeId == c.targetNodeId =>
+          log.warning(s"received an error message from target nodeId=$nodeId, failing the payment (failure=$failureMessage)")
+          s ! PaymentFailed(c.paymentHash, failures = failures :+ RemoteFailure(hops, e))
+          stop(FSM.Normal)
+        case Some(e@ErrorPacket(nodeId, failureMessage)) if failures.size + 1 >= c.maxAttempts =>
+          log.info(s"received an error message from nodeId=$nodeId (failure=$failureMessage)")
+          log.warning(s"too many failed attempts, failing the payment")
+          s ! PaymentFailed(c.paymentHash, failures = failures :+ RemoteFailure(hops, e))
+          stop(FSM.Normal)
+        case Some(e@ErrorPacket(nodeId, failureMessage: Node)) =>
+          log.info(s"received an error message from nodeId=$nodeId, trying to route around it (failure=$failureMessage)")
+          // let's try to route around this node
+          router ! RouteRequest(sourceNodeId, c.targetNodeId, ignoreNodes + nodeId, ignoreChannels)
+          goto(WAITING_FOR_ROUTE) using WaitingForRoute(s, c, failures :+ RemoteFailure(hops, e))
+        case Some(e@ErrorPacket(nodeId, failureMessage: Update)) =>
+          log.info(s"received 'Update' type error message from nodeId=$nodeId, retrying payment (failure=$failureMessage)")
+          if (Announcements.checkSig(failureMessage.update, nodeId)) {
+            // note that we check the sig, but we don't make sure that this update was for the exact channel we required
+            // the reason is that we don't want to prevent relaying nodes to use another channel to the same N+1 node if they deem necessary
+            failureMessage match {
+              case _: TemporaryChannelFailure =>
+                // node indicates that its outgoing channel is experiencing a transient issue (eg. channel capacity reached, too many in-flight htlc)
+                hops.find(_.nodeId == nodeId).map(_.lastUpdate) match {
+                  case Some(u) if u.copy(signature = BinaryData.empty, timestamp = 0) == failureMessage.update.copy(signature = BinaryData.empty, timestamp = 0) =>
+                    // node returned the exact same update we used: in that case, let's temporarily exclude the channel from future routes, giving it time to recover
+                    val nextNodeId = hops.find(_.nodeId == nodeId).get.nextNodeId
+                    router ! ExcludeChannel(ChannelDesc(failureMessage.update.shortChannelId, nodeId, nextNodeId))
+                  case _ => // node returned a different update, maybe the payment will go through next time...
+                }
+              case _ => {}
+            }
+            // in any case, we forward the update to the router
+            router ! failureMessage.update
+            // let's try again, router will have updated its state
+            router ! RouteRequest(sourceNodeId, c.targetNodeId, ignoreNodes, ignoreChannels)
+          } else {
+            // this node is fishy, it gave us a bad sig!! let's filter it out
+            log.warning(s"got bad signature from node=$nodeId update=${failureMessage.update}")
+            router ! RouteRequest(sourceNodeId, c.targetNodeId, ignoreNodes + nodeId, ignoreChannels)
+          }
+          goto(WAITING_FOR_ROUTE) using WaitingForRoute(s, c, failures :+ RemoteFailure(hops, e))
+        case Some(e@ErrorPacket(nodeId, failureMessage)) =>
+          log.info(s"received an error message from nodeId=$nodeId, trying to use a different channel (failure=$failureMessage)")
+          // let's try again without the channel outgoing from nodeId
+          val faultyChannel = hops.find(_.nodeId == nodeId).map(_.lastUpdate.shortChannelId)
+          router ! RouteRequest(sourceNodeId, c.targetNodeId, ignoreNodes, ignoreChannels ++ faultyChannel.toSet)
+          goto(WAITING_FOR_ROUTE) using WaitingForRoute(s, c, failures :+ RemoteFailure(hops, e))
+      }
+
+    case Event(fail: UpdateFailMalformedHtlc, _) =>
+      log.info(s"first node in the route couldn't parse our htlc: fail=$fail")
+      // this is a corner case, that can only happen when the *first* node in the route cannot parse the onion
+      // (if this happens higher up in the route, the error would be wrapped in an UpdateFailHtlc and handled above)
+      // let's consider it a local error and treat is as such
+      self ! Status.Failure(new RuntimeException("first hop returned an UpdateFailMalformedHtlc message"))
+      stay
+
+    case Event(Status.Failure(t), WaitingForComplete(s, c, _, failures, _, ignoreNodes, ignoreChannels, hops)) =>
+      if (failures.size + 1 >= c.maxAttempts) {
+        s ! PaymentFailed(c.paymentHash, failures :+ LocalFailure(t))
+        stop(FSM.Normal)
+      } else {
+        log.info(s"received an error message from local, trying to use a different channel (failure=${t.getMessage})")
+        router ! RouteRequest(sourceNodeId, c.targetNodeId, ignoreNodes, ignoreChannels + hops.head.lastUpdate.shortChannelId)
+        goto(WAITING_FOR_ROUTE) using WaitingForRoute(s, c, failures :+ LocalFailure(t))
+      }
+
+  }
+
+  initialize()
+}
+
+object PaymentLifecycle {
+
+  def props(sourceNodeId: PublicKey, router: ActorRef, register: ActorRef) = Props(classOf[PaymentLifecycle], sourceNodeId, router, register)
+
+  def buildOnion(nodes: Seq[PublicKey], payloads: Seq[PerHopPayload], associatedData: BinaryData): Sphinx.PacketAndSecrets = {
+    require(nodes.size == payloads.size)
+    val sessionKey = randomKey
+    val payloadsbin: Seq[BinaryData] = payloads
+      .map(LightningMessageCodecs.perHopPayloadCodec.encode(_))
+      .map {
+        case Attempt.Successful(bitVector) => BinaryData(bitVector.toByteArray)
+        case Attempt.Failure(cause) => throw new RuntimeException(s"serialization error: $cause")
+      }
+    Sphinx.makePacket(sessionKey, nodes, payloadsbin, associatedData)
+  }
+
+  /**
+    *
+    * @param finalAmountMsat the final htlc amount in millisatoshis
+    * @param finalExpiry     the final htlc expiry in number of blocks
+    * @param hops            the hops as computed by the router + extra routes from payment request
+    * @return a (firstAmountMsat, firstExpiry, payloads) tuple where:
+    *         - firstAmountMsat is the amount for the first htlc in the route
+    *         - firstExpiry is the cltv expiry for the first htlc in the route
+    *         - a sequence of payloads that will be used to build the onion
+    */
+  def buildPayloads(finalAmountMsat: Long, finalExpiry: Int, hops: Seq[PaymentHop]): (Long, Int, Seq[PerHopPayload]) =
+    hops.reverse.foldLeft((finalAmountMsat, finalExpiry, PerHopPayload(0L, finalAmountMsat, finalExpiry) :: Nil)) {
+      case ((msat, expiry, payloads), hop) =>
+        (msat + hop.nextFee(msat), expiry + hop.cltvExpiryDelta, PerHopPayload(hop.shortChannelId, msat, expiry) +: payloads)
+    }
+
+  // this is defined in BOLT 11
+  val defaultMinFinalCltvExpiry = 9
+
+  def buildCommand(finalAmountMsat: Long, finalExpiry: Int, paymentHash: BinaryData, hops: Seq[Hop]): (CMD_ADD_HTLC, Seq[(BinaryData, PublicKey)]) = {
+    val (firstAmountMsat, firstExpiry, payloads) = buildPayloads(finalAmountMsat, finalExpiry, hops.drop(1))
+    val nodes = hops.map(_.nextNodeId)
+    // BOLT 2 requires that associatedData == paymentHash
+    val onion = buildOnion(nodes, payloads, paymentHash)
+    CMD_ADD_HTLC(firstAmountMsat, paymentHash, firstExpiry, Packet.write(onion.packet), upstream_opt = None, commit = true) -> onion.sharedSecrets
+  }
+
+}

eclair-core/src/main/scala/fr/acinq/eclair/payment/PaymentRequest.scala

@@ -0,0 +1,513 @@
+package fr.acinq.eclair.payment
+
+import java.math.BigInteger
+import java.nio.ByteOrder
+
+import fr.acinq.bitcoin.Bech32.Int5
+import fr.acinq.bitcoin.Crypto.{PrivateKey, PublicKey}
+import fr.acinq.bitcoin.{BinaryData, MilliSatoshi, _}
+import fr.acinq.eclair.crypto.BitStream
+import fr.acinq.eclair.crypto.BitStream.Bit
+import fr.acinq.eclair.payment.PaymentRequest.{Amount, RoutingInfoTag, Timestamp}
+
+import scala.annotation.tailrec
+import scala.util.Try
+
+/**
+  * Lightning Payment Request
+  * see https://github.com/lightningnetwork/lightning-rfc/pull/183
+  *
+  * @param prefix    currency prefix; lnbc for bitcoin, lntb for bitcoin testnet
+  * @param amount    amount to pay (empty string means no amount is specified)
+  * @param timestamp request timestamp (UNIX format)
+  * @param nodeId    id of the node emitting the payment request
+  * @param tags      payment tags; must include a single PaymentHash tag
+  * @param signature request signature that will be checked against node id
+  */
+case class PaymentRequest(prefix: String, amount: Option[MilliSatoshi], timestamp: Long, nodeId: PublicKey, tags: List[PaymentRequest.Tag], signature: BinaryData) {
+
+  amount.map(a => require(a > MilliSatoshi(0) && a <= PaymentRequest.maxAmount, s"amount is not valid"))
+  require(tags.collect { case _: PaymentRequest.PaymentHashTag => {} }.size == 1, "there must be exactly one payment hash tag")
+  require(tags.collect { case PaymentRequest.DescriptionTag(_) | PaymentRequest.DescriptionHashTag(_) => {} }.size == 1, "there must be exactly one description tag or one description hash tag")
+
+  /**
+    *
+    * @return the payment hash
+    */
+  def paymentHash = tags.collectFirst { case p: PaymentRequest.PaymentHashTag => p }.get.hash
+
+  /**
+    *
+    * @return the description of the payment, or its hash
+    */
+  def description: Either[String, BinaryData] = tags.collectFirst {
+    case PaymentRequest.DescriptionTag(d) => Left(d)
+    case PaymentRequest.DescriptionHashTag(h) => Right(h)
+  }.get
+
+  /**
+    *
+    * @return the fallback address if any. It could be a script address, pubkey address, ..
+    */
+  def fallbackAddress(): Option[String] = tags.collectFirst {
+    case PaymentRequest.FallbackAddressTag(17, hash) if prefix == "lnbc" => Base58Check.encode(Base58.Prefix.PubkeyAddress, hash)
+    case PaymentRequest.FallbackAddressTag(18, hash) if prefix == "lnbc" => Base58Check.encode(Base58.Prefix.ScriptAddress, hash)
+    case PaymentRequest.FallbackAddressTag(17, hash) if prefix == "lntb" => Base58Check.encode(Base58.Prefix.PubkeyAddressTestnet, hash)
+    case PaymentRequest.FallbackAddressTag(18, hash) if prefix == "lntb" => Base58Check.encode(Base58.Prefix.ScriptAddressTestnet, hash)
+    case PaymentRequest.FallbackAddressTag(version, hash) if prefix == "lnbc" => Bech32.encodeWitnessAddress("bc", version, hash)
+    case PaymentRequest.FallbackAddressTag(version, hash) if prefix == "lntb" => Bech32.encodeWitnessAddress("tb", version, hash)
+  }
+
+  def routingInfo(): Seq[RoutingInfoTag] = tags.collect { case t: RoutingInfoTag => t }
+
+  def expiry: Option[Long] = tags.collectFirst {
+    case PaymentRequest.ExpiryTag(seconds) => seconds
+  }
+
+  def minFinalCltvExpiry: Option[Long] = tags.collectFirst {
+    case PaymentRequest.MinFinalCltvExpiryTag(expiry) => expiry
+  }
+
+  /**
+    *
+    * @return a representation of this payment request, without its signature, as a bit stream. This is what will be signed.
+    */
+  def stream: BitStream = {
+    val stream = BitStream.empty
+    val int5s = Timestamp.encode(timestamp) ++ (tags.map(_.toInt5s).flatten)
+    val stream1 = int5s.foldLeft(stream)(PaymentRequest.write5)
+    stream1
+  }
+
+  /**
+    *
+    * @return the hash of this payment request
+    */
+  def hash: BinaryData = Crypto.sha256(s"${prefix}${Amount.encode(amount)}".getBytes("UTF-8") ++ stream.bytes)
+
+  /**
+    *
+    * @param priv private key
+    * @return a signed payment request
+    */
+  def sign(priv: PrivateKey): PaymentRequest = {
+    val (r, s) = Crypto.sign(hash, priv)
+    val (pub1, pub2) = Crypto.recoverPublicKey((r, s), hash)
+    val recid = if (nodeId == pub1) 0.toByte else 1.toByte
+    val signature = PaymentRequest.Signature.encode(r, s, recid)
+    this.copy(signature = signature)
+  }
+}
+
+object PaymentRequest {
+
+  // https://github.com/lightningnetwork/lightning-rfc/blob/master/02-peer-protocol.md#adding-an-htlc-update_add_htlc
+  val maxAmount = MilliSatoshi(4294967296L)
+
+  def apply(chainHash: BinaryData, amount: Option[MilliSatoshi], paymentHash: BinaryData, privateKey: PrivateKey,
+            description: String, fallbackAddress: Option[String] = None, expirySeconds: Option[Long] = None,
+            extraHops: Seq[Seq[ExtraHop]] = Nil, timestamp: Long = System.currentTimeMillis() / 1000L): PaymentRequest = {
+
+    val prefix = chainHash match {
+      case Block.RegtestGenesisBlock.hash => "lntb"
+      case Block.TestnetGenesisBlock.hash => "lntb"
+      case Block.LivenetGenesisBlock.hash => "lnbc"
+    }
+
+    PaymentRequest(
+      prefix = prefix,
+      amount = amount,
+      timestamp = timestamp,
+      nodeId = privateKey.publicKey,
+      tags = List(
+        Some(PaymentHashTag(paymentHash)),
+        Some(DescriptionTag(description)),
+        expirySeconds.map(ExpiryTag(_))
+      ).flatten ++ extraHops.map(RoutingInfoTag(_)),
+      signature = BinaryData.empty)
+      .sign(privateKey)
+  }
+
+  sealed trait Tag {
+    def toInt5s: Seq[Int5]
+  }
+
+  /**
+    * Payment Hash Tag
+    *
+    * @param hash payment hash
+    */
+  case class PaymentHashTag(hash: BinaryData) extends Tag {
+    override def toInt5s = {
+      val ints = Bech32.eight2five(hash)
+      Seq(Bech32.map('p'), (ints.length / 32).toByte, (ints.length % 32).toByte) ++ ints
+    }
+  }
+
+  /**
+    * Description Tag
+    *
+    * @param description a free-format string that will be included in the payment request
+    */
+  case class DescriptionTag(description: String) extends Tag {
+    override def toInt5s = {
+      val ints = Bech32.eight2five(description.getBytes("UTF-8"))
+      Seq(Bech32.map('d'), (ints.length / 32).toByte, (ints.length % 32).toByte) ++ ints
+    }
+  }
+
+  /**
+    * Hash Tag
+    *
+    * @param hash hash that will be included in the payment request, and can be checked against the hash of a
+    *             long description, an invoice, ...
+    */
+  case class DescriptionHashTag(hash: BinaryData) extends Tag {
+    override def toInt5s = {
+      val ints = Bech32.eight2five(hash)
+      Seq(Bech32.map('h'), (ints.length / 32).toByte, (ints.length % 32).toByte) ++ ints
+    }
+  }
+
+
+  /**
+    * Fallback Payment Tag that specifies a fallback payment address to be used if LN payment cannot be processed
+    *
+    * @param version address version; valid values are
+    *                - 17 (pubkey hash)
+    *                - 18 (script hash)
+    *                - 0 (segwit hash: p2wpkh (20 bytes) or p2wsh (32 bytes))
+    * @param hash    address hash
+    */
+  case class FallbackAddressTag(version: Byte, hash: BinaryData) extends Tag {
+    override def toInt5s = {
+      val ints = version +: Bech32.eight2five(hash)
+      Seq(Bech32.map('f'), (ints.length / 32).toByte, (ints.length % 32).toByte) ++ ints
+    }
+  }
+
+  object FallbackAddressTag {
+    /**
+      *
+      * @param address valid base58 or bech32 address
+      * @return a FallbackAddressTag instance
+      */
+    def apply(address: String): FallbackAddressTag = {
+      Try(fromBase58Address(address)).orElse(Try(fromBech32Address(address))).get
+    }
+
+    def fromBase58Address(address: String): FallbackAddressTag = {
+      val (prefix, hash) = Base58Check.decode(address)
+      prefix match {
+        case Base58.Prefix.PubkeyAddress => FallbackAddressTag(17, hash)
+        case Base58.Prefix.PubkeyAddressTestnet => FallbackAddressTag(17, hash)
+        case Base58.Prefix.ScriptAddress => FallbackAddressTag(18, hash)
+        case Base58.Prefix.ScriptAddressTestnet => FallbackAddressTag(18, hash)
+      }
+    }
+
+    def fromBech32Address(address: String): FallbackAddressTag = {
+      val (prefix, hash) = Bech32.decodeWitnessAddress(address)
+      FallbackAddressTag(prefix, hash)
+    }
+  }
+
+  /**
+    * Extra hop contained in RoutingInfoTag
+    *
+    * @param nodeId          node id
+    * @param shortChannelId  channel id
+    * @param fee             node fee
+    * @param cltvExpiryDelta node cltv expiry delta
+    */
+  case class ExtraHop(nodeId: PublicKey, shortChannelId: Long, fee: Long, cltvExpiryDelta: Int) extends PaymentHop {
+    def pack: Seq[Byte] = nodeId.toBin ++ Protocol.writeUInt64(shortChannelId, ByteOrder.BIG_ENDIAN) ++
+      Protocol.writeUInt64(fee, ByteOrder.BIG_ENDIAN) ++ Protocol.writeUInt16(cltvExpiryDelta, ByteOrder.BIG_ENDIAN)
+
+    // Fee is already pre-calculated for extra hops
+    def nextFee(msat: Long): Long = fee
+  }
+
+  /**
+    * Routing Info Tag
+    *
+    * @param path one or more entries containing extra routing information for a private route
+    */
+  case class RoutingInfoTag(path: Seq[ExtraHop]) extends Tag {
+    override def toInt5s = {
+      val ints = Bech32.eight2five(path.flatMap(_.pack))
+      Seq(Bech32.map('r'), (ints.length / 32).toByte, (ints.length % 32).toByte) ++ ints
+    }
+  }
+
+  object RoutingInfoTag {
+    def parse(data: Seq[Byte]) = {
+      val pubkey = data.slice(0, 33)
+      val shortChannelId = Protocol.uint64(data.slice(33, 33 + 8), ByteOrder.BIG_ENDIAN)
+      val fee = Protocol.uint64(data.slice(33 + 8, 33 + 8 + 8), ByteOrder.BIG_ENDIAN)
+      val cltv = Protocol.uint16(data.slice(33 + 8 + 8, chunkLength), ByteOrder.BIG_ENDIAN)
+      ExtraHop(PublicKey(pubkey), shortChannelId, fee, cltv)
+    }
+
+    def parseAll(data: Seq[Byte]): Seq[ExtraHop] =
+      data.grouped(chunkLength).map(parse).toList
+
+    val chunkLength: Int = 33 + 8 + 8 + 2
+  }
+
+  /**
+    * Expiry Date
+    *
+    * @param seconds expiry data for this payment request
+    */
+  case class ExpiryTag(seconds: Long) extends Tag {
+    override def toInt5s = {
+      val ints = writeUnsignedLong(seconds)
+      Bech32.map('x') +: (writeSize(ints.size) ++ ints)
+    }
+  }
+
+  /**
+    * Min final CLTV expiry
+    *
+    * @param blocks min final cltv expiry, in blocks
+    */
+  case class MinFinalCltvExpiryTag(blocks: Long) extends Tag {
+    override def toInt5s = {
+      val ints = writeUnsignedLong(blocks)
+      Bech32.map('c') +: (writeSize(ints.size) ++ ints)
+    }
+  }
+
+  object Amount {
+
+    /**
+      * @param amount
+      * @return the unit allowing for the shortest representation possible
+      */
+    def unit(amount: MilliSatoshi): Char = amount.amount * 10 match { // 1 milli-satoshis == 10 pico-bitcoin
+      case pico if pico % 1000 > 0 => 'p'
+      case pico if pico % 1000000 > 0 => 'n'
+      case pico if pico % 1000000000 > 0 => 'u'
+      case _ => 'm'
+    }
+
+    def decode(input: String): Option[MilliSatoshi] =
+      input match {
+        case "" => None
+        case a if a.last == 'p' => Some(MilliSatoshi(a.dropRight(1).toLong / 10L)) // 1 pico-bitcoin == 10 milli-satoshis
+        case a if a.last == 'n' => Some(MilliSatoshi(a.dropRight(1).toLong * 100L))
+        case a if a.last == 'u' => Some(MilliSatoshi(a.dropRight(1).toLong * 100000L))
+        case a if a.last == 'm' => Some(MilliSatoshi(a.dropRight(1).toLong * 100000000L))
+      }
+
+    def encode(amount: Option[MilliSatoshi]): String = {
+      amount match {
+        case None => ""
+        case Some(amt) if unit(amt) == 'p' => s"${amt.amount * 10L}p" // 1 pico-bitcoin == 10 milli-satoshis
+        case Some(amt) if unit(amt) == 'n' => s"${amt.amount / 100L}n"
+        case Some(amt) if unit(amt) == 'u' => s"${amt.amount / 100000L}u"
+        case Some(amt) if unit(amt) == 'm' => s"${amt.amount / 100000000L}m"
+      }
+    }
+  }
+
+  object Tag {
+    def parse(input: Seq[Byte]): Tag = {
+      val tag = input(0)
+      val len = input(1) * 32 + input(2)
+      tag match {
+        case p if p == Bech32.map('p') =>
+          val hash = Bech32.five2eight(input.drop(3).take(52))
+          PaymentHashTag(hash)
+        case d if d == Bech32.map('d') =>
+          val description = new String(Bech32.five2eight(input.drop(3).take(len)).toArray, "UTF-8")
+          DescriptionTag(description)
+        case h if h == Bech32.map('h') =>
+          val hash: BinaryData = Bech32.five2eight(input.drop(3).take(len))
+          DescriptionHashTag(hash)
+        case f if f == Bech32.map('f') =>
+          val version = input(3)
+          val prog = Bech32.five2eight(input.drop(4).take(len - 1))
+          version match {
+            case v if v >= 0 && v <= 16 =>
+              FallbackAddressTag(version, prog)
+            case 17 | 18 =>
+              FallbackAddressTag(version, prog)
+          }
+        case r if r == Bech32.map('r') =>
+          val data = Bech32.five2eight(input.drop(3).take(len))
+          val path = RoutingInfoTag.parseAll(data)
+          RoutingInfoTag(path)
+        case x if x == Bech32.map('x') =>
+          val expiry = readUnsignedLong(len, input.drop(3).take(len))
+          ExpiryTag(expiry)
+        case c if c == Bech32.map('c') =>
+          val expiry = readUnsignedLong(len, input.drop(3).take(len))
+          MinFinalCltvExpiryTag(expiry)
+      }
+    }
+  }
+
+  object Timestamp {
+    def decode(data: Seq[Int5]): Long = data.take(7).foldLeft(0L)((a, b) => a * 32 + b)
+
+    def encode(timestamp: Long, acc: Seq[Int5] = Nil): Seq[Int5] = if (acc.length == 7) acc else {
+      encode(timestamp / 32, (timestamp % 32).toByte +: acc)
+    }
+  }
+
+  object Signature {
+    /**
+      *
+      * @param signature 65-bytes signatyre: r (32 bytes) | s (32 bytes) | recid (1 bytes)
+      * @return a (r, s, recoveryId)
+      */
+    def decode(signature: BinaryData): (BigInteger, BigInteger, Byte) = {
+      require(signature.length == 65)
+      val r = new BigInteger(1, signature.take(32).toArray)
+      val s = new BigInteger(1, signature.drop(32).take(32).toArray)
+      val recid = signature.last
+      (r, s, recid)
+    }
+
+    /**
+      *
+      * @return a 65 bytes representation of (r, s, recid)
+      */
+    def encode(r: BigInteger, s: BigInteger, recid: Byte): BinaryData = {
+      Crypto.fixSize(r.toByteArray.dropWhile(_ == 0.toByte)) ++ Crypto.fixSize(s.toByteArray.dropWhile(_ == 0.toByte)) :+ recid
+    }
+  }
+
+  def toBits(value: Int5): Seq[Bit] = Seq((value & 16) != 0, (value & 8) != 0, (value & 4) != 0, (value & 2) != 0, (value & 1) != 0)
+
+  /**
+    * write a 5bits integer to a stream
+    *
+    * @param stream stream to write to
+    * @param value  a 5bits value
+    * @return an upated stream
+    */
+  def write5(stream: BitStream, value: Int5): BitStream = stream.writeBits(toBits(value))
+
+  /**
+    * read a 5bits value from a stream
+    *
+    * @param stream stream to read from
+    * @return a (stream, value) pair
+    */
+  def read5(stream: BitStream): (BitStream, Int5) = {
+    val (stream1, bits) = stream.readBits(5)
+    val value = (if (bits(0)) 1 << 4 else 0) + (if (bits(1)) 1 << 3 else 0) + (if (bits(2)) 1 << 2 else 0) + (if (bits(3)) 1 << 1 else 0) + (if (bits(4)) 1 << 0 else 0)
+    (stream1, (value & 0xff).toByte)
+  }
+
+  /**
+    * splits a bit stream into 5bits values
+    *
+    * @param stream
+    * @param acc
+    * @return a sequence of 5bits values
+    */
+  @tailrec
+  def toInt5s(stream: BitStream, acc: Seq[Int5] = Nil): Seq[Int5] = if (stream.bitCount == 0) acc else {
+    val (stream1, value) = read5(stream)
+    toInt5s(stream1, acc :+ value)
+  }
+
+  /**
+    * prepend an unsigned long value to a sequence of Int5s
+    *
+    * @param value input value
+    * @param acc   sequence of Int5 values
+    * @return an update sequence of Int5s
+    */
+  @tailrec
+  def writeUnsignedLong(value: Long, acc: Seq[Int5] = Nil): Seq[Int5] = {
+    require(value >= 0)
+    if (value == 0) acc
+    else writeUnsignedLong(value / 32, (value % 32).toByte +: acc)
+  }
+
+  /**
+    * convert a tag data size to a sequence of Int5s. It * must * fit on a sequence
+    * of 2 Int5 values
+    *
+    * @param size data size
+    * @return size as a sequence of exactly 2 Int5 values
+    */
+  def writeSize(size: Long): Seq[Int5] = {
+    val output = writeUnsignedLong(size)
+    // make sure that size is encoded on 2 int5 values
+    output.length match {
+      case 0 => Seq(0.toByte, 0.toByte)
+      case 1 => 0.toByte +: output
+      case 2 => output
+      case n => throw new IllegalArgumentException("tag data length field must be encoded on 2 5-bits integers")
+    }
+  }
+
+  /**
+    * reads an unsigned long value from a sequence of Int5s
+    *
+    * @param length length of the sequence
+    * @param ints   sequence of Int5s
+    * @return an unsigned long value
+    */
+  def readUnsignedLong(length: Int, ints: Seq[Int5]): Long = ints.take(length).foldLeft(0L) { case (acc, i) => acc * 32 + i }
+
+  /**
+    *
+    * @param input bech32-encoded payment request
+    * @return a payment request
+    */
+  def read(input: String): PaymentRequest = {
+    val (hrp, data) = Bech32.decode(input)
+    val stream = data.foldLeft(BitStream.empty)(write5)
+    require(stream.bitCount >= 65 * 8, "data is too short to contain a 65 bytes signature")
+    val (stream1, sig) = stream.popBytes(65)
+
+    val data0 = toInt5s(stream1)
+    val timestamp = Timestamp.decode(data0)
+    val data1 = data0.drop(7)
+
+    @tailrec
+    def loop(data: Seq[Int5], tags: Seq[Seq[Int5]] = Nil): Seq[Seq[Int5]] = if (data.isEmpty) tags else {
+      // 104 is the size of a signature
+      val len = 1 + 2 + 32 * data(1) + data(2)
+      loop(data.drop(len), tags :+ data.take(len))
+    }
+
+    val rawtags = loop(data1)
+    val tags = rawtags.map(Tag.parse)
+    val signature = sig.reverse
+    val r = new BigInteger(1, signature.take(32).toArray)
+    val s = new BigInteger(1, signature.drop(32).take(32).toArray)
+    val recid = signature.last
+    val message: BinaryData = hrp.getBytes ++ stream1.bytes
+    val (pub1, pub2) = Crypto.recoverPublicKey((r, s), Crypto.sha256(message))
+    val pub = if (recid % 2 != 0) pub2 else pub1
+    val prefix = hrp.take(4)
+    val amount_opt = Amount.decode(hrp.drop(4))
+    val pr = PaymentRequest(prefix, amount_opt, timestamp, pub, tags.toList, signature)
+    val validSig = Crypto.verifySignature(Crypto.sha256(message), (r, s), pub)
+    require(validSig, "invalid signature")
+    pr
+  }
+
+  /**
+    *
+    * @param pr payment request
+    * @return a bech32-encoded payment request
+    */
+  def write(pr: PaymentRequest): String = {
+    // currency unit is Satoshi, but we compute amounts in Millisatoshis
+    val hramount = Amount.encode(pr.amount)
+    val hrp = s"${pr.prefix}$hramount"
+    val stream = pr.stream.writeBytes(pr.signature)
+    val checksum = Bech32.checksum(hrp, toInt5s(stream))
+    hrp + "1" + new String((toInt5s(stream) ++ checksum).map(i => Bech32.pam(i)).toArray)
+  }
+}
+

eclair-core/src/main/scala/fr/acinq/eclair/payment/Relayer.scala

@@ -0,0 +1,153 @@
+package fr.acinq.eclair.payment
+
+import akka.actor.{Actor, ActorLogging, ActorRef, Props, Status}
+import fr.acinq.bitcoin.{BinaryData, Crypto, MilliSatoshi}
+import fr.acinq.eclair.channel._
+import fr.acinq.eclair.crypto.Sphinx
+import fr.acinq.eclair.router.Announcements
+import fr.acinq.eclair.wire._
+import fr.acinq.eclair.{Globals, NodeParams}
+import scodec.bits.BitVector
+import scodec.{Attempt, DecodeResult}
+
+import scala.util.{Failure, Success, Try}
+
+// @formatter:off
+
+sealed trait Origin
+case class Local(sender: Option[ActorRef]) extends Origin // we don't persist reference to local actors
+case class Relayed(originChannelId: BinaryData, originHtlcId: Long, amountMsatIn: Long, amountMsatOut: Long) extends Origin
+
+case class ForwardAdd(add: UpdateAddHtlc)
+case class ForwardFulfill(fulfill: UpdateFulfillHtlc, to: Origin)
+case class ForwardLocalFail(error: Throwable, to: Origin) // happens when the failure happened in a local channel (and not in some downstream channel)
+case class ForwardFail(fail: UpdateFailHtlc, to: Origin)
+case class ForwardFailMalformed(fail: UpdateFailMalformedHtlc, to: Origin)
+
+case class AckFulfillCmd(channelId: BinaryData, htlcId: Long)
+
+// @formatter:on
+
+
+/**
+  * Created by PM on 01/02/2017.
+  */
+class Relayer(nodeParams: NodeParams, register: ActorRef, paymentHandler: ActorRef) extends Actor with ActorLogging {
+
+  import nodeParams.preimagesDb
+
+  context.system.eventStream.subscribe(self, classOf[ChannelStateChanged])
+
+  override def receive: Receive = main(Map())
+
+  def main(channelUpdates: Map[Long, ChannelUpdate]): Receive = {
+
+    case ChannelStateChanged(channel, _, _, _, NORMAL | SHUTDOWN | CLOSING, d: HasCommitments) =>
+      import d.channelId
+      preimagesDb.listPreimages(channelId) match {
+        case Nil => {}
+        case preimages =>
+          log.info(s"re-sending ${preimages.size} unacked fulfills to channel $channelId")
+          preimages.map(p => CMD_FULFILL_HTLC(p._2, p._3, commit = false)).foreach(channel ! _)
+          // better to sign once instead of after each fulfill
+          channel ! CMD_SIGN
+      }
+
+    case channelUpdate: ChannelUpdate =>
+      log.info(s"updating relay parameters with channelUpdate=$channelUpdate")
+      context become main(channelUpdates + (channelUpdate.shortChannelId -> channelUpdate))
+
+    case ForwardAdd(add) =>
+      Try(Sphinx.parsePacket(nodeParams.privateKey, add.paymentHash, add.onionRoutingPacket))
+        .map {
+          case Sphinx.ParsedPacket(payload, nextPacket, sharedSecret) => (LightningMessageCodecs.perHopPayloadCodec.decode(BitVector(payload.data)), nextPacket, sharedSecret)
+        } match {
+        case Success((Attempt.Successful(DecodeResult(perHopPayload, _)), nextPacket, _)) if nextPacket.isLastPacket =>
+          log.info(s"looks like we are the final recipient of htlc #${add.id}")
+          perHopPayload match {
+            case PerHopPayload(_, finalAmountToForward, _) if finalAmountToForward > add.amountMsat =>
+              sender ! CMD_FAIL_HTLC(add.id, Right(FinalIncorrectHtlcAmount(add.amountMsat)), commit = true)
+            case PerHopPayload(_, _, finalOutgoingCltvValue) if finalOutgoingCltvValue != add.expiry =>
+              sender ! CMD_FAIL_HTLC(add.id, Right(FinalIncorrectCltvExpiry(add.expiry)), commit = true)
+            case _ if add.expiry < Globals.blockCount.get() + 3 => // TODO: check hardcoded value
+              sender ! CMD_FAIL_HTLC(add.id, Right(FinalExpiryTooSoon), commit = true)
+            case _ =>
+              paymentHandler forward add
+          }
+        case Success((Attempt.Successful(DecodeResult(perHopPayload, _)), nextPacket, _)) =>
+          val channelUpdate_opt = channelUpdates.get(perHopPayload.channel_id)
+          channelUpdate_opt match {
+            case None =>
+              // TODO: clarify what we're supposed to do in the specs
+              sender ! CMD_FAIL_HTLC(add.id, Right(TemporaryNodeFailure), commit = true)
+            case Some(channelUpdate) if !Announcements.isEnabled(channelUpdate.flags) =>
+              sender ! CMD_FAIL_HTLC(add.id, Right(ChannelDisabled(channelUpdate.flags, channelUpdate)), commit = true)
+            case Some(channelUpdate) if add.amountMsat < channelUpdate.htlcMinimumMsat =>
+              sender ! CMD_FAIL_HTLC(add.id, Right(AmountBelowMinimum(add.amountMsat, channelUpdate)), commit = true)
+            case Some(channelUpdate) if add.expiry != perHopPayload.outgoingCltvValue + channelUpdate.cltvExpiryDelta =>
+              sender ! CMD_FAIL_HTLC(add.id, Right(IncorrectCltvExpiry(add.expiry, channelUpdate)), commit = true)
+            case Some(channelUpdate) if add.expiry < Globals.blockCount.get() + 3 => // TODO: hardcoded value
+              sender ! CMD_FAIL_HTLC(add.id, Right(ExpiryTooSoon(channelUpdate)), commit = true)
+            case _ =>
+              log.info(s"forwarding htlc #${add.id} to shortChannelId=${perHopPayload.channel_id}")
+              register forward Register.ForwardShortId(perHopPayload.channel_id, CMD_ADD_HTLC(perHopPayload.amtToForward, add.paymentHash, perHopPayload.outgoingCltvValue, nextPacket.serialize, upstream_opt = Some(add), commit = true))
+          }
+        case Success((Attempt.Failure(cause), _, _)) =>
+          log.error(s"couldn't parse payload: $cause")
+          sender ! CMD_FAIL_HTLC(add.id, Right(PermanentNodeFailure), commit = true)
+        case Failure(t) =>
+          log.error(t, "couldn't parse onion: ")
+          // we cannot even parse the onion packet
+          sender ! CMD_FAIL_MALFORMED_HTLC(add.id, Crypto.sha256(add.onionRoutingPacket), failureCode = FailureMessageCodecs.BADONION, commit = true)
+      }
+
+    case Register.ForwardShortIdFailure(Register.ForwardShortId(shortChannelId, CMD_ADD_HTLC(_, _, _, _, Some(add), _))) =>
+      log.warning(s"couldn't resolve downstream channel $shortChannelId, failing htlc #${add.id}")
+      register ! Register.Forward(add.channelId, CMD_FAIL_HTLC(add.id, Right(UnknownNextPeer), commit = true))
+
+    case ForwardFulfill(fulfill, Local(Some(sender))) =>
+      sender ! fulfill
+
+    case ForwardFulfill(fulfill, Relayed(originChannelId, originHtlcId, amountMsatIn, amountMsatOut)) =>
+      val cmd = CMD_FULFILL_HTLC(originHtlcId, fulfill.paymentPreimage, commit = true)
+      register ! Register.Forward(originChannelId, cmd)
+      context.system.eventStream.publish(PaymentRelayed(MilliSatoshi(amountMsatIn), MilliSatoshi(amountMsatOut), Crypto.sha256(fulfill.paymentPreimage)))
+      // we also store the preimage in a db (note that this happens *after* forwarding the fulfill to the channel, so we don't add latency)
+      preimagesDb.addPreimage(originChannelId, originHtlcId, fulfill.paymentPreimage)
+
+    case AckFulfillCmd(channelId, htlcId) =>
+      log.debug(s"fulfill acked for channelId=$channelId htlcId=$htlcId")
+      preimagesDb.removePreimage(channelId, htlcId)
+
+    case ForwardLocalFail(error, Local(Some(sender))) =>
+      sender ! Status.Failure(error)
+
+    case ForwardLocalFail(error, Relayed(originChannelId, originHtlcId, _, _)) =>
+      // TODO: clarify what we're supposed to do in the specs depending on the error
+      val failure = error match {
+        case HtlcTimedout(_) => PermanentChannelFailure
+        case _ => TemporaryNodeFailure
+      }
+      val cmd = CMD_FAIL_HTLC(originHtlcId, Right(failure), commit = true)
+      register ! Register.Forward(originChannelId, cmd)
+
+    case ForwardFail(fail, Local(Some(sender))) =>
+      sender ! fail
+
+    case ForwardFail(fail, Relayed(originChannelId, originHtlcId, _, _)) =>
+      val cmd = CMD_FAIL_HTLC(originHtlcId, Left(fail.reason), commit = true)
+      register ! Register.Forward(originChannelId, cmd)
+
+    case ForwardFailMalformed(fail, Local(Some(sender))) =>
+      sender ! fail
+
+    case ForwardFailMalformed(fail, Relayed(originChannelId, originHtlcId, _, _)) =>
+      val cmd = CMD_FAIL_MALFORMED_HTLC(originHtlcId, fail.onionHash, fail.failureCode, commit = true)
+      register ! Register.Forward(originChannelId, cmd)
+  }
+
+}
+
+object Relayer {
+  def props(nodeParams: NodeParams, register: ActorRef, paymentHandler: ActorRef) = Props(classOf[Relayer], nodeParams, register, paymentHandler)
+}

eclair-core/src/main/scala/fr/acinq/eclair/router/Announcements.scala

@@ -0,0 +1,142 @@
+package fr.acinq.eclair.router
+
+import java.net.InetSocketAddress
+
+import fr.acinq.bitcoin.Crypto.{PrivateKey, PublicKey, sha256, verifySignature}
+import fr.acinq.bitcoin.{BinaryData, Crypto, LexicographicalOrdering}
+import fr.acinq.eclair.serializationResult
+import fr.acinq.eclair.wire.{ChannelAnnouncement, ChannelUpdate, LightningMessageCodecs, NodeAnnouncement}
+import scodec.bits.BitVector
+import shapeless.HNil
+
+import scala.compat.Platform
+
+
+/**
+  * Created by PM on 03/02/2017.
+  */
+object Announcements {
+
+  def channelAnnouncementWitnessEncode(chainHash: BinaryData, shortChannelId: Long, nodeId1: PublicKey, nodeId2: PublicKey, bitcoinKey1: PublicKey, bitcoinKey2: PublicKey, features: BinaryData): BinaryData =
+    sha256(sha256(serializationResult(LightningMessageCodecs.channelAnnouncementWitnessCodec.encode(features :: chainHash :: shortChannelId :: nodeId1 :: nodeId2 :: bitcoinKey1 :: bitcoinKey2 :: HNil))))
+
+  def nodeAnnouncementWitnessEncode(timestamp: Long, nodeId: PublicKey, rgbColor: (Byte, Byte, Byte), alias: String, features: BinaryData, addresses: List[InetSocketAddress]): BinaryData =
+    sha256(sha256(serializationResult(LightningMessageCodecs.nodeAnnouncementWitnessCodec.encode(features :: timestamp :: nodeId :: rgbColor :: alias :: addresses :: HNil))))
+
+  def channelUpdateWitnessEncode(chainHash: BinaryData, shortChannelId: Long, timestamp: Long, flags: BinaryData, cltvExpiryDelta: Int, htlcMinimumMsat: Long, feeBaseMsat: Long, feeProportionalMillionths: Long): BinaryData =
+    sha256(sha256(serializationResult(LightningMessageCodecs.channelUpdateWitnessCodec.encode(chainHash :: shortChannelId :: timestamp :: flags :: cltvExpiryDelta :: htlcMinimumMsat :: feeBaseMsat :: feeProportionalMillionths :: HNil))))
+
+  def signChannelAnnouncement(chainHash: BinaryData, shortChannelId: Long, localNodeSecret: PrivateKey, remoteNodeId: PublicKey, localFundingPrivKey: PrivateKey, remoteFundingKey: PublicKey, features: BinaryData): (BinaryData, BinaryData) = {
+    val witness = if (isNode1(localNodeSecret.publicKey.toBin, remoteNodeId.toBin)) {
+      channelAnnouncementWitnessEncode(chainHash, shortChannelId, localNodeSecret.publicKey, remoteNodeId, localFundingPrivKey.publicKey, remoteFundingKey, features)
+    } else {
+      channelAnnouncementWitnessEncode(chainHash, shortChannelId, remoteNodeId, localNodeSecret.publicKey, remoteFundingKey, localFundingPrivKey.publicKey, features)
+    }
+    val nodeSig = Crypto.encodeSignature(Crypto.sign(witness, localNodeSecret)) :+ 1.toByte
+    val bitcoinSig = Crypto.encodeSignature(Crypto.sign(witness, localFundingPrivKey)) :+ 1.toByte
+    (nodeSig, bitcoinSig)
+  }
+
+  def makeChannelAnnouncement(chainHash: BinaryData, shortChannelId: Long, localNodeId: PublicKey, remoteNodeId: PublicKey, localFundingKey: PublicKey, remoteFundingKey: PublicKey, localNodeSignature: BinaryData, remoteNodeSignature: BinaryData, localBitcoinSignature: BinaryData, remoteBitcoinSignature: BinaryData): ChannelAnnouncement = {
+    val (nodeId1, nodeId2, bitcoinKey1, bitcoinKey2, nodeSignature1, nodeSignature2, bitcoinSignature1, bitcoinSignature2) =
+      if (isNode1(localNodeId.toBin, remoteNodeId.toBin)) {
+        (localNodeId, remoteNodeId, localFundingKey, remoteFundingKey, localNodeSignature, remoteNodeSignature, localBitcoinSignature, remoteBitcoinSignature)
+      } else {
+        (remoteNodeId, localNodeId, remoteFundingKey, localFundingKey, remoteNodeSignature, localNodeSignature, remoteBitcoinSignature, localBitcoinSignature)
+      }
+    ChannelAnnouncement(
+      nodeSignature1 = nodeSignature1,
+      nodeSignature2 = nodeSignature2,
+      bitcoinSignature1 = bitcoinSignature1,
+      bitcoinSignature2 = bitcoinSignature2,
+      shortChannelId = shortChannelId,
+      nodeId1 = nodeId1,
+      nodeId2 = nodeId2,
+      bitcoinKey1 = bitcoinKey1,
+      bitcoinKey2 = bitcoinKey2,
+      features = BinaryData(""),
+      chainHash = chainHash
+    )
+  }
+
+  def makeNodeAnnouncement(nodeSecret: PrivateKey, alias: String, color: (Byte, Byte, Byte), addresses: List[InetSocketAddress], timestamp: Long = Platform.currentTime / 1000): NodeAnnouncement = {
+    require(alias.size <= 32)
+    val witness = nodeAnnouncementWitnessEncode(timestamp, nodeSecret.publicKey, color, alias, "", addresses)
+    val sig = Crypto.encodeSignature(Crypto.sign(witness, nodeSecret)) :+ 1.toByte
+    NodeAnnouncement(
+      signature = sig,
+      timestamp = timestamp,
+      nodeId = nodeSecret.publicKey,
+      rgbColor = color,
+      alias = alias,
+      features = "",
+      addresses = addresses
+    )
+  }
+
+  /**
+    * BOLT 7:
+    * The creating node MUST set node-id-1 and node-id-2 to the public keys of the
+    * two nodes who are operating the channel, such that node-id-1 is the numerically-lesser
+    * of the two DER encoded keys sorted in ascending numerical order,
+    *
+    * @return true if localNodeId is node1
+    */
+  def isNode1(localNodeId: BinaryData, remoteNodeId: BinaryData) = LexicographicalOrdering.isLessThan(localNodeId, remoteNodeId)
+
+  /**
+    * BOLT 7:
+    * The creating node [...] MUST set the direction bit of flags to 0 if
+    * the creating node is node-id-1 in that message, otherwise 1.
+    *
+    * @return true if the node who sent these flags is node1
+    */
+  def isNode1(flags: BinaryData) = !BitVector(flags.data).reverse.get(0)
+
+  /**
+    * A node MAY create and send a channel_update with the disable bit set to
+    * signal the temporary unavailability of a channel
+    *
+    * @return
+    */
+  def isEnabled(flags: BinaryData) = !BitVector(flags.data).reverse.get(1)
+
+  def makeFlags(isNode1: Boolean, enable: Boolean): BinaryData = BitVector.bits(!enable :: !isNode1 :: Nil).padLeft(16).toByteArray
+
+  def makeChannelUpdate(chainHash: BinaryData, nodeSecret: PrivateKey, remoteNodeId: PublicKey, shortChannelId: Long, cltvExpiryDelta: Int, htlcMinimumMsat: Long, feeBaseMsat: Long, feeProportionalMillionths: Long, enable: Boolean = true, timestamp: Long = Platform.currentTime / 1000): ChannelUpdate = {
+    val flags = makeFlags(isNode1 = isNode1(nodeSecret.publicKey.toBin, remoteNodeId.toBin), enable = enable)
+    require(flags.size == 2, "flags must be a 2-bytes field")
+    val witness = channelUpdateWitnessEncode(chainHash, shortChannelId, timestamp, flags, cltvExpiryDelta, htlcMinimumMsat, feeBaseMsat, feeProportionalMillionths)
+    val sig = Crypto.encodeSignature(Crypto.sign(witness, nodeSecret)) :+ 1.toByte
+    ChannelUpdate(
+      signature = sig,
+      chainHash = chainHash,
+      shortChannelId = shortChannelId,
+      timestamp = timestamp,
+      flags = flags,
+      cltvExpiryDelta = cltvExpiryDelta,
+      htlcMinimumMsat = htlcMinimumMsat,
+      feeBaseMsat = feeBaseMsat,
+      feeProportionalMillionths = feeProportionalMillionths
+    )
+  }
+
+  def checkSigs(ann: ChannelAnnouncement): Boolean = {
+    val witness = channelAnnouncementWitnessEncode(ann.chainHash, ann.shortChannelId, ann.nodeId1, ann.nodeId2, ann.bitcoinKey1, ann.bitcoinKey2, ann.features)
+    verifySignature(witness, ann.nodeSignature1, ann.nodeId1) &&
+      verifySignature(witness, ann.nodeSignature2, ann.nodeId2) &&
+      verifySignature(witness, ann.bitcoinSignature1, ann.bitcoinKey1) &&
+      verifySignature(witness, ann.bitcoinSignature2, ann.bitcoinKey2)
+  }
+
+  def checkSig(ann: NodeAnnouncement): Boolean = {
+    val witness = nodeAnnouncementWitnessEncode(ann.timestamp, ann.nodeId, ann.rgbColor, ann.alias, ann.features, ann.addresses)
+    verifySignature(witness, ann.signature, ann.nodeId)
+  }
+
+  def checkSig(ann: ChannelUpdate, nodeId: PublicKey): Boolean = {
+    val witness = channelUpdateWitnessEncode(ann.chainHash, ann.shortChannelId, ann.timestamp, ann.flags, ann.cltvExpiryDelta, ann.htlcMinimumMsat, ann.feeBaseMsat, ann.feeProportionalMillionths)
+    verifySignature(witness, ann.signature, nodeId)
+  }
+
+}

eclair-core/src/main/scala/fr/acinq/eclair/router/NetworkEvents.scala

@@ -1,7 +1,8 @@
 package fr.acinq.eclair.router
 
-import fr.acinq.bitcoin.{BinaryData, Satoshi}
-import fr.acinq.eclair.wire.{ChannelAnnouncement, NodeAnnouncement}
+import fr.acinq.bitcoin.Crypto.PublicKey
+import fr.acinq.bitcoin.Satoshi
+import fr.acinq.eclair.wire.{ChannelAnnouncement, ChannelUpdate, NodeAnnouncement}
 
 /**
   * Created by PM on 02/02/2017.
@@ -12,8 +13,10 @@ case class NodeDiscovered(ann: NodeAnnouncement) extends NetworkEvent
 
 case class NodeUpdated(ann: NodeAnnouncement) extends NetworkEvent
 
-case class NodeLost(nodeId: BinaryData) extends NetworkEvent
+case class NodeLost(nodeId: PublicKey) extends NetworkEvent
 
 case class ChannelDiscovered(ann: ChannelAnnouncement, capacity: Satoshi) extends NetworkEvent
 
 case class ChannelLost(channelId: Long) extends NetworkEvent
+
+case class ChannelUpdateReceived(ann: ChannelUpdate) extends NetworkEvent

eclair-core/src/main/scala/fr/acinq/eclair/router/Router.scala

@@ -0,0 +1,443 @@
+package fr.acinq.eclair.router
+
+import java.io.StringWriter
+
+import akka.actor.{ActorRef, FSM, Props}
+import akka.pattern.pipe
+import fr.acinq.bitcoin.BinaryData
+import fr.acinq.bitcoin.Crypto.PublicKey
+import fr.acinq.bitcoin.Script.{pay2wsh, write}
+import fr.acinq.eclair._
+import fr.acinq.eclair.blockchain._
+import fr.acinq.eclair.channel._
+import fr.acinq.eclair.io.Peer
+import fr.acinq.eclair.payment.Hop
+import fr.acinq.eclair.transactions.Scripts
+import fr.acinq.eclair.wire._
+import org.jgrapht.alg.shortestpath.DijkstraShortestPath
+import org.jgrapht.ext._
+import org.jgrapht.graph.{DefaultDirectedGraph, DefaultEdge, SimpleGraph}
+
+import scala.collection.JavaConversions._
+import scala.compat.Platform
+import scala.concurrent.duration._
+import scala.concurrent.{ExecutionContext, Future}
+import scala.util.{Random, Success, Try}
+
+// @formatter:off
+
+case class ChannelDesc(id: Long, a: PublicKey, b: PublicKey)
+case class RouteRequest(source: PublicKey, target: PublicKey, ignoreNodes: Set[PublicKey] = Set.empty, ignoreChannels: Set[Long] = Set.empty)
+case class RouteResponse(hops: Seq[Hop], ignoreNodes: Set[PublicKey], ignoreChannels: Set[Long]) { require(hops.size > 0, "route cannot be empty") }
+case class ExcludeChannel(desc: ChannelDesc) // this is used when we get a TemporaryChannelFailure, to give time for the channel to recover (note that exclusions are directed)
+case class LiftChannelExclusion(desc: ChannelDesc)
+case class SendRoutingState(to: ActorRef)
+case class Rebroadcast(ann: Seq[RoutingMessage], origins: Map[RoutingMessage, ActorRef])
+
+case class Data(nodes: Map[PublicKey, NodeAnnouncement],
+                  channels: Map[Long, ChannelAnnouncement],
+                  updates: Map[ChannelDesc, ChannelUpdate],
+                  rebroadcast: Seq[RoutingMessage],
+                  stash: Seq[RoutingMessage],
+                  awaiting: Seq[ChannelAnnouncement],
+                  origins: Map[RoutingMessage, ActorRef],
+                  localChannels: Map[BinaryData, PublicKey],
+                  excludedChannels: Set[ChannelDesc]) // those channels are temporarily excluded from route calculation, because their node returned a TemporaryChannelFailure
+
+sealed trait State
+case object NORMAL extends State
+case object WAITING_FOR_VALIDATION extends State
+
+case object TickBroadcast
+case object TickValidate
+case object TickPruneStaleChannels
+
+// @formatter:on
+
+/**
+  * Created by PM on 24/05/2016.
+  */
+
+class Router(nodeParams: NodeParams, watcher: ActorRef) extends FSM[State, Data] {
+
+  import Router._
+
+  import ExecutionContext.Implicits.global
+
+  context.system.eventStream.subscribe(self, classOf[ChannelStateChanged])
+
+  setTimer(TickBroadcast.toString, TickBroadcast, nodeParams.routerBroadcastInterval, repeat = true)
+  setTimer(TickValidate.toString, TickValidate, nodeParams.routerValidateInterval, repeat = true)
+  setTimer(TickPruneStaleChannels.toString, TickPruneStaleChannels, 1 day, repeat = true)
+
+  val db = nodeParams.networkDb
+
+  // Note: We go through the whole validation process instead of directly loading into memory, because the channels
+  // could have been closed while we were shutdown, and if someone connects to us right after startup we don't want to
+  // advertise invalid channels. We could optimize this (at least not fetch txes from the blockchain, and not check sigs)
+  log.info(s"loading network announcements from db...")
+  db.listChannels().map(self ! _)
+  db.listNodes().map(self ! _)
+  db.listChannelUpdates().map(self ! _)
+  if (db.listChannels().size > 0) {
+    val nodeAnn = Announcements.makeNodeAnnouncement(nodeParams.privateKey, nodeParams.alias, nodeParams.color, nodeParams.publicAddresses, Platform.currentTime / 1000)
+    self ! nodeAnn
+  }
+  log.info(s"starting state machine")
+
+  startWith(NORMAL, Data(Map.empty, Map.empty, Map.empty, Nil, Nil, Nil, Map.empty, Map.empty, Set.empty))
+
+  when(NORMAL) {
+    case Event(TickValidate, d) =>
+      require(d.awaiting.size == 0)
+      var i = 0
+      // we extract a batch of channel announcements from the stash
+      val (channelAnns: Seq[ChannelAnnouncement]@unchecked, otherAnns) = d.stash.partition {
+        case _: ChannelAnnouncement =>
+          i = i + 1
+          i <= MAX_PARALLEL_JSONRPC_REQUESTS
+        case _ => false
+      }
+      if (channelAnns.size > 0) {
+        log.info(s"validating a batch of ${channelAnns.size} channels")
+        watcher ! ParallelGetRequest(channelAnns)
+        goto(WAITING_FOR_VALIDATION) using d.copy(stash = otherAnns, awaiting = channelAnns)
+      } else stay
+  }
+
+  when(WAITING_FOR_VALIDATION) {
+    case Event(ParallelGetResponse(results), d) =>
+      val validated = results.map {
+        case IndividualResult(c, Some(tx), true) =>
+          // TODO: blacklisting
+          val (_, _, outputIndex) = fromShortId(c.shortChannelId)
+          // let's check that the output is indeed a P2WSH multisig 2-of-2 of nodeid1 and nodeid2)
+          val fundingOutputScript = write(pay2wsh(Scripts.multiSig2of2(PublicKey(c.bitcoinKey1), PublicKey(c.bitcoinKey2))))
+          if (tx.txOut.size < outputIndex + 1) {
+            log.error(s"invalid script for shortChannelId=${c.shortChannelId}: txid=${tx.txid} does not have outputIndex=$outputIndex ann=$c")
+            None
+          } else if (fundingOutputScript != tx.txOut(outputIndex).publicKeyScript) {
+            log.error(s"invalid script for shortChannelId=${c.shortChannelId} txid=${tx.txid} ann=$c")
+            None
+          } else {
+            watcher ! WatchSpentBasic(self, tx, outputIndex, BITCOIN_FUNDING_EXTERNAL_CHANNEL_SPENT(c.shortChannelId))
+            // TODO: check feature bit set
+            log.debug(s"added channel channelId=${c.shortChannelId}")
+            context.system.eventStream.publish(ChannelDiscovered(c, tx.txOut(outputIndex).amount))
+            db.addChannel(c)
+            Some(c)
+          }
+        case IndividualResult(c, Some(tx), false) =>
+          // TODO: vulnerability if they flood us with spent funding tx?
+          log.warning(s"ignoring shortChannelId=${c.shortChannelId} tx=${tx.txid} (funding tx not found in utxo)")
+          // there may be a record if we have just restarted
+          db.removeChannel(c.shortChannelId)
+          None
+        case IndividualResult(c, None, _) =>
+          // TODO: blacklist?
+          log.warning(s"could not retrieve tx for shortChannelId=${c.shortChannelId}")
+          None
+      }.flatten
+      // we reprocess node and channel-update announcements that may have been validated
+      val (resend, stash1) = d.stash.partition {
+        case n: NodeAnnouncement => results.exists(r => isRelatedTo(r.c, n.nodeId))
+        case u: ChannelUpdate => results.exists(r => r.c.shortChannelId == u.shortChannelId)
+        case _ => false
+      }
+      resend.foreach(self ! _)
+      goto(NORMAL) using d.copy(channels = d.channels ++ validated.map(c => (c.shortChannelId -> c)), rebroadcast = d.rebroadcast ++ validated, stash = stash1, awaiting = Nil)
+  }
+
+  whenUnhandled {
+    case Event(ChannelStateChanged(_, _, _, _, channel.NORMAL, d: DATA_NORMAL), d1) =>
+      stay using d1.copy(localChannels = d1.localChannels + (d.commitments.channelId -> d.commitments.remoteParams.nodeId))
+
+    case Event(ChannelStateChanged(_, _, _, channel.NORMAL, _, d: DATA_NEGOTIATING), d1) =>
+      stay using d1.copy(localChannels = d1.localChannels - d.commitments.channelId)
+
+    case Event(_: ChannelStateChanged, _) => stay
+
+    case Event(SendRoutingState(remote), Data(nodes, channels, updates, _, _, _, _, _, _)) =>
+      log.debug(s"info sending all announcements to $remote: channels=${channels.size} nodes=${nodes.size} updates=${updates.size}")
+      // we group and add delays to leave room for channel messages
+      context.actorOf(ThrottleForwarder.props(remote, channels.values ++ nodes.values ++ updates.values, 100, 100 millis))
+      stay
+
+    case Event(c: ChannelAnnouncement, d) =>
+      log.debug(s"received channel announcement for shortChannelId=${c.shortChannelId} nodeId1=${c.nodeId1} nodeId2=${c.nodeId2}")
+      if (d.channels.containsKey(c.shortChannelId) || d.awaiting.exists(_.shortChannelId == c.shortChannelId) || d.stash.contains(c)) {
+        log.debug(s"ignoring $c (duplicate)")
+        stay
+      } else if (!Announcements.checkSigs(c)) {
+        log.error(s"bad signature for announcement $c")
+        sender ! Error(Peer.CHANNELID_ZERO, "bad announcement sig!!!".getBytes())
+        stay
+      } else {
+        log.debug(s"stashing $c")
+        stay using d.copy(stash = d.stash :+ c, origins = d.origins + (c -> sender))
+      }
+
+    case Event(n: NodeAnnouncement, d: Data) =>
+      if (d.nodes.containsKey(n.nodeId) && d.nodes(n.nodeId).timestamp >= n.timestamp) {
+        log.debug(s"ignoring announcement $n (old timestamp or duplicate)")
+        stay
+      } else if (!Announcements.checkSig(n)) {
+        log.error(s"bad signature for announcement $n")
+        sender ! Error(Peer.CHANNELID_ZERO, "bad announcement sig!!!".getBytes())
+        stay
+      } else if (d.nodes.containsKey(n.nodeId)) {
+        log.debug(s"updated node nodeId=${n.nodeId}")
+        context.system.eventStream.publish(NodeUpdated(n))
+        db.updateNode(n)
+        stay using d.copy(nodes = d.nodes + (n.nodeId -> n), rebroadcast = d.rebroadcast :+ n, origins = d.origins + (n -> sender))
+      } else if (d.channels.values.exists(c => isRelatedTo(c, n.nodeId))) {
+        log.debug(s"added node nodeId=${n.nodeId}")
+        context.system.eventStream.publish(NodeDiscovered(n))
+        db.addNode(n)
+        stay using d.copy(nodes = d.nodes + (n.nodeId -> n), rebroadcast = d.rebroadcast :+ n, origins = d.origins + (n -> sender))
+      } else if (d.awaiting.exists(c => isRelatedTo(c, n.nodeId)) || d.stash.collectFirst { case c: ChannelAnnouncement if isRelatedTo(c, n.nodeId) => c }.isDefined) {
+        log.debug(s"stashing $n")
+        stay using d.copy(stash = d.stash :+ n, origins = d.origins + (n -> sender))
+      } else {
+        log.warning(s"ignoring $n (no related channel found)")
+        // there may be a record if we have just restarted
+        db.removeNode(n.nodeId)
+        stay
+      }
+
+    case Event(u: ChannelUpdate, d: Data) =>
+      if (d.channels.contains(u.shortChannelId)) {
+        val c = d.channels(u.shortChannelId)
+        val desc = getDesc(u, c)
+        if (d.updates.contains(desc) && d.updates(desc).timestamp >= u.timestamp) {
+          log.debug(s"ignoring $u (old timestamp or duplicate)")
+          stay
+        } else if (!Announcements.checkSig(u, getDesc(u, d.channels(u.shortChannelId)).a)) {
+          // TODO: (dirty) this will make the origin channel close the connection
+          log.error(s"bad signature for announcement $u")
+          sender ! Error(Peer.CHANNELID_ZERO, "bad announcement sig!!!".getBytes())
+          stay
+        } else if (d.updates.contains(desc)) {
+          log.debug(s"updated $u")
+          context.system.eventStream.publish(ChannelUpdateReceived(u))
+          db.updateChannelUpdate(u)
+          stay using d.copy(updates = d.updates + (desc -> u), rebroadcast = d.rebroadcast :+ u, origins = d.origins + (u -> sender))
+        } else {
+          log.debug(s"added $u")
+          context.system.eventStream.publish(ChannelUpdateReceived(u))
+          db.addChannelUpdate(u)
+          stay using d.copy(updates = d.updates + (desc -> u), rebroadcast = d.rebroadcast :+ u, origins = d.origins + (u -> sender))
+        }
+      } else if (d.awaiting.exists(c => c.shortChannelId == u.shortChannelId) || d.stash.collectFirst { case c: ChannelAnnouncement if c.shortChannelId == u.shortChannelId => c }.isDefined) {
+        log.debug(s"stashing $u")
+        stay using d.copy(stash = d.stash :+ u, origins = d.origins + (u -> sender))
+      } else {
+        log.warning(s"ignoring announcement $u (unknown channel)")
+        stay
+      }
+
+    case Event(WatchEventSpentBasic(BITCOIN_FUNDING_EXTERNAL_CHANNEL_SPENT(shortChannelId)), d)
+      if d.channels.containsKey(shortChannelId) =>
+      val lostChannel = d.channels(shortChannelId)
+      log.info(s"funding tx of channelId=$shortChannelId has been spent")
+      // we need to remove nodes that aren't tied to any channels anymore
+      val channels1 = d.channels - lostChannel.shortChannelId
+      val lostNodes = Seq(lostChannel.nodeId1, lostChannel.nodeId2).filterNot(nodeId => hasChannels(nodeId, channels1.values))
+      // let's clean the db and send the events
+      log.info(s"pruning shortChannelId=$shortChannelId (spent)")
+      db.removeChannel(shortChannelId) // NB: this also removes channel updates
+      context.system.eventStream.publish(ChannelLost(shortChannelId))
+      lostNodes.foreach {
+        case nodeId =>
+          log.info(s"pruning nodeId=$nodeId (spent)")
+          db.removeNode(nodeId)
+          context.system.eventStream.publish(NodeLost(nodeId))
+      }
+      stay using d.copy(nodes = d.nodes -- lostNodes, channels = d.channels - shortChannelId, updates = d.updates.filterKeys(_.id != shortChannelId))
+
+    case Event(TickValidate, d) => stay // ignored
+
+    case Event(TickBroadcast, d) =>
+      d.rebroadcast match {
+        case Nil => stay using d.copy(origins = Map.empty)
+        case _ =>
+          log.info(s"broadcasting ${d.rebroadcast.size} routing messages")
+          context.actorSelection(context.system / "*" / "switchboard") ! Rebroadcast(d.rebroadcast, d.origins)
+          stay using d.copy(rebroadcast = Nil, origins = Map.empty)
+      }
+
+    case Event(TickPruneStaleChannels, d) =>
+      // first we select channels that we will prune
+      val staleChannels = getStaleChannels(d.channels, d.updates)
+      // then we clean up the related channel updates
+      val staleUpdates = d.updates.keys.filter(desc => staleChannels.contains(desc.id))
+      // finally we remove nodes that aren't tied to any channels anymore
+      val channels1 = d.channels -- staleChannels
+      val staleNodes = d.nodes.keys.filterNot(nodeId => hasChannels(nodeId, channels1.values))
+      // let's clean the db and send the events
+      staleChannels.foreach {
+        case shortChannelId =>
+          log.info(s"pruning shortChannelId=$shortChannelId (stale)")
+          db.removeChannel(shortChannelId) // NB: this also removes channel updates
+          context.system.eventStream.publish(ChannelLost(shortChannelId))
+      }
+      staleNodes.foreach {
+        case nodeId =>
+          log.info(s"pruning nodeId=$nodeId (stale)")
+          db.removeNode(nodeId)
+          context.system.eventStream.publish(NodeLost(nodeId))
+      }
+      stay using d.copy(nodes = d.nodes -- staleNodes, channels = channels1, updates = d.updates -- staleUpdates)
+
+    case Event(ExcludeChannel(desc@ChannelDesc(shortChannelId, nodeId, _)), d) =>
+      val banDuration = nodeParams.channelExcludeDuration
+      log.info(s"excluding shortChannelId=$shortChannelId from nodeId=$nodeId for duration=$banDuration")
+      context.system.scheduler.scheduleOnce(banDuration, self, LiftChannelExclusion(desc))
+      stay using d.copy(excludedChannels = d.excludedChannels + desc)
+
+    case Event(LiftChannelExclusion(desc@ChannelDesc(shortChannelId, nodeId, _)), d) =>
+      log.info(s"reinstating shortChannelId=$shortChannelId from nodeId=$nodeId")
+      stay using d.copy(excludedChannels = d.excludedChannels - desc)
+
+    case Event('nodes, d) =>
+      sender ! d.nodes.values
+      stay
+
+    case Event('channels, d) =>
+      sender ! d.channels.values
+      stay
+
+    case Event('updates, d) =>
+      sender ! d.updates.values
+      stay
+
+    case Event('dot, d) =>
+      graph2dot(d.nodes, d.channels) pipeTo sender
+      stay
+
+    case Event(RouteRequest(start, end, ignoreNodes, ignoreChannels), d) =>
+      val localNodeId = nodeParams.privateKey.publicKey
+      // TODO: HACK!!!!! the following is a workaround to make our routing work with private/not-yet-announced channels, that do not have a channelUpdate
+      val fakeUpdates = d.localChannels.map { case (channelId, remoteNodeId) =>
+        // note that this id is deterministic, otherwise filterUpdates would not work
+        val fakeShortId = BigInt(channelId.take(7).toArray).toLong
+        val channelDesc = ChannelDesc(fakeShortId, localNodeId, remoteNodeId)
+        // note that we store the channelId in the sig, other values are not used because if it is selected this will be the first channel in the route
+        val channelUpdate = ChannelUpdate(signature = channelId, chainHash = nodeParams.chainHash, fakeShortId, 0, "0000", 0, 0, 0, 0)
+        (channelDesc -> channelUpdate)
+      }
+      // we replace local channelUpdates (we have them for regular public already-announced channels) by the ones we just generated
+      val updates1 = d.updates.filterKeys(_.a != localNodeId) ++ fakeUpdates
+      // we then filter out the currently excluded channels
+      val updates2 = updates1.filterKeys(!d.excludedChannels.contains(_))
+      // we also filter out  excluded channels
+      val updates3 = filterUpdates(updates2, ignoreNodes, ignoreChannels)
+      log.info(s"finding a route $start->$end with ignoreNodes=${ignoreNodes.map(_.toBin).mkString(",")} ignoreChannels=${ignoreChannels.map(_.toHexString).mkString(",")}")
+      findRoute(start, end, updates3).map(r => RouteResponse(r, ignoreNodes, ignoreChannels)) pipeTo sender
+      stay
+  }
+
+  onTransition {
+    case _ -> NORMAL => log.info(s"current status channels=${nextStateData.channels.size} nodes=${nextStateData.nodes.size} updates=${nextStateData.updates.size}")
+  }
+
+  initialize()
+
+}
+
+object Router {
+
+  val MAX_PARALLEL_JSONRPC_REQUESTS = 50
+
+  def props(nodeParams: NodeParams, watcher: ActorRef) = Props(new Router(nodeParams, watcher))
+
+  def getDesc(u: ChannelUpdate, channel: ChannelAnnouncement): ChannelDesc = {
+    require(u.flags.data.size == 2, s"invalid flags length ${u.flags.data.size} != 2")
+    // the least significant bit tells us if it is node1 or node2
+    if (Announcements.isNode1(u.flags)) ChannelDesc(u.shortChannelId, channel.nodeId1, channel.nodeId2) else ChannelDesc(u.shortChannelId, channel.nodeId2, channel.nodeId1)
+  }
+
+  def isRelatedTo(c: ChannelAnnouncement, nodeId: PublicKey) = nodeId == c.nodeId1 || nodeId == c.nodeId2
+
+  def hasChannels(nodeId: PublicKey, channels: Iterable[ChannelAnnouncement]): Boolean = channels.exists(c => isRelatedTo(c, nodeId))
+
+  def getStaleChannels(channels: Map[Long, ChannelAnnouncement], updates: Map[ChannelDesc, ChannelUpdate]): Iterable[Long] = {
+    // BOLT 7: "nodes MAY prune channels should the timestamp of the latest channel_update be older than 2 weeks (1209600 seconds)"
+    // but we don't want to prune brand new channels for which we didn't yet receive a channel update
+    // so we consider stale a channel that:
+    // (1) is older than 2 weeks (2*7*144 = 2016 blocks)
+    //  AND
+    // (2) didn't have an update during the last 2 weeks
+    val staleThresholdSeconds = Platform.currentTime / 1000 - 1209600
+    val staleThresholdBlocks = Globals.blockCount.get() - 2016
+    val staleChannels = channels
+      .filterKeys(shortChannelId => fromShortId(shortChannelId)._1 < staleThresholdBlocks) // consider only channels older than 2 weeks
+      .filterKeys(shortChannelId => !updates.values.exists(u => u.shortChannelId == shortChannelId && u.timestamp >= staleThresholdSeconds)) // no update in the past 2 weeks
+    staleChannels.keys
+  }
+
+  /**
+    * This method is used after a payment failed, and we want to exclude some nodes/channels that we know are failing
+    */
+  def filterUpdates(updates: Map[ChannelDesc, ChannelUpdate], ignoreNodes: Set[PublicKey], ignoreChannels: Set[Long]) =
+    updates
+      .filterNot(u => ignoreNodes.map(_.toBin).contains(u._1.a) || ignoreNodes.map(_.toBin).contains(u._1.b))
+      .filterNot(u => ignoreChannels.contains(u._1.id))
+      .filterNot(u => !Announcements.isEnabled(u._2.flags))
+
+  def findRouteDijkstra(localNodeId: PublicKey, targetNodeId: PublicKey, channels: Iterable[ChannelDesc]): Seq[ChannelDesc] = {
+    if (localNodeId == targetNodeId) throw CannotRouteToSelf
+    case class DescEdge(desc: ChannelDesc) extends DefaultEdge
+    val g = new DefaultDirectedGraph[PublicKey, DescEdge](classOf[DescEdge])
+    Random.shuffle(channels).foreach(d => {
+      g.addVertex(d.a)
+      g.addVertex(d.b)
+      g.addEdge(d.a, d.b, new DescEdge(d))
+    })
+    Try(Option(DijkstraShortestPath.findPathBetween(g, localNodeId, targetNodeId))) match {
+      case Success(Some(path)) => path.getEdgeList.map(_.desc)
+      case _ => throw RouteNotFound
+    }
+  }
+
+  def findRoute(localNodeId: PublicKey, targetNodeId: PublicKey, updates: Map[ChannelDesc, ChannelUpdate])(implicit ec: ExecutionContext): Future[Seq[Hop]] = Future {
+    findRouteDijkstra(localNodeId, targetNodeId, updates.keys)
+      .map(desc => Hop(desc.a, desc.b, updates(desc)))
+  }
+
+  def graph2dot(nodes: Map[PublicKey, NodeAnnouncement], channels: Map[Long, ChannelAnnouncement])(implicit ec: ExecutionContext): Future[String] = Future {
+    case class DescEdge(channelId: Long) extends DefaultEdge
+    val g = new SimpleGraph[PublicKey, DescEdge](classOf[DescEdge])
+    channels.foreach(d => {
+      g.addVertex(d._2.nodeId1)
+      g.addVertex(d._2.nodeId2)
+      g.addEdge(d._2.nodeId1, d._2.nodeId2, new DescEdge(d._1))
+    })
+    val vertexIDProvider = new ComponentNameProvider[PublicKey]() {
+      override def getName(nodeId: PublicKey): String = "\"" + nodeId.toString() + "\""
+    }
+    val edgeLabelProvider = new ComponentNameProvider[DescEdge]() {
+      override def getName(e: DescEdge): String = e.channelId.toString
+    }
+    val vertexAttributeProvider = new ComponentAttributeProvider[PublicKey]() {
+
+      override def getComponentAttributes(nodeId: PublicKey): java.util.Map[String, String] =
+
+        nodes.get(nodeId) match {
+          case Some(ann) => Map("label" -> ann.alias, "color" -> f"#${ann.rgbColor._1}%02x${ann.rgbColor._2}%02x${ann.rgbColor._3}%02x")
+          case None => Map.empty[String, String]
+        }
+    }
+    val exporter = new DOTExporter[PublicKey, DescEdge](vertexIDProvider, null, edgeLabelProvider, vertexAttributeProvider, null)
+    val writer = new StringWriter()
+    try {
+      exporter.exportGraph(g, writer)
+      writer.toString
+    } finally {
+      writer.close()
+    }
+
+  }
+
+
+}

eclair-core/src/main/scala/fr/acinq/eclair/router/RouterExceptions.scala

@@ -0,0 +1,11 @@
+package fr.acinq.eclair.router
+
+/**
+  * Created by PM on 12/04/2017.
+  */
+
+class RouterException(message: String) extends RuntimeException(message)
+
+object RouteNotFound extends RouterException("Route not found")
+
+object CannotRouteToSelf extends RouterException("Cannot route to self")

eclair-core/src/main/scala/fr/acinq/eclair/router/ThrottleForwarder.scala

@@ -0,0 +1,47 @@
+package fr.acinq.eclair.router
+
+import akka.actor.{Actor, ActorLogging, ActorRef, Props}
+
+import scala.concurrent.duration.{FiniteDuration, _}
+
+/**
+  * This actor forwards messages to another actor, but groups them and introduces
+  * delays between each groups.
+  *
+  * If A wants to send a lot of lower importance messages to B, it is useful to let
+  * higher importance messages go in the stream.
+  */
+class ThrottleForwarder(target: ActorRef, messages: Iterable[Any], chunkSize: Int, delay: FiniteDuration) extends Actor with ActorLogging {
+
+  import ThrottleForwarder.Tick
+
+  import scala.concurrent.ExecutionContext.Implicits.global
+
+  val clock = context.system.scheduler.schedule(0 second, delay, self, Tick)
+
+  log.debug(s"sending messages=${messages.size} with chunkSize=$chunkSize and delay=$delay")
+
+  override def receive = group(messages)
+
+  def group(messages: Iterable[Any]): Receive = {
+    case Tick =>
+      messages.splitAt(chunkSize) match {
+        case (Nil, _) =>
+          clock.cancel()
+          log.debug(s"sent messages=${messages.size} with chunkSize=$chunkSize and delay=$delay")
+          context stop self
+        case (chunk, rest) =>
+          chunk.foreach(target ! _)
+          context become group(rest)
+      }
+  }
+
+}
+
+object ThrottleForwarder {
+
+  def props(target: ActorRef, messages: Iterable[Any], groupSize: Int, delay: FiniteDuration) = Props(new ThrottleForwarder(target, messages, groupSize, delay))
+
+  case object Tick
+
+}

eclair-core/src/main/scala/fr/acinq/eclair/transactions/CommitmentSpec.scala

@@ -1,6 +1,5 @@
 package fr.acinq.eclair.transactions
 
-import fr.acinq.bitcoin.BinaryData
 import fr.acinq.eclair.wire._
 
 /**
@@ -13,9 +12,9 @@ case object IN extends Direction { def opposite = OUT }
 case object OUT extends Direction { def opposite = IN }
 // @formatter:on
 
-case class Htlc(direction: Direction, add: UpdateAddHtlc, val previousChannelId: Option[BinaryData])
+case class DirectedHtlc(direction: Direction, add: UpdateAddHtlc)
 
-final case class CommitmentSpec(htlcs: Set[Htlc], feeratePerKw: Long, toLocalMsat: Long, toRemoteMsat: Long) {
+final case class CommitmentSpec(htlcs: Set[DirectedHtlc], feeratePerKw: Long, toLocalMsat: Long, toRemoteMsat: Long) {
   val totalFunds = toLocalMsat + toRemoteMsat + htlcs.toSeq.map(_.add.amountMsat).sum
 }
 
@@ -26,7 +25,7 @@ object CommitmentSpec {
   })
 
   def addHtlc(spec: CommitmentSpec, direction: Direction, update: UpdateAddHtlc): CommitmentSpec = {
-    val htlc = Htlc(direction, update, previousChannelId = None)
+    val htlc = DirectedHtlc(direction, update)
     direction match {
       case OUT => spec.copy(toLocalMsat = spec.toLocalMsat - htlc.add.amountMsat, htlcs = spec.htlcs + htlc)
       case IN => spec.copy(toRemoteMsat = spec.toRemoteMsat - htlc.add.amountMsat, htlcs = spec.htlcs + htlc)
@@ -34,20 +33,20 @@ object CommitmentSpec {
   }
 
   // OUT means we are sending an UpdateFulfillHtlc message which means that we are fulfilling an HTLC that they sent
-  def fulfillHtlc(spec: CommitmentSpec, direction: Direction, update: UpdateFulfillHtlc): CommitmentSpec = {
-    spec.htlcs.find(htlc => htlc.direction != direction && htlc.add.id == update.id) match {
+  def fulfillHtlc(spec: CommitmentSpec, direction: Direction, htlcId: Long): CommitmentSpec = {
+    spec.htlcs.find(htlc => htlc.direction != direction && htlc.add.id == htlcId) match {
       case Some(htlc) if direction == OUT => spec.copy(toLocalMsat = spec.toLocalMsat + htlc.add.amountMsat, htlcs = spec.htlcs - htlc)
       case Some(htlc) if direction == IN => spec.copy(toRemoteMsat = spec.toRemoteMsat + htlc.add.amountMsat, htlcs = spec.htlcs - htlc)
-      case None => throw new RuntimeException(s"cannot find htlc id=${update.id}")
+      case None => throw new RuntimeException(s"cannot find htlc id=${htlcId}")
     }
   }
 
   // OUT means we are sending an UpdateFailHtlc message which means that we are failing an HTLC that they sent
-  def failHtlc(spec: CommitmentSpec, direction: Direction, update: UpdateFailHtlc): CommitmentSpec = {
-    spec.htlcs.find(htlc => htlc.direction != direction && htlc.add.id == update.id) match {
+  def failHtlc(spec: CommitmentSpec, direction: Direction, htlcId: Long): CommitmentSpec = {
+    spec.htlcs.find(htlc => htlc.direction != direction && htlc.add.id == htlcId) match {
       case Some(htlc) if direction == OUT => spec.copy(toRemoteMsat = spec.toRemoteMsat + htlc.add.amountMsat, htlcs = spec.htlcs - htlc)
       case Some(htlc) if direction == IN => spec.copy(toLocalMsat = spec.toLocalMsat + htlc.add.amountMsat, htlcs = spec.htlcs - htlc)
-      case None => throw new RuntimeException(s"cannot find htlc id=${update.id}")
+      case None => throw new RuntimeException(s"cannot find htlc id=${htlcId}")
     }
   }
 
@@ -61,13 +60,15 @@ object CommitmentSpec {
       case (spec, _) => spec
     }
     val spec3 = localChanges.foldLeft(spec2) {
-      case (spec, u: UpdateFulfillHtlc) => fulfillHtlc(spec, OUT, u)
-      case (spec, u: UpdateFailHtlc) => failHtlc(spec, OUT, u)
+      case (spec, u: UpdateFulfillHtlc) => fulfillHtlc(spec, OUT, u.id)
+      case (spec, u: UpdateFailHtlc) => failHtlc(spec, OUT, u.id)
+      case (spec, u: UpdateFailMalformedHtlc) => failHtlc(spec, OUT, u.id)
       case (spec, _) => spec
     }
     val spec4 = remoteChanges.foldLeft(spec3) {
-      case (spec, u: UpdateFulfillHtlc) => fulfillHtlc(spec, IN, u)
-      case (spec, u: UpdateFailHtlc) => failHtlc(spec, IN, u)
+      case (spec, u: UpdateFulfillHtlc) => fulfillHtlc(spec, IN, u.id)
+      case (spec, u: UpdateFailHtlc) => failHtlc(spec, IN, u.id)
+      case (spec, u: UpdateFailMalformedHtlc) => failHtlc(spec, IN, u.id)
       case (spec, _) => spec
     }
     val spec5 = (localChanges ++ remoteChanges).foldLeft(spec4) {

eclair-core/src/main/scala/fr/acinq/eclair/transactions/Scripts.scala

@@ -1,8 +1,8 @@
 package fr.acinq.eclair.transactions
 
-import fr.acinq.bitcoin.Crypto.{PrivateKey, PublicKey, ripemd160}
+import fr.acinq.bitcoin.Crypto.{PublicKey, ripemd160}
 import fr.acinq.bitcoin.Script._
-import fr.acinq.bitcoin.{BinaryData, Crypto, LexicographicalOrdering, LockTimeThreshold, OP_0, OP_1, OP_1NEGATE, OP_2, OP_2DROP, OP_ADD, OP_CHECKLOCKTIMEVERIFY, OP_CHECKMULTISIG, OP_CHECKSEQUENCEVERIFY, OP_CHECKSIG, OP_DROP, OP_DUP, OP_ELSE, OP_ENDIF, OP_EQUAL, OP_EQUALVERIFY, OP_HASH160, OP_IF, OP_NOTIF, OP_PUSHDATA, OP_SIZE, OP_SWAP, OutPoint, SIGHASH_ALL, Satoshi, Script, ScriptElt, ScriptWitness, Transaction, TxIn, TxOut}
+import fr.acinq.bitcoin.{BinaryData, LexicographicalOrdering, LockTimeThreshold, OP_0, OP_1, OP_1NEGATE, OP_2, OP_2DROP, OP_ADD, OP_CHECKLOCKTIMEVERIFY, OP_CHECKMULTISIG, OP_CHECKSEQUENCEVERIFY, OP_CHECKSIG, OP_DROP, OP_DUP, OP_ELSE, OP_ENDIF, OP_EQUAL, OP_EQUALVERIFY, OP_HASH160, OP_IF, OP_NOTIF, OP_PUSHDATA, OP_SIZE, OP_SWAP, Satoshi, Script, ScriptElt, ScriptWitness, Transaction, TxIn}
 
 /**
   * Created by PM on 02/12/2016.
@@ -156,13 +156,13 @@ object Scripts {
     else tx.txIn.map(_.sequence).map(sequenceToBlockHeight).max
   }
 
-  def toLocalDelayed(revocationPubkey: PublicKey, toSelfDelay: Int, localDelayedPubkey: PublicKey) = {
+  def toLocalDelayed(revocationPubkey: PublicKey, toSelfDelay: Int, localDelayedPaymentPubkey: PublicKey) = {
     // @formatter:off
     OP_IF ::
       OP_PUSHDATA(revocationPubkey) ::
     OP_ELSE ::
       encodeNumber(toSelfDelay) :: OP_CHECKSEQUENCEVERIFY :: OP_DROP ::
-      OP_PUSHDATA(localDelayedPubkey) ::
+      OP_PUSHDATA(localDelayedPaymentPubkey) ::
     OP_ENDIF ::
     OP_CHECKSIG :: Nil
     // @formatter:on
@@ -181,17 +181,17 @@ object Scripts {
   def witnessToLocalDelayedWithRevocationSig(revocationSig: BinaryData, toLocalScript: BinaryData) =
     ScriptWitness(revocationSig :: BinaryData("01") :: toLocalScript :: Nil)
 
-  def htlcOffered(localPubkey: PublicKey, remotePubkey: PublicKey, revocationPubKey: PublicKey, paymentHash: BinaryData): Seq[ScriptElt] = {
+  def htlcOffered(localHtlcPubkey: PublicKey, remoteHtlcPubkey: PublicKey, revocationPubKey: PublicKey, paymentHash: BinaryData): Seq[ScriptElt] = {
     // @formatter:off
     // To you with revocation key
     OP_DUP :: OP_HASH160 :: OP_PUSHDATA(revocationPubKey.hash160) :: OP_EQUAL ::
     OP_IF ::
         OP_CHECKSIG ::
     OP_ELSE ::
-        OP_PUSHDATA(remotePubkey) :: OP_SWAP  :: OP_SIZE :: encodeNumber(32) :: OP_EQUAL ::
+        OP_PUSHDATA(remoteHtlcPubkey) :: OP_SWAP  :: OP_SIZE :: encodeNumber(32) :: OP_EQUAL ::
         OP_NOTIF ::
             // To me via HTLC-timeout transaction (timelocked).
-            OP_DROP :: OP_2 :: OP_SWAP :: OP_PUSHDATA(localPubkey) :: OP_2 :: OP_CHECKMULTISIG ::
+            OP_DROP :: OP_2 :: OP_SWAP :: OP_PUSHDATA(localHtlcPubkey) :: OP_2 :: OP_CHECKMULTISIG ::
         OP_ELSE ::
             OP_HASH160 :: OP_PUSHDATA(paymentHash) :: OP_EQUALVERIFY ::
             OP_CHECKSIG ::
@@ -213,18 +213,18 @@ object Scripts {
   def witnessClaimHtlcSuccessFromCommitTx(localSig: BinaryData, paymentPreimage: BinaryData, htlcOfferedScript: BinaryData) =
     ScriptWitness(localSig :: paymentPreimage :: htlcOfferedScript :: Nil)
 
-  def htlcReceived(localKey: PublicKey, remotePubkey: PublicKey, revocationPubKey: PublicKey, paymentHash: BinaryData, lockTime: Long) = {
+  def htlcReceived(localHtlcPubkey: PublicKey, remoteHtlcPubkey: PublicKey, revocationPubKey: PublicKey, paymentHash: BinaryData, lockTime: Long) = {
     // @formatter:off
     // To you with revocation key
     OP_DUP :: OP_HASH160 :: OP_PUSHDATA(revocationPubKey.hash160) :: OP_EQUAL ::
     OP_IF ::
         OP_CHECKSIG ::
     OP_ELSE ::
-        OP_PUSHDATA(remotePubkey) :: OP_SWAP :: OP_SIZE :: encodeNumber(32) :: OP_EQUAL ::
+        OP_PUSHDATA(remoteHtlcPubkey) :: OP_SWAP :: OP_SIZE :: encodeNumber(32) :: OP_EQUAL ::
         OP_IF ::
             // To me via HTLC-success transaction.
             OP_HASH160 :: OP_PUSHDATA(paymentHash) :: OP_EQUALVERIFY ::
-            OP_2 :: OP_SWAP :: OP_PUSHDATA(localKey) :: OP_2 :: OP_CHECKMULTISIG ::
+            OP_2 :: OP_SWAP :: OP_PUSHDATA(localHtlcPubkey) :: OP_2 :: OP_CHECKMULTISIG ::
         OP_ELSE ::
             // To you after timeout.
             OP_DROP :: encodeNumber(lockTime) :: OP_CHECKLOCKTIMEVERIFY :: OP_DROP ::

eclair-core/src/main/scala/fr/acinq/eclair/transactions/Transactions.scala

@@ -73,7 +73,7 @@ object Transactions {
 
   def weight2fee(feeratePerKw: Long, weight: Int) = Satoshi((feeratePerKw * weight) / 1000)
 
-  def trimOfferedHtlcs(dustLimit: Satoshi, spec: CommitmentSpec): Seq[Htlc] = {
+  def trimOfferedHtlcs(dustLimit: Satoshi, spec: CommitmentSpec): Seq[DirectedHtlc] = {
     val htlcTimeoutFee = weight2fee(spec.feeratePerKw, htlcTimeoutWeight)
     spec.htlcs
       .filter(_.direction == OUT)
@@ -81,7 +81,7 @@ object Transactions {
       .toSeq
   }
 
-  def trimReceivedHtlcs(dustLimit: Satoshi, spec: CommitmentSpec): Seq[Htlc] = {
+  def trimReceivedHtlcs(dustLimit: Satoshi, spec: CommitmentSpec): Seq[DirectedHtlc] = {
     val htlcSuccessFee = weight2fee(spec.feeratePerKw, htlcSuccessWeight)
     spec.htlcs
       .filter(_.direction == IN)
@@ -90,8 +90,8 @@ object Transactions {
   }
 
   def commitTxFee(dustLimit: Satoshi, spec: CommitmentSpec): Satoshi = {
-    val trimmedOfferedHtlcs = trimOfferedHtlcs(dustLimit, spec).map(htlc => MilliSatoshi(htlc.add.amountMsat))
-    val trimmedReceivedHtlcs = trimReceivedHtlcs(dustLimit, spec).map(htlc => MilliSatoshi(htlc.add.amountMsat))
+    val trimmedOfferedHtlcs = trimOfferedHtlcs(dustLimit, spec)
+    val trimmedReceivedHtlcs = trimReceivedHtlcs(dustLimit, spec)
     val weight = commitWeight + 172 * (trimmedOfferedHtlcs.size + trimmedReceivedHtlcs.size)
     weight2fee(spec.feeratePerKw, weight)
   }
@@ -142,7 +142,7 @@ object Transactions {
 
   def decodeTxNumber(sequence: Long, locktime: Long) = ((sequence & 0xffffffL) << 24) + (locktime & 0xffffffL)
 
-  def makeCommitTx(commitTxInput: InputInfo, commitTxNumber: Long, localPaymentBasePoint: Point, remotePaymentBasePoint: Point, localIsFunder: Boolean, localDustLimit: Satoshi, localPubKey: PublicKey, localRevocationPubkey: PublicKey, toLocalDelay: Int, localDelayedPubkey: PublicKey, remotePubkey: PublicKey, spec: CommitmentSpec): CommitTx = {
+  def makeCommitTx(commitTxInput: InputInfo, commitTxNumber: Long, localPaymentBasePoint: Point, remotePaymentBasePoint: Point, localIsFunder: Boolean, localDustLimit: Satoshi, localRevocationPubkey: PublicKey, toLocalDelay: Int, localDelayedPaymentPubkey: PublicKey, remotePaymentPubkey: PublicKey, localHtlcPubkey: PublicKey, remoteHtlcPubkey: PublicKey, spec: CommitmentSpec): CommitTx = {
 
     val commitFee = commitTxFee(localDustLimit, spec)
 
@@ -151,13 +151,13 @@ object Transactions {
       case false => (millisatoshi2satoshi(MilliSatoshi(spec.toLocalMsat)), millisatoshi2satoshi(MilliSatoshi(spec.toRemoteMsat)) - commitFee)
     } // NB: we don't care if values are < 0, they will be trimmed if they are < dust limit anyway
 
-    val toLocalDelayedOutput_opt = if (toLocalAmount >= localDustLimit) Some(TxOut(toLocalAmount, pay2wsh(toLocalDelayed(localRevocationPubkey, toLocalDelay, localDelayedPubkey)))) else None
-    val toRemoteOutput_opt = if (toRemoteAmount >= localDustLimit) Some(TxOut(toRemoteAmount, pay2wpkh(remotePubkey))) else None
+    val toLocalDelayedOutput_opt = if (toLocalAmount >= localDustLimit) Some(TxOut(toLocalAmount, pay2wsh(toLocalDelayed(localRevocationPubkey, toLocalDelay, localDelayedPaymentPubkey)))) else None
+    val toRemoteOutput_opt = if (toRemoteAmount >= localDustLimit) Some(TxOut(toRemoteAmount, pay2wpkh(remotePaymentPubkey))) else None
 
     val htlcOfferedOutputs = trimOfferedHtlcs(localDustLimit, spec)
-      .map(htlc => TxOut(MilliSatoshi(htlc.add.amountMsat), pay2wsh(htlcOffered(localPubKey, remotePubkey, localRevocationPubkey, ripemd160(htlc.add.paymentHash)))))
+      .map(htlc => TxOut(MilliSatoshi(htlc.add.amountMsat), pay2wsh(htlcOffered(localHtlcPubkey, remoteHtlcPubkey, localRevocationPubkey, ripemd160(htlc.add.paymentHash)))))
     val htlcReceivedOutputs = trimReceivedHtlcs(localDustLimit, spec)
-      .map(htlc => TxOut(MilliSatoshi(htlc.add.amountMsat), pay2wsh(htlcReceived(localPubKey, remotePubkey, localRevocationPubkey, ripemd160(htlc.add.paymentHash), htlc.add.expiry))))
+      .map(htlc => TxOut(MilliSatoshi(htlc.add.amountMsat), pay2wsh(htlcReceived(localHtlcPubkey, remoteHtlcPubkey, localRevocationPubkey, ripemd160(htlc.add.paymentHash), htlc.add.expiry))))
 
     val txnumber = obscuredCommitTxNumber(commitTxNumber, localIsFunder, localPaymentBasePoint, remotePaymentBasePoint)
     val (sequence, locktime) = encodeTxNumber(txnumber)
@@ -170,131 +170,127 @@ object Transactions {
     CommitTx(commitTxInput, LexicographicalOrdering.sort(tx))
   }
 
-  def makeHtlcTimeoutTx(commitTx: Transaction, localRevocationPubkey: PublicKey, toLocalDelay: Int, localPubKey: PublicKey, localDelayedPubkey: PublicKey, remotePubkey: PublicKey, feeratePerKw: Long, htlc: UpdateAddHtlc): HtlcTimeoutTx = {
+  def makeHtlcTimeoutTx(commitTx: Transaction, localDustLimit: Satoshi, localRevocationPubkey: PublicKey, toLocalDelay: Int, localDelayedPaymentPubkey: PublicKey, localHtlcPubkey: PublicKey, remoteHtlcPubkey: PublicKey, feeratePerKw: Long, htlc: UpdateAddHtlc): HtlcTimeoutTx = {
     val fee = weight2fee(feeratePerKw, htlcTimeoutWeight)
-    val redeemScript = htlcOffered(localPubKey, remotePubkey, localRevocationPubkey, ripemd160(htlc.paymentHash))
+    val redeemScript = htlcOffered(localHtlcPubkey, remoteHtlcPubkey, localRevocationPubkey, ripemd160(htlc.paymentHash))
     val pubkeyScript = write(pay2wsh(redeemScript))
     val outputIndex = findPubKeyScriptIndex(commitTx, pubkeyScript)
-    require(outputIndex >= 0, "output not found")
+    require(outputIndex >= 0, "output not found (was trimmed?)")
+    val amount = MilliSatoshi(htlc.amountMsat) - fee
+    require(amount >= localDustLimit, "amount lesser than dust limit")
     val input = InputInfo(OutPoint(commitTx, outputIndex), commitTx.txOut(outputIndex), write(redeemScript))
     HtlcTimeoutTx(input, Transaction(
       version = 2,
       txIn = TxIn(input.outPoint, Array.emptyByteArray, 0) :: Nil,
-      txOut = TxOut(MilliSatoshi(htlc.amountMsat) - fee, pay2wsh(toLocalDelayed(localRevocationPubkey, toLocalDelay, localDelayedPubkey))) :: Nil,
+      txOut = TxOut(amount, pay2wsh(toLocalDelayed(localRevocationPubkey, toLocalDelay, localDelayedPaymentPubkey))) :: Nil,
       lockTime = htlc.expiry))
   }
 
-  def makeHtlcSuccessTx(commitTx: Transaction, localRevocationPubkey: PublicKey, toLocalDelay: Int, localPubkey: PublicKey, localDelayedPubkey: PublicKey, remotePubkey: PublicKey, feeratePerKw: Long, htlc: UpdateAddHtlc): HtlcSuccessTx = {
+  def makeHtlcSuccessTx(commitTx: Transaction, localDustLimit: Satoshi, localRevocationPubkey: PublicKey, toLocalDelay: Int, localDelayedPaymentPubkey: PublicKey, localHtlcPubkey: PublicKey, remoteHtlcPubkey: PublicKey, feeratePerKw: Long, htlc: UpdateAddHtlc): HtlcSuccessTx = {
     val fee = weight2fee(feeratePerKw, htlcSuccessWeight)
-    val redeemScript = htlcReceived(localPubkey, remotePubkey, localRevocationPubkey, ripemd160(htlc.paymentHash), htlc.expiry)
+    val redeemScript = htlcReceived(localHtlcPubkey, remoteHtlcPubkey, localRevocationPubkey, ripemd160(htlc.paymentHash), htlc.expiry)
     val pubkeyScript = write(pay2wsh(redeemScript))
     val outputIndex = findPubKeyScriptIndex(commitTx, pubkeyScript)
-    require(outputIndex >= 0, "output not found")
+    require(outputIndex >= 0, "output not found (was trimmed?)")
+    val amount = MilliSatoshi(htlc.amountMsat) - fee
+    require(amount >= localDustLimit, "amount lesser than dust limit")
     val input = InputInfo(OutPoint(commitTx, outputIndex), commitTx.txOut(outputIndex), write(redeemScript))
     HtlcSuccessTx(input, Transaction(
       version = 2,
       txIn = TxIn(input.outPoint, Array.emptyByteArray, 0) :: Nil,
-      txOut = TxOut(MilliSatoshi(htlc.amountMsat) - fee, pay2wsh(toLocalDelayed(localRevocationPubkey, toLocalDelay, localDelayedPubkey))) :: Nil,
+      txOut = TxOut(amount, pay2wsh(toLocalDelayed(localRevocationPubkey, toLocalDelay, localDelayedPaymentPubkey))) :: Nil,
       lockTime = 0), htlc.paymentHash)
   }
 
-  def makeHtlcTxs(commitTx: Transaction, localDustLimit: Satoshi, localRevocationPubkey: PublicKey, toLocalDelay: Int, localPubkey: PublicKey, localDelayedPubkey: PublicKey, remotePubkey: PublicKey, spec: CommitmentSpec): (Seq[HtlcTimeoutTx], Seq[HtlcSuccessTx]) = {
+  def makeHtlcTxs(commitTx: Transaction, localDustLimit: Satoshi, localRevocationPubkey: PublicKey, toLocalDelay: Int, localDelayedPaymentPubkey: PublicKey, localHtlcPubkey: PublicKey, remoteHtlcPubkey: PublicKey, spec: CommitmentSpec): (Seq[HtlcTimeoutTx], Seq[HtlcSuccessTx]) = {
     val htlcTimeoutTxs = trimOfferedHtlcs(localDustLimit, spec)
-      .map(htlc => makeHtlcTimeoutTx(commitTx, localRevocationPubkey, toLocalDelay, localPubkey, localDelayedPubkey, remotePubkey, spec.feeratePerKw, htlc.add))
+      .map(htlc => makeHtlcTimeoutTx(commitTx, localDustLimit, localRevocationPubkey, toLocalDelay, localDelayedPaymentPubkey, localHtlcPubkey, remoteHtlcPubkey, spec.feeratePerKw, htlc.add))
     val htlcSuccessTxs = trimReceivedHtlcs(localDustLimit, spec)
-      .map(htlc => makeHtlcSuccessTx(commitTx, localRevocationPubkey, toLocalDelay, localPubkey, localDelayedPubkey, remotePubkey, spec.feeratePerKw, htlc.add))
+      .map(htlc => makeHtlcSuccessTx(commitTx, localDustLimit, localRevocationPubkey, toLocalDelay, localDelayedPaymentPubkey, localHtlcPubkey, remoteHtlcPubkey, spec.feeratePerKw, htlc.add))
     (htlcTimeoutTxs, htlcSuccessTxs)
   }
 
-  def makeClaimHtlcSuccessTx(commitTx: Transaction, localPubkey: PublicKey, remotePubkey: PublicKey, remoteRevocationPubkey: PublicKey, localFinalScriptPubKey: BinaryData, htlc: UpdateAddHtlc, feeratePerKw: Long): ClaimHtlcSuccessTx = {
+  def makeClaimHtlcSuccessTx(commitTx: Transaction, localDustLimit: Satoshi, localHtlcPubkey: PublicKey, remoteHtlcPubkey: PublicKey, remoteRevocationPubkey: PublicKey, localFinalScriptPubKey: BinaryData, htlc: UpdateAddHtlc, feeratePerKw: Long): ClaimHtlcSuccessTx = {
     val fee = weight2fee(feeratePerKw, claimHtlcSuccessWeight)
-    val redeemScript = htlcOffered(remotePubkey, localPubkey, remoteRevocationPubkey, ripemd160(htlc.paymentHash))
+    val redeemScript = htlcOffered(remoteHtlcPubkey, localHtlcPubkey, remoteRevocationPubkey, ripemd160(htlc.paymentHash))
     val pubkeyScript = write(pay2wsh(redeemScript))
     val outputIndex = findPubKeyScriptIndex(commitTx, pubkeyScript)
-    require(outputIndex >= 0, "output not found")
+    require(outputIndex >= 0, "output not found (was trimmed?)")
     val input = InputInfo(OutPoint(commitTx, outputIndex), commitTx.txOut(outputIndex), write(redeemScript))
+    val amount = input.txOut.amount - fee
+    require(amount >= localDustLimit, "amount lesser than dust limit")
     ClaimHtlcSuccessTx(input, Transaction(
       version = 2,
       txIn = TxIn(input.outPoint, Array.emptyByteArray, 0xffffffffL) :: Nil,
-      txOut = TxOut(input.txOut.amount - fee, localFinalScriptPubKey) :: Nil,
+      txOut = TxOut(amount, localFinalScriptPubKey) :: Nil,
       lockTime = 0))
   }
 
-  def makeClaimHtlcTimeoutTx(commitTx: Transaction, localPubkey: PublicKey, remotePubkey: PublicKey, remoteRevocationPubkey: PublicKey, localFinalScriptPubKey: BinaryData, htlc: UpdateAddHtlc, feeratePerKw: Long): ClaimHtlcTimeoutTx = {
+  def makeClaimHtlcTimeoutTx(commitTx: Transaction, localDustLimit: Satoshi, localHtlcPubkey: PublicKey, remoteHtlcPubkey: PublicKey, remoteRevocationPubkey: PublicKey, localFinalScriptPubKey: BinaryData, htlc: UpdateAddHtlc, feeratePerKw: Long): ClaimHtlcTimeoutTx = {
     val fee = weight2fee(feeratePerKw, claimHtlcTimeoutWeight)
-    val redeemScript = htlcReceived(remotePubkey, localPubkey, remoteRevocationPubkey, ripemd160(htlc.paymentHash), htlc.expiry)
+    val redeemScript = htlcReceived(remoteHtlcPubkey, localHtlcPubkey, remoteRevocationPubkey, ripemd160(htlc.paymentHash), htlc.expiry)
     val pubkeyScript = write(pay2wsh(redeemScript))
     val outputIndex = findPubKeyScriptIndex(commitTx, pubkeyScript)
-    require(outputIndex >= 0, "output not found")
+    require(outputIndex >= 0, "output not found (was trimmed?)")
     val input = InputInfo(OutPoint(commitTx, outputIndex), commitTx.txOut(outputIndex), write(redeemScript))
+    val amount = input.txOut.amount - fee
+    require(amount >= localDustLimit, "amount lesser than dust limit")
     ClaimHtlcTimeoutTx(input, Transaction(
       version = 2,
       txIn = TxIn(input.outPoint, Array.emptyByteArray, 0x00000000L) :: Nil,
-      txOut = TxOut(input.txOut.amount - fee, localFinalScriptPubKey) :: Nil,
+      txOut = TxOut(amount, localFinalScriptPubKey) :: Nil,
       lockTime = htlc.expiry))
   }
 
-  def makeClaimP2WPKHOutputTx(delayedOutputTx: Transaction, localPubkey: PublicKey, localFinalScriptPubKey: BinaryData, feeratePerKw: Long): ClaimP2WPKHOutputTx = {
+  def makeClaimP2WPKHOutputTx(delayedOutputTx: Transaction, localDustLimit: Satoshi, localPaymentPubkey: PublicKey, localFinalScriptPubKey: BinaryData, feeratePerKw: Long): ClaimP2WPKHOutputTx = {
     val fee = weight2fee(feeratePerKw, claimP2WPKHOutputWeight)
-    val redeemScript = Script.pay2pkh(localPubkey)
-    val pubkeyScript = write(pay2wpkh(localPubkey))
+    val redeemScript = Script.pay2pkh(localPaymentPubkey)
+    val pubkeyScript = write(pay2wpkh(localPaymentPubkey))
     val outputIndex = findPubKeyScriptIndex(delayedOutputTx, pubkeyScript)
-    require(outputIndex >= 0, "output not found")
+    require(outputIndex >= 0, "output not found (was trimmed?)")
     val input = InputInfo(OutPoint(delayedOutputTx, outputIndex), delayedOutputTx.txOut(outputIndex), write(redeemScript))
+    val amount = input.txOut.amount - fee
+    require(amount >= localDustLimit, "amount lesser than dust limit")
     ClaimP2WPKHOutputTx(input, Transaction(
       version = 2,
       txIn = TxIn(input.outPoint, Array.emptyByteArray, 0x00000000L) :: Nil,
-      txOut = TxOut(input.txOut.amount - fee, localFinalScriptPubKey) :: Nil,
+      txOut = TxOut(amount, localFinalScriptPubKey) :: Nil,
       lockTime = 0))
   }
 
-  def makeClaimDelayedOutputTx(delayedOutputTx: Transaction, localRevocationPubkey: PublicKey, toLocalDelay: Int, localDelayedPubkey: PublicKey, localFinalScriptPubKey: BinaryData, feeratePerKw: Long): ClaimDelayedOutputTx = {
+  def makeClaimDelayedOutputTx(delayedOutputTx: Transaction, localDustLimit: Satoshi, localRevocationPubkey: PublicKey, toLocalDelay: Int, localDelayedPaymentPubkey: PublicKey, localFinalScriptPubKey: BinaryData, feeratePerKw: Long): ClaimDelayedOutputTx = {
     val fee = weight2fee(feeratePerKw, claimHtlcDelayedWeight)
-    val redeemScript = toLocalDelayed(localRevocationPubkey, toLocalDelay, localDelayedPubkey)
+    val redeemScript = toLocalDelayed(localRevocationPubkey, toLocalDelay, localDelayedPaymentPubkey)
     val pubkeyScript = write(pay2wsh(redeemScript))
     val outputIndex = findPubKeyScriptIndex(delayedOutputTx, pubkeyScript)
-    require(outputIndex >= 0, "output not found")
+    require(outputIndex >= 0, "output not found (was trimmed?)")
     val input = InputInfo(OutPoint(delayedOutputTx, outputIndex), delayedOutputTx.txOut(outputIndex), write(redeemScript))
+    val amount = input.txOut.amount - fee
+    require(amount >= localDustLimit, "amount lesser than dust limit")
     ClaimDelayedOutputTx(input, Transaction(
       version = 2,
       txIn = TxIn(input.outPoint, Array.emptyByteArray, toLocalDelay) :: Nil,
-      txOut = TxOut(input.txOut.amount - fee, localFinalScriptPubKey) :: Nil,
+      txOut = TxOut(amount, localFinalScriptPubKey) :: Nil,
       lockTime = 0))
   }
 
-  def makeMainPenaltyTx(commitTx: Transaction, remoteRevocationPubkey: PublicKey, localFinalScriptPubKey: BinaryData, toRemoteDelay: Int, remoteDelayedPubkey: PublicKey, feeratePerKw: Long): MainPenaltyTx = {
+  def makeMainPenaltyTx(commitTx: Transaction, localDustLimit: Satoshi, remoteRevocationPubkey: PublicKey, localFinalScriptPubKey: BinaryData, toRemoteDelay: Int, remoteDelayedPaymentPubkey: PublicKey, feeratePerKw: Long): MainPenaltyTx = {
     val fee = weight2fee(feeratePerKw, mainPenaltyWeight)
-    val redeemScript = toLocalDelayed(remoteRevocationPubkey, toRemoteDelay, remoteDelayedPubkey)
+    val redeemScript = toLocalDelayed(remoteRevocationPubkey, toRemoteDelay, remoteDelayedPaymentPubkey)
     val pubkeyScript = write(pay2wsh(redeemScript))
     val outputIndex = findPubKeyScriptIndex(commitTx, pubkeyScript)
-    require(outputIndex >= 0, "output not found")
+    require(outputIndex >= 0, "output not found (was trimmed?)")
     val input = InputInfo(OutPoint(commitTx, outputIndex), commitTx.txOut(outputIndex), write(redeemScript))
+    val amount = input.txOut.amount - fee
+    require(amount >= localDustLimit, "amount lesser than dust limit")
     MainPenaltyTx(input, Transaction(
       version = 2,
       txIn = TxIn(input.outPoint, Array.emptyByteArray, 0xffffffffL) :: Nil,
-      txOut = TxOut(input.txOut.amount - fee, localFinalScriptPubKey) :: Nil,
+      txOut = TxOut(amount, localFinalScriptPubKey) :: Nil,
       lockTime = 0))
   }
 
-  def makeHtlcPenaltyTx(commitTx: Transaction): HtlcPenaltyTx = ???
-
-  /**
-    * This generates a partial transaction that will be completed by bitcoind using a 'fundrawtransaction' rpc call.
-    * Since bitcoind may add a change output, we return the pubkeyScript so that we can do a lookup afterwards.
-    *
-    * @param amount
-    * @param localFundingPubkey
-    * @param remoteFundingPubkey
-    * @return (partialTx, pubkeyScript)
-    */
-  def makePartialFundingTx(amount: Satoshi, localFundingPubkey: PublicKey, remoteFundingPubkey: PublicKey): (Transaction, BinaryData) = {
-    val pubkeyScript = write(pay2wsh(Scripts.multiSig2of2(localFundingPubkey, remoteFundingPubkey)))
-    (Transaction(
-      version = 2,
-      txIn = Seq.empty[TxIn],
-      txOut = TxOut(amount, pubkeyScript) :: Nil,
-      lockTime = 0), pubkeyScript)
-  }
+  def makeHtlcPenaltyTx(commitTx: Transaction, localDustLimit: Satoshi): HtlcPenaltyTx = ???
 
   def makeClosingTx(commitTxInput: InputInfo, localScriptPubKey: BinaryData, remoteScriptPubKey: BinaryData, localIsFunder: Boolean, dustLimit: Satoshi, closingFee: Satoshi, spec: CommitmentSpec): ClosingTx = {
     require(spec.htlcs.size == 0, "there shouldn't be any pending htlcs")
@@ -366,8 +362,8 @@ object Transactions {
     claimHtlcTimeoutTx.copy(tx = claimHtlcTimeoutTx.tx.updateWitness(0, witness))
   }
 
-  def addSigs(claimP2WPKHOutputTx: ClaimP2WPKHOutputTx, localPubkey: BinaryData, localSig: BinaryData): ClaimP2WPKHOutputTx = {
-    val witness = ScriptWitness(Seq(localSig, localPubkey))
+  def addSigs(claimP2WPKHOutputTx: ClaimP2WPKHOutputTx, localPaymentPubkey: BinaryData, localSig: BinaryData): ClaimP2WPKHOutputTx = {
+    val witness = ScriptWitness(Seq(localSig, localPaymentPubkey))
     claimP2WPKHOutputTx.copy(tx = claimP2WPKHOutputTx.tx.updateWitness(0, witness))
   }
 
@@ -381,6 +377,9 @@ object Transactions {
     closingTx.copy(tx = closingTx.tx.updateWitness(0, witness))
   }
 
+  def checkSpendable(parent: Transaction, child: Transaction): Try[Unit] =
+    Try(Transaction.correctlySpends(child, parent :: Nil, ScriptFlags.STANDARD_SCRIPT_VERIFY_FLAGS))
+
   def checkSpendable(txinfo: TransactionWithInputInfo): Try[Unit] =
     Try(Transaction.correctlySpends(txinfo.tx, Map(txinfo.tx.txIn(0).outPoint -> txinfo.input.txOut), ScriptFlags.STANDARD_SCRIPT_VERIFY_FLAGS))
 

eclair-core/src/main/scala/fr/acinq/eclair/wire/ChannelCodecs.scala

@@ -0,0 +1,235 @@
+package fr.acinq.eclair.wire
+
+import fr.acinq.bitcoin.{BinaryData, OutPoint, Transaction, TxOut}
+import fr.acinq.eclair.channel._
+import fr.acinq.eclair.crypto.ShaChain
+import fr.acinq.eclair.payment.{Local, Origin, Relayed}
+import fr.acinq.eclair.transactions.Transactions._
+import fr.acinq.eclair.transactions._
+import fr.acinq.eclair.wire.LightningMessageCodecs._
+import scodec.bits.{BitVector, ByteVector}
+import scodec.codecs._
+import scodec.{Attempt, Codec}
+
+/**
+  * Created by PM on 02/06/2017.
+  */
+object ChannelCodecs {
+
+  val localParamsCodec: Codec[LocalParams] = (
+    ("nodeId" | publicKey) ::
+      ("dustLimitSatoshis" | uint64) ::
+      ("maxHtlcValueInFlightMsat" | uint64ex) ::
+      ("channelReserveSatoshis" | uint64) ::
+      ("htlcMinimumMsat" | uint64) ::
+      ("toSelfDelay" | uint16) ::
+      ("maxAcceptedHtlcs" | uint16) ::
+      ("fundingPrivKey" | privateKey) ::
+      ("revocationSecret" | scalar) ::
+      ("paymentKey" | scalar) ::
+      ("delayedPaymentKey" | scalar) ::
+      ("htlcKey" | scalar) ::
+      ("defaultFinalScriptPubKey" | varsizebinarydata) ::
+      ("shaSeed" | varsizebinarydata) ::
+      ("isFunder" | bool) ::
+      ("globalFeatures" | varsizebinarydata) ::
+      ("localFeatures" | varsizebinarydata)).as[LocalParams]
+
+  val remoteParamsCodec: Codec[RemoteParams] = (
+    ("nodeId" | publicKey) ::
+      ("dustLimitSatoshis" | uint64) ::
+      ("maxHtlcValueInFlightMsat" | uint64ex) ::
+      ("channelReserveSatoshis" | uint64) ::
+      ("htlcMinimumMsat" | uint64) ::
+      ("toSelfDelay" | uint16) ::
+      ("maxAcceptedHtlcs" | uint16) ::
+      ("fundingPubKey" | publicKey) ::
+      ("revocationBasepoint" | point) ::
+      ("paymentBasepoint" | point) ::
+      ("delayedPaymentBasepoint" | point) ::
+      ("htlcBasepoint" | point) ::
+      ("globalFeatures" | varsizebinarydata) ::
+      ("localFeatures" | varsizebinarydata)).as[RemoteParams]
+
+  val directionCodec: Codec[Direction] = Codec[Direction](
+    (dir: Direction) => bool.encode(dir == IN),
+    (wire: BitVector) => bool.decode(wire).map(_.map(b => if (b) IN else OUT))
+  )
+
+  val htlcCodec: Codec[DirectedHtlc] = (
+    ("direction" | directionCodec) ::
+      ("add" | updateAddHtlcCodec)).as[DirectedHtlc]
+
+  def setCodec[T](codec: Codec[T]): Codec[Set[T]] = Codec[Set[T]](
+    (elems: Set[T]) => listOfN(uint16, codec).encode(elems.toList),
+    (wire: BitVector) => listOfN(uint16, codec).decode(wire).map(_.map(_.toSet))
+  )
+
+  val commitmentSpecCodec: Codec[CommitmentSpec] = (
+    ("htlcs" | setCodec(htlcCodec)) ::
+      ("feeratePerKw" | uint32) ::
+      ("toLocalMsat" | uint64) ::
+      ("toRemoteMsat" | uint64)).as[CommitmentSpec]
+
+  def outPointCodec: Codec[OutPoint] = variableSizeBytes(uint16, bytes.xmap(d => OutPoint.read(d.toArray), d => ByteVector(OutPoint.write(d).data)))
+
+  def txOutCodec: Codec[TxOut] = variableSizeBytes(uint16, bytes.xmap(d => TxOut.read(d.toArray), d => ByteVector(TxOut.write(d).data)))
+
+  def txCodec: Codec[Transaction] = variableSizeBytes(uint16, bytes.xmap(d => Transaction.read(d.toArray), d => ByteVector(Transaction.write(d).data)))
+
+  val inputInfoCodec: Codec[InputInfo] = (
+    ("outPoint" | outPointCodec) ::
+      ("txOut" | txOutCodec) ::
+      ("redeemScript" | varsizebinarydata)).as[InputInfo]
+
+  val txWithInputInfoCodec: Codec[TransactionWithInputInfo] = discriminated[TransactionWithInputInfo].by(uint16)
+    .typecase(0x01, (("inputInfo" | inputInfoCodec) :: ("tx" | txCodec)).as[CommitTx])
+    .typecase(0x02, (("inputInfo" | inputInfoCodec) :: ("tx" | txCodec) :: ("paymentHash" | binarydata(32))).as[HtlcSuccessTx])
+    .typecase(0x03, (("inputInfo" | inputInfoCodec) :: ("tx" | txCodec)).as[HtlcTimeoutTx])
+    .typecase(0x04, (("inputInfo" | inputInfoCodec) :: ("tx" | txCodec)).as[ClaimHtlcSuccessTx])
+    .typecase(0x05, (("inputInfo" | inputInfoCodec) :: ("tx" | txCodec)).as[ClaimHtlcTimeoutTx])
+    .typecase(0x06, (("inputInfo" | inputInfoCodec) :: ("tx" | txCodec)).as[ClaimP2WPKHOutputTx])
+    .typecase(0x07, (("inputInfo" | inputInfoCodec) :: ("tx" | txCodec)).as[ClaimDelayedOutputTx])
+    .typecase(0x08, (("inputInfo" | inputInfoCodec) :: ("tx" | txCodec)).as[MainPenaltyTx])
+    .typecase(0x09, (("inputInfo" | inputInfoCodec) :: ("tx" | txCodec)).as[HtlcPenaltyTx])
+    .typecase(0x10, (("inputInfo" | inputInfoCodec) :: ("tx" | txCodec)).as[ClosingTx])
+
+  val htlcTxAndSigsCodec: Codec[HtlcTxAndSigs] = (
+    ("txinfo" | txWithInputInfoCodec) ::
+      ("localSig" | varsizebinarydata) ::
+      ("remoteSig" | varsizebinarydata)).as[HtlcTxAndSigs]
+
+  val publishableTxsCodec: Codec[PublishableTxs] = (
+    ("commitTx" | (("inputInfo" | inputInfoCodec) :: ("tx" | txCodec)).as[CommitTx]) ::
+      ("htlcTxsAndSigs" | listOfN(uint16, htlcTxAndSigsCodec))).as[PublishableTxs]
+
+  val localCommitCodec: Codec[LocalCommit] = (
+    ("index" | uint64) ::
+      ("spec" | commitmentSpecCodec) ::
+      ("publishableTxs" | publishableTxsCodec)).as[LocalCommit]
+
+  val remoteCommitCodec: Codec[RemoteCommit] = (
+    ("index" | uint64) ::
+      ("spec" | commitmentSpecCodec) ::
+      ("txid" | binarydata(32)) ::
+      ("remotePerCommitmentPoint" | point)).as[RemoteCommit]
+
+  val updateMessageCodec: Codec[UpdateMessage] = lightningMessageCodec.narrow(f => Attempt.successful(f.asInstanceOf[UpdateMessage]), g => g)
+
+  val localChangesCodec: Codec[LocalChanges] = (
+    ("proposed" | listOfN(uint16, updateMessageCodec)) ::
+      ("signed" | listOfN(uint16, updateMessageCodec)) ::
+      ("acked" | listOfN(uint16, updateMessageCodec))).as[LocalChanges]
+
+  val remoteChangesCodec: Codec[RemoteChanges] = (
+    ("proposed" | listOfN(uint16, updateMessageCodec)) ::
+      ("acked" | listOfN(uint16, updateMessageCodec)) ::
+      ("signed" | listOfN(uint16, updateMessageCodec))).as[RemoteChanges]
+
+  val waitingForRevocationCodec: Codec[WaitingForRevocation] = (
+    ("nextRemoteCommit" | remoteCommitCodec) ::
+      ("sent" | commitSigCodec) ::
+      ("sentAfterLocalCommitIndex" | uint64) ::
+      ("reSignAsap" | bool)).as[WaitingForRevocation]
+
+  val relayedCodec: Codec[Relayed] = (
+    ("originChannelId" | binarydata(32)) ::
+      ("originHtlcId" | int64) ::
+      ("amountMsatIn" | uint64) ::
+      ("amountMsatOut" | uint64)).as[Relayed]
+
+  val originCodec: Codec[Origin] = discriminated[Origin].by(uint16)
+    .typecase(0x01, provide(Local(None)))
+    .typecase(0x02, relayedCodec)
+
+  val originsListCodec: Codec[List[(Long, Origin)]] = listOfN(uint16, int64 ~ originCodec)
+
+  val originsMapCodec: Codec[Map[Long, Origin]] = Codec[Map[Long, Origin]](
+    (map: Map[Long, Origin]) => originsListCodec.encode(map.toList),
+    (wire: BitVector) => originsListCodec.decode(wire).map(_.map(_.toMap))
+  )
+
+  val commitmentsCodec: Codec[Commitments] = (
+    ("localParams" | localParamsCodec) ::
+      ("remoteParams" | remoteParamsCodec) ::
+      ("channelFlags" | byte) ::
+      ("localCommit" | localCommitCodec) ::
+      ("remoteCommit" | remoteCommitCodec) ::
+      ("localChanges" | localChangesCodec) ::
+      ("remoteChanges" | remoteChangesCodec) ::
+      ("localNextHtlcId" | uint64) ::
+      ("remoteNextHtlcId" | uint64) ::
+      ("originChannels" | originsMapCodec) ::
+      ("remoteNextCommitInfo" | either(bool, waitingForRevocationCodec, point)) ::
+      ("commitInput" | inputInfoCodec) ::
+      ("remotePerCommitmentSecrets" | ShaChain.shaChainCodec) ::
+      ("channelId" | binarydata(32))).as[Commitments]
+
+  val localCommitPublishedCodec: Codec[LocalCommitPublished] = (
+    ("commitTx" | txCodec) ::
+      ("claimMainDelayedOutputTx" | optional(bool, txCodec)) ::
+      ("htlcSuccessTxs" | listOfN(uint16, txCodec)) ::
+      ("htlcTimeoutTxs" | listOfN(uint16, txCodec)) ::
+      ("claimHtlcDelayedTx" | listOfN(uint16, txCodec)) ::
+      ("spent" | provide(Map.empty[OutPoint, BinaryData]))).as[LocalCommitPublished]
+
+  val remoteCommitPublishedCodec: Codec[RemoteCommitPublished] = (
+    ("commitTx" | txCodec) ::
+      ("claimMainOutputTx" | optional(bool, txCodec)) ::
+      ("claimHtlcSuccessTxs" | listOfN(uint16, txCodec)) ::
+      ("claimHtlcTimeoutTxs" | listOfN(uint16, txCodec)) ::
+      ("spent" | provide(Map.empty[OutPoint, BinaryData]))).as[RemoteCommitPublished]
+
+  val revokedCommitPublishedCodec: Codec[RevokedCommitPublished] = (
+    ("commitTx" | txCodec) ::
+      ("claimMainOutputTx" | optional(bool, txCodec)) ::
+      ("mainPenaltyTx" | optional(bool, txCodec)) ::
+      ("claimHtlcTimeoutTxs" | listOfN(uint16, txCodec)) ::
+      ("htlcTimeoutTxs" | listOfN(uint16, txCodec)) ::
+      ("htlcPenaltyTxs" | listOfN(uint16, txCodec)) ::
+      ("spent" | provide(Map.empty[OutPoint, BinaryData]))).as[RevokedCommitPublished]
+
+  val DATA_WAIT_FOR_FUNDING_CONFIRMED_Codec: Codec[DATA_WAIT_FOR_FUNDING_CONFIRMED] = (
+    ("commitments" | commitmentsCodec) ::
+      ("deferred" | optional(bool, fundingLockedCodec)) ::
+      ("lastSent" | either(bool, fundingCreatedCodec, fundingSignedCodec))).as[DATA_WAIT_FOR_FUNDING_CONFIRMED]
+
+  val DATA_WAIT_FOR_FUNDING_LOCKED_Codec: Codec[DATA_WAIT_FOR_FUNDING_LOCKED] = (
+    ("commitments" | commitmentsCodec) ::
+      ("lastSent" | fundingLockedCodec)).as[DATA_WAIT_FOR_FUNDING_LOCKED]
+
+  val DATA_NORMAL_Codec: Codec[DATA_NORMAL] = (
+    ("commitments" | commitmentsCodec) ::
+      ("shortChannelId" | optional(bool, uint64)) ::
+      ("localAnnouncementSignatures" | optional(bool, announcementSignaturesCodec)) ::
+      ("localShutdown" | optional(bool, shutdownCodec)) ::
+      ("remoteShutdown" | optional(bool, shutdownCodec))).as[DATA_NORMAL]
+
+  val DATA_SHUTDOWN_Codec: Codec[DATA_SHUTDOWN] = (
+    ("commitments" | commitmentsCodec) ::
+      ("localShutdown" | shutdownCodec) ::
+      ("remoteShutdown" | shutdownCodec)).as[DATA_SHUTDOWN]
+
+  val DATA_NEGOTIATING_Codec: Codec[DATA_NEGOTIATING] = (
+    ("commitments" | commitmentsCodec) ::
+      ("localShutdown" | shutdownCodec) ::
+      ("remoteShutdown" | shutdownCodec) ::
+      ("localClosingSigned" | closingSignedCodec)).as[DATA_NEGOTIATING]
+
+  val DATA_CLOSING_Codec: Codec[DATA_CLOSING] = (
+    ("commitments" | commitmentsCodec) ::
+      ("mutualClosePublished" | optional(bool, txCodec)) ::
+      ("localCommitPublished" | optional(bool, localCommitPublishedCodec)) ::
+      ("remoteCommitPublished" | optional(bool, remoteCommitPublishedCodec)) ::
+      ("nextRemoteCommitPublished" | optional(bool, remoteCommitPublishedCodec)) ::
+      ("revokedCommitPublished" | listOfN(uint16, revokedCommitPublishedCodec))).as[DATA_CLOSING]
+
+  val stateDataCodec: Codec[HasCommitments] = ("version" | constant(0x00)) ~> discriminated[HasCommitments].by(uint16)
+    .typecase(0x01, DATA_WAIT_FOR_FUNDING_CONFIRMED_Codec)
+    .typecase(0x02, DATA_WAIT_FOR_FUNDING_LOCKED_Codec)
+    .typecase(0x03, DATA_NORMAL_Codec)
+    .typecase(0x04, DATA_SHUTDOWN_Codec)
+    .typecase(0x05, DATA_NEGOTIATING_Codec)
+    .typecase(0x06, DATA_CLOSING_Codec)
+
+}

eclair-core/src/main/scala/fr/acinq/eclair/wire/FailureMessage.scala

@@ -1,7 +1,7 @@
 package fr.acinq.eclair.wire
 
 import fr.acinq.bitcoin.BinaryData
-import fr.acinq.eclair.wire.LightningMessageCodecs.{binarydata, channelUpdateCodec}
+import fr.acinq.eclair.wire.LightningMessageCodecs.{binarydata, channelUpdateCodec, uint64}
 import scodec.Codec
 import scodec.codecs._
 
@@ -20,21 +20,25 @@ sealed trait Update extends FailureMessage { def update: ChannelUpdate }
 
 case object InvalidRealm extends Perm
 case object TemporaryNodeFailure extends Node
-case object PermanentNodeFailure extends Perm
+case object PermanentNodeFailure extends Perm with Node
 case object RequiredNodeFeatureMissing extends Perm with Node
 case class InvalidOnionVersion(onionHash: BinaryData) extends BadOnion with Perm
 case class InvalidOnionHmac(onionHash: BinaryData) extends BadOnion with Perm
 case class InvalidOnionKey(onionHash: BinaryData) extends BadOnion with Perm
-case object TemporaryChannelFailure extends FailureMessage
+case class TemporaryChannelFailure(update: ChannelUpdate) extends Update
 case object PermanentChannelFailure extends Perm
+case object RequiredChannelFeatureMissing extends Perm
 case object UnknownNextPeer extends Perm
 case class AmountBelowMinimum(amountMsat: Long, update: ChannelUpdate) extends Update
-case class InsufficientFee(amountMsat: Long, update: ChannelUpdate) extends Update
+case class FeeInsufficient(amountMsat: Long, update: ChannelUpdate) extends Update
 case class IncorrectCltvExpiry(expiry: Long, update: ChannelUpdate) extends Update
 case class ExpiryTooSoon(update: ChannelUpdate) extends Update
+case class ChannelDisabled(flags: BinaryData, update: ChannelUpdate) extends Update
 case object UnknownPaymentHash extends Perm
 case object IncorrectPaymentAmount extends Perm
-case object FinalExpiryTooSoon extends Perm
+case object FinalExpiryTooSoon extends FailureMessage
+case class FinalIncorrectCltvExpiry(expiry: Long) extends FailureMessage
+case class FinalIncorrectHtlcAmount(amountMsat: Long) extends FailureMessage
 // @formatter:on
 
 object FailureMessageCodecs {
@@ -53,14 +57,18 @@ object FailureMessageCodecs {
     .typecase(BADONION | PERM | 4, sha256Codec.as[InvalidOnionVersion])
     .typecase(BADONION | PERM | 5, sha256Codec.as[InvalidOnionHmac])
     .typecase(BADONION | PERM | 6, sha256Codec.as[InvalidOnionKey])
-    .typecase(7, provide(TemporaryChannelFailure))
+    .typecase(UPDATE | 7, (("channelUpdate" | channelUpdateCodec)).as[TemporaryChannelFailure])
     .typecase(PERM | 8, provide(PermanentChannelFailure))
+    .typecase(PERM | 9, provide(RequiredChannelFeatureMissing))
     .typecase(PERM | 10, provide(UnknownNextPeer))
-    .typecase(UPDATE | 11, (("amountMsat" | uint32) :: ("channelUpdate" | channelUpdateCodec)).as[AmountBelowMinimum])
-    .typecase(UPDATE | 12, (("amountMsat" | uint32) :: ("channelUpdate" | channelUpdateCodec)).as[InsufficientFee])
+    .typecase(UPDATE | 11, (("amountMsat" | uint64) :: ("channelUpdate" | channelUpdateCodec)).as[AmountBelowMinimum])
+    .typecase(UPDATE | 12, (("amountMsat" | uint64) :: ("channelUpdate" | channelUpdateCodec)).as[FeeInsufficient])
     .typecase(UPDATE | 13, (("expiry" | uint32) :: ("channelUpdate" | channelUpdateCodec)).as[IncorrectCltvExpiry])
     .typecase(UPDATE | 14, (("channelUpdate" | channelUpdateCodec)).as[ExpiryTooSoon])
+    .typecase(UPDATE | 20, (("flags" | binarydata(2)) :: ("channelUpdate" | channelUpdateCodec)).as[ChannelDisabled])
     .typecase(PERM | 15, provide(UnknownPaymentHash))
     .typecase(PERM | 16, provide(IncorrectPaymentAmount))
-    .typecase(PERM | 17, provide(FinalExpiryTooSoon))
+    .typecase(17, provide(FinalExpiryTooSoon))
+    .typecase(18, (("expiry" | uint32)).as[FinalIncorrectCltvExpiry])
+    .typecase(19, (("amountMsat" | uint32)).as[FinalIncorrectHtlcAmount])
 }

eclair-core/src/main/scala/fr/acinq/eclair/wire/FixedSizeStrictCodec.scala

@@ -0,0 +1,59 @@
+package fr.acinq.eclair.wire
+
+import scodec.bits.{BitVector, ByteVector}
+import scodec.{Attempt, Codec, DecodeResult, Err, SizeBound, codecs}
+
+/**
+  *
+  * REMOVE THIS A NEW VERSION OF SCODEC IS RELEASED THAT INCLUDES CHANGES MADE IN
+  * https://github.com/scodec/scodec/pull/99/files
+  *
+  * Created by PM on 02/06/2017.
+  */
+final class FixedSizeStrictCodec[A](size: Long, codec: Codec[A]) extends Codec[A] {
+
+  override def sizeBound = SizeBound.exact(size)
+
+  override def encode(a: A) = for {
+    encoded <- codec.encode(a)
+    result <- {
+      if (encoded.size != size)
+        Attempt.failure(Err(s"[$a] requires ${encoded.size} bits but field is fixed size of exactly $size bits"))
+      else
+        Attempt.successful(encoded.padTo(size))
+    }
+  } yield result
+
+  override def decode(buffer: BitVector) = {
+    if (buffer.size == size) {
+      codec.decode(buffer.take(size)) map { res =>
+        DecodeResult(res.value, buffer.drop(size))
+      }
+    } else {
+      Attempt.failure(Err(s"expected exactly $size bits but got ${buffer.size} bits"))
+    }
+  }
+
+  override def toString = s"fixedSizeBitsStrict($size, $codec)"
+}
+
+object FixedSizeStrictCodec {
+  /**
+    * Encodes by returning the supplied byte vector if its length is `size` bytes, otherwise returning error;
+    * decodes by taking `size * 8` bits from the supplied bit vector and converting to a byte vector.
+    *
+    * @param size number of bits to encode/decode
+    * @group bits
+    */
+  def bytesStrict(size: Int): Codec[ByteVector] = new Codec[ByteVector] {
+    private val codec = new FixedSizeStrictCodec(size * 8L, codecs.bits).xmap[ByteVector](_.toByteVector, _.toBitVector)
+
+    def sizeBound = codec.sizeBound
+
+    def encode(b: ByteVector) = codec.encode(b)
+
+    def decode(b: BitVector) = codec.decode(b)
+
+    override def toString = s"bytesStrict($size)"
+  }
+}

eclair-core/src/main/scala/fr/acinq/eclair/wire/LightningMessageCodecs.scala

@@ -3,10 +3,11 @@ package fr.acinq.eclair.wire
 import java.math.BigInteger
 import java.net.{Inet4Address, Inet6Address, InetAddress, InetSocketAddress}
 
-import fr.acinq.bitcoin.Crypto.{Point, PublicKey, Scalar}
+import fr.acinq.bitcoin.Crypto.{Point, PrivateKey, PublicKey, Scalar}
 import fr.acinq.bitcoin.{BinaryData, Crypto}
-import fr.acinq.eclair.crypto.Generators
-import fr.acinq.eclair.wire
+import fr.acinq.eclair.crypto.{Generators, Sphinx}
+import fr.acinq.eclair.wire.FixedSizeStrictCodec.bytesStrict
+import fr.acinq.eclair.{UInt64, wire}
 import scodec.bits.{BitVector, ByteVector}
 import scodec.codecs._
 import scodec.{Attempt, Codec, Err}
@@ -21,7 +22,9 @@ object LightningMessageCodecs {
   // (for something smarter see https://github.com/yzernik/bitcoin-scodec/blob/master/src/main/scala/io/github/yzernik/bitcoinscodec/structures/UInt64.scala)
   val uint64: Codec[Long] = int64.narrow(l => if (l >= 0) Attempt.Successful(l) else Attempt.failure(Err(s"overflow for value $l")), l => l)
 
-  def binarydata(size: Int): Codec[BinaryData] = bytes(size).xmap(d => BinaryData(d.toArray), d => ByteVector(d.data))
+  val uint64ex: Codec[UInt64] = bytes(8).xmap(b => UInt64(b.toArray), a => ByteVector(a.underlying.toByteArray).takeRight(8).padLeft(8))
+
+  def binarydata(size: Int): Codec[BinaryData] = limitedSizeBytes(size, bytesStrict(size).xmap(d => BinaryData(d.toArray), d => ByteVector(d.data)))
 
   def varsizebinarydata: Codec[BinaryData] = variableSizeBytes(uint16, bytes.xmap(d => BinaryData(d.toArray), d => ByteVector(d.data)))
 
@@ -37,7 +40,10 @@ object LightningMessageCodecs {
       .typecase(2, ipv6address) ~ uint16)
       .xmap(x => new InetSocketAddress(x._1, x._2), x => (x.getAddress, x.getPort))
 
-  def listofsocketaddresses: Codec[List[InetSocketAddress]] = listOfN(uint16, socketaddress)
+  // this one is a bit different from most other codecs: the first 'len' element is * not * the number of items
+  // in the list but rather the  number of bytes of the encoded list. The rationale is once we've read this
+  // number of bytes we can just skip to the next field
+  def listofsocketaddresses: Codec[List[InetSocketAddress]] = variableSizeBytes(uint16, list(socketaddress))
 
   def signature: Codec[BinaryData] = Codec[BinaryData](
     (der: BinaryData) => bytes(64).encode(ByteVector(der2wire(der).toArray)),
@@ -50,12 +56,17 @@ object LightningMessageCodecs {
   )
 
   def point: Codec[Point] = Codec[Point](
-    (point: Point) => bytes(33).encode(ByteVector(point.toBin(true).toArray)),
+    (point: Point) => bytes(33).encode(ByteVector(point.toBin(compressed = true).toArray)),
     (wire: BitVector) => bytes(33).decode(wire).map(_.map(b => Point(b.toArray)))
   )
 
+  def privateKey: Codec[PrivateKey] = Codec[PrivateKey](
+    (priv: PrivateKey) => bytes(32).encode(ByteVector(priv.value.toBin.toArray)),
+    (wire: BitVector) => bytes(32).decode(wire).map(_.map(b => PrivateKey(b.toArray, compressed = true)))
+  )
+
   def publicKey: Codec[PublicKey] = Codec[PublicKey](
-    (pub: PublicKey) => bytes(33).encode(ByteVector(pub.value.toBin(true).toArray)),
+    (pub: PublicKey) => bytes(33).encode(ByteVector(pub.value.toBin(compressed = true).toArray)),
     (wire: BitVector) => bytes(33).decode(wire).map(_.map(b => PublicKey(b.toArray)))
   )
 
@@ -72,7 +83,7 @@ object LightningMessageCodecs {
 
   def rgb: Codec[(Byte, Byte, Byte)] = bytes(3).xmap(buf => (buf(0), buf(1), buf(2)), t => ByteVector(t._1, t._2, t._3))
 
-  def zeropaddedstring(size: Int): Codec[String] = fixedSizeBytes(32, utf8).xmap(s => s.takeWhile(_ != '\0'), s => s)
+  def zeropaddedstring(size: Int): Codec[String] = fixedSizeBytes(32, utf8).xmap(s => s.takeWhile(_ != '\u0000'), s => s)
 
   def der2wire(signature: BinaryData): BinaryData = {
     require(Crypto.isDERSignature(signature), s"invalid DER signature $signature")
@@ -102,14 +113,20 @@ object LightningMessageCodecs {
   val pongCodec: Codec[Pong] =
     ("data" | varsizebinarydata).as[Pong]
 
+  val channelReestablishCodec: Codec[ChannelReestablish] = (
+    ("channelId" | binarydata(32)) ::
+      ("nextLocalCommitmentNumber" | uint64) ::
+      ("nextRemoteRevocationNumber" | uint64)).as[ChannelReestablish]
+
   val openChannelCodec: Codec[OpenChannel] = (
-    ("temporaryChannelId" | binarydata(32)) ::
+    ("chainHash" | binarydata(32)) ::
+      ("temporaryChannelId" | binarydata(32)) ::
       ("fundingSatoshis" | uint64) ::
       ("pushMsat" | uint64) ::
       ("dustLimitSatoshis" | uint64) ::
-      ("maxHtlcValueInFlightMsat" | uint64) ::
+      ("maxHtlcValueInFlightMsat" | uint64ex) ::
       ("channelReserveSatoshis" | uint64) ::
-      ("htlcMinimumMsat" | uint32) ::
+      ("htlcMinimumMsat" | uint64) ::
       ("feeratePerKw" | uint32) ::
       ("toSelfDelay" | uint16) ::
       ("maxAcceptedHtlcs" | uint16) ::
@@ -117,21 +134,24 @@ object LightningMessageCodecs {
       ("revocationBasepoint" | point) ::
       ("paymentBasepoint" | point) ::
       ("delayedPaymentBasepoint" | point) ::
-      ("firstPerCommitmentPoint" | point)).as[OpenChannel]
+      ("htlcBasepoint" | point) ::
+      ("firstPerCommitmentPoint" | point) ::
+      ("channelFlags" | byte)).as[OpenChannel]
 
   val acceptChannelCodec: Codec[AcceptChannel] = (
     ("temporaryChannelId" | binarydata(32)) ::
       ("dustLimitSatoshis" | uint64) ::
-      ("maxHtlcValueInFlightMsat" | uint64) ::
+      ("maxHtlcValueInFlightMsat" | uint64ex) ::
       ("channelReserveSatoshis" | uint64) ::
+      ("htlcMinimumMsat" | uint64) ::
       ("minimumDepth" | uint32) ::
-      ("htlcMinimumMsat" | uint32) ::
       ("toSelfDelay" | uint16) ::
       ("maxAcceptedHtlcs" | uint16) ::
       ("fundingPubkey" | publicKey) ::
       ("revocationBasepoint" | point) ::
       ("paymentBasepoint" | point) ::
       ("delayedPaymentBasepoint" | point) ::
+      ("htlcBasepoint" | point) ::
       ("firstPerCommitmentPoint" | point)).as[AcceptChannel]
 
   val fundingCreatedCodec: Codec[FundingCreated] = (
@@ -160,10 +180,10 @@ object LightningMessageCodecs {
   val updateAddHtlcCodec: Codec[UpdateAddHtlc] = (
     ("channelId" | binarydata(32)) ::
       ("id" | uint64) ::
-      ("amountMsat" | uint32) ::
-      ("expiry" | uint32) ::
+      ("amountMsat" | uint64) ::
       ("paymentHash" | binarydata(32)) ::
-      ("onionRoutingPacket" | binarydata(1254))).as[UpdateAddHtlc]
+      ("expiry" | uint32) ::
+      ("onionRoutingPacket" | binarydata(Sphinx.PacketLength))).as[UpdateAddHtlc]
 
   val updateFulfillHtlcCodec: Codec[UpdateFulfillHtlc] = (
     ("channelId" | binarydata(32)) ::
@@ -203,12 +223,13 @@ object LightningMessageCodecs {
       ("bitcoinSignature" | signature)).as[AnnouncementSignatures]
 
   val channelAnnouncementWitnessCodec = (
-    ("shortChannelId" | int64) ::
-      ("nodeId1" | binarydata(33)) ::
-      ("nodeId2" | binarydata(33)) ::
-      ("bitcoinKey1" | binarydata(33)) ::
-      ("bitcoinKey2" | binarydata(33)) ::
-      ("features" | varsizebinarydata))
+    ("features" | varsizebinarydata) ::
+      ("chainHash" | binarydata(32)) ::
+      ("shortChannelId" | int64) ::
+      ("nodeId1" | publicKey) ::
+      ("nodeId2" | publicKey) ::
+      ("bitcoinKey1" | publicKey) ::
+      ("bitcoinKey2" | publicKey))
 
   val channelAnnouncementCodec: Codec[ChannelAnnouncement] = (
     ("nodeSignature1" | signature) ::
@@ -218,11 +239,11 @@ object LightningMessageCodecs {
       channelAnnouncementWitnessCodec).as[ChannelAnnouncement]
 
   val nodeAnnouncementWitnessCodec = (
-    ("timestamp" | uint32) ::
-      ("nodeId" | binarydata(33)) ::
+    ("features" | varsizebinarydata) ::
+      ("timestamp" | uint32) ::
+      ("nodeId" | publicKey) ::
       ("rgbColor" | rgb) ::
       ("alias" | zeropaddedstring(32)) ::
-      ("features" | varsizebinarydata) ::
       ("addresses" | listofsocketaddresses))
 
   val nodeAnnouncementCodec: Codec[NodeAnnouncement] = (
@@ -230,11 +251,12 @@ object LightningMessageCodecs {
       nodeAnnouncementWitnessCodec).as[NodeAnnouncement]
 
   val channelUpdateWitnessCodec = (
-    ("shortChannelId" | int64) ::
+    ("chainHash" | binarydata(32)) ::
+      ("shortChannelId" | int64) ::
       ("timestamp" | uint32) ::
       ("flags" | binarydata(2)) ::
       ("cltvExpiryDelta" | uint16) ::
-      ("htlcMinimumMsat" | uint32) ::
+      ("htlcMinimumMsat" | uint64) ::
       ("feeBaseMsat" | uint32) ::
       ("feeProportionalMillionths" | uint32))
 
@@ -262,15 +284,17 @@ object LightningMessageCodecs {
     .typecase(133, revokeAndAckCodec)
     .typecase(134, updateFeeCodec)
     .typecase(135, updateFailMalformedHtlcCodec)
+    .typecase(136, channelReestablishCodec)
     .typecase(256, channelAnnouncementCodec)
     .typecase(257, nodeAnnouncementCodec)
     .typecase(258, channelUpdateCodec)
     .typecase(259, announcementSignaturesCodec)
 
   val perHopPayloadCodec: Codec[PerHopPayload] = (
-    ("realm" | ignore(8 * 1)) ::
+    ("realm" | constant(ByteVector.fromByte(0))) ::
+      ("channel_id" | uint64) ::
       ("amt_to_forward" | uint64) ::
       ("outgoing_cltv_value" | int32) :: // we use a signed int32, it is enough to store cltv for 40 000 years
-      ("unused_with_v0_version_on_header" | ignore(8 * 7))).as[PerHopPayload]
+      ("unused_with_v0_version_on_header" | ignore(8 * 12))).as[PerHopPayload]
 
 }

eclair-core/src/main/scala/fr/acinq/eclair/wire/LightningMessageTypes.scala

@@ -4,6 +4,7 @@ import java.net.InetSocketAddress
 
 import fr.acinq.bitcoin.BinaryData
 import fr.acinq.bitcoin.Crypto.{Point, PublicKey, Scalar}
+import fr.acinq.eclair.UInt64
 
 /**
   * Created by PM on 15/11/2016.
@@ -30,11 +31,17 @@ case class Ping(pongLength: Int, data: BinaryData) extends SetupMessage
 
 case class Pong(data: BinaryData) extends SetupMessage
 
-case class OpenChannel(temporaryChannelId: BinaryData,
+case class ChannelReestablish(
+                               channelId: BinaryData,
+                               nextLocalCommitmentNumber: Long,
+                               nextRemoteRevocationNumber: Long) extends ChannelMessage with HasChannelId
+
+case class OpenChannel(chainHash: BinaryData,
+                       temporaryChannelId: BinaryData,
                        fundingSatoshis: Long,
                        pushMsat: Long,
                        dustLimitSatoshis: Long,
-                       maxHtlcValueInFlightMsat: Long,
+                       maxHtlcValueInFlightMsat: UInt64,
                        channelReserveSatoshis: Long,
                        htlcMinimumMsat: Long,
                        feeratePerKw: Long,
@@ -44,20 +51,23 @@ case class OpenChannel(temporaryChannelId: BinaryData,
                        revocationBasepoint: Point,
                        paymentBasepoint: Point,
                        delayedPaymentBasepoint: Point,
-                       firstPerCommitmentPoint: Point) extends ChannelMessage with HasTemporaryChannelId
+                       htlcBasepoint: Point,
+                       firstPerCommitmentPoint: Point,
+                       channelFlags: Byte) extends ChannelMessage with HasTemporaryChannelId
 
 case class AcceptChannel(temporaryChannelId: BinaryData,
                          dustLimitSatoshis: Long,
-                         maxHtlcValueInFlightMsat: Long,
+                         maxHtlcValueInFlightMsat: UInt64,
                          channelReserveSatoshis: Long,
-                         minimumDepth: Long,
                          htlcMinimumMsat: Long,
+                         minimumDepth: Long,
                          toSelfDelay: Int,
                          maxAcceptedHtlcs: Int,
                          fundingPubkey: PublicKey,
                          revocationBasepoint: Point,
                          paymentBasepoint: Point,
                          delayedPaymentBasepoint: Point,
+                         htlcBasepoint: Point,
                          firstPerCommitmentPoint: Point) extends ChannelMessage with HasTemporaryChannelId
 
 case class FundingCreated(temporaryChannelId: BinaryData,
@@ -81,8 +91,8 @@ case class ClosingSigned(channelId: BinaryData,
 case class UpdateAddHtlc(channelId: BinaryData,
                          id: Long,
                          amountMsat: Long,
-                         expiry: Long,
                          paymentHash: BinaryData,
+                         expiry: Long,
                          onionRoutingPacket: BinaryData) extends HtlcMessage with UpdateMessage with HasChannelId
 
 case class UpdateFulfillHtlc(channelId: BinaryData,
@@ -118,23 +128,25 @@ case class ChannelAnnouncement(nodeSignature1: BinaryData,
                                nodeSignature2: BinaryData,
                                bitcoinSignature1: BinaryData,
                                bitcoinSignature2: BinaryData,
+                               features: BinaryData,
+                               chainHash: BinaryData,
                                shortChannelId: Long,
-                               nodeId1: BinaryData,
-                               nodeId2: BinaryData,
-                               bitcoinKey1: BinaryData,
-                               bitcoinKey2: BinaryData,
-                               features: BinaryData) extends RoutingMessage
+                               nodeId1: PublicKey,
+                               nodeId2: PublicKey,
+                               bitcoinKey1: PublicKey,
+                               bitcoinKey2: PublicKey) extends RoutingMessage
 
 case class NodeAnnouncement(signature: BinaryData,
+                            features: BinaryData,
                             timestamp: Long,
-                            nodeId: BinaryData,
+                            nodeId: PublicKey,
                             rgbColor: (Byte, Byte, Byte),
                             alias: String,
-                            features: BinaryData,
                             // TODO: check address order + support padding data (type 0)
                             addresses: List[InetSocketAddress]) extends RoutingMessage
 
 case class ChannelUpdate(signature: BinaryData,
+                         chainHash: BinaryData,
                          shortChannelId: Long,
                          timestamp: Long,
                          flags: BinaryData,
@@ -143,5 +155,6 @@ case class ChannelUpdate(signature: BinaryData,
                          feeBaseMsat: Long,
                          feeProportionalMillionths: Long) extends RoutingMessage
 
-case class PerHopPayload(amt_to_forward: Long,
-                         outgoing_cltv_value: Int)
+case class PerHopPayload(channel_id: Long,
+                         amtToForward: Long,
+                         outgoingCltvValue: Int)

eclair-core/src/test/java/fr/acinq/eclair/crypto/Curve25519.java

@@ -27,13 +27,13 @@ import java.util.Arrays;
 
 /**
  * Implementation of the Curve25519 elliptic curve algorithm.
- *
+ * <p>
  * This implementation is based on that from arduinolibs:
  * https://github.com/rweather/arduinolibs
- *
+ * <p>
  * Differences in this version are due to using 26-bit limbs for the
  * representation instead of the 8/16/32-bit limbs in the original.
- *
+ * <p>
  * References: http://cr.yp.to/ecdh.html, RFC 7748
  */
 public final class Curve25519 {
@@ -61,25 +61,24 @@ public final class Curve25519 {
     /**
      * Constructs the temporary state holder for Curve25519 evaluation.
      */
-    private Curve25519()
-    {
+    private Curve25519() {
         // Allocate memory for all of the temporary variables we will need.
-        x_1 = new int [NUM_LIMBS_255BIT];
-        x_2 = new int [NUM_LIMBS_255BIT];
-        x_3 = new int [NUM_LIMBS_255BIT];
-        z_2 = new int [NUM_LIMBS_255BIT];
-        z_3 = new int [NUM_LIMBS_255BIT];
-        A = new int [NUM_LIMBS_255BIT];
-        B = new int [NUM_LIMBS_255BIT];
-        C = new int [NUM_LIMBS_255BIT];
-        D = new int [NUM_LIMBS_255BIT];
-        E = new int [NUM_LIMBS_255BIT];
-        AA = new int [NUM_LIMBS_255BIT];
-        BB = new int [NUM_LIMBS_255BIT];
-        DA = new int [NUM_LIMBS_255BIT];
-        CB = new int [NUM_LIMBS_255BIT];
-        t1 = new long [NUM_LIMBS_510BIT];
-        t2 = new int [NUM_LIMBS_510BIT];
+        x_1 = new int[NUM_LIMBS_255BIT];
+        x_2 = new int[NUM_LIMBS_255BIT];
+        x_3 = new int[NUM_LIMBS_255BIT];
+        z_2 = new int[NUM_LIMBS_255BIT];
+        z_3 = new int[NUM_LIMBS_255BIT];
+        A = new int[NUM_LIMBS_255BIT];
+        B = new int[NUM_LIMBS_255BIT];
+        C = new int[NUM_LIMBS_255BIT];
+        D = new int[NUM_LIMBS_255BIT];
+        E = new int[NUM_LIMBS_255BIT];
+        AA = new int[NUM_LIMBS_255BIT];
+        BB = new int[NUM_LIMBS_255BIT];
+        DA = new int[NUM_LIMBS_255BIT];
+        CB = new int[NUM_LIMBS_255BIT];
+        t1 = new long[NUM_LIMBS_510BIT];
+        t2 = new int[NUM_LIMBS_510BIT];
     }
 
 
@@ -102,8 +101,8 @@ public final class Curve25519 {
         Arrays.fill(BB, 0);
         Arrays.fill(DA, 0);
         Arrays.fill(CB, 0);
-        Arrays.fill(t1,  0L);
-        Arrays.fill(t2,  0);
+        Arrays.fill(t1, 0L);
+        Arrays.fill(t2, 0);
     }
 
     /**
@@ -112,8 +111,7 @@ public final class Curve25519 {
      *
      * @param x The number to reduce, and the result.
      */
-    private void reduceQuick(int[] x)
-    {
+    private void reduceQuick(int[] x) {
         int index, carry;
 
         // Perform a trial subtraction of (2^255 - 19) from "x" which is
@@ -142,12 +140,11 @@ public final class Curve25519 {
      * Reduce a number modulo 2^255 - 19.
      *
      * @param result The result.
-     * @param x The value to be reduced.  This array will be
-     * modified during the reduction.
-     * @param size The number of limbs in the high order half of x.
+     * @param x      The value to be reduced.  This array will be
+     *               modified during the reduction.
+     * @param size   The number of limbs in the high order half of x.
      */
-    private void reduce(int[] result, int[] x, int size)
-    {
+    private void reduce(int[] result, int[] x, int size) {
         int index, limb, carry;
 
         // Calculate (x mod 2^255) + ((x / 2^255) * 19) which will
@@ -198,11 +195,10 @@ public final class Curve25519 {
      * Multiplies two numbers modulo 2^255 - 19.
      *
      * @param result The result.
-     * @param x The first number to multiply.
-     * @param y The second number to multiply.
+     * @param x      The first number to multiply.
+     * @param y      The second number to multiply.
      */
-    private void mul(int[] result, int[] x, int[] y)
-    {
+    private void mul(int[] result, int[] x, int[] y) {
         int i, j;
 
         // Multiply the two numbers to create the intermediate result.
@@ -220,10 +216,10 @@ public final class Curve25519 {
 
         // Propagate carries and convert back into 26-bit words.
         v = t1[0];
-        t2[0] = ((int)v) & 0x03FFFFFF;
+        t2[0] = ((int) v) & 0x03FFFFFF;
         for (i = 1; i < NUM_LIMBS_510BIT; ++i) {
             v = (v >> 26) + t1[i];
-            t2[i] = ((int)v) & 0x03FFFFFF;
+            t2[i] = ((int) v) & 0x03FFFFFF;
         }
 
         // Reduce the result modulo 2^255 - 19.
@@ -234,10 +230,9 @@ public final class Curve25519 {
      * Squares a number modulo 2^255 - 19.
      *
      * @param result The result.
-     * @param x The number to square.
+     * @param x      The number to square.
      */
-    private void square(int[] result, int[] x)
-    {
+    private void square(int[] result, int[] x) {
         mul(result, x, x);
     }
 
@@ -245,19 +240,18 @@ public final class Curve25519 {
      * Multiplies a number by the a24 constant, modulo 2^255 - 19.
      *
      * @param result The result.
-     * @param x The number to multiply by a24.
+     * @param x      The number to multiply by a24.
      */
-    private void mulA24(int[] result, int[] x)
-    {
+    private void mulA24(int[] result, int[] x) {
         long a24 = 121665;
         long carry = 0;
         int index;
         for (index = 0; index < NUM_LIMBS_255BIT; ++index) {
             carry += a24 * x[index];
-            t2[index] = ((int)carry) & 0x03FFFFFF;
+            t2[index] = ((int) carry) & 0x03FFFFFF;
             carry >>= 26;
         }
-        t2[NUM_LIMBS_255BIT] = ((int)carry) & 0x03FFFFFF;
+        t2[NUM_LIMBS_255BIT] = ((int) carry) & 0x03FFFFFF;
         reduce(result, t2, 1);
     }
 
@@ -265,11 +259,10 @@ public final class Curve25519 {
      * Adds two numbers modulo 2^255 - 19.
      *
      * @param result The result.
-     * @param x The first number to add.
-     * @param y The second number to add.
+     * @param x      The first number to add.
+     * @param y      The second number to add.
      */
-    private void add(int[] result, int[] x, int[] y)
-    {
+    private void add(int[] result, int[] x, int[] y) {
         int index, carry;
         carry = x[0] + y[0];
         result[0] = carry & 0x03FFFFFF;
@@ -284,11 +277,10 @@ public final class Curve25519 {
      * Subtracts two numbers modulo 2^255 - 19.
      *
      * @param result The result.
-     * @param x The first number to subtract.
-     * @param y The second number to subtract.
+     * @param x      The first number to subtract.
+     * @param y      The second number to subtract.
      */
-    private void sub(int[] result, int[] x, int[] y)
-    {
+    private void sub(int[] result, int[] x, int[] y) {
         int index, borrow;
 
         // Subtract y from x to generate the intermediate result.
@@ -316,11 +308,10 @@ public final class Curve25519 {
      * Conditional swap of two values.
      *
      * @param select Set to 1 to swap, 0 to leave as-is.
-     * @param x The first value.
-     * @param y The second value.
+     * @param x      The first value.
+     * @param y      The second value.
      */
-    private static void cswap(int select, int[] x, int[] y)
-    {
+    private static void cswap(int select, int[] x, int[] y) {
         int dummy;
         select = -select;
         for (int index = 0; index < NUM_LIMBS_255BIT; ++index) {
@@ -334,10 +325,9 @@ public final class Curve25519 {
      * Raise x to the power of (2^250 - 1).
      *
      * @param result The result.  Must not overlap with x.
-     * @param x The argument.
+     * @param x      The argument.
      */
-    private void pow250(int[] result, int[] x)
-    {
+    private void pow250(int[] result, int[] x) {
         int i, j;
 
         // The big-endian hexadecimal expansion of (2^250 - 1) is:
@@ -375,10 +365,9 @@ public final class Curve25519 {
      * Computes the reciprocal of a number modulo 2^255 - 19.
      *
      * @param result The result.  Must not overlap with x.
-     * @param x The argument.
+     * @param x      The argument.
      */
-    private void recip(int[] result, int[] x)
-    {
+    private void recip(int[] result, int[] x) {
         // The reciprocal is the same as x ^ (p - 2) where p = 2^255 - 19.
         // The big-endian hexadecimal expansion of (p - 2) is:
         // 7FFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFFF FFFFFFEB
@@ -401,8 +390,7 @@ public final class Curve25519 {
      *
      * @param s The 32-byte secret key.
      */
-    private void evalCurve(byte[] s)
-    {
+    private void evalCurve(byte[] s) {
         int sposn = 31;
         int sbit = 6;
         int svalue = s[sposn] | 0x40;
@@ -411,7 +399,7 @@ public final class Curve25519 {
 
         // Iterate over all 255 bits of "s" from the highest to the lowest.
         // We ignore the high bit of the 256-bit representation of "s".
-        for (;;) {
+        for (; ; ) {
             // Conditional swaps on entry to this bit but only if we
             // didn't swap on the previous bit.
             select = (svalue >> sbit) & 0x01;
@@ -464,14 +452,13 @@ public final class Curve25519 {
     /**
      * Evaluates the Curve25519 curve.
      *
-     * @param result Buffer to place the result of the evaluation into.
-     * @param offset Offset into the result buffer.
+     * @param result     Buffer to place the result of the evaluation into.
+     * @param offset     Offset into the result buffer.
      * @param privateKey The private key to use in the evaluation.
-     * @param publicKey The public key to use in the evaluation, or null
-     * if the base point of the curve should be used.
+     * @param publicKey  The public key to use in the evaluation, or null
+     *                   if the base point of the curve should be used.
      */
-    public static void eval(byte[] result, int offset, byte[] privateKey, byte[] publicKey)
-    {
+    public static void eval(byte[] result, int offset, byte[] privateKey, byte[] publicKey) {
         Curve25519 state = new Curve25519();
         try {
             // Unpack the public key value.  If null, use 9 as the base point.
@@ -501,11 +488,11 @@ public final class Curve25519 {
             }
 
             // Initialize the other temporary variables.
-            Arrays.fill(state.x_2, 0);			// x_2 = 1
+            Arrays.fill(state.x_2, 0);            // x_2 = 1
             state.x_2[0] = 1;
-            Arrays.fill(state.z_2, 0);			// z_2 = 0
+            Arrays.fill(state.z_2, 0);            // z_2 = 0
             System.arraycopy(state.x_1, 0, state.x_3, 0, state.x_1.length);  // x_3 = x_1
-            Arrays.fill(state.z_3, 0);			// z_3 = 1
+            Arrays.fill(state.z_3, 0);            // z_3 = 1
             state.z_3[0] = 1;
 
             // Evaluate the curve for every bit of the private key.
@@ -520,9 +507,9 @@ public final class Curve25519 {
                 int bit = (index * 8) % 26;
                 int word = (index * 8) / 26;
                 if (bit <= (26 - 8))
-                    result[offset + index] = (byte)(state.x_2[word] >> bit);
+                    result[offset + index] = (byte) (state.x_2[word] >> bit);
                 else
-                    result[offset + index] = (byte)((state.x_2[word] >> bit) | (state.x_2[word + 1] << (26 - bit)));
+                    result[offset + index] = (byte) ((state.x_2[word] >> bit) | (state.x_2[word + 1] << (26 - bit)));
             }
         } finally {
             // Clean up all temporary state before we exit.

eclair-core/src/test/resources/logback-test.xml

@@ -26,7 +26,7 @@
         </encoder>
     </appender-->
 
-    <logger name="fr.acinq.eclair.Pipe" level="DEBUG" />
+    <!--logger name="fr.acinq.eclair.channel" level="DEBUG"/-->
 
     <root level="INFO">
         <!--appender-ref ref="FILE"/>