[Lightning-dev] [BOLT Draft] Onion Routing Spec

[Olaoluwa Osuntokun]

On Sun, Aug 21, 2016 at 1:46 PM Rusty Russell <rusty at rustcorp.com.au> wrote:

> > This may not fully solve the problem, since if one presumes that the
> > second-to-last hop is malicious, they can re-create a new onion blob
> > (presuming consistent hashes for each hop, of course).
>
> Great catch.  Oops...
>

During the whole payment negotiation process, the sender and receiver can
additionally agree on a shared secret-ish value (possibly the hash of the
contract) that should be included in the per-hop payload for the final hop.

If the portion of the per-hop payload doesn't match identically with this
value, then the payment should be rejected as a prior node has
unsuccessfully attempted re-create the onion packet.


-- Laolu
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.linuxfoundation.org/pipermail/lightning-dev/attachments/20160822/1a545f72/attachment.html>