mirror of
https://github.com/SChernykh/p2pool.git
synced 2024-11-16 15:57:39 +00:00
124 lines
7.1 KiB
Markdown
124 lines
7.1 KiB
Markdown
## Merge mining tx_extra tag format
|
|
|
|
- TX_EXTRA_MERGE_MINING_TAG (1 byte)
|
|
- A single byte of value `3`
|
|
- Size (in bytes) of the following fields (1 byte)
|
|
- Technically a Varint, but it's always a single byte in practice
|
|
- Merkle tree parameters (1 or multiple bytes - 64-bit value encoded as varint)
|
|
- Merkle root hash (32 bytes)
|
|
|
|
## Merkle tree parameters
|
|
|
|
A 64-bit value encoding the total number of aux chains hashed into the Merkle root hash, and an aux nonce that defines the order of aux chains when building the Merkle tree.
|
|
|
|
Bit|Description
|
|
-|-
|
|
0...2|`N-1` - number of bits used to store `n_aux_chains` (value 0 means 1 bit, ..., value 7 means 8 bits)
|
|
3...`N`+2|`n_aux_chains-1` (value 0 means 1 chain, and so on)
|
|
`N`+3...`N`+34|`aux_nonce` (32-bit value)
|
|
`N`+35...63|reserved (current implementations must set these bits to all 0 when writing and ignore these bits when reading)
|
|
|
|
`N` must be the smallest number of bits enough to represent `n_aux_chains-1`
|
|
|
|
Reference code: `PoolBlock::encode_merkle_tree_data` and `PoolBlock::decode_merkle_tree_data` in `pool_block.h`
|
|
|
|
## Merkle tree construction's first step (Monero-specific)
|
|
|
|
If `n_aux_chains` is not a power of 2, their hashes are combined starting from the end of the list of hashes until there are a power of 2 hashes left. Then they're processed normally.
|
|
|
|
Example 1: 6 hashes `H0, H1, H2, H3, H4, H5` will be transformed into 4 hashes `H0, H1, H(H2|H3), H(H4|H5)` where `H` is the hash function and `|` is concatenation.
|
|
|
|
Example 2: 5 hashes `H0, H1, H2, H3, H4` will be transformed into 4 hashes `H0, H1, H2, H(H3|H4)`
|
|
|
|
## The order of hashes in the Merkle tree
|
|
|
|
Each of the aux chains must provide a 32-byte value `unique_id` that singles it out from any other chain. Genesis block's hash is a good choice for this value, but it can be anything else really.
|
|
|
|
`unique_id` is used to enforce the order in which aux hashes are added to the Merkle tree. This prevents an attack where miners can mine two versions of the same chain (for example when double spending) without any additional cost.
|
|
|
|
Forked chains can choose whether to keep their `unique_id` or change it. If they keep it, it will be impossible to merge mine with the chain they forked from beause they will always be assigned the same slot in the Merkle tree.
|
|
|
|
A deterministic pseudo-random function `SHA256(unique_id|nonce|"m") % N` is applied to determine which slot is used by which chain. `nonce` is brute-forced until all `N` chains are assigned different slots. This limits `N` to no more than 15-16 in practice.
|
|
|
|
Reference code: `get_aux_slot` and `find_aux_nonce` in `merkle.cpp`
|
|
|
|
## Proposed RPC API
|
|
|
|
P2Pool must be able to get mining jobs from merge mined chains and submit PoW solutions to them. All RPC calls here are sent as HTTP POST requests with `Content-Type: application/json`.
|
|
|
|
### merge_mining_get_chain_id
|
|
|
|
Gets a unique ID that identifies this merge mined chain and separates it from other chains.
|
|
|
|
Example request: `{"jsonrpc":"2.0","id":"0","method":"merge_mining_get_chain_id"}`
|
|
|
|
Response: a JSON containing these fields:
|
|
Field|Description
|
|
-|-
|
|
`chain_id`|A unique 32-byte hex-encoded value that identifies this merge mined chain.
|
|
|
|
Example response 1: `{"jsonrpc":"2.0","id":"0","result":{"chain_id":"0f28c4960d96647e77e7ab6d13b85bd16c7ca56f45df802cdc763a5e5c0c7863"}}`
|
|
|
|
Example response 2: `{"jsonrpc":"2.0","id":"0","error":"something went wrong"}`
|
|
|
|
### merge_mining_get_aux_block
|
|
|
|
Gets a blob of data (usually a new block for the merge mined chain) and its hash to be used for merge mining.
|
|
|
|
Example request: `{"jsonrpc":"2.0","id":"0","method":"merge_mining_get_aux_block","params":{"address":"MERGE_MINED_CHAIN_ADDRESS","aux_hash":"f6952d6eef555ddd87aca66e56b91530222d6e318414816f3ba7cf5bf694bf0f","height":3000000,"prev_id":"ad505b0be8a49b89273e307106fa42133cbd804456724c5e7635bd953215d92a"}}`
|
|
|
|
Request: a JSON containing these fields:
|
|
Field|Description
|
|
-|-
|
|
`address`|A wallet address on the merge mined chain
|
|
`aux_hash`|Merge mining job that is currently being used
|
|
`height`|Monero height
|
|
`prev_id`|Hash of the previous Monero block
|
|
|
|
Response: a JSON containing these fields:
|
|
Field|Description
|
|
-|-
|
|
`aux_blob`|A hex-encoded blob of data. Merge mined chain defines the contents of this blob. It's opaque to P2Pool and will not be changed by it.
|
|
`aux_diff`|Mining difficulty (decimal number).
|
|
`aux_hash`|A 32-byte hex-encoded hash of the `aux_blob`. Merge mined chain defines how exactly this hash is calculated. It's opaque to P2Pool.
|
|
|
|
If `aux_hash` is the same as in the request, all other fields will be ignored by P2Pool, so they don't have to be included in the response. Moreover, empty response will be interpreted as a response having the same `aux_hash` as in the request. This enables an efficient polling.
|
|
|
|
Example response 1: `{"jsonrpc":"2.0","id":"0","result":{"aux_blob":"4c6f72656d20697073756d","aux_diff":123456,"aux_hash":"f6952d6eef555ddd87aca66e56b91530222d6e318414816f3ba7cf5bf694bf0f"}}`
|
|
|
|
Example response 2: `{"jsonrpc":"2.0","id":"0","result":{}}`
|
|
|
|
### merge_mining_submit_solution
|
|
|
|
Submits a PoW solution for the merge mined chain's block. Note that when merge mining with Monero, the PoW solution is always a Monero block template with merge mining data included in it.
|
|
|
|
Example request: `{"jsonrpc":"2.0","id":"0","method":"merge_mining_submit_solution","params":{"aux_blob":"4c6f72656d20697073756d","aux_hash":"f6952d6eef555ddd87aca66e56b91530222d6e318414816f3ba7cf5bf694bf0f","blob":"...","merkle_proof":["hash1","hash2","hash3"],"path":3,"seed_hash":"22c3d47c595ae888b5d7fc304235f92f8854644d4fad38c5680a5d4a81009fcd"}}`
|
|
|
|
Request: a JSON containing these fields:
|
|
Field|Description
|
|
-|-
|
|
`aux_blob`|Blob of data returned by `merge_mining_get_aux_block`.
|
|
`aux_hash`|A 32-byte hex-encoded hash of the `aux_blob` - the same value that was returned by `merge_mining_get_aux_block`.
|
|
`blob`|Monero block template that has enough PoW to satisfy difficulty returned by `merge_mining_get_aux_block`. It also must have a merge mining tag in tx_extra of the coinbase transaction.
|
|
`merkle_proof`|A proof that `aux_hash` was included when calculating Merkle root hash from the merge mining tag
|
|
`path`|A path bitmap (32-bit unsigned integer) that complements `merkle_proof`
|
|
`seed_hash`|A 32-byte hex-encoded key that is used to [initialize RandomX dataset](https://github.com/tevador/RandomX/blob/master/doc/specs.md#7-dataset)
|
|
|
|
Note that `merkle_proof` only contains a vector of 32-byte hashes for `aux_hash` to be combined with. It can be verified by running this pseudo-code and functions from `merkle.cpp` (adapt it to your codebase):
|
|
|
|
`verify_merkle_proof(aux_hash, merkle_proof, get_aux_slot(unique_id, aux_nonce, n_aux_chains), n_aux_chains, merkle_root_hash)`
|
|
|
|
`aux_nonce` and `n_aux_chains` can be extracted from the Merkle tree parameters (see above).
|
|
`merkle_root_hash` can be extracted from the merge mining tag (see above).
|
|
|
|
`merkle_proof` can also be verified by `verify_merkle_proof(aux_hash, merkle_proof, path, merkle_root_hash)`
|
|
|
|
|
|
Response: a JSON containing these fields:
|
|
Field|Description
|
|
-|-
|
|
`status`|Block submit status
|
|
|
|
Example response 1: `{"jsonrpc":"2.0","id":"0","result":{"status":"accepted"}}`
|
|
|
|
Example response 2: `{"jsonrpc":"2.0","id":"0","error":{"code":-1,"message":"Block not accepted"}}`
|