package drand import ( "bytes" "context" "sync" "time" dchain "github.com/drand/drand/chain" dclient "github.com/drand/drand/client" hclient "github.com/drand/drand/client/http" dlog "github.com/drand/drand/log" gclient "github.com/drand/drand/lp2p/client" "github.com/drand/kyber" kzap "github.com/go-kit/kit/log/zap" "go.uber.org/zap/zapcore" "golang.org/x/xerrors" logging "github.com/ipfs/go-log/v2" pubsub "github.com/libp2p/go-libp2p-pubsub" "github.com/filecoin-project/go-state-types/abi" "github.com/filecoin-project/lotus/build" "github.com/filecoin-project/lotus/chain/beacon" "github.com/filecoin-project/lotus/chain/types" "github.com/filecoin-project/lotus/node/modules/dtypes" ) var log = logging.Logger("drand") type drandPeer struct { addr string tls bool } func (dp *drandPeer) Address() string { return dp.addr } func (dp *drandPeer) IsTLS() bool { return dp.tls } // DrandBeacon connects Lotus with a drand network in order to provide // randomness to the system in a way that's aligned with Filecoin rounds/epochs. // // We connect to drand peers via their public HTTP endpoints. The peers are // enumerated in the drandServers variable. // // The root trust for the Drand chain is configured from build.DrandChain. type DrandBeacon struct { client dclient.Client pubkey kyber.Point // seconds interval time.Duration drandGenTime uint64 filGenTime uint64 filRoundTime uint64 cacheLk sync.Mutex localCache map[uint64]types.BeaconEntry } // DrandHTTPClient interface overrides the user agent used by drand type DrandHTTPClient interface { SetUserAgent(string) } func NewDrandBeacon(genesisTs, interval uint64, ps *pubsub.PubSub, config dtypes.DrandConfig) (*DrandBeacon, error) { if genesisTs == 0 { panic("what are you doing this cant be zero") } drandChain, err := dchain.InfoFromJSON(bytes.NewReader([]byte(config.ChainInfoJSON))) if err != nil { return nil, xerrors.Errorf("unable to unmarshal drand chain info: %w", err) } dlogger := dlog.NewKitLoggerFrom(kzap.NewZapSugarLogger( log.SugaredLogger.Desugar(), zapcore.InfoLevel)) var clients []dclient.Client for _, url := range config.Servers { hc, err := hclient.NewWithInfo(url, drandChain, nil) if err != nil { return nil, xerrors.Errorf("could not create http drand client: %w", err) } hc.(DrandHTTPClient).SetUserAgent("drand-client-lotus/" + build.BuildVersion) clients = append(clients, hc) } opts := []dclient.Option{ dclient.WithChainInfo(drandChain), dclient.WithCacheSize(1024), dclient.WithLogger(dlogger), } if ps != nil { opts = append(opts, gclient.WithPubsub(ps)) } else { log.Info("drand beacon without pubsub") } client, err := dclient.Wrap(clients, opts...) if err != nil { return nil, xerrors.Errorf("creating drand client") } db := &DrandBeacon{ client: client, localCache: make(map[uint64]types.BeaconEntry), } db.pubkey = drandChain.PublicKey db.interval = drandChain.Period db.drandGenTime = uint64(drandChain.GenesisTime) db.filRoundTime = interval db.filGenTime = genesisTs return db, nil } func (db *DrandBeacon) Entry(ctx context.Context, round uint64) <-chan beacon.Response { out := make(chan beacon.Response, 1) if round != 0 { be := db.getCachedValue(round) if be != nil { out <- beacon.Response{Entry: *be} close(out) return out } } go func() { start := build.Clock.Now() log.Infow("start fetching randomness", "round", round) resp, err := db.client.Get(ctx, round) var br beacon.Response if err != nil { br.Err = xerrors.Errorf("drand failed Get request: %w", err) } else { br.Entry.Round = resp.Round() br.Entry.Data = resp.Signature() } log.Infow("done fetching randomness", "round", round, "took", build.Clock.Since(start)) out <- br close(out) }() return out } func (db *DrandBeacon) cacheValue(e types.BeaconEntry) { db.cacheLk.Lock() defer db.cacheLk.Unlock() db.localCache[e.Round] = e } func (db *DrandBeacon) getCachedValue(round uint64) *types.BeaconEntry { db.cacheLk.Lock() defer db.cacheLk.Unlock() v, ok := db.localCache[round] if !ok { return nil } return &v } func (db *DrandBeacon) VerifyEntry(curr types.BeaconEntry, prev types.BeaconEntry) error { if prev.Round == 0 { // TODO handle genesis better return nil } if be := db.getCachedValue(curr.Round); be != nil { // return no error if the value is in the cache already return nil } b := &dchain.Beacon{ PreviousSig: prev.Data, Round: curr.Round, Signature: curr.Data, } err := dchain.VerifyBeacon(db.pubkey, b) if err == nil { db.cacheValue(curr) } return err } func (db *DrandBeacon) MaxBeaconRoundForEpoch(filEpoch abi.ChainEpoch) uint64 { // TODO: sometimes the genesis time for filecoin is zero and this goes negative latestTs := ((uint64(filEpoch) * db.filRoundTime) + db.filGenTime) - db.filRoundTime dround := (latestTs - db.drandGenTime) / uint64(db.interval.Seconds()) return dround } var _ beacon.RandomBeacon = (*DrandBeacon)(nil)