Enhance wallet backup and recovery with a mnemonic hsm_secret and standard taproot wallet derivations#8400

Merged

rustyrussell merged 35 commits intoElementsProject:masterfrom

sangbida:bip39-hsm

Oct 26, 2025

Commits on Oct 24, 2025

common: add unified HSM secret handling module

sangbida
authored and
rustyrussell
committed
tools: update hsmtool to use the new hsm_secret API.

sangbida
authored and
rustyrussell
committed
hsmd: take the passphrase raw, not the derived secret.

sangbida
authored and
rustyrussell
committed
hsmd: use the new mnemonic-compatible hsm_secret routines.

sangbida
authored and
rustyrussell
committed
common: tal_wally_discard()
rustyrussell
committed
exposesecret: Add support for mnemonic-based HSM secrets

sangbida
authored and
rustyrussell
committed
common: refactor hsm_secret to {secret_data,len,type}

sangbida
authored and
rustyrussell
committed
hsmd/libhsmd: change hsmd_init to have secret_data and secret_len

sangbida
authored and
rustyrussell
committed
hsmd: add BIP86 wire scaffolding (derive/check), no behavior yet

sangbida
authored and
rustyrussell
committed
hsmd/libhsmd: add BIP86 base-key

sangbida
authored and
rustyrussell
committed
lightningd: store base and derive pubkeys locally

sangbida
authored and
rustyrussell
committed
wallet: scaffold BIP86 addrtype

sangbida
authored and
rustyrussell
committed
walletrpc: add addresstype "bip86"; make newaddr+listaddresses use it

sangbida
authored and
rustyrussell
committed
hsmd: find correct P2TR key for utxo

sangbida
authored and
rustyrussell
committed
hsmtool: change hsm_secret struct to have length awareness

sangbida
authored and
rustyrussell
committed
tests: add BIP86 support

sangbida
authored and
rustyrussell
committed
lightningd: scan outputs for BIP86 addresses

sangbida
authored and
rustyrussell
committed
test: Add a psbt test and an index boundary test

sangbida
authored and
rustyrussell
committed
options: remove --use-bip86-derivation

sangbida
authored and
rustyrussell
committed
utxo: remove UTXO_P2TR_BIP86 enum and consolidate to UTXO_P2TR

sangbida
authored and
rustyrussell
committed
hsmd_wire: add HSM wire protocol support for secret type detection

sangbida
authored and
rustyrussell
committed
wallet: update wallet address generation logic to use unified BIP86/BIP32 approach

sangbida
authored and
rustyrussell
committed
tests: Update test assertions and comments for unified derivation approach

sangbida
authored and
rustyrussell
committed
fuzz: translate fuzz-hsm_encryption to fuzz-hsm_secret.
rustyrussell
committed
hsm_encryption: delete hsm_encryption

sangbida
authored and
rustyrussell
committed
doc: change encrypted-hsm to hsm-passphrase

sangbida
authored and
rustyrussell
committed
schema: update schema to remove bip86 and add mnemonic to expose secret

sangbida
authored and
rustyrussell
committed
utils: add a generic mlock function with a destructor

sangbida
authored and
rustyrussell
committed
hsm_control: fixup! old comment

sangbida
authored and
rustyrussell
committed
hsm_secret: fixup! make read_line tidier

sangbida
authored and
rustyrussell
committed
ccan: update to get improved grab_file API, and adapt code.
rustyrussell
committed
common/hsm_secret: remove grab_file_contents now it has inspired grab_file_raw!
rustyrussell
committed
common: trivial changes from review.
rustyrussell
committed
hsmd_wire: remove hsmd_derive_bip86_key and add it to hsmd_init_reply_v4

sangbida
authored and
rustyrussell
committed

Commits on Oct 25, 2025

pytest: don't ask for p2tr addresses on liquid.

rustyrussell
authored and
sangbida
committed