AI-generated analysisPublished automatically and not human-verified. Validated context appears in community notes below.
← Watch feed
Informational 17 Bitcoin

Compute channel keys once on on startup (#3306)

Public commit record

What the developer wrote

Authored by Bastien Teinturier

86/100 · Strong
Compute channel keys once on on startup (#3306)

We compute channel keys when we load and verify channels from our
database, and pass them along instead of re-computing them later
(which can be expensive when done at scale).

Implemented by @sstone, with small modifications by @t-bast.
✓ Descriptive subject✓ Names a concrete action or component✓ Provides detailed explanatory context✓ Mentions testing or verification✓ Links an issue, advisory, or supporting reference
The short version

What changed, and why it matters

This commit is a performance optimization, not a security fix. It changes Eclair so that cryptographic channel keys are computed once when channels are loaded from the database at startup, then passed around with the channel data, instead of being recomputed every time they are needed. This reduces CPU work when many channels are active. There is no indication in the commit that it fixes a vulnerability or changes security behavior.

Recommended action

No security action required. Treat as routine performance refactor. Reviewers may optionally verify that channel key validation still occurs exactly once per channel at startup and that no code path bypasses validateSeed().

Security signals we found

01

No security-relevant behavioral change identified

02

Refactor moves key computation earlier in lifecycle

03

Seed validation logic preserved

04

No new input surface or trust boundary introduced

05

No mention of vulnerability, CVE, bug bounty, or security issue in commit message

Risk score

Why this scored 17/100

Our methodology →
Potential impact 2/30
Exploitability 0/25
Stealth signal 0/15
Affected reach 2/15
Confidence 9/10
Evidence quality 4/5
Human-validated context

Community notes

Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.

No validated notes yet.

The AI analysis stands alone for now. Submit a note if you can add evidence or important context.