What changed, and why it matters
This commit only updates the release notes document. It adds two bullet points describing earlier work on BOLT 12 Merkle trees and BIP-340 signatures, plus related test vectors. No code, logic, or configuration was changed, so it cannot introduce or fix a security issue by itself.
No security action needed for this documentation-only commit. Review the referenced PR #11061 separately if assessing the security of the BOLT 12 signature implementation.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The diff is limited to docs/release-notes/release-notes-0.22.0.md. It adds release-note entries for PR #11061 covering Merkle tree construction over TLV records, BIP-340 Schnorr message signatures for BOLT 12 invoice requests/invoices, signature verification on decode, and new test vectors. The actual implementation and tests are in the referenced PR, not in this commit.
Changed components
docs/release-notes/release-notes-0.22.0.mdInspect captured patch +11 / −0
### docs/release-notes/release-notes-0.22.0.md
@@ -138,12 +138,23 @@
add checksumless bech32 encoding/decoding for BOLT 12 `lno`, `lnr`, and `lni`
strings with continuation line handling.
+* [BOLT 12 Merkle tree and BIP-340
+ signatures](https://github.com/lightningnetwork/lnd/pull/11061): add Merkle
+ tree construction over TLV records and BIP-340 Schnorr message signatures for
+ invoice requests and invoices, and verify the signature on read so a decoded
+ message with an invalid signature is rejected.
+
## Testing
* [BOLT 12 spec test vectors](https://github.com/lightningnetwork/lnd/pull/11001):
add spec test vectors for offer decoding and format string parsing in
`bolt12/test-vectors/`.
+* [BOLT 12 signature test
+ vectors](https://github.com/lightningnetwork/lnd/pull/11061): add spec test
+ vectors pinning Merkle tree construction and BIP-340 signature verification
+ in `bolt12/test-vectors/`.
+
## Database
## Code HealthWhy this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.