assets: add no-csv option to the asset HTLC to support package relay

This commit enables package relayed HTLCs by making the CSV check in the
success path optional.

Author: bhandras

assets/htlc/script.go

@@ -11,9 +11,12 @@ import (
 	"github.com/lightningnetwork/lnd/lntypes"
 )
 
-// GenSuccessPathScript constructs an HtlcScript for the success payment path.
+// GenSuccessPathScript constructs a script for the success path of the HTLC
+// payment. Optionally includes a CHECKSEQUENCEVERIFY (CSV) of 1 if `csv` is
+// true, to prevent potential pinning attacks when the HTLC is not part of a
+// package relay.
 func GenSuccessPathScript(receiverHtlcKey *btcec.PublicKey,
-	swapHash lntypes.Hash) ([]byte, error) {
+	swapHash lntypes.Hash, csv bool) ([]byte, error) {
 
 	builder := txscript.NewScriptBuilder()
 
@@ -25,8 +28,11 @@ func GenSuccessPathScript(receiverHtlcKey *btcec.PublicKey,
 	builder.AddOp(txscript.OP_HASH160)
 	builder.AddData(input.Ripemd160H(swapHash[:]))
 	builder.AddOp(txscript.OP_EQUALVERIFY)
-	//builder.AddInt64(1)
-	//builder.AddOp(txscript.OP_CHECKSEQUENCEVERIFY)
+
+	if csv {
+		builder.AddInt64(1)
+		builder.AddOp(txscript.OP_CHECKSEQUENCEVERIFY)
+	}
 
 	return builder.Script()
 }
@@ -61,7 +67,9 @@ func CreateOpTrueLeaf() (asset.ScriptKey, txscript.TapLeaf,
 	tapLeaf := txscript.NewBaseTapLeaf(tapScript)
 	tree := txscript.AssembleTaprootScriptTree(tapLeaf)
 	rootHash := tree.RootNode.TapHash()
-	tapKey := txscript.ComputeTaprootOutputKey(asset.NUMSPubKey, rootHash[:])
+	tapKey := txscript.ComputeTaprootOutputKey(
+		asset.NUMSPubKey, rootHash[:],
+	)
 
 	merkleRootHash := tree.RootNode.TapHash()
 

assets/htlc/swapkit.go

@@ -50,11 +50,16 @@ type SwapKit struct {
 	// AddressParams is the chain parameters of the chain the deposit is
 	// being created on.
 	AddressParams *address.ChainParams
+
+	// CheckCSV indicates whether the success path script should include a
+	// CHECKSEQUENCEVERIFY check. This is used to prevent potential pinning
+	// attacks when the HTLC is not part of a package relay.
+	CheckCSV bool
 }
 
 // GetSuccessScript returns the success path script of the swap HTLC.
 func (s *SwapKit) GetSuccessScript() ([]byte, error) {
-	return GenSuccessPathScript(s.ReceiverPubKey, s.SwapHash)
+	return GenSuccessPathScript(s.ReceiverPubKey, s.SwapHash, s.CheckCSV)
 }
 
 // GetTimeoutScript returns the timeout path script of the swap HTLC.
@@ -337,7 +342,9 @@ func (s *SwapKit) CreatePreimageWitness(ctx context.Context,
 		Value:    sweepBtcPacket.Inputs[1].WitnessUtxo.Value,
 	}
 
-	//sweepBtcPacket.UnsignedTx.TxIn[0].Sequence = 1
+	if s.CheckCSV {
+		sweepBtcPacket.UnsignedTx.TxIn[0].Sequence = 1
+	}
 
 	successScript, err := s.GetSuccessScript()
 	if err != nil {