Add pending changelog for PR 3435

lightningdevkit · Dec 12, 2024 · f37ba47 · f37ba47
1 parent f94298d
commit f37ba47
Showing 1 changed file with 9 additions and 0 deletions.
diff --git a/pending_changelog/3435-authenticate-payment-receive-tlvs.txt b/pending_changelog/3435-authenticate-payment-receive-tlvs.txt
@@ -0,0 +1,9 @@
+## API Updates
+ * Payment `ReceiveTlvs` now contains an `authentication` field. It should be
+   set to `None` and then filled in with a nonce and the HMAC produced by
+   `ReceiveTlvs::hmac_for_offer_payment` when passing in the nonce (#3435).
+
+## Backwards Compatibility
+ * `ReceiveTlvs` for payments over `BlindedPaymentPath`s are now authenticated.
+   Any inbound payments for a preexisting `Bolt12Invoice` will therefore fail
+   (#3435).