Update: There are now better ways to do this with Stardust: https://github.com/iotaledger/inx-poi or by using the metadata features for outputs which allow a user to store any data in the ledger state

Tangleproof

Library to send transactions and create a proof object for them which can be used at any later time to prove that a transaction exists in the Tangle (also called proof of inclusion).

Steps to verify a created proof:

Calculate message id and check if it's part of the indexation payload of the first transaction
Check for each transaction if one output is used as input in the next transaction
Check if latest output is known by a node

Rename .env.example to .env and replace the mnemonic with your own.

Then run it with cargo run --release, this will start a server with the following endpoints:

# Will get the message from the node, store it locally and add the message id in a transaction
GET /proof/create/:messageId
# Will return a proof object for a message that got stored before
GET /proof/get/:messageId
# Verifies a provided proof object
POST /proof/is-valid/
# Returns all message ids of stored messages
GET /messages/list
# Returns the raw message if it's stored locally
GET /messages/:messageId
# Returns the message with the transaction that has this position in the inclusion structure 
GET /messages/position/:index

The first time it runs you need to send 10 Mi to the first address, you can get testnet iotas from https://faucet.chrysalis-devnet.iota.cafe/.

To test it you could call http://localhost:3030/proof/create/ab81d15810ab56ea070c76c2e8338341a409ff4157f4090f891d3cf3ca1c213a with a new message id from https://explorer.iota.org/devnet, wait a few seconds because the transaction needs to be sent first and then call http://localhost:3030/proof/get/ab81d15810ab56ea070c76c2e8338341a409ff4157f4090f891d3cf3ca1c213a to get a proof for it.

For a proof to be valid one output of a transaction always needs to be used as input in the next transaction and the latest output needs to be known by a node. No other transaction could have created this output, because the hash would be different then, therefore it needs to be valid. The output is not available before the transaction is confirmed, so it can take a few seconds before a new proof is valid and if new proof transactions are created a new proof has to be requested after a while because the outputs for an older proof will be spent and forgotten.

If the creation of a proof for a message is requested the message will be requested from the node and stored locally in the db. The message id will then be included in an indexation payload in one transaction of the structure below.

The path for a message in transaction 10 would consist of the yellow transactions:

Longest proof path (rows + 1) * section_length (if all txs got sent without more than section length txs before a new row starts):

Moving the iotas with another wallet will destroy the proofs because the outputs will then no longer be the end of transaction chain from a proof and deleted from the nodes.

Thoralf-M/tangleproof

Tangleproof