keys

Jul 30, 2026

Changes in this version

+ var ErrInvalidAccountIndex = errors.New("keys: validator account index out of range (0..9999)")

+ var ErrStakingIdentityCodec = errors.New("keys: staking identity codec")

+ type PQValidatorKey struct

+ MLDSAPriv []byte

+ MLDSAPub []byte

+ MLKEMPriv []byte

+ MLKEMPub []byte

+ func DeriveValidatorPQ(mnemonic string, accountIndex uint32) (*PQValidatorKey, error)

+ func GenerateValidatorPQ() (*PQValidatorKey, error)

+ func (k *PQValidatorKey) StrictPQNodeID(chainID ids.ID) (ids.NodeID, error)

+ func (k *PQValidatorKey) Wipe()

+ type ProofOfPossession struct

+ ProofOfPossession [bls.SignatureLen]byte

+ PublicKey [bls.PublicKeyLen]byte

+ func NewProofOfPossession(sk bls.Signer) (*ProofOfPossession, error)

+ func (p *ProofOfPossession) Verify() error

+ type StakingIdentity struct

+ BLSSigner []byte

+ MLDSAPriv []byte

+ MLDSAPub []byte

+ MLKEMPriv []byte

+ MLKEMPub []byte

+ NodeLabel []byte

+ TLSCertPEM []byte

+ TLSKeyPEM []byte

+ func StakingIdentityFromValidatorKey(vk *ValidatorKey, pq *PQValidatorKey) *StakingIdentity

+ func UnmarshalStakingIdentity(blob []byte) (*StakingIdentity, error)

+ func (s *StakingIdentity) HasClassical() bool

+ func (s *StakingIdentity) HasStrictPQ() bool

+ func (s *StakingIdentity) Marshal() ([]byte, error)

+ func (s *StakingIdentity) Wipe()

Jun 2, 2026

Changes in this version

+ const HybridBoundDigestLen

+ const HybridClassicalDomain

+ const HybridClassicalLeafIndex

+ const HybridPQDomain

+ const HybridPQLeafIndex

+ const HybridSigDomain

+ var ErrHybridClassicalSign = errors.New("keys: hybrid classical sign failed")

+ var ErrHybridClassicalVerify = errors.New("keys: hybrid classical verification failed")

+ var ErrHybridNilKey = errors.New("keys: hybrid key has nil component")

+ var ErrHybridNilSig = errors.New("keys: hybrid signature has nil component")

+ var ErrHybridPQSign = errors.New("keys: hybrid PQ sign failed")

+ var ErrHybridPQVerify = errors.New("keys: hybrid PQ verification failed")

+ func HybridBoundDigest(pk *HybridPublicKey, msg []byte) ([]byte, error)

+ func HybridPublicKeyBytes(pk *HybridPublicKey) ([]byte, error)

+ func HybridVerify(pk *HybridPublicKey, msg []byte, sig *HybridSignature) error

+ type HybridIdentity struct

+ FullDigest ids.FullDigest

+ NodeID ids.NodeID

+ PublicKey *HybridPublicKey

+ PublicKeyBytes []byte

+ ServicePath string

+ TypedNodeID ids.TypedNodeID

+ func DeriveHybridIdentity(mnemonic, servicePath string) (*HybridIdentity, error)

+ func (h *HybridIdentity) Sign(msg []byte) (*HybridSignature, error)

+ func (h *HybridIdentity) Wipe()

+ type HybridPrivateKey struct

+ Classical *secp.PrivateKey

+ PQ *mldsa.PrivateKey

+ func (sk *HybridPrivateKey) Public() *HybridPublicKey

+ func (sk *HybridPrivateKey) Wipe()

+ type HybridPublicKey struct

+ Classical *secp.PublicKey

+ PQ *mldsa.PublicKey

+ type HybridSignature struct

+ Classical []byte

+ PQ []byte

+ func HybridSign(sk *HybridPrivateKey, msg []byte, randSource io.Reader) (*HybridSignature, error)

Jun 1, 2026

Changes in this version

+ const BIP44Purpose

+ const CoinTypeEVM

+ const CoinTypeUTXO

+ const EnvelopeDomain

+ var ErrInvalidServicePath = errors.New("keys: service path is required")

+ var ServiceChainID = mustHashChainID("lux-service-identity")

+ func ServiceChainIDForCluster(clusterSeed string) ids.ID

+ func VerifyServiceEnvelope(pubKey []byte, fullDigest ids.FullDigest, envelope, sig []byte) error

+ type ServiceIdentity struct

+ FullDigest ids.FullDigest

+ NodeID ids.NodeID

+ PublicKey []byte

+ ServicePath string

+ TypedNodeID ids.TypedNodeID

+ func NewServiceIdentity(mnemonic, servicePath string) (*ServiceIdentity, error)

+ func (s *ServiceIdentity) Sign(envelope []byte) ([]byte, error)

+ func (s *ServiceIdentity) Wipe()

Jun 1, 2026

Changes in this version

+ const CChainDecimalShift

+ const DefaultFeeAccountAmount

+ const DefaultValidatorStake

+ const GigaLux

+ const KiloLux

+ const LUXCoinType

+ const Lux

+ const MegaLux

+ const MicroLux

+ const TeraLux

+ func LoadMnemonic(ctx context.Context, addr, env, path string) (string, error)

+ func LoadMnemonicFromKMS(ctx context.Context, addr, env, path string) (string, error)

+ func SplitSecretPath(full string) (dir, name string)

+ type Allocation struct

+ ETHAddr string

+ InitialAmount uint64

+ LUXAddr string

+ UnlockSchedule []LockedAmount

+ type AllocationBuilder struct

+ func NewAllocationBuilder(networkID uint32, keys []*ValidatorKey) *AllocationBuilder

+ func (ab *AllocationBuilder) Build() (*GenesisAllocations, error)

+ func (ab *AllocationBuilder) WithAmount(amount uint64) *AllocationBuilder

+ func (ab *AllocationBuilder) WithFeeAccount(index int, extra uint64) *AllocationBuilder

+ func (ab *AllocationBuilder) WithImmediateUnlock() *AllocationBuilder

+ func (ab *AllocationBuilder) WithNoVesting() *AllocationBuilder

+ func (ab *AllocationBuilder) WithVesting(start uint64, interval uint64, periods int) *AllocationBuilder

+ type CChainAlloc struct

+ Balance string

+ type GenesisAllocations struct

+ CChainAllocations map[string]CChainAlloc

+ InitialStakedFunds []string

+ InitialStakers []Staker

+ PChainAllocations []Allocation

+ func GenerateAndAllocate(keyStore *KeyStore, networkID uint32, count int, prefix string, ...) (*GenesisAllocations, error)

+ func LoadAndAllocate(keyStore *KeyStore, networkID uint32, amountPerKey uint64) (*GenesisAllocations, error)

+ func MainnetAllocations(networkID uint32, keys []*ValidatorKey) (*GenesisAllocations, error)

+ func QuickAllocations(networkID uint32, keys []*ValidatorKey, amountPerKey uint64) (*GenesisAllocations, error)

+ func TestnetAllocations(networkID uint32, keys []*ValidatorKey) (*GenesisAllocations, error)

+ type KeyStore struct

+ func NewKeyStore(baseDir string) *KeyStore

+ func (ks *KeyStore) BaseDir() string

+ func (ks *KeyStore) GenerateMultiple(count int, prefix string) ([]*ValidatorKey, error)

+ func (ks *KeyStore) List() ([]string, error)

+ func (ks *KeyStore) Load(name string) (*ValidatorKey, error)

+ func (ks *KeyStore) LoadAll() ([]*ValidatorKey, error)

+ func (ks *KeyStore) Save(name string, vk *ValidatorKey) error

+ type LockedAmount struct

+ Amount uint64

+ Locktime uint64

+ type MnemonicReader interface

+ Close func()

+ GetAt func(ctx context.Context, path, name, env string) (string, error)

+ type Signer struct

+ ProofOfPossession string

+ PublicKey string

+ type Staker struct

+ DelegationFee uint32

+ NodeID string

+ RewardAddress string

+ Signer *Signer

+ type ValidatorKey struct

+ BLSPoP []byte

+ BLSPublicKey []byte

+ BLSSecretKey []byte

+ CChainAddr ids.ShortID

+ ECPrivateKey []byte

+ NodeID ids.NodeID

+ PChainAddr ids.ShortID

+ StakerCert []byte

+ StakerKey []byte

+ func DeriveValidatorFromMnemonic(mnemonic string, accountIndex uint32) (*ValidatorKey, error)

+ func DeriveValidatorsFromMnemonic(mnemonic string, count int) ([]*ValidatorKey, error)

+ func GenerateValidatorKey() (*ValidatorKey, error)

+ func LoadFromDir(nodeDir string) (*ValidatorKey, error)

+ func (vk *ValidatorKey) BLSKeyBase64() string

+ func (vk *ValidatorKey) BLSPoPHex() string

+ func (vk *ValidatorKey) BLSPublicKeyHex() string

+ func (vk *ValidatorKey) CChainAddrHex() string