Struct Web3SDK 

pub struct Web3SDK { /* private fields */ }

Backend-agnostic Web3 capability handle used by engine contexts.

The engine does not know about any concrete backend (TEE gateway, host Web3 client, etc.). Every backend is supplied as a Web3ClientFeatures trait object; TEE-specific behaviour is expressed through Web3ClientFeatures::tee_attestation, so the engine itself stays free of any Web3 or TEE dependency.

Implementations

impl Web3SDK

pub fn from_web3(client: Arc<dyn Web3ClientFeatures>) -> Self

Wraps a Web3 client implementation.

pub fn not_implemented() -> Self

Returns a placeholder client whose operations fail with not implemented.

pub fn get_principal(&self) -> Principal

Returns the principal associated with the underlying client.

pub async fn sign_envelope( &self, message_digest: [u8; 32], ) -> Result<SignedEnvelope, BoxError>

Signs a challenge digest with the underlying client identity.

pub async fn tee_attestation( &self, public_key: ByteBufB64, nonce: Vec<u8>, ) -> Result<Option<TEEInfo>, BoxError>

Produces optional TEE attestation bound to the authentication public key and challenge nonce. Non-TEE clients return Ok(None).

Trait Implementations

impl HttpFeatures for &Web3SDK

async fn https_call( &self, url: &str, method: Method, headers: Option<HeaderMap>, body: Option<Vec<u8>>, ) -> Result<Response, BoxError>

Makes an HTTPs request

Arguments

• url - Target URL, should start with https://
• method - HTTP method (GET, POST, etc.)
• headers - Optional HTTP headers
• body - Optional request body (default empty)

async fn https_signed_call( &self, url: &str, method: Method, message_digest: [u8; 32], headers: Option<HeaderMap>, body: Option<Vec<u8>>, ) -> Result<Response, BoxError>

Makes a signed HTTPs request with message authentication

Arguments

• url - Target URL
• method - HTTP method (GET, POST, etc.)
• message_digest - 32-byte message digest for signing
• headers - Optional HTTP headers
• body - Optional request body (default empty)

async fn https_signed_rpc<T>( &self, endpoint: &str, method: &str, args: impl Serialize + Send, ) -> Result<T, BoxError>

where T: DeserializeOwned,

Makes a signed CBOR-encoded RPC call

Arguments

• endpoint - URL endpoint to send the request to
• method - RPC method name to call
• args - Arguments to serialize as CBOR and send with the request

impl KeysFeatures for &Web3SDK

async fn a256gcm_key( &self, derivation_path: Vec<Vec<u8>>, ) -> Result<[u8; 32], BoxError>

Derives a 256-bit AES-GCM key from the given derivation path.

async fn ed25519_sign_message( &self, derivation_path: Vec<Vec<u8>>, message: &[u8], ) -> Result<[u8; 64], BoxError>

Signs a message using Ed25519 signature scheme from the given derivation path.

async fn ed25519_verify( &self, derivation_path: Vec<Vec<u8>>, message: &[u8], signature: &[u8], ) -> Result<(), BoxError>

Verifies an Ed25519 signature from the given derivation path.

async fn ed25519_public_key( &self, derivation_path: Vec<Vec<u8>>, ) -> Result<[u8; 32], BoxError>

Returns the Ed25519 public key for the given derivation path.

async fn secp256k1_sign_message_bip340( &self, derivation_path: Vec<Vec<u8>>, message: &[u8], ) -> Result<[u8; 64], BoxError>

Signs a message using Secp256k1 BIP340 Schnorr signature from the given derivation path.

async fn secp256k1_verify_bip340( &self, derivation_path: Vec<Vec<u8>>, message: &[u8], signature: &[u8], ) -> Result<(), BoxError>

Verifies a Secp256k1 BIP340 Schnorr signature from the given derivation path.

async fn secp256k1_sign_message_ecdsa( &self, derivation_path: Vec<Vec<u8>>, message: &[u8], ) -> Result<[u8; 64], BoxError>

Signs a SHA-256 digest using Secp256k1 ECDSA from the given derivation path. The message will be hashed with SHA-256 before signing.

async fn secp256k1_sign_digest_ecdsa( &self, derivation_path: Vec<Vec<u8>>, message_hash: &[u8], ) -> Result<[u8; 64], BoxError>

Signs a message using Secp256k1 ECDSA signature from the given derivation path.

async fn secp256k1_verify_ecdsa( &self, derivation_path: Vec<Vec<u8>>, message_hash: &[u8], signature: &[u8], ) -> Result<(), BoxError>

Verifies a Secp256k1 ECDSA signature from the given derivation path.

async fn secp256k1_public_key( &self, derivation_path: Vec<Vec<u8>>, ) -> Result<[u8; 33], BoxError>

Returns the compressed SEC1-encoded Secp256k1 public key for the given derivation path.