Struct KeyDeriver 

pub struct KeyDeriver { /* private fields */ }

Key derivation for BRC-42/BRC-43 protocols. KeyDeriver derives various types of keys using a root private key.

Supports deriving public and private keys, symmetric keys, and revealing key linkages, all using BRC-42 Type-42 derivation.

Implementations

impl KeyDeriver

pub fn new(private_key: PrivateKey) -> KeyDeriver

Create a new KeyDeriver from a root private key.

pub fn new_anyone() -> KeyDeriver

Create a KeyDeriver using the special “anyone” key (PrivateKey(1)).

pub fn root_key(&self) -> &PrivateKey

Returns a reference to the root private key.

pub fn identity_key(&self) -> PublicKey

Returns the public key corresponding to the root private key.

pub fn identity_key_hex(&self) -> String

Returns the identity key as a compressed DER hex string.

pub fn derive_private_key( &self, protocol: &Protocol, key_id: &str, counterparty: &Counterparty, ) -> Result<PrivateKey, WalletError>

Derive a private key for the given protocol, key ID, and counterparty.

pub fn derive_public_key( &self, protocol: &Protocol, key_id: &str, counterparty: &Counterparty, for_self: bool, ) -> Result<PublicKey, WalletError>

Derive a public key for the given protocol, key ID, and counterparty.

If for_self is true, derives the private child key first and returns its public key. If false, derives directly on the counterparty’s public key.

pub fn derive_symmetric_key( &self, protocol: &Protocol, key_id: &str, counterparty: &Counterparty, ) -> Result<SymmetricKey, WalletError>

Derive a symmetric key from the ECDH shared secret of the derived private and public keys.

The symmetric key is the x-coordinate of the shared secret point.

pub fn reveal_counterparty_secret( &self, counterparty: &Counterparty, ) -> Result<PublicKey, WalletError>

Reveal the counterparty shared secret as a public key point.

Cannot be used for counterparty type “self”.

pub fn reveal_specific_secret( &self, counterparty: &Counterparty, protocol: &Protocol, key_id: &str, ) -> Result<Vec<u8>, WalletError>

Reveal a specific secret for the given protocol and key ID.

Computes HMAC-SHA256 of the shared secret (compressed) and the invoice number string.