Enum PublicKeyHandle 

pub enum PublicKeyHandle {
    ED25519(ED25519PublicKey),
    SECP256K1(Secp256K1PublicKey),
    MlDsa65(MlDsa65PublicKeyHandle),
}

How an access-key entry is referred to in the trie.

The trie stores ed25519 and secp256k1 access keys as their full public keys, but ML-DSA-65 access keys as a SHA3-256 hash of the pubkey (storage-efficiency optimization - see docs/architecture/how/post_quantum_signatures.md).

PublicKeyHandle is the type the trie-key layer reads and writes, and the type used by view-API responses that list an account’s keys. It is NOT a public key - the MlDsa65 variant cannot verify a signature. To verify, the caller needs the full pubkey, which is carried separately on the wire (in the transaction or action).

The variant set mirrors PublicKey for schemes that store the full key in the trie (ed25519, secp256k1), and replaces ML-DSA-65’s full-key variant with the SHA3-256 hash actually stored. This makes “a full ML-DSA-65 key in the trie” unrepresentable in the type system - the encoding/decoding round-trip becomes lossless and invalid combinations cannot be constructed.

Variants

ED25519(ED25519PublicKey)

Full ed25519 public key, as stored in the trie.

SECP256K1(Secp256K1PublicKey)

Full secp256k1 public key, as stored in the trie.

MlDsa65(MlDsa65PublicKeyHandle)

SHA3-256 hash of an ML-DSA-65 public key. The full pubkey is not stored on-chain; only this hash appears in the trie.

Implementations

impl PublicKeyHandle

pub fn trie_id_len(&self) -> usize

Length, in bytes, of this handle’s on-trie borsh encoding: the raw handle bytes plus a 1-byte borsh discriminant tag (the leading + 1 in each arm). For ML-DSA-65 the handle is the 32-byte SHA3-256 digest, not the full 1952-byte pubkey.

pub fn key_type(&self) -> KeyType

Key-type tag for this handle. All ML-DSA-65 entries report KeyType::MLDSA65; the underlying storage is the hash but the scheme is the same.

pub fn full_pubkey(&self) -> Option<PublicKey>

Returns the underlying full public key, if this handle carries one (ed25519 / secp256k1). For ML-DSA-65 entries the trie stores only a hash, so the full pubkey is not recoverable - returns None in that case.

TODO(post-quantum): every current caller treats the None case as “skip this entry” (fork-network and mirror tools), which means ML-DSA-65 access keys are silently dropped during network forking and mirroring. Grep for TODO(post-quantum) to find the call sites that need to be taught to recover the full pubkey (e.g. via a side index of pubkey-hash → pubkey, or via RPC lookup).

Trait Implementations

impl BorshDeserialize for PublicKeyHandle

fn deserialize_reader<R: Read>(rd: &mut R) -> Result<Self>

fn deserialize(buf: &mut &[u8]) -> Result<Self, Error>

Deserializes this instance from a given slice of bytes. Updates the buffer to point at the remaining bytes.

fn try_from_slice(v: &[u8]) -> Result<Self, Error>

Deserialize this instance from a slice of bytes.

fn try_from_reader<R>(reader: &mut R) -> Result<Self, Error>

where R: Read,

impl BorshSerialize for PublicKeyHandle

fn serialize<W: Write>(&self, writer: &mut W) -> Result<(), Error>

impl Clone for PublicKeyHandle

fn clone(&self) -> PublicKeyHandle

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for PublicKeyHandle

fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), Error>

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for PublicKeyHandle

fn deserialize<D: Deserializer<'de>>(d: D) -> Result<Self, D::Error>

Deserialize this value from the given Serde deserializer.

impl Display for PublicKeyHandle

fn fmt(&self, fmt: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for PublicKeyHandle

impl From<&PublicKey> for PublicKeyHandle

fn from(pk: &PublicKey) -> Self

Converts to this type from the input type.

impl From<MlDsa65PublicKeyHandle> for PublicKeyHandle

fn from(h: MlDsa65PublicKeyHandle) -> Self

Converts to this type from the input type.

impl From<PublicKey> for PublicKeyHandle

fn from(pk: PublicKey) -> Self

Converts to this type from the input type.

impl FromStr for PublicKeyHandle

type Err = ParseKeyError

The associated error which can be returned from parsing.

fn from_str(value: &str) -> Result<Self, Self::Err>

Parses a string s to return a value of this type.

impl Hash for PublicKeyHandle

fn hash<H: Hasher>(&self, state: &mut H)

Feeds this value into the given Hasher.

fn hash_slice<H>(data: &[Self], state: &mut H)

where H: Hasher, Self: Sized,

Feeds a slice of this type into the given Hasher.

impl Ord for PublicKeyHandle

fn cmp(&self, other: &PublicKeyHandle) -> Ordering

This method returns an Ordering between self and other.

fn max(self, other: Self) -> Self

where Self: Sized,

Compares and returns the maximum of two values.

fn min(self, other: Self) -> Self

where Self: Sized,

Compares and returns the minimum of two values.

fn clamp(self, min: Self, max: Self) -> Self

where Self: Sized,

Restrict a value to a certain interval.

impl PartialEq for PublicKeyHandle

fn eq(&self, other: &PublicKeyHandle) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl PartialOrd for PublicKeyHandle

fn partial_cmp(&self, other: &PublicKeyHandle) -> Option<Ordering>

This method returns an ordering between self and other values if one exists.

fn lt(&self, other: &Rhs) -> bool

Tests less than (for self and other) and is used by the < operator.

fn le(&self, other: &Rhs) -> bool

Tests less than or equal to (for self and other) and is used by the <= operator.

fn gt(&self, other: &Rhs) -> bool

Tests greater than (for self and other) and is used by the > operator.

fn ge(&self, other: &Rhs) -> bool

Tests greater than or equal to (for self and other) and is used by the >= operator.

impl Serialize for PublicKeyHandle

fn serialize<S: Serializer>(&self, s: S) -> Result<S::Ok, S::Error>

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for PublicKeyHandle