vetkd

Implement on-chain encryption with verifiable transport-key encrypted keys for canisters.

Updated Dec 18, 2025
One-click install
npx skills add https://github.com/Looping-AI/looping-control-plane --skill vetkd-looping-ai
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: vetkd
Source: https://github.com/Looping-AI/looping-control-plane/tree/main/.agents/skills/vetkd
Command: npx skills add https://github.com/Looping-AI/looping-control-plane --skill vetkd-looping-ai

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Implement on-chain encryption and verifiable key derivation to enable private, auditable canister data flows using vetKeys.

Core Features & Use Cases

  • Deterministic vetKey derivation across canisters and contexts.
  • Transport-key encrypted delivery of derived keys for secure client-side use.
  • Identity-Based Encryption (IBE) capabilities for encrypting to principals without prior key exchange.
  • Cross-language tooling and integration guidance (Rust, Motoko, TypeScript) with practical canister workflows.

Quick Start

Enable on-chain privacy by deriving vetKeys for your canister and encrypting data end-to-end.

Frequently Asked Questions about vetkd

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I implement on-chain encryption for canister data privacy?

You implement on-chain encryption by deriving verifiable vetKeys, which are encrypted with a transport key for secure client-side delivery, enabling private and auditable canister data flows.

What is Identity-Based Encryption (IBE) and how does it work with canister principals?

Identity-Based Encryption (IBE) allows encrypting data directly to principals without prior key exchange. It works by deriving vetKeys verifiably to enable secure, on-chain privacy workflows.

Do I need Rust or Motoko to use threshold cryptography for canister security?

You can use Rust, Motoko, or TypeScript tooling to implement threshold cryptography for canister security. The system provides integration guidance for applying vetKeys across these languages.

How do I manage master keys and handle public-key operations using vetKD?

Master-key handling and public-key operations are managed via cycle-based API usage through vetKD, which securely derives transport-key encrypted keys for client-side canister workflows.

Can I derive deterministic encryption keys across different canister contexts?

Yes, you can derive deterministic vetKeys across canisters and contexts. This allows consistent verifiable key derivation and transport-key encrypted delivery for secure data protection.

What are the limitations of using vetKeys for on-chain privacy?

Limitations include satisfying prerequisites like Rust, Motoko, or TypeScript tooling setup, managing cycle-based API usage costs, and handling master-key operations securely across subnets.