vetkd

Implement on-chain encryption with verifiable transport-key encrypted keys for canisters.

Updated Dec 18, 2025
One-click install
npx skills add https://github.com/Looping-AI/looping-control-plane --skill vetkd-looping-ai
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: vetkd
Source: https://github.com/Looping-AI/looping-control-plane/tree/main/.agents/skills/vetkd
Command: npx skills add https://github.com/Looping-AI/looping-control-plane --skill vetkd-looping-ai

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Implement on-chain encryption and verifiable key derivation to enable private, auditable canister data flows using vetKeys.

Core Features & Use Cases

  • Deterministic vetKey derivation across canisters and contexts.
  • Transport-key encrypted delivery of derived keys for secure client-side use.
  • Identity-Based Encryption (IBE) capabilities for encrypting to principals without prior key exchange.
  • Cross-language tooling and integration guidance (Rust, Motoko, TypeScript) with practical canister workflows.

Quick Start

Enable on-chain privacy by deriving vetKeys for your canister and encrypting data end-to-end.

Frequently Asked Questions about vetkd

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I implement on-chain encryption for canister data privacy?▼

You implement on-chain encryption by deriving verifiable vetKeys, which are encrypted with a transport key for secure client-side delivery, enabling private and auditable canister data flows.

What is Identity-Based Encryption (IBE) and how does it work with canister principals?▼

Identity-Based Encryption (IBE) allows encrypting data directly to principals without prior key exchange. It works by deriving vetKeys verifiably to enable secure, on-chain privacy workflows.

Do I need Rust or Motoko to use threshold cryptography for canister security?▼

You can use Rust, Motoko, or TypeScript tooling to implement threshold cryptography for canister security. The system provides integration guidance for applying vetKeys across these languages.

How do I manage master keys and handle public-key operations using vetKD?▼

Master-key handling and public-key operations are managed via cycle-based API usage through vetKD, which securely derives transport-key encrypted keys for client-side canister workflows.

Can I derive deterministic encryption keys across different canister contexts?▼

Yes, you can derive deterministic vetKeys across canisters and contexts. This allows consistent verifiable key derivation and transport-key encrypted delivery for secure data protection.

What are the limitations of using vetKeys for on-chain privacy?▼

Limitations include satisfying prerequisites like Rust, Motoko, or TypeScript tooling setup, managing cycle-based API usage costs, and handling master-key operations securely across subnets.