Derive a canister master key from the subnet master key
To create the derived public key in VetKD, a two step derivation is performed. The first step creates a key that is specific to the canister that is making VetKD requests to the management canister, sometimes called canister master key.
This function can be used to compute canister master keys knowing just the subnet master key plus the canister identity. This avoids having to interact with the IC for performing this computation.
Return the bytestring encoding of the master public key
StaticdeserializeRead a MasterPublicKey from the bytestring encoding
Normally the bytes provided here will have been returned by
the vetkd_public_key management canister interface.
StaticproductionReturn the hardcoded master public key used on IC
This allows performing public key derivation offline
VetKD master key
The VetKD subnet contains a small number of master keys, from which canister keys are derived. In turn, many keys can be derived from the canister keys using a context string.