Derive a Confidential MPT (XLS-0096) encryption keypair — the secp256k1 key
used to encrypt to, and decrypt from, a confidential balance and its inbox.
This is separate from an account's signing key.
Pass a seed to derive the keypair deterministically: the same seed always
yields the same key, so the ability to decrypt a confidential balance can
be recovered from a backed-up secret. Omit seed for a fresh random key.
Any family seed works — secp256k1 is forced regardless of the seed's
algorithm. Prefer a dedicated seed for confidential keys: reusing an
account's signing seed derives the same scalar and so extends that key's
trust boundary to the confidential crypto (WASM decryption + proof
generation) on top of transaction signing.
Parameters
Optionalseed: string
An optional family seed to derive from; a fresh secp256k1
seed is generated when omitted.
Derive a Confidential MPT (XLS-0096) encryption keypair — the secp256k1 key used to encrypt to, and decrypt from, a confidential balance and its inbox. This is separate from an account's signing key.
Pass a
seedto derive the keypair deterministically: the same seed always yields the same key, so the ability to decrypt a confidential balance can be recovered from a backed-up secret. Omitseedfor a fresh random key.Any family seed works — secp256k1 is forced regardless of the seed's algorithm. Prefer a dedicated seed for confidential keys: reusing an account's signing seed derives the same scalar and so extends that key's trust boundary to the confidential crypto (WASM decryption + proof generation) on top of transaction signing.