Struct Secp256k1PublicKey 

pub struct Secp256k1PublicKey { /* private fields */ }

Available on crate feature secp256k1 only.

A Secp256k1 ECDSA public key.

Implementations

impl Secp256k1PublicKey

pub fn from_bytes(bytes: &[u8]) -> AptosResult<Self>

Creates a public key from bytes in any accepted encoding.

Accepts all of the following:

• 33-byte SEC1 compressed (0x02/0x03 prefix)
• 65-byte SEC1 uncompressed (0x04 prefix)
• 64-byte raw X || Y affine coordinates (the Aptos on-chain encoding, with the leading 0x04 marker dropped)

Errors

Returns AptosError::InvalidPublicKey if the bytes do not decode to a valid Secp256k1 public key in one of the accepted encodings.

pub fn from_hex(hex_str: &str) -> AptosResult<Self>

Creates a public key from a hex string.

Errors

Returns AptosError::Hex if the hex string is invalid. Returns AptosError::InvalidPublicKey if the decoded bytes do not represent a valid Secp256k1 public key in one of the encodings accepted by Self::from_bytes (33-byte compressed, 65-byte SEC1 uncompressed, or 64-byte raw X || Y).

pub fn from_aip80(s: &str) -> AptosResult<Self>

Creates a public key from AIP-80 format string.

AIP-80 format: secp256k1-pub-0x{hex_bytes}

Errors

Returns an error if the format is invalid or the key bytes are invalid.

pub fn to_bytes(&self) -> Vec<u8>

Returns the public key as compressed bytes (33 bytes).

pub fn to_uncompressed_bytes(&self) -> Vec<u8>

Returns the public key in SEC1 uncompressed encoding (65 bytes, leading 0x04 marker).

Most Aptos on-chain APIs use the raw 64-byte encoding (the X || Y coordinates with the 0x04 marker dropped) – see Self::to_raw_bytes. This method is retained for callers that need the SEC1 form.

pub fn to_raw_bytes(&self) -> [u8; 64]

Returns the public key as the raw 64 bytes of the X || Y affine coordinates, without the leading SEC1 0x04 uncompressed-point marker.

This is the encoding expected by aptos-stdlib’s secp256k1::ecdsa_raw_public_key_from_64_bytes and by the AnyPublicKey::Secp256k1Ecdsa variant on-chain (each variant carries a vector<u8> of length 64).

pub fn to_hex(&self) -> String

Returns the public key as a hex string (compressed format).

pub fn to_aip80(&self) -> String

Returns the public key in AIP-80 format (compressed).

AIP-80 format: secp256k1-pub-0x{hex_bytes}

pub fn verify( &self, message: &[u8], signature: &Secp256k1Signature, ) -> AptosResult<()>

Verifies a signature against a message.

Security

Rejects high-S signatures before verification, matching Aptos on-chain behavior. This is a defense-in-depth check; signatures created through this SDK’s from_bytes are already guaranteed to be low-S.

Errors

Returns AptosError::SignatureVerificationFailed if the signature has a high-S value, is invalid, or does not match the message.

pub fn verify_prehashed( &self, hash: &[u8; 32], signature: &Secp256k1Signature, ) -> AptosResult<()>

Verifies a signature against a pre-hashed message.

Security

Rejects high-S signatures before verification, matching Aptos on-chain behavior.

Errors

Returns AptosError::SignatureVerificationFailed if the signature has a high-S value, is invalid, or does not match the hash.

pub fn to_address(&self) -> AccountAddress

Derives the account address for this public key.

Uses the SingleKey authentication scheme (scheme_id = 2): auth_key = SHA3-256(BCS(AnyPublicKey::Secp256k1Ecdsa) || 0x02)

Where BCS(AnyPublicKey::Secp256k1Ecdsa) = 0x01 || ULEB128(65) || uncompressed_public_key

Trait Implementations

impl Clone for Secp256k1PublicKey

fn clone(&self) -> Secp256k1PublicKey

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Copy for Secp256k1PublicKey

impl Debug for Secp256k1PublicKey

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'de> Deserialize<'de> for Secp256k1PublicKey

fn deserialize<D>(deserializer: D) -> Result<Self, D::Error>

where D: Deserializer<'de>,

Deserialize this value from the given Serde deserializer.

impl Display for Secp256k1PublicKey

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Eq for Secp256k1PublicKey

impl PartialEq for Secp256k1PublicKey

fn eq(&self, other: &Secp256k1PublicKey) -> bool

Equality operator ==.

fn ne(&self, other: &Rhs) -> bool

Inequality operator !=.

impl PublicKey for Secp256k1PublicKey

const LENGTH: usize = SECP256K1_PUBLIC_KEY_LENGTH

The length of the public key in bytes.

fn from_bytes(bytes: &[u8]) -> AptosResult<Self>

Creates a public key from bytes.

fn to_bytes(&self) -> Vec<u8>

Returns the public key as bytes.

fn to_hex(&self) -> String

Returns the public key as a hex string with 0x prefix.

impl Serialize for Secp256k1PublicKey

fn serialize<S>(&self, serializer: S) -> Result<S::Ok, S::Error>

where S: Serializer,

Serialize this value into the given Serde serializer.

impl StructuralPartialEq for Secp256k1PublicKey

impl Verifier for Secp256k1PublicKey

type Signature = Secp256k1Signature

The signature type this verifier can check.

fn verify( &self, message: &[u8], signature: &Secp256k1Signature, ) -> AptosResult<()>

Verifies that the signature is valid for the given message.