AENET.cloud PUBLIC GATEWAY
K.PUBLIC.GATEWAY
ENไทย中文
wallet-section K.PUBLIC.WALLET_SECTION

WALLET / HARDWARE SIGNER

AENET Wallet — Hardware Signer

AENET Wallet hardware signer architecture — the Rust bridge sees the device but never the private key. Physical confirmation and signed PSBT result validation; no transaction bytes are public.

The hardware signer is a physically separate device across the signing boundary. The Rust bridge sees the device; it does not see the private key.

Snapshot version: 0.9.0 Published from a verified public snapshot

PRIVATE KEY REMAINS

OUTSIDE THE ONLINE WALLET DOMAIN

external signer holds the key material

SIGNING

EXTERNAL

physical confirmation on the hardware signer

PUBLIC SNAPSHOT

NO KEY MATERIAL

never contains keys or signer identifiers

Rust bridge visibility

The Rust bridge can see that a hardware signer device is present. It does not see, extract or store the private key.

Physical confirmation

Signing requires physical confirmation on the hardware signer itself. The online domain never signs.

Public statement

Private keys remain outside the online wallet domain. The public snapshot never contains key material or signer identifiers.

Flow

  1. Wallet prepares an unsigned PSBT intent
  2. Unsigned PSBT crosses the signing boundary
  3. Rust Bridge sees the device, never the key
  4. Hardware Signer physical confirmation on the device
  5. Signed PSBT returns across the boundary as a validation result; no PSBT bytes are public
  6. Wallet Validation the wallet validates the signed intent

Glossary

Related pages

Related systems