Solana 문서Solana의 토큰확장 프로그램기밀 전송

토큰 전송하기

한 토큰 계정에서 다른 토큰 계정으로 비공개적으로 토큰을 전송하는 방법

한 토큰 계정에서 다른 토큰 계정으로 비공개적으로 토큰을 전송하려면, 송신자와 수신자 모두 ConfidentialTransferAccount 상태로 구성되고 비공개 전송이 승인된 token account가 있어야 합니다. 송신자의 token account에는 전송할 수 있는 비공개 잔액이 있어야 합니다.

비공개적으로 토큰을 전송하려면:

  1. 클라이언트 측에서 세 가지 증명 을 생성합니다:

    동등성 증명 (CiphertextCommitmentEqualityProofData): 전송 후 새로운 가용 잔액 암호문이 해당 페더슨 커밋먼트와 일치하는지 확인하여, 소스 계정의 새로운 가용 잔액이 new_balance = current_balance - transfer_amount로 올바르게 계산되었는지 확인합니다.

    암호문 유효성 증명 (BatchedGroupedCiphertext3HandlesValidityProofData): 전송 금액 암호문이 세 당사자(소스, 목적지, 감사자) 모두에 대해 올바르게 생성되었는지 확인하여, 전송 금액이 각 당사자의 공개 키로 올바르게 암호화되었는지 확인합니다.

    범위 증명 (BatchedRangeProofU128Data): 새로운 가용 잔액과 전송 금액(하위/상위 비트로 분할됨)이 모두 음수가 아니며 지정된 범위 내에 있는지 확인합니다.

  2. 각 증명에 대해:

    • ZK ElGamal 증명 프로그램을 호출하여 증명 데이터를 검증합니다.
    • 증명 관련 메타데이터를 증명 "컨텍스트 상태" 계정에 저장하여 다른 명령에서 사용합니다.

  3. ConfidentialTransferInstruction::Transfer 명령을 호출하고, 증명 컨텍스트 상태 계정을 제공합니다.

  4. 증명 컨텍스트 상태 계정을 닫아 생성에 사용된 SOL을 회수합니다.

다음 다이어그램은 송신자의 token account에서 수신자의 token account로 토큰을 전송하는 과정을 보여줍니다.

Transfer Tokens

필요한 명령어

한 token account에서 다른 token account로 비공개적으로 토큰을 전송하려면 다음을 수행해야 합니다:

  • 클라이언트 측에서 등가 증명, 암호문 유효성 증명 및 범위 증명 생성
  • Zk ElGamal 증명 프로그램을 호출하여 증명을 검증하고 "컨텍스트 상태" 계정 초기화
  • ConfidentialTransferInstruction::Transfer 명령어를 호출하여 세 가지 증명 계정 제공
  • 세 가지 증명 계정을 닫아 rent 회수

spl_token_client 크레이트는 다음 메서드를 제공합니다:

  • confidential_transfer_create_context_state_account 메서드는 증명 계정을 생성합니다.
  • confidential_transfer_transfer 메서드는 Transfer 명령어를 호출합니다.
  • confidential_transfer_close_context_state_account 메서드는 증명 계정을 닫습니다.

예제 코드

다음 예제는 token account 간에 기밀 방식으로 토큰을 전송하는 방법을 보여줍니다.

예제를 실행하려면 다음 명령어를 사용하여 메인넷에서 복제한 Token Extensions Program으로 로컬 validator를 시작하세요. 로컬 validator를 시작하려면 Solana CLI가 설치되어 있어야 합니다.

Terminal
$ 
solana-test-validator --clone-upgradeable-program TokenzQdBNbLqP5VEhdkAS6EPFLC1PHnBqCXEpPxuEb --url https://api.mainnet-beta.solana.com -r

작성 시점에서는 기본 로컬 validator에서 Confidential Transfers가 활성화되어 있지 않습니다. 예제 코드를 실행하려면 메인넷 Token Extensions Program을 복제해야 합니다.

use anyhow::{Context, Result};

use solana_client::nonblocking::rpc_client::RpcClient;

use solana_sdk::{

    commitment_config::CommitmentConfig,

    signature::{Keypair, Signer},

    transaction::Transaction,

};

use spl_associated_token_account::{

    get_associated_token_address_with_program_id, instruction::create_associated_token_account,

};

use spl_token_client::{

    client::{ProgramRpcClient, ProgramRpcClientSendTransaction},

    spl_token_2022::{

        extension::{

            confidential_transfer::{

                account_info::{TransferAccountInfo, WithdrawAccountInfo},

                instruction::{configure_account, PubkeyValidityProofData},

                ConfidentialTransferAccount,

            },

            BaseStateWithExtensions, ExtensionType,

        },

        id as token_2022_program_id,

        instruction::reallocate,

        solana_zk_sdk::encryption::{auth_encryption::*, elgamal::*},

    },

    token::{ExtensionInitializationParams, Token},

};

use spl_token_confidential_transfer_proof_extraction::instruction::{ProofData, ProofLocation};

use spl_token_confidential_transfer_proof_generation::withdraw::WithdrawProofData;

use std::sync::Arc;



#[tokio::main]

async fn main() -> Result<()> {

    // Create connection to local test validator

    let rpc_client = Arc::new(RpcClient::new_with_commitment(

        String::from("http://localhost:8899"),

        CommitmentConfig::confirmed(),

    ));



    // Load the default Solana CLI keypair to use as the fee payer

    // This will be the wallet paying for the transaction fees

    // Use Arc to prevent multiple clones of the keypair

    let sender = Arc::new(load_keypair()?);

    println!("Sender: {}", sender.pubkey());



    // Generate a new keypair to use as the address of the token mint

    let mint = Keypair::new();

    println!("Mint keypair generated: {}", mint.pubkey());



    // Set up program client for Token client

    let program_client = ProgramRpcClient::new(rpc_client.clone(), ProgramRpcClientSendTransaction);



    // Number of decimals for the mint

    let decimals = 9;



    // Create a token client for the Token-2022 program

    // This provides high-level methods for token operations

    let token = Token::new(

        Arc::new(program_client),

        &token_2022_program_id(), // Use the Token-2022 program (newer version with extensions)

        &mint.pubkey(),           // Address of the new token mint

        Some(decimals),           // Number of decimal places

        sender.clone(),            // Fee payer for transactions

    );



    // Create extension initialization parameters for the mint

    // The ConfidentialTransferMint extension enables confidential (private) transfers of tokens

    let extension_initialization_params =

        vec![ExtensionInitializationParams::ConfidentialTransferMint {

            authority: Some(sender.pubkey()), // Authority that can modify confidential transfer settings

            auto_approve_new_accounts: true, // Automatically approve new confidential accounts

            auditor_elgamal_pubkey: None,    // None if no auditor

        }];



    // Create and initialize the mint with the ConfidentialTransferMint extension

    // This sends a transaction to create the new token mint

    let transaction_signature = token

        .create_mint(

            &sender.pubkey(),                 // Mint authority - can mint new tokens

            Some(&sender.pubkey()),           // Freeze authority - can freeze token accounts

            extension_initialization_params, // Add the ConfidentialTransferMint extension

            &[&mint],                        // Mint keypair needed as signer

        )

        .await?;



    println!("Mint Address: {}", mint.pubkey());

    println!(

        "Create Mint Transaction Signature: {}",

        transaction_signature

    );



    // ===== Create and configure token account for confidential transfers =====

    println!("\nCreate and Configure Sender Token Account");



    // Get the associated token account address for the owner

    let sender_token_account_pubkey = get_associated_token_address_with_program_id(

        &sender.pubkey(),          // Token account owner

        &mint.pubkey(),           // Mint

        &token_2022_program_id(), // Token program ID

    );

    println!("Sender Token Account Address: {}", sender_token_account_pubkey);



    // Step 1: Create the associated token account

    let create_associated_token_account_instruction = create_associated_token_account(

        &sender.pubkey(),          // Funding account

        &sender.pubkey(),          // Token account owner

        &mint.pubkey(),           // Mint

        &token_2022_program_id(), // Token program ID

    );



    // Step 2: Reallocate the token account to include space for the ConfidentialTransferAccount extension

    let reallocate_instruction = reallocate(

        &token_2022_program_id(),                      // Token program ID

        &sender_token_account_pubkey,                         // Token account

        &sender.pubkey(),                               // Payer

        &sender.pubkey(),                               // Token account owner

        &[&sender.pubkey()],                            // Signers

        &[ExtensionType::ConfidentialTransferAccount], // Extension to reallocate space for

    )?;



    // Step 3: Generate the ElGamal keypair and AES key for token account

    let sender_elgamal_keypair = ElGamalKeypair::new_from_signer(&sender, &sender_token_account_pubkey.to_bytes())

        .expect("Failed to create ElGamal keypair");

    let sender_aes_key = AeKey::new_from_signer(&sender, &sender_token_account_pubkey.to_bytes())

        .expect("Failed to create AES key");



    // The maximum number of Deposit and Transfer instructions that can

    // credit pending_balance before the ApplyPendingBalance instruction must be executed

    let maximum_pending_balance_credit_counter = 65536;



    // Initial token balance is 0

    let sender_decryptable_balance = sender_aes_key.encrypt(0);



    // Generate the proof data client-side

    let proof_data = PubkeyValidityProofData::new(&sender_elgamal_keypair)

        .map_err(|_| anyhow::anyhow!("Failed to generate proof data"))?;



    // Indicate that proof is included in the same transaction

    let proof_location =

        ProofLocation::InstructionOffset(1.try_into()?, ProofData::InstructionData(&proof_data));



    // Step 4: Create instructions to configure the account for confidential transfers

    let configure_account_instructions = configure_account(

        &token_2022_program_id(),               // Program ID

        &sender_token_account_pubkey,                  // Token account

        &mint.pubkey(),                         // Mint

        &sender_decryptable_balance.into(),            // Initial balance

        maximum_pending_balance_credit_counter, // Maximum pending balance credit counter

        &sender.pubkey(),                        // Token Account Owner

        &[],                                    // Additional signers

        proof_location,                         // Proof location

    )?;



    // Combine all instructions

    let mut instructions = vec![

        create_associated_token_account_instruction,

        reallocate_instruction,

    ];

    instructions.extend(configure_account_instructions);



    // Create and send the transaction

    let recent_blockhash = rpc_client.get_latest_blockhash().await?;

    let transaction = Transaction::new_signed_with_payer(

        &instructions,

        Some(&sender.pubkey()),

        &[&sender],

        recent_blockhash,

    );



    let transaction_signature = rpc_client

        .send_and_confirm_transaction(&transaction)

        .await?;

    println!(

        "Create Sender Token Account Transaction Signature: {}",

        transaction_signature

    );



    // Mint some tokens to the newly created token account

    // This gives the account some tokens to work with

    let mint_signature = token

        .mint_to(

            &sender_token_account_pubkey,            // Destination account

            &sender.pubkey(),                  // Mint authority

            100 * 10u64.pow(decimals as u32), // Amount (100 tokens)

            &[&sender],                        // Signers

        )

        .await?;



    println!("Mint Tokens to Sender Token Account Transaction Signature: {}", mint_signature);



    // Deposit the tokens to confidential state

    // This converts public tokens balance to confidential pending balance

    println!("Deposit tokens to confidential state pending balance");

    let deposit_signature = token

        .confidential_transfer_deposit(

            &sender_token_account_pubkey,            // The token account

            &sender.pubkey(),                  // Authority (owner) of the account

            100 * 10u64.pow(decimals as u32), // Amount to deposit (100 tokens)

            decimals,                         // Decimals of the token

            &[&sender],                        // Signers (owner must sign)

        )

        .await?;



    println!(

        "Confidential Transfer Deposit Signature: {}",

        deposit_signature

    );



    // Apply the pending balance to available balance

    println!("Apply pending balance to available balance");

    let apply_signature = token

        .confidential_transfer_apply_pending_balance(

            &sender_token_account_pubkey,    // The token account

            &sender.pubkey(),          // Authority (owner) of the account

            None,                     // Optional ApplyPendingBalanceAccountInfo, generated if not provided

            sender_elgamal_keypair.secret(), // ElGamal secret k    ey for decryption

            &sender_aes_key,                 // AES key for encryption of balance and transfer amounts

            &[&sender],                // Signers (owner must sign)

        )

        .await?;



    println!("Apply Pending Balance Signature: {}", apply_signature);



    // ===== Withdraw half of the tokens from confidential available balance =====

    println!("\nWithdraw tokens from confidential available balance to public balance");



    // Calculate the withdraw amount (half of the deposited amount)

    let withdraw_amount = 50 * 10u64.pow(decimals as u32); // Half of the 100 tokens deposited



    // Get the token account data to access the confidential transfer extension

    let token_account = token.get_account_info(&sender_token_account_pubkey).await?;



    // Unpack the ConfidentialTransferAccount extension portion of the token account data

    let extension_data = token_account.get_extension::<ConfidentialTransferAccount>()?;



    // Confidential Transfer extension information needed to construct a `Withdraw` instruction

    let withdraw_account_info = WithdrawAccountInfo::new(extension_data);



    // Create keypairs for the proof accounts

    let equality_proof_context_state_keypair = Keypair::new();

    let equality_proof_context_state_pubkey = equality_proof_context_state_keypair.pubkey();

    let range_proof_context_state_keypair = Keypair::new();

    let range_proof_context_state_pubkey = range_proof_context_state_keypair.pubkey();



    // Create a withdraw proof data

    let WithdrawProofData {

        equality_proof_data,

        range_proof_data,

    } = withdraw_account_info.generate_proof_data(

        withdraw_amount,  // Amount to withdraw from confidential available balance

        &sender_elgamal_keypair, // ElGamal keypair for encryption

        &sender_aes_key,         // AES key for encryption

    )?;



    // Generate the equality proof account

    println!("Creating equality proof context state account...");

    let equality_proof_signature = token

        .confidential_transfer_create_context_state_account(

            &equality_proof_context_state_pubkey, // Public key of the new equality proof context state account

            &sender.pubkey(), // Authority that can close the context state account

            &equality_proof_data, // Proof data for the equality proof verification

            false, // False: combine account creation and proof verification in one transaction

            &[&equality_proof_context_state_keypair], // Signer for the new account

        )

        .await?;

    println!(

        "Equality Proof Context State Account Signature: {}",

        equality_proof_signature

    );



    // Generate the range proof account

    println!("Creating range proof context state account...");

    let range_proof_signature = token

        .confidential_transfer_create_context_state_account(

            &range_proof_context_state_pubkey, // Public key of the new range proof context state account

            &sender.pubkey(),                   // Authority that can close the context state account

            &range_proof_data,                 // Proof data for the range proof verification

            true, // True: split account creation and proof verification into separate transactions (for large proofs)

            &[&range_proof_context_state_keypair], // Signer for the new account

        )

        .await?;

    println!(

        "Range Proof Context State Account Signature: {}",

        range_proof_signature

    );



    // Perform the withdrawal

    println!("Executing withdrawal transaction...");

    let withdraw_signature = token

        .confidential_transfer_withdraw(

            &sender_token_account_pubkey, // Token account to withdraw from

            &sender.pubkey(),       // Owner of the token account

            Some(&spl_token_client::token::ProofAccount::ContextAccount(

                equality_proof_context_state_pubkey, // Reference to the equality proof account

            )),

            Some(&spl_token_client::token::ProofAccount::ContextAccount(

                range_proof_context_state_pubkey, // Reference to the range proof account

            )),

            withdraw_amount,             // Amount to withdraw from confidential available balance

            decimals,                    // Decimal precision of the token

            Some(withdraw_account_info), // Data from confidential transfer extension for proof verification

            &sender_elgamal_keypair, // ElGamal keypair for encryption

            &sender_aes_key,         // AES key for encryption

            &[&sender],        // Owner must sign the transaction

        )

        .await?;

    println!("Withdraw Transaction Signature: {}", withdraw_signature);



    // Close the context state accounts to recover rent

    println!("Closing equality proof context state account...");

    let close_equality_signature = token

        .confidential_transfer_close_context_state_account(

            &equality_proof_context_state_pubkey, // Equality proof context state account to close

            &sender_token_account_pubkey,                // Account that will receive the lamports

            &sender.pubkey(),                      // Authority allowed to close the account

            &[&sender],                            // Authority must sign

        )

        .await?;

    println!(

        "Close Equality Proof Account Signature: {}",

        close_equality_signature

    );



    println!("Closing range proof context state account...");

    let close_range_signature = token

        .confidential_transfer_close_context_state_account(

            &range_proof_context_state_pubkey, // Range proof context state account to close

            &sender_token_account_pubkey,             // Account that will receive the lamports

            &sender.pubkey(),                   // Authority allowed to close the account

            &[&sender],                         // Authority must sign

        )

        .await?;

    println!(

        "Close Range Proof Account Signature: {}",

        close_range_signature

    );



    // ===== Create a recipient token account for confidential transfers =====

    println!("\nCreate Recipient Token Account");



    // Create a new keypair to use as the recipient account owner

    let recipient = Keypair::new();

    println!("Recipient: {}", recipient.pubkey());



    // Fund the recipient account with SOL for transaction fees

    let fund_signature = rpc_client

        .send_and_confirm_transaction(&Transaction::new_signed_with_payer(

            &[solana_sdk::system_instruction::transfer(

                &sender.pubkey(),

                &recipient.pubkey(),

                1_000_000_000, // 1 SOL

            )],

            Some(&sender.pubkey()),

            &[&sender],

            rpc_client.get_latest_blockhash().await?,

        ))

        .await?;

    println!("Fund Recipient Signature: {}", fund_signature);



    // Get the associated token account address for the recipient owner

    let recipient_token_account_pubkey = get_associated_token_address_with_program_id(

        &recipient.pubkey(),   // Token account owner

        &mint.pubkey(),           // Same mint as before

        &token_2022_program_id(), // Token program ID

    );

    println!(

        "Recipient Token Account Address: {}",

        recipient_token_account_pubkey

    );



    // Step 1: Create the associated token account

    let create_associated_token_account_instruction = create_associated_token_account(

        &recipient.pubkey(),          // Funding account

        &recipient.pubkey(),   // Token account owner

        &mint.pubkey(),           // Mint

        &token_2022_program_id(), // Token program ID

    );



    // Step 2: Reallocate the token account to include space for the ConfidentialTransferAccount extension

    let reallocate_instruction = reallocate(

        &token_2022_program_id(),                      // Token program ID

        &recipient_token_account_pubkey,                  // Token account

        &recipient.pubkey(),                               // Payer

        &recipient.pubkey(),                        // Token account owner

        &[&recipient.pubkey()],                     // Signers

        &[ExtensionType::ConfidentialTransferAccount], // Extension to reallocate space for

    )?;



    // Step 3: Generate the ElGamal keypair and AES key for recipient token account

    let recipient_elgamal_keypair =

        ElGamalKeypair::new_from_signer(&recipient, &recipient_token_account_pubkey.to_bytes())

            .expect("Failed to create ElGamal keypair");



    let recipient_aes_key =

        AeKey::new_from_signer(&recipient, &recipient_token_account_pubkey.to_bytes())

            .expect("Failed to create AES key");



    // Maximum pending balance credit counter, same as before

    let maximum_pending_balance_credit_counter = 65536;



    // Initial token balance is 0

    let decryptable_balance = recipient_aes_key.encrypt(0);



    // Generate the proof data client-side

    let proof_data = PubkeyValidityProofData::new(&recipient_elgamal_keypair)

        .map_err(|_| anyhow::anyhow!("Failed to generate proof data"))?;



    // Indicate that proof is included in the same transaction

    let proof_location =

        ProofLocation::InstructionOffset(1.try_into()?, ProofData::InstructionData(&proof_data));



    // Step 4: Create instructions to configure the account for confidential transfers

    let configure_account_instructions = configure_account(

        &token_2022_program_id(),               // Program ID

        &recipient_token_account_pubkey,           // Token account

        &mint.pubkey(),                         // Mint

        &decryptable_balance.into(),            // Initial balance

        maximum_pending_balance_credit_counter, // Maximum pending balance credit counter

        &recipient.pubkey(),                 // Token Account Owner

        &[],                                    // Additional signers

        proof_location,                         // Proof location

    )?;



    // Combine all instructions

    let mut instructions = vec![

        create_associated_token_account_instruction,

        reallocate_instruction,

    ];

    instructions.extend(configure_account_instructions);



    // Create and send the transaction

    let recent_blockhash = rpc_client.get_latest_blockhash().await?;

    let transaction = Transaction::new_signed_with_payer(

        &instructions,

        Some(&recipient.pubkey()),

        &[&recipient],

        recent_blockhash,

    );



    let transaction_signature = rpc_client

        .send_and_confirm_transaction(&transaction)

        .await?;

    println!(

        "Create Recipient Token Account Transaction Signature: {}",

        transaction_signature

    );



    // ===== Perform a confidential transfer from sender account to recipient account =====

    println!("\nPerform Confidential Transfer");



    let transfer_amount = 25 * 10u64.pow(decimals as u32); // Transfer 25 tokens



    // Get the token account data to access the confidential transfer extension state

    let token_account = token.get_account_info(&sender_token_account_pubkey).await?;

    let extension_data = token_account.get_extension::<ConfidentialTransferAccount>()?;



    // Create TransferAccountInfo from the extension data

    let transfer_account_info = TransferAccountInfo::new(extension_data);



    // Generate the proof data for the transfer

    let transfer_proof_data = transfer_account_info.generate_split_transfer_proof_data(

        transfer_amount,

        &sender_elgamal_keypair,

        &sender_aes_key,

        recipient_elgamal_keypair.pubkey(),

        None, // auditor ElGamal public key (none if no auditor)

    )?;



    // Create proof context accounts

    let equality_proof_context_state_keypair = Keypair::new();

    let equality_proof_context_state_pubkey = equality_proof_context_state_keypair.pubkey();



    let ciphertext_validity_proof_context_state_keypair = Keypair::new();

    let ciphertext_validity_proof_context_state_pubkey =

        ciphertext_validity_proof_context_state_keypair.pubkey();



    let range_proof_context_state_keypair = Keypair::new();

    let range_proof_context_state_pubkey = range_proof_context_state_keypair.pubkey();



    // Create context state account for equality proof

    println!("Creating equality proof context state account for transfer...");

    let equality_proof_signature = token

        .confidential_transfer_create_context_state_account(

            &equality_proof_context_state_pubkey, // Public key of the new equality proof context state account

            &sender.pubkey(), // Authority that can close the context state account

            &transfer_proof_data.equality_proof_data, // Proof data for the equality proof verification

            false, // False: combine account creation and proof verification in one transaction

            &[&equality_proof_context_state_keypair], // Signer for the new account

        )

        .await?;

    println!(

        "Transfer Equality Proof Account Signature: {}",

        equality_proof_signature

    );



    // Create context state account for ciphertext validity proof

    println!("Creating ciphertext validity proof context state account...");

    let ciphertext_proof_signature = token

        .confidential_transfer_create_context_state_account(

            &ciphertext_validity_proof_context_state_pubkey, // Public key of the new ciphertext validity proof context state account

            &sender.pubkey(), // Authority that can close the context state account

            &transfer_proof_data

                .ciphertext_validity_proof_data_with_ciphertext

                .proof_data, // Proof data for the ciphertext validity proof verification

            false, // False: combine account creation and proof verification in one transaction

            &[&ciphertext_validity_proof_context_state_keypair], // Signer for the new account

        )

        .await?;

    println!(

        "Ciphertext Validity Proof Account Signature: {}",

        ciphertext_proof_signature

    );



    // Create context state account for range proof

    println!("Creating range proof context state account...");

    let range_proof_signature = token

        .confidential_transfer_create_context_state_account(

            &range_proof_context_state_pubkey, // Public key of the new range proof context state account

            &sender.pubkey(),                   // Authority that can close the context state account

            &transfer_proof_data.range_proof_data, // Proof data for the range proof verification

            true, // True: split account creation and proof verification into separate transactions (for large proofs)

            &[&range_proof_context_state_keypair], // Signer for the new account

        )

        .await?;

    println!("Range Proof Account Signature: {}", range_proof_signature);



    // Execute the confidential transfer

    println!("Executing confidential transfer transaction...");

    // Create a ProofAccountWithCiphertext for the ciphertext validity proof

    let ciphertext_validity_proof_account_with_ciphertext =

        spl_token_client::token::ProofAccountWithCiphertext {

            proof_account: spl_token_client::token::ProofAccount::ContextAccount(

                ciphertext_validity_proof_context_state_pubkey,

            ),

            ciphertext_lo: transfer_proof_data

                .ciphertext_validity_proof_data_with_ciphertext

                .ciphertext_lo,

            ciphertext_hi: transfer_proof_data

                .ciphertext_validity_proof_data_with_ciphertext

                .ciphertext_hi,

        };



    let transfer_signature = token

        .confidential_transfer_transfer(

            &sender_token_account_pubkey,        // Source account

            &recipient_token_account_pubkey, // Destination account

            &sender.pubkey(),              // Authority (owner) of source account

            Some(&spl_token_client::token::ProofAccount::ContextAccount(

                equality_proof_context_state_pubkey, // Reference to the equality proof account

            )),

            Some(&ciphertext_validity_proof_account_with_ciphertext),

            Some(&spl_token_client::token::ProofAccount::ContextAccount(

                range_proof_context_state_pubkey, // Reference to the range proof account

            )),

            transfer_amount,                 // Amount to transfer

            None,                            // Custom data for verification (optional)

            &sender_elgamal_keypair,                // ElGamal keypair for source account

            &sender_aes_key,                        // AES key for source account

            recipient_elgamal_keypair.pubkey(), // ElGamal public key of destination account

            None,                            // Auditor ElGamal public key (none if no auditor)

            &[&sender],                       // Signers

        )

        .await?;

    println!("Confidential Transfer Signature: {}", transfer_signature);



    // Apply pending balance on the recipient account to make transferred funds available

    println!("Applying pending balance on recipient account...");

    let apply_signature = token

        .confidential_transfer_apply_pending_balance(

            &recipient_token_account_pubkey,    // The token account

            &recipient.pubkey(),          // Authority (owner) of the account

            None,                            // Optional new decryptable available balance

            recipient_elgamal_keypair.secret(), // ElGamal secret key for encryption

            &recipient_aes_key,                 // AES key for encryption

            &[&recipient],                // Signers (owner must sign)

        )

        .await?;

    println!(

        "Recipient Account Apply Pending Balance Signature: {}",

        apply_signature

    );



    // Close the context state accounts to recover rent

    println!("Closing equality proof context state account...");

    let close_equality_signature = token

        .confidential_transfer_close_context_state_account(

            &equality_proof_context_state_pubkey, // Equality proof context state account to close

            &sender_token_account_pubkey,                // Account that will receive the lamports

            &sender.pubkey(),                      // Authority allowed to close the account

            &[&sender],                            // Authority must sign

        )

        .await?;

    println!(

        "Close Transfer Equality Proof Account Signature: {}",

        close_equality_signature

    );



    println!("Closing ciphertext validity proof context state account...");

    let close_ciphertext_signature = token

        .confidential_transfer_close_context_state_account(

            &ciphertext_validity_proof_context_state_pubkey, // Ciphertext validity proof context state account to close

            &sender_token_account_pubkey, // Account that will receive the lamports

            &sender.pubkey(),       // Authority allowed to close the account

            &[&sender],             // Authority must sign

        )

        .await?;

    println!(

        "Close Ciphertext Validity Proof Account Signature: {}",

        close_ciphertext_signature

    );



    println!("Closing range proof context state account...");

    let close_range_signature = token

        .confidential_transfer_close_context_state_account(

            &range_proof_context_state_pubkey, // Range proof context state account to close

            &sender_token_account_pubkey,             // Account that will receive the lamports

            &sender.pubkey(),                   // Authority allowed to close the account

            &[&sender],                         // Authority must sign

        )

        .await?;

    println!(

        "Close Range Proof Account Signature: {}",

        close_range_signature

    );



    println!("\nConfidential transfer completed successfully!");

    println!("Sender Token Account: {}", sender_token_account_pubkey);

    println!(

        "Recipient Token Account: {}",

        recipient_token_account_pubkey

    );



    Ok(())

}



// Load the keypair from the default Solana CLI keypair path (~/.config/solana/id.json)

// This enables using the same wallet as the Solana CLI tools

fn load_keypair() -> Result<Keypair> {

    // Get the default keypair path

    let keypair_path = dirs::home_dir()

        .context("Could not find home directory")?

        .join(".config/solana/id.json");



    // Read the keypair file directly into bytes using serde_json

    // The keypair file is a JSON array of bytes

    let file = std::fs::File::open(&keypair_path)?;

    let keypair_bytes: Vec<u8> = serde_json::from_reader(file)?;



    // Create keypair from the loaded bytes

    // This converts the byte array into a keypair

    let keypair = Keypair::from_bytes(&keypair_bytes)?;



    Ok(keypair)

}
ConsolePowered by Mirror
Click to execute the code.

Is this page helpful?

이전

토큰 출금하기

다음

Rust 프로그램

목차

페이지 편집

관리자

© 2025 솔라나 재단. 모든 권리 보유.
솔라나
연결하기
© 2025 솔라나 재단. 모든 권리 보유.