토큰 출금하기
기밀 가용 잔액에서 토큰을 출금하는 방법
기밀 가용 잔액에서 공개 잔액으로 토큰을 출금하려면:
-
클라이언트 측에서 두 가지 증명을 생성합니다:
동등성 증명 (CiphertextCommitmentEqualityProofData): 출금 후 남은 가용 잔액 암호문이 해당 Pedersen 커밋먼트와 일치하는지 확인하여 계정의 새로운 가용 잔액이
remaining_balance = current_balance - withdraw_amount
로 올바르게 계산되었는지 확인합니다.범위 증명 (BatchedRangeProofU64Data): 출금 후 남은 가용 잔액이 음수가 아니며 지정된 범위 내에 있는지 확인합니다.
-
각 증명에 대해:
- ZK ElGamal 증명 프로그램을 호출하여 증명 데이터를 검증합니다.
- 증명 관련 메타데이터를 증명 "컨텍스트 상태" 계정에 저장하여 다른 명령어에서 사용합니다.
-
ConfidentialTransferInstruction::Withdraw 명령어를 호출하고 두 증명 계정을 제공합니다.
-
증명 계정을 닫아 계정 생성에 사용된 SOL을 회수합니다.
다음 다이어그램은 기밀 가용 잔액에서 공개 잔액으로 토큰을 출금하는 과정을 보여줍니다:
필요한 명령어
기밀 가용 잔액에서 공개 잔액으로 토큰을 출금하려면 다음이 필요합니다:
- 클라이언트 측에서 동등성 증명과 범위 증명 생성
- Zk ElGamal 증명 프로그램을 호출하여 증명을 검증하고 "컨텍스트 상태" 계정 초기화
- ConfidentialTransferInstruction::Withdraw 명령어를 호출하고 두 증명 계정 제공
- 두 증명 계정을 닫아 rent 회수
spl_token_client
크레이트는 다음 메서드를 제공합니다:
confidential_transfer_create_context_state_account
메서드: 증명 계정을 생성합니다.confidential_transfer_withdraw
메서드:Withdraw
명령어를 호출합니다.confidential_transfer_close_context_state_account
메서드: 증명 계정을 닫습니다.
예제 코드
다음 예제는 기밀 가용 잔액에서 공개 잔액으로 토큰을 출금하는 방법을 보여줍니다.
예제를 실행하려면 다음 명령을 사용하여 메인넷에서 복제한 Token Extension Program으로 로컬 validator를 시작하세요. 로컬 validator를 시작하려면 Solana CLI가 설치되어 있어야 합니다.
$solana-test-validator --clone-upgradeable-program TokenzQdBNbLqP5VEhdkAS6EPFLC1PHnBqCXEpPxuEb --url https://api.mainnet-beta.solana.com -r
이 글을 작성하는 시점에서는 기본 로컬 validator에서 Confidential Transfers가 활성화되어 있지 않습니다. 예제 코드를 실행하려면 메인넷 Token Extension Program을 복제해야 합니다.
use anyhow::{Context, Result};use solana_client::nonblocking::rpc_client::RpcClient;use solana_sdk::{commitment_config::CommitmentConfig,signature::{Keypair, Signer},transaction::Transaction,};use spl_associated_token_account::{get_associated_token_address_with_program_id, instruction::create_associated_token_account,};use spl_token_client::{client::{ProgramRpcClient, ProgramRpcClientSendTransaction},spl_token_2022::{extension::{confidential_transfer::{account_info::WithdrawAccountInfo,ConfidentialTransferAccount,instruction::{configure_account, PubkeyValidityProofData},},BaseStateWithExtensions, ExtensionType,},id as token_2022_program_id,instruction::reallocate,solana_zk_sdk::encryption::{auth_encryption::*, elgamal::*},},token::{ExtensionInitializationParams, Token},};use spl_token_confidential_transfer_proof_extraction::instruction::{ProofData, ProofLocation};use spl_token_confidential_transfer_proof_generation::withdraw::WithdrawProofData;use std::sync::Arc;#[tokio::main]async fn main() -> Result<()> {// Create connection to local test validatorlet rpc_client = Arc::new(RpcClient::new_with_commitment(String::from("http://localhost:8899"),CommitmentConfig::confirmed(),));// Load the default Solana CLI keypair to use as the fee payer// This will be the wallet paying for the transaction fees// Use Arc to prevent multiple clones of the keypairlet payer = Arc::new(load_keypair()?);println!("Using payer: {}", payer.pubkey());// Generate a new keypair to use as the address of the token mintlet mint = Keypair::new();println!("Mint keypair generated: {}", mint.pubkey());// Set up program client for Token clientlet program_client = ProgramRpcClient::new(rpc_client.clone(), ProgramRpcClientSendTransaction);// Number of decimals for the mintlet decimals = 9;// Create a token client for the Token-2022 program// This provides high-level methods for token operationslet token = Token::new(Arc::new(program_client),&token_2022_program_id(), // Use the Token-2022 program (newer version with extensions)&mint.pubkey(), // Address of the new token mintSome(decimals), // Number of decimal placespayer.clone(), // Fee payer for transactions);// Create extension initialization parameters for the mint// The ConfidentialTransferMint extension enables confidential (private) transfers of tokenslet extension_initialization_params =vec![ExtensionInitializationParams::ConfidentialTransferMint {authority: Some(payer.pubkey()), // Authority that can modify confidential transfer settingsauto_approve_new_accounts: true, // Automatically approve new confidential accountsauditor_elgamal_pubkey: None, // Optional auditor ElGamal public key}];// Create and initialize the mint with the ConfidentialTransferMint extension// This sends a transaction to create the new token mintlet transaction_signature = token.create_mint(&payer.pubkey(), // Mint authority - can mint new tokensSome(&payer.pubkey()), // Freeze authority - can freeze token accountsextension_initialization_params, // Add the ConfidentialTransferMint extension&[&mint], // Mint keypair needed as signer).await?;// Print results for user verificationprintln!("Mint Address: {}", mint.pubkey());println!("Mint Creation Transaction Signature: {}",transaction_signature);// ===== Create and configure token account for confidential transfers =====println!("\nCreate and configure token account for confidential transfers");// Get the associated token account address for the ownerlet token_account_pubkey = get_associated_token_address_with_program_id(&payer.pubkey(), // Token account owner&mint.pubkey(), // Mint&token_2022_program_id(), // Token program ID);println!("Token Account Address: {}", token_account_pubkey);// Step 1: Create the associated token accountlet create_associated_token_account_instruction = create_associated_token_account(&payer.pubkey(), // Funding account&payer.pubkey(), // Token account owner&mint.pubkey(), // Mint&token_2022_program_id(), // Token program ID);// Step 2: Reallocate the token account to include space for the ConfidentialTransferAccount extensionlet reallocate_instruction = reallocate(&token_2022_program_id(), // Token program ID&token_account_pubkey, // Token account&payer.pubkey(), // Payer&payer.pubkey(), // Token account owner&[&payer.pubkey()], // Signers&[ExtensionType::ConfidentialTransferAccount], // Extension to reallocate space for)?;// Step 3: Generate the ElGamal keypair and AES key for token accountlet elgamal_keypair = ElGamalKeypair::new_from_signer(&payer, &token_account_pubkey.to_bytes()).expect("Failed to create ElGamal keypair");let aes_key = AeKey::new_from_signer(&payer, &token_account_pubkey.to_bytes()).expect("Failed to create AES key");// The maximum number of Deposit and Transfer instructions that can// credit pending_balance before the ApplyPendingBalance instruction must be executedlet maximum_pending_balance_credit_counter = 65536;// Initial token balance is 0let decryptable_balance = aes_key.encrypt(0);// Generate the proof data client-sidelet proof_data = PubkeyValidityProofData::new(&elgamal_keypair).map_err(|_| anyhow::anyhow!("Failed to generate proof data"))?;// Indicate that proof is included in the same transactionlet proof_location =ProofLocation::InstructionOffset(1.try_into()?, ProofData::InstructionData(&proof_data));// Step 4: Create instructions to configure the account for confidential transferslet configure_account_instructions = configure_account(&token_2022_program_id(), // Program ID&token_account_pubkey, // Token account&mint.pubkey(), // Mint&decryptable_balance.into(), // Initial balancemaximum_pending_balance_credit_counter, // Maximum pending balance credit counter&payer.pubkey(), // Token Account Owner&[], // Additional signersproof_location, // Proof location)?;// Combine all instructionslet mut instructions = vec![create_associated_token_account_instruction,reallocate_instruction,];instructions.extend(configure_account_instructions);// Create and send the transactionlet recent_blockhash = rpc_client.get_latest_blockhash().await?;let transaction = Transaction::new_signed_with_payer(&instructions,Some(&payer.pubkey()),&[&*payer],recent_blockhash,);let setup_signature = rpc_client.send_and_confirm_transaction(&transaction).await?;println!("Token Account Setup Transaction Signature: {}",setup_signature);// Mint some tokens to the newly created token account// This gives the account some tokens to work withlet mint_signature = token.mint_to(&token_account_pubkey, // Destination account&payer.pubkey(), // Mint authority100 * 10u64.pow(decimals as u32), // Amount (100 tokens with decimal precision)&[&payer], // Signers).await?;println!("Token Minting Transaction Signature: {}", mint_signature);// Deposit the tokens to confidential state// This converts regular tokens to confidential tokensprintln!("Deposit tokens to confidential state pending balance");let deposit_signature = token.confidential_transfer_deposit(&token_account_pubkey, // The token account&payer.pubkey(), // Authority (owner) of the account100 * 10u64.pow(decimals as u32), // Amount to deposit (100 tokens)decimals, // Decimals of the token&[&payer], // Signers (owner must sign)).await?;println!("Confidential Transfer Deposit Signature: {}",deposit_signature);// Apply the pending balance to make funds availableprintln!("Apply pending balance to available balance");let apply_signature = token.confidential_transfer_apply_pending_balance(&token_account_pubkey, // The token account&payer.pubkey(), // Authority (owner) of the accountNone, // Optional new decryptable available balanceelgamal_keypair.secret(), // ElGamal secret key encryption&aes_key, // AES key for encryption&[&payer], // Signers (owner must sign)).await?;println!("Apply Pending Balance Signature: {}", apply_signature);// ===== Withdraw half of the tokens from confidential state =====println!("\nWithdraw tokens from confidential available balance");// Calculate the withdraw amount (half of the deposited amount)let withdraw_amount = 50 * 10u64.pow(decimals as u32); // Half of the 100 tokens deposited// Get the token account data to access the confidential transfer extensionlet token_account = token.get_account_info(&token_account_pubkey).await?;// Unpack the ConfidentialTransferAccount extension portion of the token account datalet extension_data = token_account.get_extension::<ConfidentialTransferAccount>()?;// Confidential Transfer extension information needed to construct a `Withdraw` instructionlet withdraw_account_info =WithdrawAccountInfo::new(extension_data,);// Create keypairs for the proof accountslet equality_proof_context_state_keypair = Keypair::new();let equality_proof_context_state_pubkey = equality_proof_context_state_keypair.pubkey();let range_proof_context_state_keypair = Keypair::new();let range_proof_context_state_pubkey = range_proof_context_state_keypair.pubkey();// Create a withdraw proof datalet WithdrawProofData {equality_proof_data,range_proof_data,} = withdraw_account_info.generate_proof_data(withdraw_amount, // Amount to withdraw from confidential state&elgamal_keypair, // ElGamal keypair for encryption&aes_key, // AES key for encryption)?;// Generate the equality proof accountprintln!("Create equality proof context state account");let equality_proof_signature = token.confidential_transfer_create_context_state_account(&equality_proof_context_state_pubkey, // Public key of the new equality proof context state account&payer.pubkey(), // Authority that can close the context state account&equality_proof_data, // Proof data for the equality proof verificationfalse, // False: combine account creation and proof verification in one transaction&[&equality_proof_context_state_keypair], // Signer for the new account).await?;println!("Equality Proof Context State Account Signature: {}",equality_proof_signature);// Generate the range proof accountprintln!("Create range proof context state account");let range_proof_signature = token.confidential_transfer_create_context_state_account(&range_proof_context_state_pubkey, // Public key of the new range proof context state account&payer.pubkey(), // Authority that can close the context state account&range_proof_data, // Proof data for the range proof verificationtrue, // True: split account creation and proof verification into separate transactions (for large proofs)&[&range_proof_context_state_keypair], // Signer for the new account).await?;println!("Range Proof Context State Account Signature: {}",range_proof_signature);// Perform the withdrawalprintln!("Execute withdrawal transaction");let withdraw_signature = token.confidential_transfer_withdraw(&token_account_pubkey, // Token account to withdraw from&payer.pubkey(), // Owner of the token accountSome(&spl_token_client::token::ProofAccount::ContextAccount(equality_proof_context_state_pubkey, // Reference to the equality proof account)),Some(&spl_token_client::token::ProofAccount::ContextAccount(range_proof_context_state_pubkey, // Reference to the range proof account)),withdraw_amount, // Amount to withdraw from confidential statedecimals, // Decimal precision of the tokenSome(withdraw_account_info), // Data from confidential transfer extension for proof verification&elgamal_keypair, // ElGamal keypair for encryption&aes_key, // AES key for encryption&[&payer], // Owner must sign the transaction).await?;println!("Withdraw Transaction Signature: {}", withdraw_signature);// Close the context state accounts to recover rentprintln!("Close equality proof context state account");let close_equality_signature = token.confidential_transfer_close_context_state_account(&equality_proof_context_state_pubkey, // Equality proof context state account to close&token_account_pubkey, // Account that will receive the lamports&payer.pubkey(), // Authority allowed to close the account&[&payer], // Authority must sign).await?;println!("Close Equality Proof Account Signature: {}",close_equality_signature);println!("Close range proof context state account");let close_range_signature = token.confidential_transfer_close_context_state_account(&range_proof_context_state_pubkey, // Range proof context state account to close&token_account_pubkey, // Account that will receive the lamports&payer.pubkey(), // Authority allowed to close the account&[&payer], // Authority must sign).await?;println!("Close Range Proof Account Signature: {}",close_range_signature);Ok(())}// Load the keypair from the default Solana CLI keypair path (~/.config/solana/id.json)// This enables using the same wallet as the Solana CLI toolsfn load_keypair() -> Result<Keypair> {// Get the default keypair pathlet keypair_path = dirs::home_dir().context("Could not find home directory")?.join(".config/solana/id.json");// Read the keypair file directly into bytes using serde_json// The keypair file is a JSON array of byteslet file = std::fs::File::open(&keypair_path)?;let keypair_bytes: Vec<u8> = serde_json::from_reader(file)?;// Create keypair from the loaded bytes// This converts the byte array into a keypairlet keypair = Keypair::from_bytes(&keypair_bytes)?;Ok(keypair)}
Is this page helpful?