TaskManager

Onchain entry point for CoFHE integration that initiates FHE operations, generates unique handles, and verifies decrypt result signatures

Aspect	Description
Type	Contract deployed on the host chain, UUPS-upgradeable behind a proxy.
Function	Acts as the onchain entry point for CoFHE integration.
Responsibilities	• Initiates FHE operations requested through the FHE.sol library. • Generates the unique handles that reference future FHE results. • Emits structured task events for the offchain services. • Verifies the signatures on encrypted inputs and published decrypt results.
Deployment	A separate TaskManager contract is deployed on each supported host chain, enabling chain-specific integrations.

Two signers

The TaskManager holds two distinct signer addresses, one per trust boundary:

Signer	Verifies
verifierSigner	Encrypted inputs: the ZK Verifier signs each verified batch, and batchVerifyInputs checks that signature before emitting InputVerified(ctHash, commitment) per input. The signature binds the consuming contract, so a batch cannot be replayed elsewhere.
decryptResultSigner	Decrypt results: Teecryptor signs each plaintext it returns, and the publish path checks that signature before storing the result.

Decrypt result signature verification

The TaskManager supports permissionless publishing of decrypt results. Anyone holding a valid signature from the decryption service can publish the result onchain. Today that signature comes from Teecryptor; a decentralized Threshold Network is the planned successor.

Verified results are stored in the PlaintextsStorage contract, where any contract can read them back with getDecryptResult (reverts with DecryptionResultNotReady if pending) or getDecryptResultSafe (returns a ready flag).

Functions

All take (ctHash, result, signature); the batch variants take parallel arrays.

Function	Description
publishDecryptResult	Verify the signature and store the decrypt result onchain. Emits DecryptionResult.
publishDecryptResultBatch	Batch publish multiple results in one transaction for gas efficiency.
verifyDecryptResult	Verify a signature without publishing (view). Reverts on failure.
verifyDecryptResultSafe	Verify a signature without publishing (view). Returns false on failure.
verifyDecryptResultBatch	Batch verify (view). Reverts on the first failure.
verifyDecryptResultBatchSafe	Batch verify (view). Returns a bool[] of per-item outcomes.
setDecryptResultSigner	Admin-only. Takes an address; sets the authorized signer.

Signature message format

The signed message is a fixed 76-byte buffer:

Field	Size	Encoding
result	32 bytes	uint256, big-endian, left-padded with zeros
enc_type	4 bytes	i32, big-endian (extracted from ctHash metadata)
chain_id	8 bytes	u64, big-endian (from block.chainid)
ct_hash	32 bytes	uint256, big-endian

The message is hashed with keccak256 and verified using OpenZeppelin’s ECDSA.tryRecover. The enc_type and chain_id are derived onchain, binding each signature to a specific ciphertext type and chain.