# Threshold Key Derivation - Privacy on the IC

**URL:** <https://forum.dfinity.org/t/threshold-key-derivation-privacy-on-the-ic/16560>\
**Category:** Developers\
**Tags:** Discussing, privacy\
**Created:** [November 14, 2022, 2:14pm UTC](https://forum.dfinity.org/t/threshold-key-derivation-privacy-on-the-ic/16560 "2022-11-14T14:14:11Z")\
**Posts on this page:** 20\
**Page:** 8

<div class="post-metadata">

**Author:** ![hude](https://sea1.discourse-cdn.com/flex023/user_avatar/forum.dfinity.org/hude/32/12818_2.png) [@hude](https://forum.dfinity.org/u/hude)\
**Post date:** [December 12, 2023, 12:49am UTC](https://forum.dfinity.org/t/threshold-key-derivation-privacy-on-the-ic/16560/142 "2023-12-12T00:49:45Z")

</div>

Compared to the Schnorr signature, the range of applications for vetKeys is incomparable. Can you prioritize vetKeys?

---

<div class="post-metadata">

**Author:** ![patnorris](https://sea1.discourse-cdn.com/flex023/user_avatar/forum.dfinity.org/patnorris/32/11764_2.png) [@patnorris](https://forum.dfinity.org/u/patnorris)\
**Post date:** [January 7, 2024, 5:08pm UTC](https://forum.dfinity.org/t/threshold-key-derivation-privacy-on-the-ic/16560/143 "2024-01-07T17:08:27Z")

</div>

Hi @andrea , thank you for the insight about the current timeline. VetKeys came up on Thursday during the Decentralized AI Working group call and based on that I wanted to provide the feedback in this thread that there are several DeAI projects interested in using it for their prototypes and products. These are use cases around private training and inference data as well as storing outputs (e.g. user chats with the AI service) with maximum privacy. So vetKeys could be a great enabler here and also a differentiating factor for DeAI on the IC compared to traditional AI services. Please let us know if we can help in any way with the potential prioritization of vetKeys.

---

<div class="post-metadata">

**Author:** ![Vivienne](https://sea1.discourse-cdn.com/flex023/user_avatar/forum.dfinity.org/vivienne/32/29170_2.png) [@Vivienne](https://forum.dfinity.org/u/Vivienne)\
**Post date:** [January 9, 2024, 3:26pm UTC](https://forum.dfinity.org/t/threshold-key-derivation-privacy-on-the-ic/16560/144 "2024-01-09T15:26:14Z")

</div>

We have an internal working group that takes a look at the feedback board every two weeks and we put quite a bit of emphasis on the most-upvoted feature requests (7/10 of the most upvoted requests are in the works or scheduled very soon for work to start).

I just noticed we don’t have vetKeys in the list yet so we don’t get reminded often enough of how much demand there actually is so I went ahead and created a feature request for it: [IC Feedback](https://dx.internetcomputer.org/topic/208)

My hope is that with a fair amount of upvotes on this feature we can get it some more priority.

TLDR: upvote [this](https://dx.internetcomputer.org/topic/208) please 🙂

---

<div class="post-metadata">

**Author:** ![ais](https://sea1.discourse-cdn.com/flex023/user_avatar/forum.dfinity.org/ais/32/5240_2.png) [@ais](https://forum.dfinity.org/u/ais)\
**Post date:** [January 11, 2024, 1:28pm UTC](https://forum.dfinity.org/t/threshold-key-derivation-privacy-on-the-ic/16560/145 "2024-01-11T13:28:53Z")

</div>

Hello!

Thanks a lot @Vivienne for making the ticket, and thanks everyone for the upvotes - it helps to keep it front of mind.

Thanks also @patnorris for the use case motivation. Definitely would be good for the output privacy, but we should be careful to remember that it may not be so useful in the training context as we cannot do private computation with vetKeys.

As an update about prioritisation, it’s certain now that threshold Schnorr will happen first (as it is much faster to integrate) and vetKeys will happen after.  
I’ll send updates as and when we have them.

---

<div class="post-metadata">

**Author:** ![Vitaliy.Klepka](https://avatars.discourse-cdn.com/v4/letter/v/dbc845/32.png) [@Vitaliy.Klepka](https://forum.dfinity.org/u/Vitaliy.Klepka)\
**Post date:** [January 25, 2024, 11:11am UTC](https://forum.dfinity.org/t/threshold-key-derivation-privacy-on-the-ic/16560/146 "2024-01-25T11:11:12Z")

</div>

Hello,  
Thanks @Vivienne for pushing this topic forward, many projects are waiting vetKeys to be completely done. I’m just curious, is there a features-list or public roadmap for vetKeys? just to have more clean understanding on feature state, like what is completely done and what has to be done according to the Dfinity vision.

---

<div class="post-metadata">

**Author:** ![Vivienne](https://sea1.discourse-cdn.com/flex023/user_avatar/forum.dfinity.org/vivienne/32/29170_2.png) [@Vivienne](https://forum.dfinity.org/u/Vivienne)\
**Post date:** [January 25, 2024, 12:29pm UTC](https://forum.dfinity.org/t/threshold-key-derivation-privacy-on-the-ic/16560/147 "2024-01-25T12:29:12Z")

</div>

AFAIU the research is done and the preview canister developed, but the implementation has not received much attention yet. From what I heard there is a lot of work left to do, which is also why tSchnorr was put before vetKeys

---

<div class="post-metadata">

**Author:** ![Vitaliy.Klepka](https://avatars.discourse-cdn.com/v4/letter/v/dbc845/32.png) [@Vitaliy.Klepka](https://forum.dfinity.org/u/Vitaliy.Klepka)\
**Post date:** [January 25, 2024, 1:25pm UTC](https://forum.dfinity.org/t/threshold-key-derivation-privacy-on-the-ic/16560/148 "2024-01-25T13:25:59Z")

</div>

thanks for the clarification 👍

---

<div class="post-metadata">

**Author:** ![domwoe](https://sea1.discourse-cdn.com/flex023/user_avatar/forum.dfinity.org/domwoe/32/5165_2.png) [@domwoe](https://forum.dfinity.org/u/domwoe)\
**Post date:** [February 7, 2024, 6:34pm UTC](https://forum.dfinity.org/t/threshold-key-derivation-privacy-on-the-ic/16560/149 "2024-02-07T18:34:55Z")

</div>

Hey everybody,

If you are interested in leveraging vetKeys in your projects, please fill out this quick survey.

https://dfn.typeform.com/to/D4RxWoy1?typeform-embed=embed-widget

Thank you 🙏

---

<div class="post-metadata">

**Author:** ![Muffin2021](https://sea1.discourse-cdn.com/flex023/user_avatar/forum.dfinity.org/muffin2021/32/16460_2.png) [@Muffin2021](https://forum.dfinity.org/u/Muffin2021)\
**Post date:** [March 28, 2024, 4:57pm UTC](https://forum.dfinity.org/t/threshold-key-derivation-privacy-on-the-ic/16560/150 "2024-03-28T16:57:20Z")

</div>

this is definitely an intruguing idea and concept.

---

<div class="post-metadata">

**Author:** ![Mercury](https://sea1.discourse-cdn.com/flex023/user_avatar/forum.dfinity.org/mercury/32/9803_2.png) [@Mercury](https://forum.dfinity.org/u/Mercury)\
**Post date:** [April 11, 2024, 12:06pm UTC](https://forum.dfinity.org/t/threshold-key-derivation-privacy-on-the-ic/16560/151 "2024-04-11T12:06:40Z")

</div>

Is this survey still ongoing?

---

<div class="post-metadata">

**Author:** ![domwoe](https://sea1.discourse-cdn.com/flex023/user_avatar/forum.dfinity.org/domwoe/32/5165_2.png) [@domwoe](https://forum.dfinity.org/u/domwoe)\
**Post date:** [April 11, 2024, 2:15pm UTC](https://forum.dfinity.org/t/threshold-key-derivation-privacy-on-the-ic/16560/152 "2024-04-11T14:15:10Z")

</div>

We’ve evaluated a while ago, but there are still responses incoming and we’ll keep it open for now as new projects are exploring vetKeys.

---

<div class="post-metadata">

**Author:** ![patnorris](https://sea1.discourse-cdn.com/flex023/user_avatar/forum.dfinity.org/patnorris/32/11764_2.png) [@patnorris](https://forum.dfinity.org/u/patnorris)\
**Post date:** [May 14, 2024, 6:10pm UTC](https://forum.dfinity.org/t/threshold-key-derivation-privacy-on-the-ic/16560/153 "2024-05-14T18:10:01Z")

</div>

Hi @ais , I wondered if you might have any news to share on the vetKeys roadmap; do you know when there might be an update available? I’d love to include it in our dApp (and also optimistically have put this into our grant milestones) Thank you 🙂

---

<div class="post-metadata">

**Author:** ![ais](https://sea1.discourse-cdn.com/flex023/user_avatar/forum.dfinity.org/ais/32/5240_2.png) [@ais](https://forum.dfinity.org/u/ais)\
**Post date:** [May 15, 2024, 8:16am UTC](https://forum.dfinity.org/t/threshold-key-derivation-privacy-on-the-ic/16560/154 "2024-05-15T08:16:07Z")

</div>

Word on the street is that the new ICP roadmap will be out this week, keep an eye out for it 👀

---

<div class="post-metadata">

**Author:** ![patnorris](https://sea1.discourse-cdn.com/flex023/user_avatar/forum.dfinity.org/patnorris/32/11764_2.png) [@patnorris](https://forum.dfinity.org/u/patnorris)\
**Post date:** [May 15, 2024, 10:29am UTC](https://forum.dfinity.org/t/threshold-key-derivation-privacy-on-the-ic/16560/155 "2024-05-15T10:29:39Z")

</div>

That’s exciting, will sure do, thanks 🙂

---

<div class="post-metadata">

**Author:** ![patnorris](https://sea1.discourse-cdn.com/flex023/user_avatar/forum.dfinity.org/patnorris/32/11764_2.png) [@patnorris](https://forum.dfinity.org/u/patnorris)\
**Post date:** [May 17, 2024, 8:52am UTC](https://forum.dfinity.org/t/threshold-key-derivation-privacy-on-the-ic/16560/156 "2024-05-17T08:52:15Z")

</div>

found it 🙂 great that it’s included and really looking forward to it 💪

 ![image](https://us1.discourse-cdn.com/flex023/uploads/dfn/original/3X/5/8/586ddf6c93c666fba5d6332001eee21f563e7559.png)

---

<div class="post-metadata">

**Author:** ![Mercury](https://sea1.discourse-cdn.com/flex023/user_avatar/forum.dfinity.org/mercury/32/9803_2.png) [@Mercury](https://forum.dfinity.org/u/Mercury)\
**Post date:** [May 19, 2024, 5:29pm UTC](https://forum.dfinity.org/t/threshold-key-derivation-privacy-on-the-ic/16560/157 "2024-05-19T17:29:23Z")

</div>

No due date mentioned.

---

<div class="post-metadata">

**Author:** ![ais](https://sea1.discourse-cdn.com/flex023/user_avatar/forum.dfinity.org/ais/32/5240_2.png) [@ais](https://forum.dfinity.org/u/ais)\
**Post date:** [May 20, 2024, 12:34pm UTC](https://forum.dfinity.org/t/threshold-key-derivation-privacy-on-the-ic/16560/158 "2024-05-20T12:34:51Z")

</div>

No specific date, but this is the roadmap for year 4, so it should be safe to expect it within the year.  
Schnorr has a date, and vetkeys starts right after that.

---

<div class="post-metadata">

**Author:** ![ais](https://sea1.discourse-cdn.com/flex023/user_avatar/forum.dfinity.org/ais/32/5240_2.png) [@ais](https://forum.dfinity.org/u/ais)\
**Post date:** [July 26, 2024, 1:37pm UTC](https://forum.dfinity.org/t/threshold-key-derivation-privacy-on-the-ic/16560/160 "2024-07-26T13:37:06Z")

</div>

I’m not sure if they had a webpage, but I’ll forward your message on some internal channels we had!

---

<div class="post-metadata">

**Author:** ![nokemono](https://sea1.discourse-cdn.com/flex023/user_avatar/forum.dfinity.org/nokemono/32/20112_2.png) [@nokemono](https://forum.dfinity.org/u/nokemono)\
**Post date:** [October 4, 2024, 5:21am UTC](https://forum.dfinity.org/t/threshold-key-derivation-privacy-on-the-ic/16560/161 "2024-10-04T05:21:24Z")

</div>

Does vetkeys generate a unique decryption key for the user?  
Preferably like proxy re-encryption. If the decryption key is leaked, it will be possible to identify which user leaked it.

---

<div class="post-metadata">

**Author:** ![franzstefan](https://avatars.discourse-cdn.com/v4/letter/f/ba8739/32.png) [@franzstefan](https://forum.dfinity.org/u/franzstefan)\
**Post date:** [October 4, 2024, 3:29pm UTC](https://forum.dfinity.org/t/threshold-key-derivation-privacy-on-the-ic/16560/162 "2024-10-04T15:29:22Z")

</div>

> [@nokemono](#):
>
> Does vetkeys generate a unique decryption key for the user?

@nokemono, what vetKeys will provide is mainly a management canister API that canisters can call to derive a strong cryptographic key from a master key (see [`vetkd_encrypted_key` in the proposed API](https://github.com/dfinity/interface-spec/pull/158/files#diff-d5dc8b3c639fda557871a724317b27384e697d2fef15e2425585d0fa5ae45f1cR188-R193)), where the master key is secret-shared among the nodes of a subnet. The derivation is done based on some derivation information that the canister developer chooses (plus the calling canister’s principal). The derivation information is essentially a byte string and can be (but doesn’t have to be) a user’s principal. The derivation is deterministic, that is, if the same derivation information is passed to the API, the derived vetKey will also be the same. So, if a canister developer uses a user’s (unique) name or principal as derivation information, then the vetKey for the user will be unique, yes. However, it really depends on the use case: for example, the canister developer could (for whatever reason) also choose to use the same derivation information for two different users, in which case both users would receive the same vetKey and it thus would not be unique.

[Previous page](https://forum.dfinity.org/t/threshold-key-derivation-privacy-on-the-ic/16560.md?page=7)

[Next page](https://forum.dfinity.org/t/threshold-key-derivation-privacy-on-the-ic/16560.md?page=9)
