TaskManager

Aspect	Description
Type	Contract deployed on the host chain, UUPS-upgradeable behind a proxy.
Function	Acts as the onchain entry point for CoFHE integration.
Responsibilities	• Initiates FHE operations requested through the `FHE.sol` library. • Generates the unique handles that reference future FHE results. • Emits structured task events for the offchain services. • Verifies the signatures on encrypted inputs and published decrypt results.
Deployment	A separate TaskManager contract is deployed on each supported host chain, enabling chain-specific integrations.

Two signers

The TaskManager holds two distinct signer addresses, one per trust boundary:

Signer	Verifies
`verifierSigner`	Encrypted inputs: the ZK Verifier signs each verified batch, and `batchVerifyInputs` checks that signature before emitting `InputVerified(ctHash, commitment)` per input. The signature binds the consuming contract, so a batch cannot be replayed elsewhere.
`decryptResultSigner`	Decrypt results: Teecryptor signs each plaintext it returns, and the publish path checks that signature before storing the result.

Decrypt result signature verification

The TaskManager supports permissionless publishing of decrypt results. Anyone holding a valid signature from the decryption service can publish the result onchain. Today that signature comes from Teecryptor; a decentralized Threshold Network is the planned successor. Verified results are stored in the PlaintextsStorage contract, where any contract can read them back with getDecryptResult (reverts with DecryptionResultNotReady if pending) or getDecryptResultSafe (returns a ready flag).

Functions

All take (ctHash, result, signature); the batch variants take parallel arrays.

Function	Description
`publishDecryptResult`	Verify the signature and store the decrypt result onchain. Emits `DecryptionResult`.
`publishDecryptResultBatch`	Batch publish multiple results in one transaction for gas efficiency.
`verifyDecryptResult`	Verify a signature without publishing (view). Reverts on failure.
`verifyDecryptResultSafe`	Verify a signature without publishing (view). Returns `false` on failure.
`verifyDecryptResultBatch`	Batch verify (view). Reverts on the first failure.
`verifyDecryptResultBatchSafe`	Batch verify (view). Returns a `bool[]` of per-item outcomes.
`setDecryptResultSigner`	Admin-only. Takes an address; sets the authorized signer.

Signature message format

The signed message is a fixed 76-byte buffer:

Field	Size	Encoding
`result`	32 bytes	uint256, big-endian, left-padded with zeros
`enc_type`	4 bytes	i32, big-endian (extracted from ctHash metadata)
`chain_id`	8 bytes	u64, big-endian (from `block.chainid`)
`ct_hash`	32 bytes	uint256, big-endian

The message is hashed with keccak256 and verified using OpenZeppelin’s ECDSA.tryRecover. The enc_type and chain_id are derived onchain, binding each signature to a specific ciphertext type and chain.

CoFHE Components

Data Flows

Research

Two signers

Decrypt result signature verification

Functions

Signature message format

​Two signers

​Decrypt result signature verification

​Functions

​Signature message format

Two signers

Decrypt result signature verification

Functions

Signature message format