Decryption

Decryption in CoFHE is a two-phase process:

On-chain: Mark a value as decryptable with FHE.allowPublic(ctHash)
Off-chain: Client calls decryptForTx(ctHash) via the SDK to get { plaintext, signature }
On-chain: Submit the result via publishDecryptResult or verifyDecryptResult

Publishing Results

publishDecryptResult

Publishes a decrypted result on-chain by verifying the Threshold Network signature. The plaintext is stored and can be read via getDecryptResultSafe.

required

Ciphertext handle

required

Decrypted value from decryptForTx

bytes

required

Threshold Network signature

Reverts if the signature is invalid. The value must have been granted public access via allowPublic before decryption was requested off-chain.

FHE.publishDecryptResult(encryptedBid, bidPlaintext, bidSignature);

publishDecryptResultBatch

Publishes multiple results in a single call. Typed overloads exist for every encrypted type:

Handle array type	Result array type
`ebool[]`	`bool[]`
`euint8[]`	`uint8[]`
`euint16[]`	`uint16[]`
`euint32[]`	`uint32[]`
`euint64[]`	`uint64[]`
`euint128[]`	`uint128[]`
`eaddress[]`	`address[]`

euint64[] memory handles = new euint64[](2);
handles[0] = encryptedBid1;
handles[1] = encryptedBid2;

uint64[] memory values = new uint64[](2);
values[0] = bid1Plaintext;
values[1] = bid2Plaintext;

bytes[] memory sigs = new bytes[](2);
sigs[0] = sig1;
sigs[1] = sig2;

FHE.publishDecryptResultBatch(handles, values, sigs);

The compiler resolves the overload from the handle array’s element type. There is also a “raw” overload that takes uint256[] ctHashes if you only have raw handles to hand.

Verifying Results

verifyDecryptResult

Verifies a Threshold Network signature without storing the plaintext on-chain. Returns bool.

Use this when you only need to act on the decrypted value within the transaction without making it permanently public.

require(
    FHE.verifyDecryptResult(encryptedAmount, amount, signature),
    "Invalid decrypt proof"
);

verifyDecryptResultSafe

Like verifyDecryptResult, but returns false instead of reverting on invalid signature.

bool valid = FHE.verifyDecryptResultSafe(encryptedAmount, amount, signature);
if (valid) {
    // proceed
}

verifyDecryptResultBatch

Verifies multiple signatures in a single call. Returns true only if every entry is valid; reverts if any signature fails to recover (consistent with the single-entry verifyDecryptResult). Typed overloads exist for every encrypted type — same handle/result type table as publishDecryptResultBatch.

bool allValid = FHE.verifyDecryptResultBatch(handles, values, sigs);

verifyDecryptResultBatchSafe

Returns a bool[] indicating which entries are valid instead of reverting. Typed overloads cover every encrypted type — same handle/result type table as publishDecryptResultBatch.

bool[] memory results = FHE.verifyDecryptResultBatchSafe(handles, values, sigs);

The batch verify functions (verifyDecryptResultBatch, verifyDecryptResultBatchSafe) were added in cofhe-contracts@v0.1.2. Earlier versions only exposed the single-entry verifyDecryptResult / verifyDecryptResultSafe.

Reading Results

getDecryptResult

Retrieves a published decryption result. Reverts if not yet available.

uint256 result = FHE.getDecryptResult(ctHash);

getDecryptResultSafe

Non-reverting version. Returns a tuple with the result and a boolean flag.

(uint256 result, bool decrypted) = FHE.getDecryptResultSafe(ctHash);
if (decrypted) {
    // use result
}

Introduction

Core Concepts

Confidential Contracts

Examples

Reference

Publishing Results

publishDecryptResult

publishDecryptResultBatch

Verifying Results

verifyDecryptResult

verifyDecryptResultSafe

verifyDecryptResultBatch

verifyDecryptResultBatchSafe

Reading Results

getDecryptResult

getDecryptResultSafe

​Publishing Results

​publishDecryptResult

​publishDecryptResultBatch

​Verifying Results

​verifyDecryptResult

​verifyDecryptResultSafe

​verifyDecryptResultBatch

​verifyDecryptResultBatchSafe

​Reading Results

​getDecryptResult

​getDecryptResultSafe

Publishing Results

publishDecryptResult

publishDecryptResultBatch

Verifying Results

verifyDecryptResult

verifyDecryptResultSafe

verifyDecryptResultBatch

verifyDecryptResultBatchSafe

Reading Results

getDecryptResult

getDecryptResultSafe