Instruction Reference

Pre-Alpha Disclaimer: This is an early pre-alpha release for exploring the SDK and starting development only. There is no real encryption — all data is completely public and stored as plaintext on-chain. Do not submit any sensitive or real data. Encryption keys and the trust model are not final; do not rely on any encryption guarantees or key material until mainnet. All interfaces, APIs, and data formats are subject to change without notice. The Solana program and all on-chain data will be wiped periodically and everything will be deleted when we transition to Encrypt Alpha 1. This software is provided “as is” without warranty of any kind; use is entirely at your own risk and dWallet Labs assumes no liability for any damages arising from its use.

All 22 instructions in the Encrypt Solana program. The first byte of instruction data is the discriminator.

Instruction Groups

Setup

initialize (disc 0)

One-time program initialization. Creates the EncryptConfig and initial Authority PDAs.

Accounts:

Data (2 bytes): config_bump(1) | authority_bump(1)

Executor

create_input_ciphertext (disc 1)

Authority-driven: creates a verified ciphertext from off-chain encrypted data + ZK proof. Status = VERIFIED immediately.

Accounts:

Data (33 bytes): fhe_type(1) | ciphertext_digest(32)

create_plaintext_ciphertext (disc 2)

User-signed: creates a ciphertext from a plaintext value. The executor encrypts off-chain and commits later. Status = PENDING.

Supports both signer and CPI (program) callers. CPI path inserts cpi_authority at position 4.

Accounts (signer path):

Accounts (CPI path): Same as above but cpi_authority is inserted at position 4, shifting positions 4–8 to 5–9.

Data (1+ bytes): fhe_type(1) | [plaintext_bytes(N)]

commit_ciphertext (disc 3)

Authority writes the ciphertext digest after off-chain FHE evaluation. Sets status from PENDING to VERIFIED.

Accounts:

Data (32 bytes): ciphertext_digest(32)

execute_graph (disc 4)

Execute a computation graph. Creates/updates output ciphertext accounts. Emits GraphExecuted event.

Supports both signer and CPI callers. CPI path inserts cpi_authority at position 3.

Accounts (signer path):

Accounts (CPI path): cpi_authority at position 3, remaining shifted by 1. Fixed accounts = 8 instead of 7.

Data: graph_data_len(2) | graph_data(N) | num_inputs(2)

register_graph (disc 5)

Register a reusable computation graph on-chain. Creates a RegisteredGraph PDA.

Accounts:

Data (35+ bytes): bump(1) | graph_hash(32) | graph_data_len(2) | graph_data(N)

execute_registered_graph (disc 6)

Execute a previously registered graph. Uses the on-chain graph data (no need to re-send).

Supports both signer and CPI callers.

Accounts (signer path):

Accounts (CPI path): cpi_authority at position 4, fixed = 9.

Data (2 bytes): num_inputs(2)

Ownership

transfer_ciphertext (disc 7)

Transfer authorization to a new party by updating the authorized field.

Accounts (signer path):

Accounts (CPI path): cpi_authority at position 2, new_authorized at position 3.

Data: none

copy_ciphertext (disc 8)

Create a copy of a ciphertext with a different authorized party.

Accounts (signer path):

Accounts (CPI path): cpi_authority at position 3, remaining shifted.

Data (1 byte): transient(1) (0 = permanent/rent-exempt, 1 = transient/0 lamports)

make_public (disc 9)

Set authorized to zero (public). Irreversible and idempotent.

Accounts (signer path):

Accounts (CPI path): cpi_authority at position 2.

Data (32 bytes): ciphertext_id(32)

Gateway

request_decryption (disc 10)

Request decryption of a ciphertext. Creates a DecryptionRequest account and stores a digest snapshot.

Supports both signer and CPI callers.

Accounts (signer path):

Accounts (CPI path): cpi_authority at position 4, remaining shifted. Fixed = 10.

Data: none

respond_decryption (disc 11)

Authority writes the decrypted plaintext bytes into the DecryptionRequest account.

Accounts:

Data (variable): plaintext bytes chunk to write

close_decryption_request (disc 12)

Close a decryption request and reclaim rent. Only the original requester can close.

Accounts (signer path):

Accounts (CPI path): cpi_authority at position 2, destination at position 3.

Data: none

Fees

create_deposit (disc 13)

Create an EncryptDeposit PDA for a user. Transfers initial ENC tokens and SOL gas.

Accounts:

Data (17 bytes): bump(1) | initial_enc_amount(8) | initial_gas_amount(8)

top_up (disc 14)

Add ENC tokens and/or SOL gas to an existing deposit.

Accounts:

Data (16 bytes): enc_amount(8) | gas_amount(8)

withdraw (disc 15)

Execute a pending withdrawal. Available when current_epoch >= withdrawal_epoch.

Accounts:

Data: none

update_config_fees (disc 16)

Authority updates the fee schedule in EncryptConfig.

Accounts:

Data (58 bytes): enc_per_input(8) | enc_per_output(8) | max_enc_per_op(8) | max_ops_per_graph(2) | gas_base(8) | gas_per_input(8) | gas_per_output(8) | gas_per_byte(8)

reimburse (disc 17)

Authority credits back the per-op max-charge overcharge after computing actual costs.

Accounts:

Data (16 bytes): enc_amount(8) | gas_amount(8)

request_withdraw (disc 18)

Set pending withdrawal amounts. Actual withdrawal available next epoch.

Accounts:

Data (16 bytes): enc_amount(8) | gas_amount(8)

Authority

add_authority (disc 19)

Add a new authority. Must be signed by an existing authority.

Accounts:

Data (33 bytes): bump(1) | new_pubkey(32)

remove_authority (disc 20)

Deactivate an authority.

Accounts:

Data: none

register_network_encryption_key (disc 21)

Register a new FHE network encryption public key.

Accounts:

Data (33 bytes): bump(1) | network_public_key(32)

Event

emit_event (disc 228)

Self-CPI event handler. Called internally by the Encrypt program to emit Anchor-compatible events. Not called by external programs.

Accounts:

Data: Event payload (prefixed with EVENT_IX_TAG_LE)