eth-hub 0.1.2

Flexible Ethereum key management and signing library supporting local and external backends.

eth-hub - Ethereum Key Management Toolkit

A secure abstraction layer for managing Ethereum keys across different storage backends.

Key Features

🔐 Secure Key Management

• Unified interface for multiple key storage providers
• Never exposes private keys outside secure environments
• Will support both software and hardware security modules

📜 Complete Signing Capabilities

• Transaction signing
• Message signing (EIP-191 compatible)
• Hash signing
• Consistent signature output format

Core Architecture

from eth_hub import (
    BaseKeyStore,  # Abstract base class
    AwsKeyStore,  # AWS KMS implementation
    LocalKeyStore  # In-memory implementation
)

BaseKeyStore (ABC)

The abstract base class defining all key operations:

class BaseKeyStore(ABC):
    @abstractmethod
    def import_key(self, private_key: bytes) -> BaseKey: ...

    @abstractmethod
    def create_key(self) -> BaseKey: ...

    @abstractmethod
    def get_key(self, key_id: UUID) -> BaseKey: ...

    @abstractmethod
    def list_keys(self) -> Sequence[BaseKey]: ...

    @abstractmethod
    def remove_key(self, key_id: UUID) -> None: ...

    @abstractmethod
    def sign_hash(self, key_id: UUID, hash_: bytes) -> SignatureInfo: ...

    @abstractmethod
    def sign_message(self, key_id: UUID, message: SignableMessage) -> SignatureInfo: ...

    @abstractmethod
    def sign_transaction(self, key_id: UUID, transaction_data: dict[str, Any]) -> SignatureInfo: ...

Current Implementations

1. AWS KMS KeyStore

• Keys never leave AWS KMS
• All signing operations performed within KMS
• Supports both imported and KMS-generated keys

2. LocalKeyStore (Memory)

• In-memory key storage for development/testing
• Simulates same interface as other stores
• Useful for CI/CD pipelines and local testing

3. HashiCorp Vaul - WiP

Planned Features:

• Integration with HashiCorp Vault's