OpenViSTAI · Agents · Blockchain · Crypto
Submit a project
Menu
Security & Custody

Solana Kms Signer

Solana Kms Signer is a TypeScript library that uses ED25519 keys in AWS KMS to sign Solana transactions and messages. It supports legacy and versioned transactions, retrieves the associated Solana public key, and documents signature verification, public-key caching and batch signing.

Explore the practical guide ↓

Independent OpenViST project profile, based on linked sources.

Solana Kms Signer — OpenViST project profile in Security & Custody.
OpenViST project illustration. See the linked sources for product details.
Understand the project

Practical overview

When it fits

Use it when a TypeScript server application needs to request Solana signatures from an AWS KMS-held ED25519 key and can manage its own transaction construction and RPC interaction.

Who it is for

  • Developers building server-side Solana applications that need AWS KMS-backed signing.
  • Teams integrating managed ED25519 keys into transaction or message-signing workflows.

Documented uses

  • Retrieve the Solana public key associated with a KMS key.
  • Sign an arbitrary message or a legacy or versioned Solana transaction.
  • Batch-sign multiple transactions and verify signatures through the library.
Before you choose

Requirements & limits

The README requires Node.js 22.13.0 or later, an AWS account and an ED25519 KMS key. The repository identifies an MIT license.

  • The KMS key must use the exact KeySpec ECC_NIST_EDWARDS25519 and KeyUsage SIGN_VERIFY.
  • Use requires IAM permissions for kms:GetPublicKey and kms:Sign; creating keys additionally requires kms:CreateKey and kms:TagResource.
  • The documented stack is TypeScript on Node.js, with AWS SDK, Solana Web3.js and tweetnacl dependencies.
  • The library signs; an application still needs to construct transactions and use a Solana RPC connection when submitting them.

Check current requirements in the official documentation. Source-based guidance does not mean OpenViST has run or independently tested this project.

Source-based practical guide

Prepare AWS KMS for Solana signing

Create an ED25519 KMS key and grant the signer permissions to retrieve its public key and sign.

Before you start

  • An AWS account and AWS CLI or AWS Console access.
  • AWS permissions to create and tag KMS keys.
  • The required signing-use permissions: kms:GetPublicKey and kms:Sign.

Steps

  1. Create a KMS key with KeySpec ECC_NIST_EDWARDS25519 and KeyUsage SIGN_VERIFY.

  2. Grant the application credentials kms:GetPublicKey and kms:Sign access to that key.

  3. Record the key ID and AWS region for the signer configuration.

Expected outcome

An ED25519 KMS key and the permissions needed for the library to retrieve its public key and request signatures.

Guide limitations

  • The guide covers AWS key and permission setup, not application installation or signing execution.
  • Creating a key also requires kms:CreateKey and kms:TagResource permissions.
Documentation 1 ↗
Evidence and transparency

Sources & review

Official repository ↗
Source record details
Source availability
Active
Sources checked
13 October 2026
Original website title
gtg7784/solana-kms-signer · Official homepage title · retained in its source language
How we review sourcesSuggest a correction