How to Access Validators' Proof of Possession (PoP) for Public Key Aggregation

[hemanthbhushan]

Discord user ID

0xh77_37622_47164

Describe your question in detail.

Hi,

I'm currently working on BLS aggregate signature verification within a Move module, and for that, I need to aggregate the public keys of all active validators.

To ensure security and avoid rogue key attacks, I need to include only those public keys that have a valid Proof of Possession (PoP) — i.e., a signature made by the validator over their own public key.

I've been trying to find how/where these PoPs are stored — whether they are kept on-chain during validator registration or available via some endpoint or state structure. However, I haven't been able to locate a definitive source for accessing:

• PoPs for current epoch validators
• PoPs for previous epochs

If anyone has insights on how PoPs are managed in Aptos or how they can be retrieved, please share. This would help with correctly aggregating validator keys for on-chain verification.

Thanks in advance!

What error, if any, are you getting?

No response

What have you tried or looked at? Or how can we reproduce the error?

No response

Which operating system are you using?

Linux (Ubuntu, Fedora, Windows WSL, etc.)

Which SDK or tool are you using? (if any)

Rust SDK

Describe your environment or tooling in detail

No response