Document
Verification
Ledger
Every document issued through this system is SHA-256 fingerprinted, GPG-signed, stored in an encrypted vault, and published here — creating a tamper-evident public record anchored to a hash chain.
AES-XTS-512 Encrypted Vault
Records are stored in a LUKS2 encrypted drive with Argon2id key derivation. Physical possession of the hardware key is required to decrypt.
SHA-256 Hash Chain
Each record links cryptographically to the previous one. Any tampering breaks all subsequent chain hashes — making falsification detectable.
Ed25519 GPG Signing
Every record is digitally signed with a 30-day rotating Ed25519 key. The signature proves it was created by the authorised operator.
Public GitHub Ledger
Signed JSON records are pushed to this public repository automatically. Anyone can verify a document's authenticity without contacting the office.
Stamped PDF Archive
Every issued document carries a footer stamp with control number, sequence, hash, chain hash, timestamp, and QR code linking here.
RA 10173 Compliant
Only the document fingerprint is published — the document itself stays encrypted in the vault. Compliant with the Data Privacy Act of 2012.
Have a document to verify?
Enter the SHA-256 fingerprint from the stamp, or scan the QR code.
Verify now →