Verify
Check a Paramant proof
Check a signed document or a delivery receipt, on your own device. Nothing you drop in is uploaded, and you need no account.
Original document
Proof file (.psign)
This is an old proof file (v1 or v2). Our server checks the server seal inside it. For that, this page sends the document's fingerprint and the proof, never the document itself. No account or key needed. New signatures verify fully offline.
Verify
What is checked
- The fingerprint (SHA3-256) of your document matches the one in the proof
- The signer's signature (ML-DSA-65) over that fingerprint is valid
- For a proof with several signers: the counter-signature was made with a key Paramant pins in this site, not with a key taken from the file itself
A current proof is checked entirely in your browser, offline too. Only an old envelope (v1 or v2) goes past the relay: then this page sends the fingerprint and the proof, never the document. No account or API key needed.
The receipt
A delivery receipt is the small block of text you get when a file you sent is picked up. It says which file was handed over, when, and whether the copy on the server was destroyed.
Check it
Checking a receipt from another server
This page knows the key of every Paramant server and picks the one the receipt names. So a normal receipt is checked without anything going over the network. Do you run your own server? Paste that server's key below.
Every server publishes its own key at /v2/pubkey, for example .
What is checked
- The receipt is about the file it names and no other
- The proof of inclusion holds: the relay signed at the time that the entry was in its transparency log (whether it still shows that entry, you can see in the log)
- The signature over the whole receipt holds, so nothing was altered
- The log snapshot the receipt relies on was signed too
All four run on this device. Once the page has loaded, you can go offline and the answer stays the same.