Signing keys
Check a signature yourself
When a verifier approves a card, Proofile signs one line that names the card, a fingerprint of exactly what the verifier saw, the verifier’s name and the time. Every certificate shows that line, its signature and the key that made it.
The keys
k-ad283cd7fbvUn5jWCVkulInPdinqFBK3b1eXh/kD1feKkyjDAI7vw=
How to check
- Copy the signed line and the signature from the certificate.
- Find the key it names on this page.
- Check the signature over the line with any Ed25519 library, for example libsodium’s crypto_sign_verify_detached, after decoding the signature and the key from base64.
A valid signature shows the record has not changed since it was approved. It proves no more than the verifier’s word, and Proofile holds the key.