← QSign Studio
QSign qsign-v2.0

VALID SIGNATURE

All cryptographic checks passed. The payload has not been altered since it was signed.

id: 8c8cbfc9-59d1-4998-be25-863776ac1558signed: 2026-10-19 08:31:02 UTC
HMAC-SHA256
valid
key id
qsign-hmac-v1
signature
c368a055ab07b34eeacd42cf9b59bee4e68f55625e9b20178e2cfe88c1c34b5a
Ed25519
valid
key id
qsign-ed25519-v1
signature
edfcb0b44ca21f1cfe1a3272037cd241c3f15ca4e65d0974f2e7d01ab0a7e2f6d6eda4d04ddd4f83924bd193238aebc9fce56c0d623a86d34baff65000764901
public key
63fd4f60e1839498443a99cd69710fe3c7089606fb2188b75246f9903c0b36b8
Signed payload
Canonicalization
RFC8785 — keys sorted, no whitespace, deterministic.
SHA-256 hash of canonical
e6d66f0277a455dbddb11ebd160f7d1e5096e5eb1b75cc043c5ee0a2638ef86b
{
  "document": "AEVION QSign — демонстрационная подпись",
  "issuedAt": "2026-10-19",
  "issuer": "AEVION",
  "lang": [
    "ru",
    "en",
    "kk"
  ],
  "purpose": "Показать публичную проверку: измените один символ payload — подпись станет недействительной"
}
Issuer
email
d***@a***.app
Geo anchor
source
ip
location
KZ
Verify independently
  1. Canonicalize the payload per RFC 8785 (JCS) — sort keys lexicographically, strip whitespace.
  2. SHA-256 of the canonical string should equal e6d66f0277a455dbddb11ebd160f7d1e5096e5eb1b75cc043c5ee0a2638ef86b.
  3. HMAC-SHA256 verify requires the shared secret published under key id qsign-hmac-v1.
  4. Ed25519 verify is fully public: use the public key 63fd4f60e1839498443a99cd69710fe3c7089606fb2188b75246f9903c0b36b8.