provenance · append-only · merkle
Transparency log
A Certificate-Transparency-style log of provenance and org-endorsement events. Nothing here is trusted on the server's word: this page downloads every leaf, rebuilds the Merkle root with the RFC 6962 algorithm, and checks the server's Ed25519 signature, all inside your browser.
prefer a terminal? $ zev verify-sth <zev-api url>
◌
Verifying…
fetching signed tree head
- ○Download every committed leaf
- ○Rebuild the Merkle root (SHA-256, RFC 6962)
- ○Signed message commits to this size and root
- ○Ed25519 signature by the server key
Entries
v re-verifyleaf hash = SHA-256(0x00 ‖ leaf_data)