I want to adopt cardano blockchain as a proof of existence and authenticity of documents on my job. How can I do that?

Making some research I found cardano CFC but I am not sure if is working already and if there are other alternatives at low or not cost.

1 Answer 1


While this is possible to do in principle, there is currently a lack of standards surrounding many potential such applications of blockchain tech. Establishing standards will require us to experiment a bit at first, tailoring each application to our specific needs. That being said, I'd imagine there's a few ways of going about document verification, depending on what your requirements are for user-friendliness, security, and accessibility. Here are a few naive ideas:

  • One can hash some document(s) using a popular hashing algorithm like SHA-256, and post the resultant hash on chain as metadata. Here are some basic introductions for attaching metadata to a transaction. If someone would then like to verify the authenticity of the document, they could hash it themselves and compare their result with what is posted on chain (provided you give them the tx-hash of the transaction so they could query it). Note: while this method is secure and works well for individual documents, it can get tedious keeping track of everything if there are many documents posted over a long period of time. One can write a piece of software that automates this process or:
  • One can securely generate a GPG keypair, whose fingerprint they post on-chain as metadata. Now, anything signed by the keys can be referenced by an external validator as being the same signatory whose key fingerprint is stored on chain. This method requires a higher level of trust in that the validator assumes your keys have not been compromised, but it is much easier to authenticate many documents since only your GPG fingerprint is stored on chain.

As far as paying for all of this goes, fees on cardano are deterministic, and it relatively cheap to submit basic transactions with metadata. Here is the formula for reference.

These are just a few spitballs of how I would begin going about solving your problem. However, I'm sure that, as time goes on, standards will evolve and cement themselves for such applications.

  • I think the COSE (CBOR signing and encryption) is now a clear pathway for document signing and encryption of the signature. (github.com/cardano-foundation/CIPs/tree/master/CIP-0030 , github.com/Berry-Pool/nami-wallet/blob/… are some references.). This is the wallet api: api.signData(addr: Address, payload: Bytes): Promise<DataSignature> that can help with using of the wallet private keys to sign while attaching the public key for verification in the backend.
    – LKBH Pools
    Commented Aug 8, 2022 at 7:05
  • The problem with GPG key scenario, is that it can lead to hacks where a central server generating the keys become the vulnerability and hence it is better avoided. Moreover for lay users they cannot store their keys. That is why it is best to use wallet which the lay users can use.
    – LKBH Pools
    Commented Aug 8, 2022 at 7:07

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.