Company
Don't trust us. Check it yourself.
Actions recorded on KXCO Armature carry a post-quantum signature. Anyone with the public key and the record can check that signature with open-source tools, without going through KXCO, and the tools keep working if KXCO disappears.
Trust through verification
- A signature tied to a key. Each action recorded on Armature carries a post-quantum signature (ML-DSA-87 or ML-DSA-65, NIST FIPS 204), and any change to the signed content makes the signature fail. A valid signature shows which key signed and that the content has not changed since. It does not show that the content is true, or who held the key.
- Check it without us. Verify signatures with free open-source tools that run on your own machine, with no KXCO server involved, or look up records on the public explorer at chain.kxco.ai. Only a check of whether a key was revoked after signing needs the KXCO registry.
- Tamper-evident. Records are anchored on KXCO Armature, so a later change to a recorded entry is detectable.
Three ways to check for yourself
- Open the public record. Transactions recorded on Armature appear on the public explorer at chain.kxco.ai. You can look them up without a KXCO login.
- Run the open-source verifier. The kxco-verify tools are open source and run on your own machine. Check KXCO signatures offline, with no KXCO server involved.
- Check it against the standards. The cryptography implements the published NIST standards (FIPS 203, 204 and 205). The building-block libraries are open source, so the code itself can be audited before you rely on it.
Plainly answered
Do I have to trust KXCO?
Not to check a signature. Actions recorded on Armature carry a signature that anyone with the public key and the record can check, on the public explorer or with free open-source tools. The offline tools do not go through KXCO and keep working if KXCO disappears. Only a check of whether a key was revoked after signing needs the KXCO registry.
How can I verify something myself?
Open the public record at chain.kxco.ai, or use the open-source kxco-verify tools to check KXCO signatures offline. Neither needs a KXCO account, and the offline tools need no KXCO server.
Will the signatures stay verifiable?
Actions recorded on Armature are signed with ML-DSA-87 or ML-DSA-65 (NIST FIPS 204) and anchored on Armature. ML-DSA is designed to resist attacks by quantum computers, so these signatures are expected to remain verifiable if quantum computers break today's widely used signature schemes.
Check the record yourself
See the live record, or start building on infrastructure whose signatures you can check yourself.