Are my signatures quantum-exposed?
To check if your document signatures are quantum-exposed, scan them for classical-only signatures (RSA or ECDSA) that lack post-quantum protection. Start with the free open verifier to inspect individual documents, then scale to a full archive audit using AlgoVoi Evidence Auditor (AV-EVID). This process flags weak digests (like SHA-1), expired certificates, and broken chains, producing a comprehensive report for compliance or risk assessment.
Why quantum exposure matters
Classical signatures (RSA, ECDSA) rely on mathematical problems that quantum computers can solve efficiently using Shor's algorithm. If your documents use these signatures without post-quantum protection, they could be forged or invalidated in a post-quantum world. This risk applies to contracts, clinical records, deeds, and any long-term records requiring legal or regulatory compliance.
How to check your documents
Step 1: Inspect a single document for free
Start with the free open verifier to analyze individual documents offline. Install it via:
pip install algovoi-reseal-verify
This tool verifies: - Classical signatures (RSA/ECDSA) and their certificate chains. - Weak digests (e.g., SHA-1) that are vulnerable to collision attacks. - Expired or broken trust paths. - Post-quantum protection status (e.g., Falcon-1024 or ML-DSA).
It works offline, ensuring your data never leaves your environment.
Step 2: Scale to a full archive audit
For compliance teams or large archives, AlgoVoi Evidence Auditor (AV-EVID) batch-verifies thousands of documents. It:
- Scans folders of PDFs, .p7s files, or post-quantum attestations.
- Flags documents with:
- Invalid or unsigned signatures.
- SHA-1 or other weak digests.
- Expired or broken certificate chains.
- Classical-only signatures (quantum-exposed).
- Partial coverage or gaps in protection.
- Generates a signed, tamper-evident audit report (HTML, JSON, CSV) verifiable by the free tool.
- Supports offline and air-gapped environments.
The report provides a clear baseline for remediation or compliance reporting.
Do it with AlgoVoi
AlgoVoi Evidence Auditor (AV-EVID) is designed for compliance teams and record managers who need to audit entire archives. It costs $599 perpetual or $299 per year, paid in USDC.
Next steps
Start with the free verifier to inspect a single document. If you manage an archive, upgrade to Evidence Auditor for batch verification and compliance-ready reports.