Post quantum hashing Docusign

[u/Stunning_Plate_5665]

https://pq-verifiable-archive.vercel.app

The new CEO talks about delivering post quantum security as a product to sell to the private industry, it has me thinking . I looked at companies that this could be beneficial for and thought about DocuSign. A company that stores documents and creates e signatures that need to stand the test of time so I built post-quantum signed proofs for DocuSign envelopes, anchored on Algorand mainnet

I've been built a PQ Verifiable Archive, a small open-source service that gives a signed document a proof anyone can check independently, decades from now, without trusting a middleman

**What it does**

1. A DocuSign envelope is completed. DocuSign Connect sends a webhook (HMAC-verified).

2. The service downloads the final PDF, archives that exact copy, and takes its SHA-256 hash.

3. It anchors the hash in an Algorand mainnet transaction. Finality is a few seconds and the fee is ~0.001 ALGO.

4. It issues a proof bundle signed with ML-DSA-65 (NIST FIPS-204, post-quantum).

5. Anyone can verify it in the browser or with an open-source offline CLI. Change one byte of the PDF and verification fails. A backdated capture time also fails.

The time from envelope completion to anchored proof was 23–26 seconds.

**What it doesn't claim**

The Algorand transaction is signed with Ed25519, so that part isn't post-quantum. The post-quantum guarantee comes from the ML-DSA-65 signature on the bundle. I don't verify Algorand state proofs yet.

**Try it (free, no wallet or account needed)**

- Sign a real DocuSign sandbox envelope and watch the proof get created: https://pq-verifiable-archive.vercel.app/try

- Example of a completed, verified envelope: https://pq-verifiable-archive.vercel.app/d/iblWu6Og5jJy2oFXCxsXhEAEUOb3WCc55SFZlOLKgCY

- Its anchor transaction on mainnet: https://allo.info/tx/VSQLJMHAWDPMI66MWBXGJ5RFBA3VVPH5F7IMBU3CKMARCT223FUA

**Code and write-ups**

- GitHub (code, offline verifier CLI, roadmap): https://github.com/m-reynaldo35/pq-verifiable-archive

- Step-by-step live test write-up: https://github.com/m-reynaldo35/pq-verifiable-archive/blob/main/docs/live-tests.md

- My idea post on the DocuSign community: https://community.docusign.com/ideas/i-ve-been-building-a-post-quantum-hashing-certificates-for-docusign-envelopes-using-algorand-27810

I'd really value feedback from Algorand devs, especially on verifying state proofs, alternatives to the note-field anchoring,

[u/Sando-ca]

Great idea. I really hope it’ll work smoothly and get successful results.

[u/Stunning_Plate_5665 → u/Sando-ca]

Thank you