Verify signed artifacts
Check release packs, installers, delivery archives or licence files against the public verification material supplied for the evidence set.
Customer-operated PQC verification
Run post-quantum signing and verification in your own environment.
PQC Core Self-Install is a licensed runtime for approved customers who need to create, verify and preserve post-quantum evidence for release packs, installers, licence files and customer handover artifacts.
Quoted after review
Use PQC Core when your team needs its own verification capability rather than an Attessia-operated witness output. The runtime supports Falcon-512 and ML-DSA-65 signature evidence, SHA-512 manifests, public verification material and verifier records that can travel with the artifact.
What you receive
- A licensed self-install PQC verification runtime.
- Documentation for approved customer operation.
- A route to produce or validate signature evidence and manifests.
- Optional post-Core deployment support when scoped after approval.
What you can do
Turn technical delivery into independently checkable evidence.
Create PQC evidence
Produce or validate Falcon-512 and ML-DSA-65 signature records where the approved customer workflow requires post-quantum assurance.
Seal delivery material
Bind artifacts to SHA-512 manifests, signatures and verification records so customers can inspect what was delivered and later re-check it.
Preserve audit records
Keep verifier transcripts, hashes and public-key material alongside the artifact for customer handover, audit support and future review.
Self-install boundary
What customer-operated means.
PQC Core is installed and operated in the customer's own environment after suitability review. Attessia supplies the licensed runtime and customer documentation; the customer controls the environment where signing, verification and evidence preservation occur.
Key-handling and evidence-sharing boundaries are agreed as part of the supply route. Public customer packs should focus on public verification material, signatures, manifests and transcripts, with sensitive material handled under the agreed customer process.
Review-gated supply
- Customer, destination and end-user are reviewed before supply.
- Intended use and onward-transfer context are required for quote review.
- Availability may depend on jurisdiction, sector, deployment route and support needs.
- If access cannot be supplied after review, the request may be refused, cancelled or refunded.
Product boundary
PQC Core is different from PQC Witness Uplift.
| Route | Who operates it | Best fit |
|---|---|---|
| PQC Witness Uplift | Attessia-operated attestation service | You want Attessia to return a signed witness pack for an eligible Grammar C pack or agreed delivery artifact. No customer runtime access is supplied. |
| PQC Core Self-Install | Customer-operated runtime | You need to run post-quantum signing and verification inside your own environment and preserve your own evidence records. |
| White-Glove Deployment | Post-Core scoped support | You have successfully purchased PQC Core and need guided deployment, checks or handover support after approval. |