Witnium logo
WITNIUM. Chain.
Back to Evidence Provenance
For IT & security teams

Independent Verification.

Verify the integrity of a file referenced by a Digital Witness Certificate using only the standard tools shipped with macOS, Linux, or Windows. No Witnium software required.

The verification answers a single question:

"Is the file presented now identical to the file referenced in the Digital Witness Certificate?"

Established by computing the file's cryptographic hash locally and comparing it to the hash recorded at witness time.

01

Identify the recorded hash.

In the Digital Witness Certificate, locate the field labelled File Integrity Hash or SHA-256 Hash.

bffa441b6a558fc704e123973224ded527f1f196201ec422b9b1867c22038a34c

This value represents the file's cryptographic fingerprint at the time it was witnessed.

02

Open a command-line interface.

  • macOS — open Terminal (Applications → Utilities → Terminal).
  • Windows — open PowerShell.
  • Linux — open Terminal.
03

Navigate to the file location.

Change directory to the folder containing the file.

cd Downloads

Adjust the path as needed.

04

Compute the file's SHA-256 hash.

macOS

shasum -a 256 filename.ext

Linux

sha256sum filename.ext

Windows (PowerShell)

Get-FileHash filename.ext -Algorithm SHA256

Replace filename.ext with the actual file name.

05

Review the output.

The command produces a SHA-256 hash value, for example:

bffa441b6a558fc704e123973224ded527f1f196201ec422b9b1867c22038a34c

This is the fingerprint of the file in its current state.

06

Compare the hash values.

Compare the locally computed hash with the hash recorded in the certificate.

Exact match — the file is identical to the file referenced in the certificate.
Any difference — the file has been altered, replaced, or is otherwise different.

Letter case (uppercase/lowercase) is not significant; all characters must otherwise match exactly.

07

Scope of what this verification establishes.

This verification establishes:

  • That the file's content has not changed since the moment it was witnessed.

It does not determine:

  • ×Authorship.
  • ×Legal ownership.
  • ×Intent or purpose.
Those matters remain for legal or regulatory assessment based on additional context.

Want this in front of a regulator or court?