TrustVault Public Keys

Verifying Provenance

API users will need to verify the provenance of the data returned by the API. This is to prevent man-in-the-middle and other attacks.

To do so they will receive a signature over the encoding of the some of the returned data (depends on the request)

To verify they will need to use TrustVault's public key for the environment they are in:

uk-online-1:

041cbce9985c7627f67b60b65cd1921fc79cbbc5b38a8c5702579d9573dd3b90f4e8c189679f1911335fd753510706d66c9c76147b961b085e25e3742e02524b01

uk-online-1:

040e177769d4302f6cb0a1229d13d106ad9eb7ea53042bfb24cf4eb572ced1c13da2621b202cfd475e2847d6e380bd00b747a6dacf99381dc9e99bc567b4edf994

For the signed data format and a working Node.js example, see Verifying a provenance signature in code.

Example javascript code on verifying provenance for some requests can be seen here: