Resources

Curated links to standards, libraries, research, and tools for content provenance and open verification.

Standards

C2PA Specification

The full technical specification for the Coalition for Content Provenance and Authenticity.

Content Credentials

Adobe-led initiative implementing C2PA for content attribution and provenance.

Certificate Transparency

The original transparency log standard that inspired sigstore and sig-share.

Libraries

sigstore-js

JavaScript client for sigstore signing and verification.

c2pa-js

JavaScript library for reading and validating C2PA manifests.

@trustnxt/c2pa-ts

TypeScript implementation of the C2PA specification.

Research

sigstore: Software Signing for Everybody

The open-source project bringing keyless signing and transparency logs to software supply chains.

Rekor Transparency Log

Append-only transparency log for recording signed metadata about software artifacts.

Fulcio Certificate Authority

Free code-signing certificate authority using OIDC-based identity for keyless signing.

Tools

C2PA Verify

Online tool for verifying C2PA Content Credentials in images and documents.

cosign

Container signing, verification, and storage in an OCI registry — built on sigstore.

Rekor CLI

Command-line interface for querying and submitting entries to the Rekor transparency log.