Skip to main content
Encypher Logo

Content provenance vs. blockchain timestamping

A blockchain timestampBlockchain timestamping: Writing a file's hash to a public ledger to show it existed at a given time. proves a file's hashHash: A short fingerprint of exact bytes. Any change, even one character, gives a completely different hash., a short code worked out from it, existed at a given time. The record stays on the chain. A signed C2PA manifestC2PA manifest: The signed label itself: a small package inside a file that records who signed it, what they declared and how to check it. travels inside the file, so whoever has the copy can check it.

Start signing freeCheck a file
A file with its label inside reaches a reader who checks it on the spot; a file whose record stays on a ledger reaches the reader with nothing pointing to that record.
A label inside the file travels with it. A ledger record stays behind.

Blockchain timestamp vs. C2PA manifest

Blockchain timestamping and a C2PA manifest, side by side.
Blockchain timestampC2PA manifest
Where the record livesOn the chainInside the file or text
Travels with each copyNoYes, while the copy keeps it
What a check needsThe original, the chain and the transactionThe copy and a public keyPublic key cryptography: Signing with a secret private key that only the signer holds, checked by anyone with the matching public key.. Works offline.
Says who signedOptional, in the transactionYes, a named signer
Carries rights termsRarelyYes, machine-readable
Cost per recordA network fee on public chainsNo fee per record
Public, shared ledgerYes, its main strengthNo. Trust comes from the signer's certificate.
How long it lastsDurable on major chains; at risk on small onesAs long as the copy keeps the label
For textOne hash for the whole documentA label per document, and per sentence with Encypher
Signature formatVaries by chainCOSECOSE: CBOR Object Signing and Encryption: the signature format C2PA uses to sign the claim inside a label., an IETF standard, in C2PAC2PA: The Coalition for Content Provenance and Authenticity: the group that publishes the open standard for content labels. 2.4

When to use each

Use a blockchain timestamp
When you need a public, dated record that no single party controls, such as proof that an idea existed first.
Use a C2PA manifest
When the content will be copied, shared or syndicated, and the people who get it need to check where it came from.
Use both
When you want a label in the copies you send out and a public dated record of the original.

The record has to reach the copy

A story goes from the publisher to a wire service, then to hundreds of sites, then into an AI training set. A chain record stays where it was written, and nobody holding a later copy knows it exists. A provenanceContent provenance: The record of where a piece of content came from and how it changed, carried with the content itself. label inside the text makes that trip with the words.

Signed text copied into most apps and sites keeps its label; some apps strip the invisible characters and the check then finds no label; editing the words breaks the seal and the check shows the change.
Copy and paste keeps the label in most apps. Some apps strip it, and any edit shows up when the text is checked.

Questions

Which is better for AI training data provenance?
A label inside the content. A scraper that copies the article copies the label too, so the record is present in the training data. A chain record is not in the scraped copy, so nobody downstream knows to look for it.
If someone strips the label, does the check notice?
Not by itself. A copy with no label looks like an unsigned copy. A hidden watermarkWatermark: A mark placed in the content itself, visible or hidden, so it can be found again after the file is copied. added at signing can lead back to the record. That is called recovery.
Can I use both?
Yes. Some teams sign content with a C2PA label and also write its hash to a public chain as a dated public record.

For engineers

Show the technical detail
Timestamping
A chain anchors a hash (often SHA-256) in a block; verification recomputes the hash from the original and finds the transaction. Nothing in the file references it.
C2PA
A COSE signature over the claim, an X.509 chain to a trust list root, and an RFC 3161 timestamp from a time stamp authority, all inside the manifest store.
Text
The C2PA unstructured-text method embeds the manifest as invisible Unicode characters; Encypher adds sentence-level checks.

Keep reading

Create. Mark. Endure.

Put the proof inside the content. Sign your first file free.

Start signing freeCheck a file