跳到主要内容
ecdsa.com

签名错误诊断工具

验证结果显示无效,但你确信一切都没问题?粘贴密钥、消息和签名——诊断工具会逐一尝试各种常见的解读方式,直到某一种验证通过,然后准确告诉你双方在哪个假设上存在分歧。

100% 本地运行——所有操作都在你的浏览器中完成,不会向任何服务器发送数据

How it works

Almost every "invalid signature" between two correct implementations is not broken cryptography — it is two sides silently assuming different conventions. The explainer builds a small grid of those conventions: candidate curves for your key, DER and raw signature readings (including swapped r/s), your message as literal text or hex/base64-decoded bytes, and the usual digests — SHA-256, SHA-384, SHA-512, legacy SHA-1, Bitcoin-style double SHA-256, plus the case where the message already is a digest. Each combination is actually verified with the audited @noble/curves library, in small batches so the page stays responsive. When one combination verifies, you get the exact mismatch and a code-level fix; when none does, you get an honest list of causes no tool can see from these three inputs. Everything runs inside your browser tab — the key, message and signature never leave your machine.