Blog Details

Introduction

Sooner or later, anyone who works with digital files has to answer one blunt question: is this file exactly what it was when you collected it? An auditor handing over a ledger, a police officer producing a seized photo, a lawyer relying on an email, a corporate team responding to a regulator — all of them need a clean way to show that a file has not been altered. The evidence integrity certificate is that clean way. It is a short, readable document that records cryptographic hashes for each file, compares them against the values you recorded, and prints an explicit verdict. This article explains what it contains, why it matters, and how e-Dex (formerly Hash Calculator) produces one on your own machine.

What an Evidence Integrity Certificate Actually Proves

The certificate makes a narrow but powerful claim: that a specific set of files is bit-for-bit identical to a previously recorded state. It does not describe who collected the file, what device it came from, or how it was acquired — that broader story belongs to a full court certificate and to a documented chain of custody. The integrity certificate answers only the integrity question, and it answers it precisely. That focus is exactly what makes it the foundation everything else builds on: before you can argue about where a file came from, you have to be able to show it has not changed.

Multi-Algorithm Hashing, Per File

A cryptographic hash is a fixed-length digital fingerprint computed over a file's contents. Change a single byte and the hash changes completely, so a matching hash is strong evidence that nothing was touched. e-Dex computes several algorithms for every file — MD5, SHA-1, SHA-256, SHA-512 and BLAKE3 — and lists them side by side on the certificate. Recording multiple algorithms is deliberate: SHA-256, SHA-512 and BLAKE3 are the modern, collision-resistant choices, while MD5 and SHA-1 remain useful for matching against older records that may only have stored those values. If you want a primer on the algorithms themselves, see our guide to the best hash generators to verify file integrity in seconds.

The MATCH / MISMATCH Verdict

Hashes alone are just long strings of hex; their value is in the comparison. When you verify a file, e-Dex recomputes its hash and checks it against the expected or recorded value, then prints a plain verdict: MATCH if every byte is identical, MISMATCH if anything has changed. Above the per-file rows, the certificate also shows an overall verification result across the whole set, so a reviewer can see at a glance whether the batch is clean or whether one file needs attention. No spreadsheet gymnastics, no eyeballing two columns of hex — the answer is stated.

Who Uses It, and When

The integrity certificate suits anyone who must demonstrate that a file is exactly what it was. Auditors attach it when handing working papers or extracted data back to a client. Investigators and police use it to show a seized file has not drifted since collection. Lawyers rely on it to back the integrity of a document before it is tendered. Corporates and compliance teams use it to prove a delivered dataset is intact, and cyber consultants issue it alongside reports so a client can re-verify months later. Because it is simpler than a full statutory certificate, it fits the day-to-day moments where you just need defensible proof of integrity.

How It Relates to the Bigger Picture

Think of the integrity certificate as the base layer. On top of it sits the full Section 63 BSA 2023 electronic evidence certificate, which wraps the same integrity values in the court-prescribed Part A / Part B Schedule form along with device and acquisition details. Around both sits the chain of custody for digital evidence — beyond hashing, the record of who handled the file and when. The integrity certificate does not replace those; it is the verifiable core they all depend on.

Offline, Signed and Time-Stamped

e-Dex generates the certificate fully offline on your own Windows machine, so your evidence files never leave your computer. Where you need extra assurance, you can apply a PAdES digital signature with a Digital Signature Certificate (DSC) on a USB token, binding the signer's identity to the document so any later edit is detectable, and attach an RFC-3161 trusted timestamp that seals the exact time the certificate was produced against an independent Time-Stamping Authority. Only the timestamp step needs the internet; everything else runs locally.

A Note on Legal Advice

e-Dex helps you produce a well-structured, integrity-backed certificate; it is a tool, not a substitute for legal counsel. An integrity certificate is supporting documentation about whether a file has changed — it is not the statutory certificate that a particular proceeding may require, and it does not guarantee that any document will be admitted. How evidence is tendered and weighed depends on the facts of your matter and the current text of the law. Always read the provision as it stands and take advice where the stakes warrant it.

Frequently Asked Questions

Is an evidence integrity certificate admissible in court in India?
An integrity certificate is not, by itself, the statutory certificate required for electronic records under Section 63 of the BSA 2023 (formerly Section 65B of the Indian Evidence Act). It is supporting documentation that demonstrates a file is unaltered through cryptographic hashes and a MATCH / MISMATCH verdict. It strengthens the integrity story behind the evidence, but how it is tendered and weighed is for the court to decide on the facts of the matter. e-Dex helps you produce the document; it does not guarantee admissibility.

What is the difference between an evidence integrity certificate and a Section 63 BSA certificate?
The evidence integrity certificate is the everyday attestation that a set of files is unaltered. It records multi-algorithm hashes per file and an overall verification result. The Section 63 BSA / Section 65B IEA certificate is the formal, court-prescribed certificate for electronic records, set out in the Schedule to the BSA in Part A and Part B form, and it captures device, acquisition and deponent details in addition to integrity values. The integrity certificate is the simpler foundation; the Section 63 certificate is the full statutory form.

Does e-Dex need an internet connection to verify file integrity?
No. e-Dex runs fully offline on your own Windows machine. Hashing files, comparing them against recorded values and generating the evidence integrity certificate all happen locally, so your evidence files never leave your computer. An internet connection is only needed if you choose to apply an RFC-3161 trusted timestamp from a Time-Stamping Authority.

Which hash algorithms does the evidence integrity certificate use?
e-Dex computes multiple algorithms per file, including MD5, SHA-1, SHA-256, SHA-512 and BLAKE3. Listing several algorithms side by side makes the integrity proof stronger and lets a verifier match against whichever value was originally recorded. SHA-256, SHA-512 and BLAKE3 are the modern, collision-resistant choices, while MD5 and SHA-1 are included for compatibility with older records.

What does MATCH or MISMATCH mean on the certificate?
When you verify a file, e-Dex recomputes its hash and compares it against the expected or recorded value. If every byte is identical the result is MATCH, meaning the file is unchanged since it was recorded. If even a single byte differs the result is MISMATCH, meaning the file has been altered or corrupted. The certificate also shows an overall verification result across all files so the outcome is visible at a glance.

Conclusion

The evidence integrity certificate turns a vague assurance into a one-page, verifiable fact: these files are unaltered, proven by multiple hashes and a plain MATCH / MISMATCH verdict. It is the simplest and most reusable document in the digital-evidence toolkit, and the foundation the heavier certificates build on. You can produce one in minutes, offline, on a single Windows machine with e-Dex — the Digital Evidence Integrity Suite. Download it free and start proving your files are exactly what they should be.