DSPIP Generator
Learn how DSPIP creates digitally signed QR codes for shipping authentication
1
Generate Keys
2
Enter Shipping Info
3
Select Carrier
4
Sign & Generate
5
Verify QR
1
Signing Key (Sender's Cryptographic Identity)
What is this? DSPIP uses ECDSA (Elliptic Curve Digital Signature Algorithm) with secp256k1 - the same cryptography used by Bitcoin and Ethereum. The sender signs shipping labels with their private key, and anyone can verify using the public key published in DNS.
Private Key (SECRET - Never share!)
Generate or load a key to begin
Public Key (Base64 - Published in DNS)
-
Enter your custom key locator and click "Update DNS" to regenerate the DNS TXT record display
How DNS-Based Key Distribution Works
1
Sender publishes public key
The public key is added as a TXT record at
selector._dspip.domain.com2
Sender signs QR code
The private key signs the shipping payload, creating a cryptographic signature
3
Scanner queries DNS
When verifying, the scanner looks up the public key via the key locator in the QR
4
Signature verified
The public key mathematically verifies the signature is authentic
2
Sender (Issuer) Information
2
Recipient (Subject) Information
3
Shipment Information
Standard Mode - All Data Visible
All payload data is encoded in cleartext within the QR code. Anyone who scans the QR can see sender and recipient information.
- Best for: Non-sensitive shipments, internal logistics
- Pros: Simple, no additional infrastructure needed
- Cons: No privacy protection for recipient data
Optional Integrations
▼
GS1 Identifier: A global standard for supply chain identification (e.g., SGTIN for product serialization). Format:
EDI Reference: Electronic Data Interchange document reference, typically an ASN (Advance Ship Notice) number. Format:
urn:epc:id:sgtin:0614141.107346.2017EDI Reference: Electronic Data Interchange document reference, typically an ASN (Advance Ship Notice) number. Format:
856-12345
4
Sign & Generate QR Code
When you click "Sign & Generate", the following happens:
- All form data is assembled into a JSON payload
- The payload is Base64 encoded
- A signable string is created:
DSPIP|1.0|SHIP|keyLocator|payload - The string is hashed with SHA-256
- Your private key signs the hash using ECDSA
- The signature is appended as the 6th field
- The complete string is encoded as a QR code
Shipping Label Preview
Complete steps 1-4 to generate a shipping label