Rust tool Tunjo uses Merkle trees and hybrid signatures to prove files are untampered

A developer has released Tunjo, an open-source Rust tool designed to cryptographically prove that a set of files has not been altered since a specific point in time. The tool builds a Merkle tree from file metadata and content, allowing any single file's integrity to be verified without exposing the entire dataset. Each file's leaf node captures its path, size, timestamp, and content hash, ensuring that renames or moves are also detected as changes. Records are signed using a triple-hybrid scheme combining Ed25519, ML-DSA-87, and SLH-DSA, so that the seal remains valid even if one algorithm is later compromised. The tool targets use cases such as audit logs, incident documentation, and email contracts, where third-party-verifiable proof of file integrity is required.