diff --git a/registry/storage/layerwriter.go b/registry/storage/layerwriter.go
index fe118597..0a42aa40 100644
--- a/registry/storage/layerwriter.go
+++ b/registry/storage/layerwriter.go
@@ -345,6 +345,8 @@ func (lw *layerWriter) validateLayer(dgst digest.Digest) (digest.Digest, error)
 	}
 
 	if !verified {
+		ctxu.GetLoggerWithField(lw.layerStore.repository.ctx, "canonical", dgst).
+			Errorf("canonical digest does match provided digest")
 		return "", distribution.ErrLayerInvalidDigest{
 			Digest: dgst,
 			Reason: fmt.Errorf("content does not match digest"),