Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Pour moi, un authentificateur offre une meilleure sécurité que les passkeys”
Google Play · 5/5 · 2026-08-05

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2657305914

Proof data

Record hash (SHA-256): 0392fd40cd9de0457956b9f5b285b74c5269472b995dd8c64f5900a556b9de75
Signature (Ed25519, base64): kQDXTm0aFg4PAt1oiZzFWkkIx56mMiMX0zBsKEE7kEhGg3o1sFIvxoCNzlYau5hatM46NB7BgB3882zqElJ3AA==
Merkle root: 4e4bd1a263431190e24045d88fbbb7ed5f9030935faef80dec659ae2f039ec76
Merkle path: ["0393f3edcb3150f1196f33a41d4cbdcbf396153639b115bfa90694675bb5e9f6","7a0202c7392ca651bb98177d8a021233bfa2584aae8c1a23879b83aae00fdfc2","6422970f764c27ed3159ebddcf70326f0f864df2abcf72776ebfbab8ce7674f6","4cfc696cc597e2b18f3accd012297e09aee6403d212f5c8398120d2f9c7fd676","4696fc66c0e57cd1a73538ad4f4af3f96fbae1cdc9c5974352cf880d05f04041","b1a82d3a822a9020106e6fb98d88659e0a1ab5b349ae62777cc6b9090594997e","556f5e248eb1f88d565c4f9e9808a718b6562aa012145f9ed7f64f3fa997e086","bdb74243e8cc0c20feb13233078bea76c572b4df4d52ef3672f5d1bcd0707a99","074e29872b4a86c2a7b0f312a2d79a7b9c836b4574186aa7df4b6e4892f1b287","b2e1cca09b87f793a06099aa2daf1a4eb0381db08c245d2905aa292ae25f4921","235867b62f3d23e43a13221f4c67536622a627c210244f0fead5d705ff5c733b","2ba87cf098c6c2404b2a7976747e04faae5f4c59da8677168f10303f3103cbb8","0dca924cc5d490cd09e6cf28d263a70ef1171963dfece74286d6f33a3bb659d3","5b404d681bffee559c59320e4c89c61c29c9a49c6b4ba6d76cd832716684aa58","9aec3ad04e3d8c78958d9259e35fb1f1ff0ef798a114433bf3a500e8a57b1e41"]
Anchored: 2026-08-31
Public log entry: search.sigstore.dev, log index 2657305914 · entry 108e9186e8c5677a8c0a…
Expected log hash: 706e8c400fa8ee9f8b3984ef9db59f211ad2980d864551783fb16e1211d62156 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1788144640122","kind":"published-quote","locale":"fr","page":"product:proton/proton-authenticator/fr","quote":"Pour moi, un authentificateur offre une meilleure sécurité que les passkeys","rating":5,"review_date":"2026-08-05","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=proton.android.authenticator","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (4e4bd1a26343…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.