Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Ich hoffe, sie wird der beste Passwort-Manager”
Google Play · 5/5 · 2026-08-12

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2657480792

Proof data

Record hash (SHA-256): 047ba749b2c09d2019f882faaecf9cc8769e57d917b601245a37528c3c2d496d
Signature (Ed25519, base64): xFpZ4SRU+RTQNYtCB1tTcYuakwRrjthujoqU5dTeLl5bU7vY9k1zdl6M2RwkJYsazTZ/CAApIgojrLddE6NTBQ==
Merkle root: 1b8bd208913fadeacc13aee96871dc2c1b9dc61e733c3f3400ab6ee0e7324443
Merkle path: ["047bfc85b69f25b668c9a41cf309f88698cb4759a97c5cb7e283a8338950b6ed","fea73859ebacca2d88e4a7568bdd26f66276aa893b653f113135f5f44e2626be","7ca9f6e895f2e5cdb2e6f254684ca482deb04d41b499c80eb49b59394e0f0f03","16148677c174a650f8a3d181cdf19f684271d8d5a64f1bc636f1c3f670d00332","232d408ac3c71341454d60ac535ff92e11a6d8f6a754dfd62dae78b79a40c916","f83e9d6725e59c7596abbf876d202ed0151c7a909c133c53b21e30e8d8b6e4c7","525b285fea514307b52deaadd2254413092924f7973412a0cdc01a3f194e97e6","ae034b863748958f7728fad9fc75505c6656d9a3f64bd3fdfcc2f11d78277282","5fe9da957b914e448145b45a902436957309c552c5239292c0b8050dfcf0ba64","dac2a889070a1182eb674a65224780e7a737bf05f241a1f9323138214012a5c3","39a55d967fa47639c65fca4840d84c09025510cfd9549bff6b3b39e9c777cd45","ce46eefa0e0d5c2b65c519776432d35a82d07b0bd2abd92776ca37317bcc8f74","acf52e9a767b254023e37fc92bc6a0d81f036d70fec8df47db9f5728533e3c9e","8a5060efafa29fbc64db755e49cfde82194cf6467c7dda5949ed7b058f0a3650","ce07c6a4f0a9b6bd8c624cf5ab7198d339b314b8dcd9468f4437006e846aa076"]
Anchored: 2026-08-31
Public log entry: search.sigstore.dev, log index 2657480792 · entry 108e9186e8c5677ae7be…
Expected log hash: ad55c089e6140369414933a3be64660b3e37350199a02055154c25d6001c76a5 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1788145962339","kind":"published-quote","locale":"de","page":"product:proton/proton-pass/de","quote":"Ich hoffe, sie wird der beste Passwort-Manager","rating":5,"review_date":"2026-08-12","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=proton.android.pass","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (1b8bd208913f…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.