Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Ich bin so dankbar für diesen E2E-privaten Passwort-Manager.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
0496366f8bd00b7f570d17878e7c757092cd15a2bbf92ee149f93837a0e666de
Signature (Ed25519, base64)
6gMakD/FcuK1Dsd7kLw64ucqhoAzY5JehbFrAEq/+Fu0f5+weJQMeoa4Cf8DK5iMQfOo8DPHjzSJp83Lcn+sAA==
Merkle root
3e1c67438f658ba7fd015e6979c1bfd82d90efb0848cecbd4d902d6b2ed171d3
Merkle path
["049e0f7239d38e5cc5c13f3fa04d7b4d3b76526946caaf245ad658e5fd6ed8a4","7afd2ab76aee21bfd2846a80f1a2dcd33334733e7d9a0a669916e947a5e5b866","8a7b269c28b5cbddea792ac622285072dff99115f5421c09f5d1ec068daff195","01ef80570c07d1fd1ec1506cabc455f861a12169a950dabb7d390b8098438bbd","9022fce2861dfc1e882dd612031e3c57ec5e68b186137401aade61cc4c79f9ff","bdaa87253a92a5a54a99b88bd68dfafb02b831395aefb2cb0884dd2c486e6b2b","ffc83bfc2f08d8ab47b44b312d25ceafc7a626e9f06df09e05ed77d7a413f8c4","3b3c6f5719cb7f0231a9882079ebda5ae76bfc550d4ab5d219d31f1562063705","0ed49c9a1b7391e8209f354d0a072f746711132da7a347d2fadfaef76ac6e9b7","ddfca855d9a0b375e473487c0ebca375c4a9349460171a4a39fdb03dccf9ca51","aacadc64e7d7887ff88699bc333daff48d46b4e6179a20d2f7632f1b62733181","a84f19b73d0745b184029b69cf9f25565f40d942048a82955efda21766296b26","fb183b6f6365289d9e03a04ab6a5ee3d62de93cb7a6ce2bfeccdcb2ed00acf48","0790a9ec23117ba3e0ba9a310290906a4f1d2b0055d4607b106ab21651087c1d","db72b82118c1e08b77018004fa72584377d6eccdc4c75ec19bef6a78273f75c9"]
Anchored
2026-08-20
Public log entry
search.sigstore.dev, log index 2524810465 · entry 108e9186e8c5677af074…
Expected log hash
129b219cb6155ac24569a579c61e8fc9cc2d89305732944b8849d5e719dfd073 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787193927339","kind":"published-quote","locale":"de","page":"product:proton/proton-pass/de","quote":"Ich bin so dankbar für diesen E2E-privaten Passwort-Manager.","rating":5,"review_date":"2026-07-30","source":"Apple App Store","source_url":"https://apps.apple.com/cz/app/id6443490629?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (3e1c67438f65…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.