Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Mit Proton hast du alle deine Passwörter an einem sicheren Ort.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
054e48c12be87deab6a3ca72826a4a7b36d9b9d17c84172b417e882cabd6c139
Signature (Ed25519, base64)
xQVJkxC/AU5pD6KBxveXBgeqCB79YNwCoXfPI4yNCxbJuGAW3juvJ0BQBVVQzCEP0Zg3bFMnOE+YBiQQvoFvBQ==
Merkle root
7e1d35ddccae85f1d1b219083f51bcf5243a04c3c6ea5c30a00b2f5d8561845e
Merkle path
["054c0c5b7b6ceb8ffa4740678497d95baa93ccaa88a90cd00d29b58a5806c022","061275bf6a41b97aa22ee9d073da93384b63aad953068fb8eff2c0cb3eaefb0a","5fa77d9688ffcbd585544fa33c39d67b8dfcbf36baf8f0d737cd01e84a14d2cf","5b94ef2077f7dddef977b42226fb26017527eb857536ab82124a28fa366c2ab4","c3f2d970b8a56e043d53bcfe9719202ee69d3994a053289097e580457fa8c313","1da96dd95824a83ba7b53436d49544907079a18d22a2e866e00b05646463f2a3","06f28b0887570d1d9d412b260819d678503c750a8440367935f611a13d6e5693","ab63c29c784bcfc136a4fe28390cbbc7f7c9cf745a65df6b88179e4c2c6bffd1","0cb89eac64daec803daf36bf9ada147fa22f977b096f0da7ee66de069c23a2cc","8f7d0146efe519e9d4a9800ecdfc2953c8b37b28251c6c826281b4a1944be550","747c22e6e11e6406ef2dbc7e099f10e197874917a64856682ad1b602cbbd2c78","0d9272765e95bb88460e0f11dbec57a088e7a1040def1ceea46f2ba83166d4f7","2afa3f952c3f43ea95afdb596f9e46f323ee0a3ec7c3ce32038311c8a89c16bc","02b987d8bf0552b7c2d2c3d2c526ab592e0137d214145a63ef84c4f9665a3e12","92f0e686d0ee915432d376a42135bb00ed6e9f0363b8646b0ac5575e52c28909"]
Anchored
2026-08-22
Public log entry
search.sigstore.dev, log index 2557057559 · entry 108e9186e8c5677a5b66…
Expected log hash
49e6607c07aad7ce46e30f32fe1978d4dc57e680151ac8134de2fb9d6e01f187 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787311095101","kind":"published-quote","locale":"de","page":"product:proton/proton-pass/de","quote":"Mit Proton hast du alle deine Passwörter an einem sicheren Ort.","rating":4,"review_date":"2026-08-13","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=proton.android.pass","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (7e1d35ddccae…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.