Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“est plus digne de confiance.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2543857133

Proof data

Record hash (SHA-256)

0602a0f9a724c2b6ab6dc444b329b29d98066ecb88354ab0e87148c58a3a2cb6

Signature (Ed25519, base64)

iZsn1d/7+XkXONf302iYpqdCfap5dKW+7ZRqrZ8uQmhq6b5jxOMDpsEBz7hRICDizs1MWmhdVi/WhdW85ejJBA==

Merkle root

cee60bb6c0816d1bc69326ea12cf0c5c00cbea13afa283147bf24b52e30f839c

Merkle path

["0600fda435000e84fdf27599a4607d15dff739de12cefbf6fe88f9b119f3c8a1","b26be45bc3e36e521a1d28f2f3e17bbb9bf7d80c36448d42647d697e6c398b7b","f7043c19a8107e248360beccada49671cfc966d5752bf52fd0e25d013d012230","d0bdfdb5fcad3cc709bb55015db9c5cc9f471489ec7023a40c20d7b7d0da253c","a4fa7e493a66b481218d09bef9ee29352091cabf56315ed34f873f71c79462ab","ad226617a5160bb785dd1cb4e147b5d8ba1d96f74d86564fd4231f52c2926229","83d7905e806add2cd8b596e439605fa5109ed8c3120d8c768aed3f75fd1a8a3f","324254bff9431fe3ef817af3d34ed3ed9882345cd393b7ba58e72a7db6833faa","8f02b69bf42092a7158533615632643790343f0b1f23a4609435b1fbd109dca0","2a3e1c310ca00d6497b29180be6ca6a870423f6334f04b8142d861232589bb8d","05efd0783c31d04f451be969fb9a3d8b0e2eead0466af83dba54cb0c48604606","d91641b993c3e8dfe69bb82ee13578bbb33371688b0fdbbf8fd534bccc3e9c6e","a1c11df65738ffb18228c247fd6ad5fc76428a9130a0079c6abf079e9cdfe043","806b2b46dda360b28a8a38da683f56d42f23ab9c4a7b2fa07453f271a33f5ff0","57e3801fc0af4bd2492130e334ef2d0425fdcd10c95109df38ad0d371e279fbf"]

Anchored

2026-08-21

Public log entry

search.sigstore.dev, log index 2543857133 · entry 108e9186e8c5677a5231…

Expected log hash

d8e1ac8b740526c2915424d7f7c6bce881a4ef05d0a3a3dbd88e4c760e36623e The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787288037224","kind":"published-quote","locale":"fr","page":"product:proton/proton-authenticator/fr","quote":"est plus digne de confiance.","rating":5,"review_date":"2026-08-12","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=proton.android.authenticator","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (cee60bb6c081…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.