Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“C'est simple et ça fonctionne.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
072bec9db55599662f459cbc4a037feeebbfe64fa172ba09457380cef4f9a5a3
Signature (Ed25519, base64)
CLiDeLMgNMgOkEqzso9s8fK4P86syagcMi26Q5TenHxCgUvHgB3mVAaA3lARAXXea8IZwMRhN1XB2Y3pc2UPDg==
Merkle root
f2e4180d5a0710e7663a4b79dbb50303bd6f86e3a2b406f14001987f705300d7
Merkle path
["072555a5cc7a33a73908281d630586a808e5718bd94346cef2779f57a18abea4","c982b464f46a8d29419dce7fc316e066e463e6f841cab5ef930e1d4ac1341517","e2b7fb1489922bf2d645c2ecd18ec253e1aa88f7b967b2011ec86a7f58912487","833dbd44f5067509b84aefd7adbc6c60c4209e39e2f17e03b94f105ef15b5cae","847565afeb74cd7a50084e6be0547d4be63db34a2bc84580c42331a804336645","93bf49f725554a38d7081637e7b65e85cf1ce2b012df2bb11afeada500cf8bfe","01a28dcdef4c8d97e19e1c2d4b7a02a087b11de3ae641cf3aa9793188cf8b004","7a222862c83a69cc698e66647d875966c248995e6293bf068eb7e698fba399fe","623f73471bf8afd7613df537922596ff01eda3ec72cdcb61231591408872ea69","8447106d68b8d3e598c5d7eb25049828695444c0d2d8dda61b5cf7bd08369031","9b8806fad76b0a2d16b1a2c5c5d4cfa75741ae616e1a9463c428f526f61555c1","7450c56eea566b19f3b4ff105a5e4c38e985e0e7c3bd108d77c2b0dd3e6e9817","4c6a8ffb15e2e1add9152cd084d26439d82007efee0940dd95d3a3eac588611e","a6e8e25a2ba90cb0272e9c8b0abe3d0d6e1acdfc88815c674818da4404f1095d","e9f01260bd0385751f2505473f49304ca5856588aee517e499b7a694c94e66cd"]
Anchored
2026-10-05
Public log entry
search.sigstore.dev, log index 3081458408 · entry 108e9186e8c5677a9490…
Expected log hash
083ecc94bbb96677ba7c17fb105e7b1917457374ba5e9cc48c412762603877bd The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791172602574","kind":"published-quote","locale":"fr","page":"product:proton/proton-authenticator/fr","quote":"C'est simple et ça fonctionne.","rating":5,"review_date":"2026-08-10","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=proton.android.authenticator","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (f2e4180d5a07…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.