Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Mieux que Google Authenticator”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
086d7b21fec6955bdfe9af9bf48bdfdb2d81843bdf50ad828f742e98578974d9
Signature (Ed25519, base64)
QXeJyIXn1iZKJ46woh4mLVPoDZsvXei4swsUQLq2LGuyA9/XmFysPFa1/OuSgVnW/Fso94kAiV8hgz1sV5xODA==
Merkle root
57e60dc521a4ab8ee39747670ba01310ec9c3f92c64800e03425c0a645a7f8c3
Merkle path
["08707a2e757440519d3bb7537ba0fd8cecc910a83cf6f2cec876b30b78e72eaf","2e4d49307f376bde3a619ab53e7fe86dbd5a0ff9044909908488904867d6ae67","fd00423bb3394e9716821ee761d6c02b0b8d4eabed35cdb06d83b0501823df94","7c017099fbe05ac35726d8833e002fd93e3fff98a208ab2907639a131718a7a4","34ecb56bb1c98e3ce95d9d51a8ef3fdd6ca6f97020e2d8f6c5d35ba8d3e630f5","f6e02099d15e88dbd89a6919243682e1d247f2e85998316a09d806f02f72d491","bad29705637805789dbb3f2812cecf5258df65e40e5b423c1c168950fc3f740c","bb2c83a0daf7adc110be12eecacc593e7f136c89b05fe65807a74d5b319ed21a","41a19b3cbd4e200f61346b7c7a2c5aa52abc318b0526428d407a6a41fc966585","e29289300e7e5fb4ab57148d1f6ae3dcf174621ea612e26fe246750d901c4882","727fd922a23c440ac2a60248f361a2b3785869137989ecad4faf9b75cf8b3fda","93c63a80b8e3489d0ab8339ec4503845df462143333ed3d531894d0e245f4a12","fe5d111587316ff31f5b38fa29f046572eebf5a2bd99ba16667a173d27f92a5c","dcda2bb48f4a1ab26f6126b1aaafb184e5f8d3630133c0cad42caf115918a81c","a1d5535cf9f405ffdd99d322e20ae6357cbed1419e88c64471b565623f0a674b"]
Anchored
2026-09-02
Public log entry
search.sigstore.dev, log index 2684249937 · entry 108e9186e8c5677a47d4…
Expected log hash
46538ec60065603bf54101fff011eda05a02a8a062bf118596692399059b11c2 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1788336087966","kind":"published-quote","locale":"fr","page":"product:proton/proton-authenticator/fr","quote":"Mieux que Google Authenticator","rating":5,"review_date":"2026-08-05","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=proton.android.authenticator","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (57e60dc521a4…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.