Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“C'est vraiment aussi simple que ça.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2514383033

Proof data

Record hash (SHA-256)

08d6e25fe39d70007068b1e5e66effb5641ebcbf08dcec6ccad651169ad00105

Signature (Ed25519, base64)

2mtGsRpT5SsiCB+SmSr0MBt0/LBmLD2M1k0OLNLXL/BKUR3e9DdunOTbCDWT0P9f6MEGxBLxurKp7zQg+1ovCg==

Merkle root

197f899fafda406e0c9d0591eaf3664c281655082dfd19c34045187b374127b6

Merkle path

["08cde996b2a7938260a6a9e9a0c62e209ee759afaf9dc5ec46d5ecd4cba20d6d","98a1d8366132e184dba2140edd49c84a5b1109ba97c128eb24e14f9e1cb75c52","c8410fab15c38f64d43721de553f36f385384c429abf60532398384b06edd6d0","72630735e01f59c72b2ed0e75c444b059ee0722f5bcf96d5d3561772ecc75756","ce2853d98f55ba68a7d919e2e76bf7469eca815bfc16c57f9c436f75355f97ab","4d788cc0cefcbb77995c3643c3c43e46bd53b8dd98f9d8d733c796dcaf4b9689","d9d7148101ee65dc96a1d18272b2b5a4c58ac12142748123a0ba6c5650fa5839","ed21d2be37ef22b17a569113d690f9a687c470437a12075f8808262ece0478e0","44c01a80bb8915f1adcc249dcbcf5ea887ae99955d152ff192e655ebded9bb3f","dca8b7e44dd5147ff07a25bcd78b6058124cd54b9785b8d3f75eb2c8e7162674","9659e1998c36b6ca965b9b003e62320cc935135fcb1220867f9f4a465c71a64c","df8a7c6e5cde16b4c4ab3a58a64fe01086f546e7d0c17890ee9b3ae44a54c23d","474f5e3eb7f54ece02b72e34f56037226b5d12684c5849615376a356c03ed7fc","043ba08436a7a593c366180e52159485eebe8c0b0baf9b9c62f4c2c637b226b7","7b5d4c2155ce4f6908bf1c61cdd8b51ce48d7dc7c5d7f3bd9a7ce68fedb43f21"]

Anchored

2026-08-19

Public log entry

search.sigstore.dev, log index 2514383033 · entry 108e9186e8c5677a6078…

Expected log hash

4e5cbdb3dc34f3dbd6a57b603e905df6c94968b41f5bd83d5c9a25f2ea060d8e The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787127398505","kind":"published-quote","locale":"fr","page":"product:proton/proton-authenticator/fr","quote":"C'est vraiment aussi simple que ça.","rating":5,"review_date":"2026-08-10","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=proton.android.authenticator","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (197f899fafda…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.