Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“The best Proton app by far”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
08e57cfdb68e6fe6fa69f77c48d354a2014ca63e138a3ccc76f52ca45e00aa7e
Signature (Ed25519, base64)
9twQ/nitvl9r9Wdwpo1JHEKHvyYStHO8xK3dA7RuyX3nkMCmSqHURRHpLtPt9qcT6SIjXzxIXlM7GIkptaJACQ==
Merkle root
c768716b2cb21aabc39de506951f775443418285e2c5eda072e3b3c2d945945c
Merkle path
["08e3ac9921a4b5d33413dc01882e64c7b678118babfd52ab1629e6d20117da98","70a23c8d526c26cfa94153362c0f63719d36bb296e49a61ad440acb7ff0603a7","180c3f6a1e7d49fb668d7463d770fbe3ce2eb4282e1606c83bd7b6f136d8e4c7","6a7e356278b98b818025185c4210f3174baf094cad23f3a5c11191a43f67fb1b","8fc7a22b916184a72a112d252338205666243f947a7ccda93741e06cf3fb542f","323eb672b7f5355c9c9c952ca27c28c69cbba7dfcae3f51fbad3b386206502a7","603c21a05938b9a43ce70dbb786c6aeb8cf8372bffceaff5b74d4ca234686ab3","2d997f0dcdf375f51f32ec0649bfc7b7d16c1fbc1c4852d7e33ad55d72ad06ab","2aafe864620ba86a5864754909734f81b7e40dc59c7b0463bc1df033a5ac19bd","8db959110300a253de9bde5b5641adced32d1b6da358010e24eb814f3b094875","21dceb876cbe59a71a9bdd1b75264994db32860fb2d37844c2f478d1c57d32f1","2040ad8bb83c34fc495eeb8c9f81caf04fd90dd5129397bcf00a3351408f61cc","38e74f19a86a1311a4dbfb6ff75312ce32e1ae47f608a45fe54b6162c0fae8f4","58ccafd37278be2b9508db439c14e85a319c2716b397eaff7c959a5020ac606e","4c61c84fffc3f3248d19b221d821cc3f0e04d1cfb4151bcd103cb5959dfdd5ed"]
Anchored
2026-08-24
Public log entry
search.sigstore.dev, log index 2579644936 · entry 108e9186e8c5677aee79…
Expected log hash
3a9c8e6bb3b2990f2171448c5468a63b9d6f8bed98ee1b72cd7d6f73b4663243 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787545182186","kind":"published-quote","locale":"en","page":"product:proton/proton-pass/en","quote":"The best Proton app by far","rating":5,"review_date":"2026-08-12","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=proton.android.pass","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (c768716b2cb2…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.