Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Microsoft Authenticator instantly scanned all three codes that Proton couldn't.”
Google Play · 1/5 · 2026-07-11

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2473217093

Proof data

Record hash (SHA-256): 0b6c403fe1af97785769dc2ec32e02552925b61ab608cd72edaba89d665513af
Signature (Ed25519, base64): wX5N+cGY2uO9P268kb/TU06MYpNiwr2XumUNrwpPnvypyW4D0ETV/H3fo4sQa/LOeG9VgV1Picp+YjoAdQ1dDA==
Merkle root: 2e05144403775fd7eba9017f8da19f9a9bc25aa88bdd1a2125378868e428b7ee
Merkle path: ["0b70068759b8abff3cb5352b3e9bb1d4c6c0692db826c96a3082973cf343cf4e","f6a2866319869b0f95ab38fea44c47edc7a3492253c08a164f0a733266f1a431","b7a51ef97b0ff390e37194085eab7aeed75a2bb797a851409873ba906971e8ea","23ddcd9ccf171da3320e61537faaf382f46dae604bd652ab7c93459de880479a","1e8e6b628c70a4022f751435449d85f6b3369793d34d3a59be0c93b675b0b693","195a3aaef4280daf8c29031b465fac0fa55f7115b311549a83de346e0461fbcd","c877a35f7ce9fe4bd21b5cafe857e0633bf40fdd868a841c4b62b05203978a1f","6e43972b1e13d612f01c384c80ff558e5a916f9e5078901c8d127db1a5d749af","397d45b3d9d36152ca8078f6f093e6fad041562d2c2df66146734fdd1f031ac3","d00181cfebe3a71943593a879e6396917c46726b2f66d58f426971abcc9ab0c6","a2f5b5783e42a6a8172e6cb8115154e8e6ccc7100ee57433be0a250facbf66af","437e70c9534691a8efc57b247fc07178d29e385d41763b945714ebfd93d0b7f8","6588e7bfdeb485719b7a8386d4857c4310fd86f7b817458ed659e6b94e991201","63d55fc94d7a14534bd9c86cc9f4bedbd7e5eb5bedb1c9ba10345379fda0b060"]
Anchored: 2026-08-15
Public log entry: search.sigstore.dev, log index 2473217093 · entry 108e9186e8c5677a2fdd…
Expected log hash: 50c2d7f1c7891e7ae097261f9da2221e19bac56ba0bec1a2ca651185c1919edc The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1786773726681","kind":"published-quote","locale":"en","page":"product:proton/proton-authenticator/en","quote":"Microsoft Authenticator instantly scanned all three codes that Proton couldn't.","rating":1,"review_date":"2026-07-11","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=proton.android.authenticator","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (2e0514440377…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.