Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Sehr guter Datenschutz”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2656977863

Proof data

Record hash (SHA-256)

0c13ed9ca1fa7705b0668c1cefd2636414b39ca8a70f17421661014f33a67c2b

Signature (Ed25519, base64)

6ex9OALcccayRxbMAurX1Kfmas5i3iYpbhCXA20VZrTUoZjm3lYg7N5A4d79obn/0CLYCMSvf3VZBYaOBUbVAw==

Merkle root

0cb6814e51c7eb056a01f84349e58060bb6087dd0cf96aef0f27729d4d4fb276

Merkle path

["0c133dd624342a1460888c1b59cf9217b33072c1c930cfa91ca2a298e650aa87","3a267e9d759df619680e6f7155d465d3f54f1a0ccf6a16c5a639117ba6d5ad32","c2040452c83e9afbbfefdf23aff64040aeefe4d440f6a3fa1a08f629a5a3a914","0fdf72c1db269afe7745e0f1a752fa6f875eaa560bd65b5b1bd52974b305e35b","6d5a95604fde90709c484c12d922de7b6f7d240961eff1009947604aaa24be9a","d80c0eeb859b42f3ea1861bd719c3e64249dd8f89f59c58c76416ca8e6adbdd6","839a4eb2707dd383ef335d2f40399363553dd687a423094afd304c03c15bbd6c","4e64f21a7eb1fbd6d667d94b27a5045a7a376b148e08e7f367f7fa1be417d3df","89f6e7d6b76e4881116b36d62b22471321498f398182d42d8483c6a5855314ff","989940d4a4c7cd46a2c07fca68db228fb36bfdfeadee8cf49e7a5a6e7e5ab1e6","466a75483a9b08434ad5efa0daedf09d35415351009f0f7eaaedd9760cde6026","0e7b34ee57018ab949f6230ec302cfa9f723792d5fdbb493da70978b6389c9e3","be1dd0e45f7494393f0e1b32c70d3c985a66f040e38a68aca73948a6803cfeda","2518affc97ecf822332e259f6b71ff1d6b20920b0b5c6f8e1080f3c11eb6b936","af2962fc61736883c7077a83c82f90f0eaef6320643194fac99217c4f69a9d04"]

Anchored

2026-08-31

Public log entry

search.sigstore.dev, log index 2656977863 · entry 108e9186e8c5677ad8e2…

Expected log hash

50611b695debae6fb0a9929f4c3d2c8dd8c51d8e8342a15fa077624a80d81709 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1788142253421","kind":"published-quote","locale":"de","page":"product:proton/proton-drive/de","quote":"Sehr guter Datenschutz","rating":5,"review_date":"2026-08-05","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=me.proton.android.drive","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (0cb6814e51c7…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.