Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Proton Mail, unverzichtbar für sichere E-Mails auf dem Handy.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2683258276

Proof data

Record hash (SHA-256)

0c56021d8919cd6b4c288465ea2dbcbab6c2c91c541bdf6f7d5bb10bd6e17bad

Signature (Ed25519, base64)

jRmI855swQORlw0a4Wj2Qxf8OG79KbXwhiOGB8M9j/emC+7lBEVtlo8Ssa6a4hLExPbPp5Udm++Tx3P+73JIDw==

Merkle root

1b4480a4fbb367e76fd34ca26880b5c46171f974cf3a94f9b036b42e01723c56

Merkle path

["0c568324b5730a1867e9b2df85a01888f339ffcdee403671e38ba2b54d945233","91063d32f34a9da0a6a89f2ebaadd455a7a90173b5c533d2069cbe51a6905234","b6d5b0be346ef401408a00a3c71be321b2090a45211fe60dd27551638ad99c76","a5a5e778c147db3f5ac213f8c02bf17cd5a01a0c7d946153429288fa0387cd18","a525bc4d8edea0fa3cb9b987f19658dc974d065798e1a8e2cedb7ac87be17df4","2a5c3dc803c3a0392223b83fec5b0e3aeb36860cc134d127e8abf3aff21506d9","6e5fb13173e2aef95d2cb059e4197855a343ff9885859f6828ce3ee884ac892a","c01f40b4c27968b0f3b1bd7b5efea325b30a0bbea2b12a49647cf4e081d650e0","70cf00cf01fc41de5cdd357651205a037942ef06cb67348d7570fe5adb0dabdf","71c055f36440b8bddf14630168e6e74207f3cf580b7938cc56a94c438a2f6cf7","04aa849b4520797fcf995c39b1d89cb59e40fde751bb15dcdf28a28b657641c2","e87d3f640108f36247b0815e0b898eeec6b0102410dfc0c66c6f5f34b114e4e9","9bb9face21b64dc4548596d6f0fe4cf67321749c83227ee93ed882f3aa170652","e7218144e850bd19a6bceecc50f33cdd16123e2542b211b07ffe285b3602d2d5","26c4d515b1da79ddf02519980ecbc6a7fec0326ec612e5f075735f461991082a"]

Anchored

2026-09-02

Public log entry

search.sigstore.dev, log index 2683258276 · entry 108e9186e8c5677a44df…

Expected log hash

eeb02f3fc88cc5ba2c672023b294d6863b311c6353fa3c9c8dfe9c0b1e584208 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1788322016973","kind":"published-quote","locale":"de","page":"theme:proton/billing/de","quote":"Proton Mail, unverzichtbar für sichere E-Mails auf dem Handy.","rating":5,"review_date":"2026-07-11","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=ch.protonmail.android","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (1b4480a4fbb3…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.