Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Ich habe 10 QR-Codes von Microsoft importiert, indem ich einen Screenshot gescannt habe.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
0fd99f8ff60d64de215d799948e00e9aa9662f428e66db4f237655ffc01946e0
Signature (Ed25519, base64)
NMkxfRUckh+jDKRvS7z0lVN+v3pS3cIk9IyKVU9WW8IoYxIu4uGV2Xtv4WX2kGzTlpHuXRBSSllrlRX6i0VcBA==
Merkle root
5d9e24aa3407e67ea2f2e26a5653a6d0076935845a1bad3488d2eda2ee88a81d
Merkle path
["0fdf9214dffe13be7cff7fb94c4ef293db2e66cc0bb881e2f4652f84f04a06ba","4957dcfc0e546ad695de7b3bfcc21758f88e2c0109a765854f2cf01aa4f929e4","dfe5d787aea084b28a060dd1e0c2152836a3448db2d6b8bf6ea9f63cbd1246e7","c2799f7e23c200d0d2e1cdeba0917c14228dce1f80c04cbcd6bc1bf2a6d83c10","f50e1ebcbc498d700d2601b0e6674c528ded15b37b8b75403e93dbe31d7cb887","fa142c67cc3172e81ab171e3927fe771de4c53ad21ded0f0d46b73c08748a0ae","f8df87686e0506cb0b4125d7317561836451bd71293e4073be5d18d883db38f5","43547395a414bd8796b2aba07321c9bebe2bfbddd83cc71a956dbce09411697a","a06d3c5931626d55bd2699dc6cf52d5fb7b4fbe40b119a371da2d32b7ad394d9","83b5bb90b86b96ecb62f660cd68575d528cd3ebd27601aa547fdaeb1a28afb61","f78c065a55e807142d1f2f099be6c006ccd2e6ca1106e8e97ee80728ccb72dcc","c8f76ca8defbf8ccb375fa4489c615b5d155a09a82432439ffbe5296f7a55c87","88cd2e092d86a2cce16a67d96208f41b86bc5e9926af919d175142df77f901fd","d52b5f7abb2d6c19af7e500fdba55bf56c359acecf50179e194e26dc83476c29","0df45e9918aa8c399d7782a38bada433a6ea05fc7a52d0a6a2d9fd2f836d191c"]
Anchored
2026-08-26
Public log entry
search.sigstore.dev, log index 2594955598 · entry 108e9186e8c5677aa8d6…
Expected log hash
98300f71cd632ff600fd4a8df7e6291aeb56582c5916b3a391d1e3bf72ef7104 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787717033238","kind":"published-quote","locale":"de","page":"subtheme:proton/service/support-reaktionszeit/de","quote":"Ich habe 10 QR-Codes von Microsoft importiert, indem ich einen Screenshot gescannt habe.","rating":1,"review_date":"2026-08-13","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=proton.android.authenticator","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (5d9e24aa3407…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.