Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“les mots de passe ??”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
13e8689666ecf9dbc3b7972d9a3b47c0a061da3a72fcdf1fe88203ec1dc9dc31
Signature (Ed25519, base64)
9LFRE+dwRFZ2WSxHT1alT5myv6GUjMOc0FXPbBWfA3Kdd3f432fgx5hxmgBFFgHokp1O0aFO8VqoMYEdJrtRAA==
Merkle root
5f465603cfecff8c631b83258a9f794433a9fe1f55c92c7f2359c24d5239d7f1
Merkle path
["13e463f0fcaa211192d952460d05967a846f5e2fafa3927deb10eb879fdc4ad4","3620b39f42f18fd5b83cb359cd7faa34ff158b2f95a2b1e9b3ec8a5609845b8c","3056e729c050efb88f99cd18c3db712f9db3e13ee7dbfb66b6d85b43fb8eb43b","bce76bf2c654e5945403393fd136d17948329f76ade345a5682c53401baef492","2b3f1e1f0d7acc9cc14ad3008db7a160c287e5ba156b4ddde8b6f550c9950fa3","df2cf33a7f9009050d1a0867d8fb5898242987c5427f75cd67ee115dc1e2a930","290027344ab67d81ddd0e4da8e87744411908298e95e050bf14464e1d0b8b7b7","71a77aeb02923fcf9b9161b60d738b5793198417356c822ea72a2bc265328402","e77ac045cb78f902f996ef726374dac406bf0180f8f8c1beb93ec4d12458a420","bd4e0d082ed7baccaaff90ba4885e4a645b8d7a496807c992b51d750dee64b87","40c9b676151e86de0daa4cc1b529c14107a4c2c60969dd020bbd534019dd9b22","2caded3e2f34e05ae3efb016490f55ee18bce7903453e7336b0bc133b0f71bca","f263180059cdec95b93f28a9a635234e8f009df51d66181b902844414d966b85","3fb39940a6132e03e4fff826dda6ca0582558fc639bb5eb857201917cfd7b8b5","fc87a80257c5f9d9cefd8e12d2bc08e25e0ff70c414cc5debe7f697d0b1cfbe6"]
Anchored
2026-08-17
Public log entry
search.sigstore.dev, log index 2495157846 · entry 108e9186e8c5677a0eb1…
Expected log hash
3272f4e3e87c1e1bf0369f64c72e7fc63fcfccb2635eca462b023cee408b7ecd The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1786935515462","kind":"published-quote","locale":"fr","page":"theme:proton/communication/fr","quote":"les mots de passe ??","rating":1,"review_date":"2026-08-11","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=me.proton.android.drive","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (5f465603cfec…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.