Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“est plus digne de confiance.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
2121e3647ee5b5bcb33b542f168c915220a42ed6c3c3ef852d1b64bee9f013c5
Signature (Ed25519, base64)
TfX4vl+syORh6YrElWyo9Pb3hpW4fIs9fD37Gl73nEPC1ArVe3Ar+my39h32DPYR6yBD1dG9zTOuIAvAe653DA==
Merkle root
5c4849a28e8624d6f6d3204e1f81a6b24f2188b6690e8b122801054617ca25d8
Merkle path
["211c1261da339dacc1f0c10b0f22af3c6218d5ca3ef381a9cd167eb30940fd9b","6a275611d5dd69fd30a43b8cb9c7b4ab069464f25aa28ead8c2ffcea5bfcabf0","833615b56dab70d98039a1935d7111d2090ecc2600ad69ee51384ffc30131393","f4d067af115494dc63925d053e99e1f1faf9b0fc7726c3bb519db48918475cea","d3fd1e241e6dd5fc2ac23846abad72876b37b29ff93c3d8946b75e440f34c3ee","a5ea00e8dc2226733cc0e3c7c6d81b79421bc17626a7a704b3e285090fd0d4ce","00c13e6a0d855639df8a2032a2befa67529a3eb443e1787f8cc4bfe8c593408b","34b2a33c9f1d0c6a5f6ea984ae521c47db57220a2c4bbbaf1ecc7c91ab57b949","3c5058f52c0d19adbf5af11fe1eb561ec3f103151f64af84dd8b62a60c083bea","efaca87b193fb21088ad2ffb286a0986275893132dbb63e6a1f3c1268a36e497","108b12f7b01272d251c1cf78f0b99daaf14808ce182e0e3877c258507a86ea89","aad82d9071f4bf4cb538b8a2bd28f6a27f4ffa283ec8fbef9c9f49295f905320","294fbe7fed0fa3af8e60ca01a3a05891e9e1266a19028060f205705712eb6e96","9693116cb745ecfbff942949993950a2efc72f3f48b394aa6516ac43c745a9a2","649f189ed3a422a3ffceae7f7673f3e683a1fac940fd27a4d89bce585dd48e49"]
Anchored
2026-08-20
Public log entry
search.sigstore.dev, log index 2524617489 · entry 108e9186e8c5677ab139…
Expected log hash
2051fcd76f2ba790414bb1c15fd4d3d064889742ea46f8e55b5028f1f571c27b The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787193158162","kind":"published-quote","locale":"fr","page":"product:proton/proton-authenticator/fr","quote":"est plus digne de confiance.","rating":5,"review_date":"2026-08-12","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=proton.android.authenticator","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (5c4849a28e86…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.