Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“funktioniert einfach viel besser als OneDrive!”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2579634821

Proof data

Record hash (SHA-256)

257fa2fcb2a1a32bbf919d695b682c37b6c876a65a9b8ad94f6ec4657cefa804

Signature (Ed25519, base64)

mxscTBofPCY+i8iMaYaYB2PUV4oKu3JBLQKazNDmAhamfxGs/wBLLATnraXTE1+RgKj709JTt24vkUiD4azfAQ==

Merkle root

bc9d0b5d836a216cf1886934c8d5ec9f854ad5daceb587a6eb8badcbb84ee02f

Merkle path

["257f471f3465fd17afc2875d1cbb9e807004248451ea30375922b2aef672dd7c","c056f6d40f142b5441ecfb465cc21ea241d0f676bc1ad54b6252e99c4e60795d","99ac7e321d85b3956a4aa2963c433a766824a1fcc890bab37505e59e015ba80d","f99c39e47fb8590e670052588e9a2df5109641b0be79e467c3b3cced65733e3a","b27c2863d1a1b8052e5687b85eda2039d13f9c481831e8467036dcbcac89b794","c763f370c3ffa9911fe53c7232d68052596db024f138ac227b8cd5be36a2208b","f488ff8a3855e13de7c1d9da107efe374c1d7f235113b6d10db9e0266b5340f4","48c0362e726e5c43f6b128c07f993aef8a5925b7cfeed036724cd812333ce4d5","c438ef39031cfe212d01c9989c94d68de653dc164fb5f8b4833c0403292cde45","435e6cc694bca748fd3f84ce744a6f812f260e81ce8907e608c17f99711d9109","713586ec45bbac507b360924d370bc3373d20aeccf12763666913afaa6413f24","f7d1dbfbc2a3975b810af0106a27d5b44875b81e2a756a09fd4844604fe8e11a","04220d159462533e19180f38775a371ba8ff54ec137c48558e5c1452b7cae681","c78d02bc04c908a350115d0a3f5d200d8a666366962fbc37c05c5805c741dcc0","d687ea8aee79065a6ddcf3c31455804f88f0a27932c5abf16edbc09a81fa4670"]

Anchored

2026-08-24

Public log entry

search.sigstore.dev, log index 2579634821 · entry 108e9186e8c5677ae575…

Expected log hash

aa88a647802dcecd33319e67554ce6dc40636f337adca0214325bf9b390c4c88 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787544244896","kind":"published-quote","locale":"de","page":"brand:tresorit","quote":"funktioniert einfach viel besser als OneDrive!","rating":5,"review_date":"2026-08-20","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.tresorit.mobile","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (bc9d0b5d836a…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.