Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“La double authentification n'a fonctionné que partiellement.”
Google Play · 1/5 · 2026-04-09

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2514629481

Proof data

Record hash (SHA-256): 2711860dad39b4bb2f8cdbc88e2d77aa98e056e86b576ed8989ce2c229dfc21e
Signature (Ed25519, base64): nOhW5fnf7+nssZQn3z3erhTGENEdb+Mqos0zTQS4t/issHdMadsTNReJHMjubFtAllb5T9zKKBBZt49WSEaDDA==
Merkle root: 3aa12e5b2bb49befac906908c9a841e9a421f12d0bee8acab9c1f906487adff2
Merkle path: ["2711d0c883119b764e9e3cfc2efd5d5fa0a6e84db14498654f6f1c68c0d15f2b","938372c7676106a3e840b77d87b0e1c9b9d9439538ebba90507c0305d5b15b93","61b3bcf365f8f6c9ec938a2a96f3563496afff85bb6272c03670ef4bec5d59c2","bf2807c724ad396a40b8d20b52b69a781295ce6b4a8c65323abe815c7a733bc4","10da16e4c92690d42dfa79050b0d5a46621ad2edb9635a88dfa55616b44b2111","bd0807f280421c45c3afe5f5ff0510dbc80252578a7db1f78f89c3da6727356a","b9504629fca19afb34a245faa3ef21291f638997167e7557ea18c3e906b26b73","e8c3273def3289b4f1f1ff9f8ba8f43b28e7ccf5616bcab7f1b6616c51377e52","46f57645f06fef6ca0b33d223b1f2747d65189071be6c0d6a9c772fc2e947e87","b1f0e2e2df5fc7ded6904b865d750b0910c729e36a817d8afd3dff1cfa1a5576","76bce791038ff6866c22c3fd2012231eec774ced431af88d23a94b0f51a19f8c","7145a25bf2e4d5b12b2e2be0ac0e96a9eb61682d26d172b63f2d28df120614e5","499751eafaebbd34bd3075e397b2751a5b4f4ce58d0c2b3e5d8399f6706fd4dd","c3a6c334f1acc8c0b843c5d43c85ce54d647d519ab035a8287aee565097a2ae6","6099970369039e9ea9943621e6c4ddbe6cf64be652afb6debc70debb01455286"]
Anchored: 2026-08-19
Public log entry: search.sigstore.dev, log index 2514629481 · entry 108e9186e8c5677a8c32…
Expected log hash: d923130994e40329302180560c0ed5b43e4400136d037befc932b83910626f34 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1787131980797","kind":"published-quote","locale":"fr","page":"theme:sevdesk/service/fr","quote":"La double authentification n'a fonctionné que partiellement.","rating":1,"review_date":"2026-04-09","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=de.sevdesk.sevdeskgo","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (3aa12e5b2bb4…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.