Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Très grande confiance en Proton Pass”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
27fea208ef971979a83589eefbaa00cb4f94732eecc50290f32f65e5e8cebaed
Signature (Ed25519, base64)
5NKphLvXl6hr2lNuZrWj9eJtPcfZuNnpkVGnWzLeIM4NsXWVH/j01zr6pgAC8oDhIUHmBvGQBkPrplvg3IAbBw==
Merkle root
689da4f5bb049dceb797a1ebd18ec1f343afdc6a2eec17587eed167cc7c21a02
Merkle path
["27fd2fe76705185d03d290f6aa057aa80216dd3532e66805cc7e79c416843c8a","1b05c2c8817bfa1ab9b6e2eb00eec230084397bbabf777825db29ae10223f89b","db0127813ff2639f7000a766f3aeb12cd8ecf7e130cf8ebe44e4791c6b4d0f4e","91b1b7d345f5d17e1ab8d1b000018380594b718989ac5bdcb910f5256d637101","49064d08b41b1cd655b22ef5df8a7310f4e0071c166a651303729e1d2a3c3df3","8ea6a98c44fdf00711a9a195ba07954c7eb11dd0df8f3f54cfc4e817c22a520e","70f146246c1e00fb9a4c1bb234711972554b099cb71609102e9f1dea718a9c20","2bf951e8ce19d127f031c412411613192c3f199fec127f24cff49daa6a2aad45","c30acf8deb04fb984d16a79d74ae6b1956d9a95dea1ae0c079f58e7170cb5907","28e0de4da720a94a726cfbfc47f8f5888a2a20d01454937194f4dc7ad217c970","a3db7dcd6cc4dc9b644df232b1fb5a7aa6ee4accd007f224862245ffe90ed828","ed2e7f605df54f0d8a76b277482b2a940a3e8de4a23e2ef3a3cc15661667d029","b29f01d1d4fd5e719afb8d2cac2b7867993dc07c08772adb1bbe832e05e6603a","b93077b5d0d90464bafb01f0d5e12407aea90af234685d3284ce5c610fc51b1e","2492d624e607c70378839deb70fe4bc4c618faa9a11f2be7d0e42b467b07d755"]
Anchored
2026-08-20
Public log entry
search.sigstore.dev, log index 2525430207 · entry 108e9186e8c5677abb21…
Expected log hash
68e6afcd6c232c11ffffa818a4cc0c5faf1a86dd24e2ab2a7811fa1f4f43bec8 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787196781193","kind":"published-quote","locale":"fr","page":"product:proton/proton-pass/fr","quote":"Très grande confiance en Proton Pass","rating":5,"review_date":"2026-07-30","source":"Apple App Store","source_url":"https://apps.apple.com/fr/app/id6443490629?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (689da4f5bb04…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.