Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Le meilleur gestionnaire pour les passkeys.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
2bbc24b89b82a9146424c20e651cc8a4a62edc0d5814c9b0e676401da19b0220
Signature (Ed25519, base64)
fN7sNgqEd6X3z1WXQ+AAxThCPSxUYy1lOedrHIWIEiVtjtHTjASn8dYTOFEgw7gvpMxrxPoXpI/EIHnfDxklBQ==
Merkle root
cee60bb6c0816d1bc69326ea12cf0c5c00cbea13afa283147bf24b52e30f839c
Merkle path
["2bbd1bad3378dbada7680346d9b9a9f2a2755092adb0abefea1bf9efce3e05c3","db1a4fadf76c19b7d2283450a140295ce9b9e0e1828c03489a64c8c0b4007472","2402f91ea5780976c91c3e3e82bda33630ec4456e4562e6433fc29d1223577e6","b3a9f8f09dfbe19f2a359921b7106ca325e1481ef5c3db42b02b42c2bd9f69cf","b77490001fc0cada4a5c6ebcce230d4ab21653a736d6bf6689b07af687249c92","7ee1039974fe47e436106a40f75e007f96e20580eb9726fa0cb80a2f2439e5e2","c50aa7ee4df04b3d51afdba224cc2d245998728f3d4094763187481f5456a114","19a1f8d7343aae59452e568131d44608078889613f254cbb0215570d42c83980","4e67e6449e16f4a48935cc8b49873fde11b56bc72b6b024854d2299a33e40cd6","b9c943b1f70efe60256d2260d4d466a5fde096e6958af11749096ce7d88a456e","c1237d5f4603ba6ffb5b9bcc7e2298cd6e2e0f77e1969f5bf1088b9df90f4e06","9f6fe8b8ba9f3011c0e6aa1e8b55f973467b9c20f251bdedad5d16d3227cbd49","a1c11df65738ffb18228c247fd6ad5fc76428a9130a0079c6abf079e9cdfe043","806b2b46dda360b28a8a38da683f56d42f23ab9c4a7b2fa07453f271a33f5ff0","57e3801fc0af4bd2492130e334ef2d0425fdcd10c95109df38ad0d371e279fbf"]
Anchored
2026-08-21
Public log entry
search.sigstore.dev, log index 2543857133 · entry 108e9186e8c5677a5231…
Expected log hash
d8e1ac8b740526c2915424d7f7c6bce881a4ef05d0a3a3dbd88e4c760e36623e The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787288037224","kind":"published-quote","locale":"fr","page":"product:proton/proton-pass/fr","quote":"Le meilleur gestionnaire pour les passkeys.","rating":5,"review_date":"2026-08-07","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=proton.android.pass","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (cee60bb6c081…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.