Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Fini la récupération de mot de passe.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2515144749

Proof data

Record hash (SHA-256)

314ba13e15f18773576a835315078650979d5f4671905b366a6683dd0f0831eb

Signature (Ed25519, base64)

vRN6q4kkG0HvEuZ+2TzX9pHscclOf3HVVdmjqkGjsgr1re0EWFMspirj4NJKRRWD3oX0F6ZDT9VnmD6Itf4hCQ==

Merkle root

8a6ad893af0f0bb6c448016a777af61f3f4935afd82df0db132e64f813535715

Merkle path

["314ae01c3139773e1c8c89d226f349757af9a5608fa5df4363a3b7f22e75ebcd","5403e72ba3ee3094283e028c7258360aff3fdb96289872125b01d0cce19e057c","000ea773742d028076c92901bb51a939435f02d61c5223d431420d9759c5226a","9517f6e2d639565c18ac0611dd1a9fc64bf039f1f05490fb9dc57d90913fce42","f855c3f770e7d7b603c49f3bfbe38aaa1c737fb79f8c56b1adc6fa8f37d81e88","3accfed6672b716e965a468e9246869810c75fcaa2ae9c2b1ae1db8f94ff5cb7","dbd62fc5b0f552cd77fc300b99b22e1c5f3981ddc4406e6b6420b1ee17491a79","7b77996b5e901c057e366750c15d402e9e8215b6e5a367684dbb7d2c6a8992d1","7f841ec59f1ea6147682c744d2d19081d17cfb8317e66b8694d5a3338c1dab91","28fdf2359c7f1d6843490d95b2faa973c6cb19dd4d13e7362e1c74b020db1f8e","f2a19d5711307f8de0aada457acac7cc69b8d1071ef7a3a01e246d5be4e2f12c","36963529d44affd95dc983f944b30a62582b9dfadfd64e38498a43be945977af","83c279a8cdcc2853f3838cd33a87ff3db799f19ba47dceefcae4e093e4c3de59","6276ae8d472cde22fe3044fd8f103b6cd700eb8d1fe29c2f968f62a699dc326d","8834edd87c11ce9424175f1744f71345038aee1c5b6f350a6f7bc2a49b63e8e9"]

Anchored

2026-08-19

Public log entry

search.sigstore.dev, log index 2515144749 · entry 108e9186e8c5677a63b7…

Expected log hash

b6b79ad662332330e69c4ef135f6fb13ddc70048f846024d496aaa533f7f7fc0 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787137589246","kind":"published-quote","locale":"fr","page":"theme:proton/service/fr","quote":"Fini la récupération de mot de passe.","rating":4,"review_date":"2026-08-13","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=proton.android.pass","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (8a6ad893af0f…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.