Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Fast, secure, works well across your devices”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
4675a21aaf8318a6c9a98e6c7506cd542bf83dd7404a4b7f5e47f14d3125e0c9
Signature (Ed25519, base64)
JQBlUapEa7fSjU9kRzS1NPmFx81CSPqxqX38lW7niojPRfWgcNqFJ8kIJyzWAyuViG3DpQNz/a+KY/uOYHGvBQ==
Merkle root
9d32c0cbfb02966e7a561566f948b48040888a6535c058e814428126106ff945
Merkle path
["46758b130cda33b38d8d370f9e7bebc5dd2c2da3215eb4ec83f3d97f9d404e04","fbd83c9c38aa7b9122c93a8bb852a31c29e511760afbb9fb5ffc963899e281e4","951114f1488a59f772bbcfb4680d253250e30457dc26e696cc5f7a3bc0bacd1e","3282e6d6c85c638afffca9bdc5df05139fb0c9a26b2f37fbed2d18ff5540fde1","df3fb1ea60ce4716216807df725b1df7ecbb19950dc1d36ab7b7608711bfd289","553eafd517af3cb7f98e6ba623bed58fa60ee2c8cc42f418c079cef12fda7860","19df90d9f38c3aa40ed872c44486139d3b3d58118c07669b0a65ed9872c353a4","d145d82abeda5d3505e07bd71f1e2feb29a4d3a39e795d90c1e595fa7a9fa7d4","6e94811a10586c9ffa5552a2c96b257906b7ae51ced88a49af179a29af7fc814","4c6b88a9620a74649b1d72635681b82985f9fc8ad90687919e1b84b9b620e11b","d41c2cadac541a3cd1e691a3212f41492a8aa44bf7199981216a6be642e7f40e","81a2a03ece78c6f2fda9fe5c83cee9a4f0a92c093e7b94647fdfd5d1e9cb8633","13cdb7cbceb4d51ca2f54d7cf5021701239105391242a11c207322c59fe9b4e9","97b419a98acf461915694d49df1436895896a22d4e853073303f64e609656c20","a892fc29bb3c992428927e47e35596c876cca06d89acb4ca102f2a534ba3ab13"]
Anchored
2026-10-07
Public log entry
search.sigstore.dev, log index 3121837738 · entry 108e9186e8c5677a0c6c…
Expected log hash
a0090149b27e60cea52dd7dc5f0abf6dd7c00feef65be2874742fff2aa9e8bad The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791340487550","kind":"published-quote","locale":"en","page":"theme:dashlane/delivery/en","quote":"Fast, secure, works well across your devices","rating":5,"review_date":"2026-08-15","source":"Apple App Store","source_url":"https://apps.apple.com/us/app/id517914548?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (9d32c0cbfb02…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.