Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Der Datenschutz ist bei Threema maximal gut”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
67e4b74ad9aa8f8a4efeef8d260bc7a7a11163f3753fe5302aee51c520ed2a9a
Signature (Ed25519, base64)
oIcWPVPqK5xCBhFeNEELztfG0YKY6LQhai9ixE+2wcQ6LJZzRS4XtH2FDMi0H63qgzOysDRm4KcBH1qgtGtEBQ==
Merkle root
aacc11945f125ee3fcdef86ba030016c440bcc608f4e51f0ffffdb4cdc5e9321
Merkle path
["67e3b3e7dbaa3bd861f9060d7155ce6c4ba4325d24649e7b809a757ef72ba478","48d9dc3d8208abef7d2008d943430ffaff244f77491da0763789058ea2681eee","7db03f9371f8f7db9245013e3ce1261368f2ea10eb5d196015ee6fad857ea35c","5a5b687dce314c9a99095ab1a20180b2eea3cac2da7420cbc197016ab9f1617d","515af3ad81ed085efda731f4b151fe370915c56c7415e1098702eb67840e18f3","450c69666d1bd6960a7278c8a55e4629ac3dd73ab7292462633654273b5e371d","4799a1b078f5cbea954c9f8a68e9267d7d07056ddb9cd3456eda51e03fcaecc0","9e86e8e028490d2a5d7d5dd17cdd12c28c767a88b215e7897f44d124626c0af6","57fbded597d75eeafe47d53bfa5e235438fa8c516ab257c60836305ae6ffa0f8","a75f874cbba5e4dd3bcbbee62bb2833fb4489fdea3a5a5367837748f907fa7d9","02a5ea4f3197332385fe41072b523becd1651e68a5ab126f089fa99ed22d0ad9","10417bf8400d993dc5bc51fcb3c27f6a0c34b723944b9a3d537122bb9e0d2970","a67383a47457a5cf1d5e37868e4ed4249ae6b4ada373e7ec00eea3b30391affe","b1c6c1169310bc9b3706487a8b54e13d2c5256c24253b48b4df6440bd230af21","2309962142b16600f7fc4d57273f3042f382acb91be89aac7f00112f61b58f1d"]
Anchored
2026-08-21
Public log entry
search.sigstore.dev, log index 2543547848 · entry 108e9186e8c5677a921a…
Expected log hash
bb93f13ee7a4a636e28586b842e19662b148eb18166a89b3ae7d189bb8e81689 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787286345433","kind":"published-quote","locale":"de","page":"theme:threema/fit/de","quote":"Der Datenschutz ist bei Threema maximal gut","rating":5,"review_date":"2026-04-29","source":"Apple App Store","source_url":"https://apps.apple.com/de/app/id578665578?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (aacc11945f12…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.