Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Android-App, kann mich nicht einloggen, obwohl das Passwort mehrfach geändert wurde.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
799b4f519c80e52141ed245af789fac37d969f42fe9eb1f2a491cb8459e02cda
Signature (Ed25519, base64)
klkYxec5QbRrLgjsubGsAz7+yBVisRQ36b3PRNQ/h01uzElyUcYHWVR/VDU/etJJlWF8ntsumQIfwGTOdX92Bw==
Merkle root
79268b3be1e951447ad916daa23d94d3a225505999279adfec84e5728be030d6
Merkle path
["7998836561399f16ce0f387f023f2cfcfff8dd152dff0a18d08c39cc599167e3","5dfe7712c8e6cbc7c909d9219f64bc1387a54ef60ec2a4cacf3337b0cd7ec149","b44f1d8abf5e67d5b6aed16918020ba331beb36d489cb1e72bbd9e0d1411f025","816e4b2563dddee46c5c82fec40af0897345c4ac1cb1efde7cbb2dad6684360c","5cfd6b9c251ccabe7024e6b8b8f58c9d2f87dee13ba9184f6687b0f9c3df4d70","e3a3ea1825f22b256ff5fc3dba6d45313edcb9a20e5027b22c6d2b6cb4a84255","001a6eba8b78abdb1ffa136634fea59711789e284e7e2a42317d9dfe92186bdb","0965322e9f18efd6a3c4dc2dd11b6990e6a0137cfdbf60f5fdd923367fa1f97f","b3bab105a51bd5b7b75790964409293570c1fb5297a1e6a6d054c9a741001806","c546cd2e622b1a859d3c4b0b23fc388a56a2507bb68951685f8e7cfce23f4605","7ea11e693c5019a1f3b56f8f5a9ac0d5d5ae02ac0e627c18ff82f4920748d153","7ea6005f1028eef3603be432c0176f10ec3b42882a3db6bf3baa0298f9970e4c","1ce9afad9ad086057c7bfc40a44d07199e0e2fbe95565fbb52e4e14d796716a0","b8e0a41590cdecf5ee846d5a4dcd3ae91c8a0a052b75fffe7c4c5f4e2ca53884"]
Anchored
2026-10-11
Public log entry
search.sigstore.dev, log index 3199014646 · entry 108e9186e8c5677a77ce…
Expected log hash
55430b734e4d00e4ba9c340c7ab064436f91281dd4cbc27c1ffc37d3e26a0e3e The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791688566698","kind":"published-quote","locale":"de","page":"brand:audioteka","quote":"Android-App, kann mich nicht einloggen, obwohl das Passwort mehrfach geändert wurde.","rating":1,"review_date":"2026-09-04","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.audioteka","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (79268b3be1e9…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.