Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I type my password correctly.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2969645630

Proof data

Record hash (SHA-256)

8f0b67681075a42661aa8efb1fe22aac1bc81c153e80c9698a568d7b84a8b8ef

Signature (Ed25519, base64)

47Em1rQ9rZkIIgMq52xjXi5iOQW2piCnqQxu+8F0kkBqhOUxJJKu54MJ0YuJyTo1jEKmHqh/EMKHXVAd27DdBg==

Merkle root

714fd5c453665fb7238b83bb755c09ceea4f24c6bb04f621046ea8b9d5da1a83

Merkle path

["8f0632d86bacd79ef28aff9f1ecb0df561a63ef33ee17e23187cf7df644f66b4","11cb6ffffaa9b4c666fc459c0e7b4bfe3e611a0918463f62054a9b5263acb65b","7df0954473f85afa67b757d1a76fe1dd82758b50cc8d62b14d767daff7387167","5faad670fb75b45bbc4344003818e592a96f3c6ab4b1d7a50b71102ce87982e0","4f9bd3b8abcee2c4baecaeef4feb6e6ed347ea053ec8c330b87e715f59d29c74","b673a02d3679eb4ffe4521b38327ce8c414c349965e8cc451b8ad3b2c15fa25e","867901c655a9de8ae0c2c0c43acdb4809b34c38863eaf5db314dca1997a9dd60","8d0d1ae937539fc03f32db78bf12fed1bd4e46f9f0d24e058cebc4a85ee494ac","a217edf3d508139956f5c21891d0ec8dd39cbdab14bbfe36eeebdcbfc29b5ef1","1d269a864e137ee55660ebaed6eff9b177cdfb9cda8a827b516aa517c77d90f0","634e484b736d2902e5f182ebb23e2ea0f172961a5862b057af8f138c00a2eb50","ffc6058a33ad9ddb7d8cd6f4a166bfedd51c9087a36621fbcb9b1601ac90593c","47163008fa203c3cb3106d569db6512eb1188a0c538bb86119031584c0998d0b","ffb210b308bc632ecd4d5ca929c95e61f0e699394237035809779b12d35fbef5","63158f878f18fbfd8c365d55048a9cce8cd0631f6b0e87630c3dfd5c86aff59d"]

Anchored

2026-09-27

Public log entry

search.sigstore.dev, log index 2969645630 · entry 108e9186e8c5677ac05f…

Expected log hash

9c269d3e82dba16de30aab3330968f6013b6b7908bdb2f7b3ce0083771a2fe3e The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1790397996853","kind":"published-quote","locale":"en","page":"theme:bitwarden/service/en","quote":"I type my password correctly.","rating":1,"review_date":"2026-08-30","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.x8bit.bitwarden","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (714fd5c45366…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.