Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Many people can't use biometrics on Android. They don't have clear fingerprints (especially those 60+).”
Google Play · 1/5 · 2025-02-05

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 3123541116

Proof data

Record hash (SHA-256): 911fe04b2a50c6284623ad8476b1ec9835f5dc41e4d2d55d51e7a7db47ee3b46
Signature (Ed25519, base64): bTR72wsecIUo1yJV8iH9zUXrVmh/cStDaj/jXJ5OHbvLjUs5LztPbGgBJUbReAGzSHJg0PSZvWcajNvZ9LUoCg==
Merkle root: 6d3f7b9a732acc39631b9b7a5990b6471bf710c9f84e5623c7b4ff4e1ce78326
Merkle path: ["9121e7e0814054908e419fa2b99cc38f0fffc3457e060ffde52a25766136d037","66faa9110cd355879733cbf6f37b8dc2e3a7406452f00888645cc0bd7a6a6dc9","4050d8a10d7c01d795c72ea39fd0eb5a9f94fb7148e76e901b7840e4ca203f23","0d5e6414a5f365c29a1ab9f408ae4375cbf7412be5f74317caf623d0c76d0aff","9d0ff90a50834aee58625e9bb30d30c73b2ddfd4f385da6fe215bdba33f34fc1","6c2ccfa6b5dc2dbc73f2b72947c56f3e1341399ef514ed22301f28266c973441","6895b423c8a510aea2bc27458bc88ca24bc710a7a01676e53d6a4a81315cc66a","73eedfd8467cdbba6c87b1e8b9732460a304d8a5b069d946b8aa78b0338b8aeb","5e5532a30ef9368bc998b5e0b91684ba5ca436f8fc0b6a5ab48f055bb1e48f54","848ccba45a836c90b252550d3b76550bbabbe9bcccbe32748f2de8ff2236af0d","a156790a09473f05207bdfc0c0039e041df966001c9ada85401c875a9bb781be","11cfebe1ce90ea3c3dea2467735422ccdfd50d5a772b5eeb4f9e79b2476eb92f","1deb554311ddadf910c37fafff4b86012a306c774652ab6dbbc6ab69a5c01d89","d55f41ae09ca42c33bbe39db949f63edb982eb2698def5511ce57c4f872a5c0f","6036173d1fecc6618a44f9a6eac2357cbf937f65066abe2621a2b8d1580705f1"]
Anchored: 2026-10-07
Public log entry: search.sigstore.dev, log index 3123541116 · entry 108e9186e8c5677ad86d…
Expected log hash: 9205615d16e6f0d1c04ec96882a0dde4bf091f63aaa636cea18cbbe885fd5227 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1791346951310","kind":"published-quote","locale":"en","page":"subtheme:bitwarden/fit/mobile-specific-issues/en","quote":"Many people can't use biometrics on Android. They don't have clear fingerprints (especially those 60+).","rating":1,"review_date":"2025-02-05","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.bitwarden.authenticator","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (6d3f7b9a732a…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.