Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I haven't experienced any leaks or issues”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 3124493015

Proof data

Record hash (SHA-256)

c2e9d2fc228abf1b0c3af30266bf0058c9ce5edac5d668b75d36cedf810f5a1c

Signature (Ed25519, base64)

FFNv2YvxIw0rnXVvUo9YWTA3Q9ZaUzQ0LKgPlWcbHPH42fi01xkLpWDUckkJMPdFA7zysKyZlYVNdSRfiAlxCg==

Merkle root

c481d62412848235567fda063ff4784e8e49df41ad8b5c570de24ba396415d22

Merkle path

["c2eafb0d5e70b09dc4d404d89506a3ad28ef9bbd192a54d274aedd4da71840a0","c36957420af05dd6041355df124bda9e28b720567beb9ae97c25b16f02e19c4f","4ec8e22b14bc2add2b603cf78293b4ea292f135d982d1a30feaab184abd57791","5cff234596e6028ac2fdeb21a6190265951b22b8e04de15a91d037c1f3694438","825ee2b1842d5f80a453bddebf6a000867d02cac5a4e1c04b6d9aa7cc3e3f77e","1ddf0c722ea8fb83e4cb911875921b2953a54b0f46213f25ccdf3c9f3568d517","8e5c38b0fdf58c93a279628165a558049cf3ccdf387c2a70b482d67121473672","04c8d1fc9cad4ac3f8c8e766e17d2fb9591e803252c2e066c7d3649cc3d8b54a","b177a0700620fe2753b1e4bc15a485c900f3090a0e066976a0444d69432f760b","db2ad77e7b451df408786a72f4fb1b31c09c3e91156fe653a69536368b1db919","7e34bae5d258581b386b0f8d63d31efc351031cb8b36fd01dcff44bf7a99fe9c","2f64f7768c0c5f10c470488c785944e2b2a27349d3232c2325a30cbc8d810e1a","3220c8ee4aa60fe021e29555ae2bed0850a1f142c0c3a97b7e1dd7731dbdd32b","94807f81d1501aa004c640d69440b9636cee1d43c6f07fbf281372be591c6480","dac1c339b376d49b10e240bfb32d2ada460f1b51d5428b7290189b662873c331"]

Anchored

2026-10-07

Public log entry

search.sigstore.dev, log index 3124493015 · entry 108e9186e8c5677aee70…

Expected log hash

0056b042c00529af1248b70a0a2fbed761990dd7841ea722369c29a2685ea6e1 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1791350987184","kind":"published-quote","locale":"en","page":"brand:bitwarden","quote":"I haven't experienced any leaks or issues","rating":5,"review_date":"2026-09-03","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/6a995ebd7907afd310d27e83","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (c481d6241284…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.