Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Les uploads ne fonctionnent pas !”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2542342116

Proof data

Record hash (SHA-256)

eb898a509dfaee23af8275282b81cd2e89a9e7a404dbc495998d32c3818814b2

Signature (Ed25519, base64)

0XGrxGx4WJ3vIALJpwmqTxXu+8NJNAXwRvHeUz2lawlWth927mQf/9PJ6+yorG4KxL4GSwzYwyyu+RU9KByzBg==

Merkle root

13d851a0949e31431bfa3cb9a632b995c3cd1c62cfaf1eda783bd9224fc47725

Merkle path

["eb877cb1afe78fc3d9d0d439b6364964462a3dbabec141abae03933c5fe439c3","61bb7a97cdaff7158a28807eec2ed7fac029b34cfaf5f1e12a3220934f5b273a","434ddddf947ef6097eb52b721e5cb575fe5f032c61352fce965dc7ea54fa3249","bf6a630e13fff56a5142968cf86f2eaf86f662c9968b0b6f94165c7b4662afe5","16e1a38c712e2c9b74cb54978b705ac41decec0557410b496e31425ad5689dbf","daeaf0a7988afe4e09813da099901f321be34bee71fe6f290045c419eb348ba8","08207cceab97179b471f5eb7a9f578db1a1caaaf664bf9a756c3a792ffbcc770","1b67fa44aa44543a1b2ca472f875396fd14aa6206e3fb152c56404fe2c1dfe8e","59f3cc6ce738c4487e684d88236efe6c3301e13ed3e3677533a34ace174d3a9f","8c905842a47e146edc1d2aa18d59fddd6c2f3665098f12b7fc12610be1476f5d","c000fa50af5f3e5d360a8cb15305041a4ab669eecfe6eba236b7b79957d2f98a","ecf04c5b79cc059b748fb890ae728f2fb687e5a30d38ae1b8a4185312c8b7654","8598be1380672674ae23cfd4b229104516b5ae1ebbeff0c9d523000dd5484f96","8aff7e87e9ed1f4a1fac9ffd55d4d3a5c941cd6255d5bd7b04e631234e2516c0"]

Anchored

2026-08-21

Public log entry

search.sigstore.dev, log index 2542342116 · entry 108e9186e8c5677a49dc…

Expected log hash

44bd329b5c5f42e4fbaaab1e9a27845aedd26351446bc96ba12b520a563b7433 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787279544668","kind":"published-quote","locale":"fr","page":"brand:tresorit","quote":"Les uploads ne fonctionnent pas !","rating":1,"review_date":"2026-07-27","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.tresorit.mobile","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (13d851a0949e…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.