Quote verification
This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.
“Und wenn man keinen FaceID auf dem Handy hat kann man die App nicht nützen.. 💀🤡”
Checks (re-run on this request)
- ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
- ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
- ✓ Public transparency log — Sigstore Rekor log index 2543266411
Proof data
- Record hash (SHA-256)
ecc703e19e474602fe94cd027fffa4775d7bd69f88c4600a33a0950e7a0df34c- Signature (Ed25519, base64)
Mr0MVvwG26+rLiVUXYuq5WLVIMcOUmBUpsyB3afKaQ9nl8x5o7Mu5FmNtgZHtqrTTCvjFpK6WLAutKhLEJo6DA==- Merkle root
8ffad6e97d1457610bec7a891f189d1ba7dd7a92ca672c69ff1ce3283acb4b5c- Merkle path
["ecc6913a689df409f89625013e7dea7957348ec79c5661e04574481a3fcf2146","51bb3b902ecfaf515bacabd1d7062d8055beb265b4f757ab3ee14ced61a7e4cc","9d145c95dc2ca3ada4cef496a25ebde658bc40d1471d695b287603e0a777f17d","1ffa78b1544eb1ddd23ec3c34d78350eb78571679f67404853e9c5f346d5cf7c","3f845cc05148a53bedf1e5d5a43a333f6bc54644aa391ec776dd7796b003e835","38cf554590f75716a3e114e1726547e8b2efca0fe084f0d63165b243b6939b72","d9458ff530548e590481cc4a598f980b8518dc16f133e0d35394e43dafce299e","ddc50dce545e50342cffdd47e8122041c24fef4626cb3da709e8e31f8f666399","42b782e477e439d08ef5feb2acdf172ce8764d42f833504986a4a3a860dc2454","3d86ac360ea44bd350d9c11bd40372eaa7b7479e5a8971084010e30546c81ac9","592cec2aaf16a0b6536b4df7262d22b7ea67bc9d0d22e3e40df7f3423c7de4bd","68f67ed9d4f0551dc8184bf1fe317b5aaba313190329d5e3918085a89ca09c8f","103549e053ca76b1164fbc6f4cd47c3c965502ff32950200621ab55e4e061dfe","7c94ff27d324cfeabd6b92fbe8fbca077bdf14d29975169a3a05e610d1bed13b"]- Anchored
- 2026-08-21
- Public log entry
-
search.sigstore.dev, log index 2543266411 · entry
108e9186e8c5677a241f… - Expected log hash
-
443ef8f29d5167ebb4c56a46778facd07b7651afa8db2d089c14a991ce0d04dbThe log entry'sspec.data.hash.valuemust equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm. - Canonical record
{"dataset_version":"v1787284817344","kind":"published-quote","locale":"de","page":"brand:salt","quote":"Und wenn man keinen FaceID auf dem Handy hat kann man die App nicht nützen.. 💀🤡","rating":1,"review_date":"2026-08-09","source":"Apple App Store","source_url":"https://apps.apple.com/ch/app/id969561743?see-all=reviews","v":1}
Verify in the public log
- Open the Rekor entry (pre-filled with this proof's log index).
-
In the entry, compare
spec.data.hash.valuewith the "Expected log hash" above: it is the SHA-256 of the Merkle root string (8ffad6e97d14…), which ties this proof's root to the log entry. -
Decode
spec.signature.publicKey.contentfrom base64: it must equal Citatio's published key at /.well-known/citatio-signing.json. -
The entry's
integratedTimeis the independent timestamp: the root, and with it this quote, existed no later than that moment. - Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.