Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Il faut fermer l'application et recommencer entièrement à chaque fois.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2514654467

Proof data

Record hash (SHA-256)

ee53be09715665bd71604398a7b0e53bc654cdeea1ecad51e7eabf418c4d9d35

Signature (Ed25519, base64)

F5b85DaU/FsMQMRDM9HSlw8R8PRjuE0/95aSJ8gcGRUhE4kpdMG6rZolmRrRugUPPJnlFmSITY/mx6DavyJQAQ==

Merkle root

2030d4ef17fc68fad1320305cf569e85a00baea931fba0d3ebe628cf9c90c35f

Merkle path

["ee50a372ffaf5c96eecba20d33970fded6696006f2e65c6b82e71ace2ba43085","c53b42b197744220826bcecadae3a4c1be6e585a853a299f352f3785d2b68527","10ef2198f59add29673296202ddcd9fb5f352302ea5d84053b2ad6f84dd78165","447df9d45852821b6c9cc69e186a5a0199ece96cb4c7d531cbed9c990eb47c46","9977beb8f9d8254ca76c445523851f8ae5f5f6964630e06b2db4735a67b59493","dc0b2f39677a160e4eb9d5d85b2cccfcd86924f0cab6866eb5d773edacfebe8c","88843a0c33489ffba4b0598afb4b6d1f6ac2cbb334109a85738788b03cdc751d","8c17bdb62bdbde81ddaf1586bddc8c3f5a27f942f36240fb6bbf7c8d9f53996e","e5b0296c3cf4d09bb1c0ec1d628dfe9824d3306a1224ed1b6e5138deef12a1f3","de87ee382eae2cf3b46772c31335689a52124f9cad6fcf05bc06d4acdaf0d6a1","5135cec63fb248b880168fa266435e68ba1ada3de76d6155af710f2b4a5a4e00","ac47b10da702a9479bd116280fe3e40eddfcf168ceacbd9cb725f508893ed250","20ea0d6aeaab7028adab5147f39d1ebf52355cf181354f5c166cdff8fc496c2e"]

Anchored

2026-08-19

Public log entry

search.sigstore.dev, log index 2514654467 · entry 108e9186e8c5677a9253…

Expected log hash

ddd8d6dfa3771a4106292f7bec674337dc9649465b28b118bb17bfc2b8ff0a67 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787132872903","kind":"published-quote","locale":"fr","page":"brand:tresorit","quote":"Il faut fermer l'application et recommencer entièrement à chaque fois.","rating":1,"review_date":"2026-07-21","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.tresorit.mobile","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (2030d4ef17fc…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.