Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“man muss also alle Chats und Authentifizierungen von Grund auf neu herstellen”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
f9db2497d5de362099c8ff80f3a01c64db623c972227dbf1eaae1b3210d039dd
Signature (Ed25519, base64)
7K60b6JPY0ar7KHn+2idGzzSuJ6UHrqXiYH5wBjixTBGeuEXbrtt1WLwuWsoB/Vf0zBc1k1hewuqmbAuwKqQAw==
Merkle root
681242bb8cfa94d3b60cc06de1bbe3e5e124dc1675276b11df0aaabc9faee58c
Merkle path
["f9da7790bec61165c6c8597c68a9042b4bbc173e5761c1f5ee41adfaf2550b7f","e3ff377e82446047529b4604570e360b6c41eb9aef6b4422d7376b8b9d09955e","5f39a5c2ed761885e494722b44b32a8a06da21cde90f02074858ffc30c63fc42","48000ae7c9991893c3775fb2a141a9025a0ecbfdcea0d481d5dbb1307ed23bd5","a024a27c97a35e8148c4e6c7a8b35f93ac22ecb3d8148db9f4710ee9adc401df","827098d0c680d1c189675fc690d99a369d6234b458e1f3bb4e16ef70d4e8fda7","ae742466cb4738cfbca186912b6cc53b674b688966552acacb59500cb69f8c82","cd1204a62d0886faf7ca076096fefe5b781399c7af8d116651d7fa5afd81803a","9500c76662182b9c7136c7edb6b3f2c5ba5e2eed5b14431f1f592f54c3267b9e","0aaf854a09b796294500204eb1d868eb8a4b2529d843f24a4145b287f9ad77ee","339dae50e33d50aa0cd1dc447432aefad2a6e04bc149cea692cdd6f203acc133","0931601ab88b17ced10d210b73b69d45855330e2f7d04827af69758de2cb8cd3"]
Anchored
2026-08-21
Public log entry
search.sigstore.dev, log index 2542879916 · entry 108e9186e8c5677a2329…
Expected log hash
8337812f20bf1207a3c96eed87ab975d7e92ac1421dcded24507b32e456b788f The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787282728402","kind":"published-quote","locale":"de","page":"brand:threema","quote":"man muss also alle Chats und Authentifizierungen von Grund auf neu herstellen","rating":1,"review_date":"2026-08-02","source":"Apple App Store","source_url":"https://apps.apple.com/ch/app/id578665578?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (681242bb8cfa…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.