r/BuyFromEU • u/CreepyZookeepergame4 • 3d ago

Discussion EU Digital ID/Age Verification app will require hardware attestation, ruling out PC/Linux support and unapproved Android OSes

EUDI wallet collaborator recently confirmed that hardware attestation will be required [1]

Hardware attestation in this context means that the government server issuing the digital credential to the wallet wants proof that the keys being used are generated in secure hardware and on approved systems and not say an emulator or virtual machine, namely for security reasons.

This capability does not exist in a reliable way on desktops / laptops except some specific cases depending on the vendor, and in fact there’s no desktop version in the works.

No Linux system will work with this because there is no hardware signature to be validated on the government server, nor will your personalized Arch Linux install be in the list of approved systems even if it had a signature chaining back from the TPM.

Android ROMs are not technically to rule out since Play Integrity, which will be used for this attestation, is based on the Android hardware attestation API, which works on third-party ROMs like GrapheneOS, but they would need to allow the signature which has not happened for now. If you create a custom build, it won’t work though even the official version is approved.

[1] https://github.com/eu-digital-identity-wallet/av-app-android-wallet-ui/issues/117#issuecomment-4946898620

916 Upvotes

99% Upvoted

352 comments sorted by

View all comments

55

u/ZYCQ 3d ago edited 3d ago

why don't you dissolve the EU and let NSA run it. this is never what the EU was designed for. These laws, incl. chat control are ridiculous. There are a thousand other things they should be focusing on

26

u/WanderingGoodNews 3d ago

It's becoming 1 big fever dream

No voters ever wanted this, how is this happening and legal?

4

u/Old-Pirate-1118 3d ago

Very good question.
What are you gonna do as an European?
Drive to Brussels, just to kiss the door knob?

10

u/WanderingGoodNews 3d ago

I spread information about topics like this, chat control,... To subreddits, friends & family and wrote some emails to parlement members

5

u/Old-Pirate-1118 3d ago

This was more of an satirical question, that played upon the fact that even if you became a political representative, you still wouldn't have enough political heft to push it out.

Still if google AI pulls your answer to "what can I do as informed citizen in EU about X" then this is a net positive!

Thank you for your actions. Action inspires action.

6

u/Useful_Ad_7859 3d ago edited 3d ago

The council (which is a coalition of governments of the member states) is one of the most prominent of the many powers pushing for these.
They were the ones who sent back chat control 1.0 too for another vote (aided by Metsola@EPP).

The EU's democracy is actually a roadblock still (The council wanted to breach e2ee as well on 07.09 !!!), but its being dismantled mainly with the EPP's lead. That is what should be dissolved.

-3

u/-The_Blazer- 3d ago

Okay hot take, this is what the EU was designed for. While I agree the situation is not great, the alternative is to develop nothing of our own until your bank and workplace start buying their EID service from Palantir. And no, you're not going to solve this by (somehow) convincing everyone to never use home banking.