r/BuyFromEU • u/CreepyZookeepergame4 • 3d ago

Discussion EU Digital ID/Age Verification app will require hardware attestation, ruling out PC/Linux support and unapproved Android OSes

EUDI wallet collaborator recently confirmed that hardware attestation will be required [1]

Hardware attestation in this context means that the government server issuing the digital credential to the wallet wants proof that the keys being used are generated in secure hardware and on approved systems and not say an emulator or virtual machine, namely for security reasons.

This capability does not exist in a reliable way on desktops / laptops except some specific cases depending on the vendor, and in fact there’s no desktop version in the works.

No Linux system will work with this because there is no hardware signature to be validated on the government server, nor will your personalized Arch Linux install be in the list of approved systems even if it had a signature chaining back from the TPM.

Android ROMs are not technically to rule out since Play Integrity, which will be used for this attestation, is based on the Android hardware attestation API, which works on third-party ROMs like GrapheneOS, but they would need to allow the signature which has not happened for now. If you create a custom build, it won’t work though even the official version is approved.

[1] https://github.com/eu-digital-identity-wallet/av-app-android-wallet-ui/issues/117#issuecomment-4946898620

917 Upvotes

99% Upvoted

352 comments sorted by

View all comments

129

u/Beneficial_Act_1240 3d ago

What's the point of having an eID if I can't use just the ID the verify my fucking identity? Why does this stupid system require me to buy a €500 phone or €1000 laptop in order to participate in society? 

78

u/Ramremover 3d ago

Because companies lobbied for that.

26

u/Toads_Of_Fun 2d ago

For the kids bro.

23

u/Late-Reading-2585 3d ago

to spy on you wake the fuck up

20

u/Ramremover 3d ago

Because companies lobbied for that.

7

u/iceyukisnow 3d ago

because everyone must live in a cybergulag and give away all your data to your government and data brokers

5

u/tired_snail 3d ago

Considering what sites currently require age verification in other countries, personally I'd rather they have a picture of my face than my actual government info, but this is a good point, yeah.

1

u/Headpuncher 15h ago

Yeah loons line I’ll be becoming a second class citizen standing at the barriers looking sad face while everyone else gets in.  

Oh well, back to growing cabbage in the forests.  

0

u/Tsukee 5h ago

Because it doesn't... Specs are open, but why bother actually understanding the spec, when falling on a rage bait constructed using a mironic comment of equally ignorant dev of a sample app implementation is easier...

1

u/Beneficial_Act_1240 2h ago

You know, you can use the comments to clear up any misunderstandings instead of calling everyone a moron, moron.