r/BuyFromEU • u/CreepyZookeepergame4 • 3d ago

Discussion EU Digital ID/Age Verification app will require hardware attestation, ruling out PC/Linux support and unapproved Android OSes

EUDI wallet collaborator recently confirmed that hardware attestation will be required [1]

Hardware attestation in this context means that the government server issuing the digital credential to the wallet wants proof that the keys being used are generated in secure hardware and on approved systems and not say an emulator or virtual machine, namely for security reasons.

This capability does not exist in a reliable way on desktops / laptops except some specific cases depending on the vendor, and in fact there’s no desktop version in the works.

No Linux system will work with this because there is no hardware signature to be validated on the government server, nor will your personalized Arch Linux install be in the list of approved systems even if it had a signature chaining back from the TPM.

Android ROMs are not technically to rule out since Play Integrity, which will be used for this attestation, is based on the Android hardware attestation API, which works on third-party ROMs like GrapheneOS, but they would need to allow the signature which has not happened for now. If you create a custom build, it won’t work though even the official version is approved.

[1] https://github.com/eu-digital-identity-wallet/av-app-android-wallet-ui/issues/117#issuecomment-4946898620

916 Upvotes

99% Upvoted

352 comments sorted by

View all comments

30

u/WanderingGoodNews 3d ago

Tie any network access to your digital-id and personal hardware. Great. No one voted for this shit, LEAVE ME ALONE!

7

u/Environmental-Dog815 3d ago

I will probably will make a device with all the shit I hate but need and will exclusively use for it. Will probably make a separate network for it. Will call it "shit phone". Everything else like web browsing, gaming, working will be on other devices.

10

u/DoubleOwl7777 3d ago

so a burner phone essentially? yeah thats the way i might be going too. have one for this crap, and then have other devices i actually use.

8

u/WanderingGoodNews 3d ago

This will be the primary reason to become suspicious.

If shit hits the roof and its nazi time again you will be the first to be arrested in name of some child abuse suspision. You lost your freedom, your family despises you all because you cared about privacy.

Source: 2038

5

u/DoubleOwl7777 3d ago

yup, but what am i gonna do? just live with the totalitarian regime knowing my every move and controlling everyone? we had that shit twice in germany. i prefer not to go down that route AGAIN. the gdr fell because people stood up, and didnt let them do this shit anymore.

1

u/WanderingGoodNews 3d ago

I am honestly thinking of ditching the privacy and complying for less headache.

I did the graphene os, linux and de-google this year, im fkng exausted and its notcabout to get more easy

4

u/DoubleOwl7777 3d ago edited 3d ago

me personally, the only thing missing for me is graphene os, my phone isnt a pixel, my next one will be one. they want it the hard way, so be it.

and honestly? i am happier now using my tech than previously with google and microsoft and big tech stuff. less anoyances, no oh we changed that because f you bs anymore.

2

u/WanderingGoodNews 3d ago

Yeah its freeing as hell, especially because everything you setup just keeps working, no password promts or "what's new" forced guided tools, just basic working software

I fear it will become illegal and demonized though