Cryptographic ID
- Update description
- Attest the state of a Linux computer
When your computer is in a trustworthy state, you can generate a private
key hidden in the TPM2 of your computer. This private key can be sealed with
the current state of the computer (PCRs). Then the computer can only sign a
message with this key when it is in the correct state according to the PCRs.
For example, you can seal the key against the secure boot state (PCR7). If your
computer is booting an operating system signed by another vendor, the TPM2
cannot unseal the private key. So if your computer can generate a correct
signature, it is in this known state.
You can create a sealed private key and create such a signature with
cryptographic-id-rs: https://gitlab.com/cryptographic_id/cryptographic-id-rs
This is similar to [tpm2-totp](https://github.com/tpm2-software/tpm2-totp)
but uses asymmetric cryptography. This means you do not need to keep the
verification code a secret, but you can share it safely with the world.
- Verify the identity of a phone
You can generate a private key when your phone is in a trustworthy state.
If your phone can create a correct signature, you know it is the same phone.
Since the operating system can access the private key, the security guarantees
are much weaker than with a TPM2. So the verification is just as secure as
your phone.
If you use Graphene OS, I recommend Auditor (https://attestation.app/tutorial)
instead.
- Verify that a person is in possession of a private key
This works as the section above and has the same shortcomings. It can be used
to verify someone in person when he sends his public key to you
in advance over a secure channel.
Versions
Bien que le téléchargement d’APK soit proposé ci-dessous pour vous donner le choix, sachez qu’avec une telle installation, les mises à jour ne vous seront pas signalées et que cette manière de télécharger est moins sûre. Nous vous recommandons d’installer le client F-Droid et de l’utiliser.
Télécharger F-Droid-
arm64-v8aarmeabi-v7ax86_64Cette version nécessite Android 5.0 ou ultérieur.
Elle est compilée et signée par F-Droid, et garantie comme correspondante à cette archive source.
Télécharger APK 22 MiB Signature PGP | Journal de compilation
-
arm64-v8aarmeabi-v7ax86_64Cette version nécessite Android 5.0 ou ultérieur.
Elle est compilée et signée par F-Droid, et garantie comme correspondante à cette archive source.
Télécharger APK 22 MiB Signature PGP | Journal de compilation
-
arm64-v8aarmeabi-v7ax86_64Cette version nécessite Android 5.0 ou ultérieur.
Elle est compilée et signée par F-Droid, et garantie comme correspondante à cette archive source.
Télécharger APK 21 MiB Signature PGP | Journal de compilation
