Auditor App Description

The Auditor app is designed to validate the security of a device using hardware-based integrity and identity verification. It leverages the built-in security features of supported devices to ensure that the operating system remains unaltered and intact. Specifically, the app checks whether the device is running the original manufacturer's operating system with a locked bootloader, ensuring that no unauthorized modifications have been made.

Key Features

• Hardware-Based Verification: The app receives signed device information directly from the device's Trusted Execution Environment (TEE) or Hardware Security Module (HSM). This includes details about the verified boot state, operating system variant, and version.
• Tamper Detection: It detects any attempts to downgrade the operating system to an earlier version, ensuring that the device remains secure and up-to-date.
• Supported Devices: A comprehensive list of supported devices can be found in the documentation. These devices can be used as "Auditees" for verification purposes.

How It Works

The verification process becomes significantly more robust after the initial pairing, thanks to the use of Trust On First Use (TOFU) via pinning. This ensures that the device’s identity is securely established and verified. Subsequent verifications then confirm the ongoing integrity of the device.

Usage Instructions

For detailed usage instructions, refer to the tutorial included as the Help entry within the app menu. The app also offers basic guidance throughout the verification process. For a more in-depth understanding, consult the provided documentation.

By utilizing the Auditor app, users can confidently assess the security of their devices, ensuring they remain protected against unauthorized modifications and potential security threats.