Wallet Binary Transparency

Binary transparency is a security practice that ensures software binaries are verifiable and have not been tampered with. It aims to increase trust in software by providing mechanisms for third parties, like users, security researchers, or auditors, to verify the integrity and authenticity of a software binary. This approach makes it harder for attackers to distribute malicious code under the guise of a legitimate application.

Binary transparency is especially useful in maintaining trust in critical software systems, such Digital Identity Wallets, where ensuring the integrity of code is paramount for security. It helps mitigate risks in the software supply chain, making it harder for attackers to slip malicious updates or alter software unnoticed. When applying binary transparency to digital identity wallets, a public, append-only log stores cryptographic hashes of the binaries and metadata like version numbers, release dates, and publisher information. Logs are publicly auditable and ensure historical accountability: any modifications to a binary can be detected by comparing it to the hash recorded in the log. Users can verify that updates come from the legitimate developer and match a specific, public version recorded in the transparency log.

Downloads

File	Description	File size
Wallet_Binary_Transparency_Report_EN		763 KB