How is NGRAVE protecting its users?

We believe strongly in the benefits of open source, but we also must consider its limitations. The security principle of having many eyes checking our code only holds if many people are looking at our code and reporting issues. Unless we have a large and active user base, there is a significant risk that zero-day vulnerabilities do not get disclosed. This means that right now, we will not open source any part of ZERO's firmware, including the secure element, as we prioritize security. However, we are committed to a future plan of gradually releasing open source components when the conditions are favorable, considering factors such as a sizable and engaged user base to maximize code scrutiny and vulnerability disclosure.

To understand our reasoning, you have to understand the overall security design of our inner working: there is a 'regular' firmware taking care of peripherals such as the touch screen, and a secure firmware authenticating the rich OS & providing the operations for all security related operations (secure storage of private key, PIN & fingerprints, signing, key creation with TRNG, etc). We have tried to find the best solution for our secure firmware and partnered with the only player in the world offering EAL7-certified firmware. 

Verify and Install Firmware Update Yourself.

of Ruben Merre, NGRAVE CEO & Co-founder, with Scott Melker, AKA The Wolf Of All Streets.

Your ZERO comes fitted with 4 layers of protection that should give you peace of mind:

1. Cryptographic verification: When setting up your ZERO, you can easily verify that your device is genuine and was made by NGRAVE. Additionally the firmware is cryptographically signed and is verified every time your ZERO boots. If there is the slightest change in software, signature verification will fail and ZERO will refuse to boot.
2. Tamper resistance: You can’t open the device without damaging it.
3. Tamper evidence: Even if you would succeed in bypassing the previous measure, you can’t put it back together again without leaving traces.
4. Tamper responsiveness: There are sensors inside the ZERO which will detect it being opened and will wipe/reset the device.