Complete Guide to EU Age Verification: How It Works and Impacts

The open-source project of the European Union for age verification is sparking significant criticism within the tech community. This project aims to allow users to prove they have reached a certain age without revealing complete personal information, such as their name, exact date of birth, or entire ID document. The goal is to protect user privacy by providing a secure method for age authentication.

The project is useful for platforms that require age verification for access to content or services, while ensuring a high level of privacy. It is particularly relevant for app developers, system administrators, and end users who need secure and privacy-respecting authentication solutions.

However, the requirement for hardware-bound attestation has raised concerns among users of open-source systems like Linux, custom Android ROMs, and independently compiled applications. This requirement could limit the project's compatibility with a wide range of devices and operating systems, making it harder to support open systems.

The project invites proposals for alternative architectures and promises a security review and a detailed threat model, which could provide further clarification on the technical choices and possible solutions to mitigate the concerns raised.

Prerequisites

• Hardware: Devices with security hardware such as Android TEE, StrongBox, or Apple Secure Enclave.
• Software: Mobile applications compatible with hardware-bound attestation requirements.
• Operating System: Android or iOS with support for the required security features.
• Internet Access: To download and update the necessary applications.
• User Account: Registration with an age verification credential provider approved by the European Commission.

PROCEDURE: Numbered Step-by-Step Explanation

This guide will explain how to verify your age using the European Union's age verification app.

• Step 1: Download the age verification app from the project's GitHub repository.
• Step 3: Open the app and follow the instructions to register and create an account.
• Step 4: Enter the required personal data for age verification.
• Step 5: Scan your ID document using your device's camera.
• Step 6: Wait for confirmation of age verification. You will receive a notification once the process is complete.
• Step 7: Use the app to access services that require age verification.

Verification and Troubleshooting

By the end of this guide, you will be able to test the functionality of the European Union's age verification project and resolve any issues.

Functionality Test

• Hardware Environment Verification: Ensure your device has protected hardware such as Android TEE, StrongBox, or Apple’s Secure Enclave. These are necessary for the application to function.
• Application Installation: Download and install the application from the official repository. Verify that the application starts correctly and that there are no compatibility errors.
• Age Verification Test: Perform a simulation of age verification using the provided test data. Verify that the verification process works correctly and that the results are consistent with expectations.

Troubleshooting

• Hardware Compatibility Issues: If your device does not support the required protected hardware, you may need to use a different device or contact technical support for further options.
• Installation Errors: If the application does not install correctly, check the system requirements and ensure you are using the latest version of the application.
• Verification Issues: If the age verification process fails, check the application logs to identify any errors. You may need to update the application or contact technical support for assistance.
• Governance Limitations: If you are using a community-built version of the application, ensure it is included in the list of compliant applications maintained by the European Commission. Otherwise, you may not be able to use the real service.

Final Considerations

The European Union's age verification project is still under development, and there may be further updates and changes. Stay updated with the latest news and technical documents to ensure you use the application safely and effectively.

Educational Summary and Call to Action

The project aims to allow users to prove their age without revealing complete personal information, but its hardware-bound attestation architecture raises concerns about compatibility with open systems like Linux, custom Android ROMs, and independently compiled applications.

Here are the key points to remember:

• Hardware-bound attestation: It is a mandatory requirement of the project, necessary to prevent cloning or reuse of credentials.
• Approved devices and systems: The current approach may limit access to a small number of devices, operating systems, and attestation providers.
• Governance and compliance: Only applications included in a list of compliant apps maintained by the European Commission can issue credentials, limiting the use of community-built versions.
• Linux and other systems: While Linux is not explicitly banned, the current architecture does not provide a native wallet for desktop Linux, and other mobile systems may struggle to meet the required trust conditions.

To further explore the debate and contribute to the discussion, check out the maintainer's comment in the project's GitHub repository.

We invite readers to explore the proposed architectural alternatives and actively participate in the discussion, pending the publication of the promised security review and threat model.