Supply Chain Physical Integrity

Authored by:

Jonathan Riss

CertiK

⚠️ Stub/in progress, help contribute/expand.

🔑 Key Takeaway: Hardware that custodies keys can be compromised before it reaches the user through interdiction, substitution, or tampering. Verifying physical provenance and tamper evidence protects the root of trust.

This sub-section of the Physical Security framework will cover the physical integrity of the hardware supply chain for devices that custody keys.

Planned topics include:

• Tamper-evident packaging and seal verification
• Provenance and authenticity checks for hardware wallets and signing devices
• Detecting interdiction and device substitution
• Secure procurement and chain-of-custody practices

Contributions are welcome. See the contributing guide to help expand this section.

Further reading

• Physical Security overview: how the pages of this framework fit together
• Tamper Evidence: existing guidance on seals and detection
• Supply Chain Security: the software and vendor counterpart
• Contributing guide: how to help expand this section