Verify Graphene Version without Auditor App

_loading_bay_

hi, I am new to Android also new to flashing OS'.
I have flashed the graphene os to my phone but now I need to double-check that its the right version...I had some weird issues during the flashing process so I want to be sure I have not being redirected to some other website and downloaded a dodgy version......how do I verify the version without using the Auditor app....essentially I do not have another Android phone so I cannot use the Auditor app

de0u

_loading_bay_ How do I verify the version without using the Auditor app....

https://grapheneos.org/install/web#verified-boot-key-hash

user

You can use remote attestation

https://attestation.app/tutorial

_loading_bay_

sorry the link you have just sent is for verifying using the Auditor app, but I cannot do that. I dont have another android device to use. I just want a way that I can verify it myself on the device. how do I do that?

user

_loading_bay_

Actually you can, auditor app can verify the device with 2 methods, the local one with another android phone and the remote attestation without the need of another android device. Please read the tutorial I linked.

_loading_bay_

sorry....I am not an IT geek....some step by step would help a lot. I have set up an account and scanned the QR code....now what?

[deleted]

_loading_bay_ First, ensure that the Auditor app is also installed on the other device (If Its not GrapheneOS). Then, open the Auditor app on both devices, and then follow these instructions:

press Auditor on the device that will be verifying the Auditee
press Auditee on the device that's going to be verified
point the camera of the Auditee at the QR code on the Auditor to read the challenge
tap the QR code on the Auditor to advance ahead (if you do this too early, you can press back)
point the camera of the Auditor at the QR code on the Auditee to read the attestation
view verification of the attestation results

[deleted]

OP doesn't have two devices.

raccoondad

de0u This is a good method, but technically requires trust of the hardware

Then again...you should REALLY be trusting your hardware

de0u

de0u https://grapheneos.org/install/web#verified-boot-key-hash

raccoondad This is a good method, but technically requires trust of the hardware.

Doesn't Auditor also trust the hardware, maybe to sign boot hashes with a hardware-protected key? I admit to not understanding the Auditor design and protocol.

raccoondad

de0u Damn, thought it used some kind of attestation method. (like how yubikey does it)

If anyone could show me documentation on how it works that would be appreciated

de0u

raccoondad Damn, thought it used some kind of attestation method. (like how yubikey does it)

I think when a Yubikey is used it is a trusted piece of hardware?

raccoondad If anyone could show me documentation on how it works that would be appreciated

https://attestation.app/about links to https://github.com/GrapheneOS/Auditor/blob/76/app/src/main/java/app/attestation/auditor/AttestationProtocol.java#L120-L193