Your Phone Can Lie to You, But This One Can't (Ledger CTO Interview)

Summary

At Ledger Op3n in Paris, Ledger’s CTO introduced Ledger Atom, a device intended to combine Android-style smartphone usability with a separate, hardware-backed security environment. The interview covered the architecture, its privacy trade-offs, and planned security measures.

Security architecture

• Separate secure zone: The device has an Android environment and an independent secure environment. The CTO said sensitive cryptographic operations and secrets can remain in the secure zone, even if Android is compromised.
• Trusted display: Android malware could potentially alter what a standard phone displays before a user signs a transaction. Ledger Atom is designed to show security-sensitive information in the secure environment. A persistent bar indicates whether the screen is showing Android or the secure zone.
• Android security comparison: The CTO argued that Android features such as StrongBox can protect keys at rest, but ordinary apps may still need to handle keys while performing operations such as transaction signing. Ledger’s approach is to run cryptographic operations within its secure environment.
• Physical tamper resistance: Ledger says Atom uses an active shield and monitoring circuitry designed to detect attempts to remove or drill through protective layers and notify the secure element. The CTO described the design as a complex effort involving Ledger’s offensive-security and hardware teams.

Privacy and potential applications

• Privacy trade-offs: Ledger says it is incorporating some privacy ideas from GrapheneOS but does not aim to match it. A hardware switch is intended to disconnect power to the microphone and camera.
• App compatibility: Ledger is targeting Google Mobile Services (GMS) to support Android apps. The CTO said GMS support had not yet been obtained. This approach favors broad app support over removing Google-related tracking.
• Potential secure apps: The secure environment provides cryptographic features and could support third-party applications. The CTO gave a hypothetical example of adapting Signal so messages could be decrypted and displayed in the secure zone. Signal has not been ported to do this; the CTO described it as technically possible.

Product plans and limitations

• Existing-device protections: Ledger plans different countermeasures for older products rather than retrofitting Atom’s shield. The company said it is strengthening supply-chain controls and reseller audits, and developing an additional device-side measure. Details were not disclosed.
• Post-quantum readiness: The CTO said Ledger is integrating the first-wave standardized post-quantum signature algorithms—ML-DSA, FN-DSA, and hash-based cryptography. He expressed confidence in them while acknowledging that cryptographic security is never certain. Newer algorithms remain under evaluation, and he emphasized the importance of making systems upgradeable if algorithms are later weakened or broken.
• Market and certification: Ledger described retail consumers as the initial market, while suggesting enterprise or government uses could be possible with suitable certification.
• Bootloader and Android vulnerabilities: The Android bootloader is not currently planned to be unlockable. The CTO acknowledged that Android vulnerabilities may occur, while arguing that the separate secure zone limits their impact on assets kept there.

The video is an interview about the product’s design and intended protections. It does not provide a product review, setup guide, or hands-on tutorial.

Main speakers and sources: The Techlore interviewer and Ledger’s CTO, who discusses the company’s product plans and security design.