# GDC26 meeting report published: Wallet Security Assurance — ST/PP and Convergence

**URL:** https://bgin.discourse.group/t/gdc26-meeting-report-published-wallet-security-assurance-st-pp-and-convergence/1042
**Category:** Cyber Security
**Tags:** meeting-report, gdc26, block15
**Created:** [September 3, 2026, 10:43pm UTC](https://bgin.discourse.group/t/gdc26-meeting-report-published-wallet-security-assurance-st-pp-and-convergence/1042 "2026-09-03T22:43:53Z")
**Posts on this page:** 1
**Page:** 1

<div class="post-metadata">

### Author: ![shinichiro.matsuo](https://sea1.discourse-cdn.com/flex019/user_avatar/bgin.discourse.group/shinichiro.matsuo/32/11_2.png) [@shinichiro.matsuo](https://bgin.discourse.group/u/shinichiro.matsuo)
#### Post date: [September 3, 2026, 10:43pm UTC](https://bgin.discourse.group/t/gdc26-meeting-report-published-wallet-security-assurance-st-pp-and-convergence/1042/1 "2026-09-03T22:43:53Z")

</div>

Dear Cyber Security and IKP colleagues,

The GDC 2026 breakout in Geneva on **3 September 2026** (15:00–15:50) is now on the BGIN website as a meeting report, with the session slides. The record is written under the **Chatham House Rule** for floor interventions: information may be used; other participants are not identified. The programme speaker is Julien Bringer (BGIN Cyber Security).

The 50-minute session asked how the identity and blockchain rooms can get from vendor-specific security targets to a common, evaluate-able protection profile for crypto wallets—without forking Common Criteria, FIDO, GlobalPlatform, or EUDI schemes, and without a process that only large vendors can complete. It built on the [Security Target & Protection Profile (ST/PP)](https://bgin-global.org/projects/st-pp) workstream.

**Read and cite**

- Meeting report: [https://bgin-global.org/news/260903-gdc26-wallet-security-assurance](https://bgin-global.org/news/260903-gdc26-wallet-security-assurance)
- Session slides (PDF): [https://bgin-global.org/documents/meeting-reports/gdc26/GDC26\_Wallet\_Security\_Assurance\_STPP\_Slides.pdf](https://bgin-global.org/documents/meeting-reports/gdc26/GDC26_Wallet_Security_Assurance_STPP_Slides.pdf)
- Citeable PDF: [https://bgin-global.org/publications/gdc26-wallet-security-assurance](https://bgin-global.org/publications/gdc26-wallet-security-assurance)
- Project hub: [BGIN](https://bgin-global.org/projects/st-pp)

**What the room actually used**

- There is no common protection profile for crypto wallets today. Certification means a vendor-specific security target; a chip or component certificate does not evaluate the integrated seed, update, isolation, and consent path.
- Reuse existing building blocks (Common Criteria, CSPN, SSCD/QSCD, GlobalPlatform TEE, FIDO, FIPS/PCI, EUDI/EUCC drafts). Do not fork those schemes; write only the wallet/DLT gap, including PQC agility as an objective from the start.
- One profile will not cover all ToEs. Candidate families are non-custodial, custodial, and MPC/threshold, with tiered assurance. Distinctions the room used include hardware entropy present versus entropy used, and QSCD/WSCD versus WSCA/activation software.
- A copy-paste of heavy Common Criteria practice will not be followed by small wallet startups. Practical reuse of certified secure components, with minimal crypto-wallet deltas, is the adoption path. ISO/IEC JTC 1/SC 27 has no crypto-wallet PP today; CEN/TC 224 / EUCC identity-wallet work is adjacent rather than sufficient.

**Continue at Block 15**

Please bring comments, corrections, proposed use cases, and a view on whether to draft retail or custodial profiles first into this thread. The named continuation is **BGIN Block 15** (15–16 October 2026, Washington, D.C.; hybrid), including **Cyber: Security Target & Protection Profile (ST/PP)** on 16 October, 15:40–17:10.

- Event: [BGIN](https://bgin-global.org/events/20261015-block15)
- Session: [BGIN](https://bgin-global.org/events/20261015-block15/sessions/2-10)
- Registration: [BGIN Block15 Tickets, Thursday, October 15-Friday, October 16 &nbsp;•&nbsp; 8:30 AM-6 PM | Eventbrite](https://www.eventbrite.com/e/bgin-block15-tickets-1990274282957)

Anyone can participate on Discourse. No membership application is required.

Shin’ichiro Matsuo  
BGIN Co-Chair