
In-toto provides tools both for software developers to authenticate operations in the supply chain, as well as for end-users to verify the authentication trail when installing a software product.
in-toto is developed at the Secure Systems Lab of NYU.