@jdgregson Mutual authentication with peripherals is difficult unless the peripherals support some form of authentication (e.g. a custom USB device).
Otherwise, there's really no way to tell if they've been modified. USB devices only send a little bit of basic information during the enumeration stage, and that information can be spoofed.