Tool to backup, modify and clone ePassport released

Tony Naggs ukcrypto at chiark.greenend.org.uk
Fri, 3 Oct 2008 16:05:33 +0530


Hi Ian , all

2008/10/3 Ian Batten <igb@batten.eu.org>:
> If I could trivially extract all the data from my passport and decode it,
> that would increase faith in the transparency of the documents.  It wouldn't
> be ``those with nothing to hide'', it would be ``this is nothing to hide''.

That's good, as it makes the document content transparent to the holder.

> If the data on the passport were all public, and the security of the device
> rested in its physical and cryptographic resistance to forgery and
> alteration, what would the problem be with it being globally readable?

Issues include:
1. The passport is detectable from 1 or 2 metres away, maybe
pickpockets or robbers will preferentially target victims known to
have a passport with them.
2. The passports of some different nations have been profiled, and
found to be distinguishable without going through the authentication
step. This could be used for profiling, e.g. by customs or hijackers.

ttfn,
Tony