
Global RFID Passport Encryption standard cracked in 2 hours Mobile Technology Magazine \|\| February 06, 2006 One big hit to the public confidence in RFID has come from the Netherlands, where a security firm partnered with a TV program to successfully decrypt a Dutch-prototype RFID passport. In just two hours, officials from Riscure and "Nieuwslicht" intercepted, stored, and cracked the password encrypted on an RFID-tagged passport. The result was the virtual "undressing" of the passport, allowing the "hackers" access to the digitized fingerprint, the photograph, and all other encrypted and plain text data on the passport. Article Posted at www.KnowledgeDrivenRevolution.com Why did this happen? What's wrong with RFID? Well, the second question has an answer for another article. The answer to the first question is this: The algorithm used to generate the secret key was eminently predictable. Turns out that the manufacturer issued keys sequentially and produced the encryption using only the person's birthdate and the passport number, expiration date and checksum. Dutch officials will be going back to the drawing board in efforts to make the RFID passport encryptions more difficult to break. Clearly, officials in the U.S. should listen as well, since a massive plan this fall calls for all new American passports to have the exact same RFID tag and encryption scheme (which, by the way, is the current sorry excuse for a global standard). About KDR \| \| Home \| \| Weekly Features Archive	Weekly Weekly Features Archive
In Depth The Number 1 Reason YOU became a Slave Knowledge Driven Look at Your Favourite Canadian Political Parties
Archive December January February 2006 29 30 31 01 02 03 04 05 06 07 08 09 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 01 02 03 04 Weekly Features

Global RFID Passport Encryption standard cracked in 2 hours

Mobile Technology Magazine || February 06, 2006

One big hit to the public confidence in RFID has come from the Netherlands, where a security firm partnered with a TV program to successfully decrypt a Dutch-prototype RFID passport.

In just two hours, officials from Riscure and "Nieuwslicht" intercepted, stored, and cracked the password encrypted on an RFID-tagged passport. The result was the virtual "undressing" of the passport, allowing the "hackers" access to the digitized fingerprint, the photograph, and all other encrypted and plain text data on the passport.

Article Posted at www.KnowledgeDrivenRevolution.com

Why did this happen? What's wrong with RFID? Well, the second question has an answer for another article. The answer to the first question is this: The algorithm used to generate the secret key was eminently predictable. Turns out that the manufacturer issued keys sequentially and produced the encryption using only the person's birthdate and the passport number, expiration date and checksum.

Dutch officials will be going back to the drawing board in efforts to make the RFID passport encryptions more difficult to break. Clearly, officials in the U.S. should listen as well, since a massive plan this fall calls for all new American passports to have the exact same RFID tag and encryption scheme (which, by the way, is the current sorry excuse for a global standard).

About KDR | | Home | | Weekly Features Archive

Weekly

Weekly Features Archive

In Depth

The Number 1 Reason YOU became a Slave

Knowledge Driven Look at Your Favourite Canadian Political Parties