British RFID passports cracked

[Chris Walsh <cwalsh () cwalsh org>]

Adam Laurie has cracked British RFID passports.

http://www.guardian.co.uk/idcards/story/0,,1950226,00.html


Although a strong crypto algorithm is used to protect the biometric
data on the passport, the encryption key used is very poor indeed.
It is therefore possible to guess the key and decrypt the traffic.

This means that it is possible to clone passports, and illicitly
obtain biometric data on passport holders.
_______________________________________________
Dataloss Mailing List (dataloss () attrition org)
http://attrition.org/dataloss
Tracking more than 141 million compromised records in 469 incidents over 6 years.