Re: RFID enabled e-passport skimming proof of concept code re leased (RFIDIOt) (fwd)

["Fergie" <fergdawg () netzero net>]

Wow. Sweet. :-)

- ferg




-- Gadi Evron <ge () linuxbox org> wrote:

Anyone mentioned this?

---------- Forwarded message ----------
Date: Fri, 27 Oct 2006 17:35:43 +0100
From: Adam Laurie <adam.laurie () thebunker net>
To: full-disclosure () lists grok org uk, bugtraq () securityfocus com
Subject: RFID enabled e-passport skimming proof of concept code released
    (RFIDIOt)


The latest version of RFIDIOt, the open-source python library for RFID 
exploration/manipulation, contains code that implements the ICAO 9303 
standard for Machine Readable Travel Documents in the form of a test 
program called 'mrpkey.py'.

This program will exchange crypto keys with the passport and read and 
display the contents therein, including the facial image and the 
personal data printed in the passport.  Currently the data read is 
limited to the following objects:

[snip]

The demonstration code (RFIDIOt.py version 0.1g) can be found here:

   http://rfidiot.org

[snip]


--
"Fergie", a.k.a. Paul Ferguson
 Engineering Architecture for the Internet
 fergdawg(at)netzero.net
 ferg's tech blog: http://fergdawg.blogspot.com/


_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.