funsec mailing list archives

Re: RFID enabled e-passport skimming proof of concept code released (RFIDIOt) (fwd)


From: Juha-Matti Laurio <juha-matti.laurio () netti fi>
Date: Sat, 28 Oct 2006 21:26:24 +0300 (EEST)

Thanks for sharing.
I put a short entry pointing to FD list posting here:
http://blogs.securiteam.com/?p=705

- Juha-Matti

Gadi Evron <ge () linuxbox org> wrote:

Anyone mentioned this?

---------- Forwarded message ----------
Date: Fri, 27 Oct 2006 17:35:43 +0100
From: Adam Laurie <adam.laurie () thebunker net>
To: full-disclosure () lists grok org uk, bugtraq () securityfocus com
Subject: RFID enabled e-passport skimming proof of concept code released
    (RFIDIOt)


The latest version of RFIDIOt, the open-source python library for RFID exploration/manipulation, contains code that implements the ICAO 9303 standard for Machine Readable Travel Documents in the form of a test program called 'mrpkey.py'.

This program will exchange crypto keys with the passport and read and display the contents therein, including the facial image and the personal data printed in the passport. Currently the data read is limited to the following objects:

     Data Group:  61 (EF.DG1 Data Recorded in MRZ)
     Data Group:  75 (EF.DG2 Encoded Identification Features - FACE)

Other Data Groups will be implemented as and when examples come to the author's attention.

--clip--
_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.


Current thread: