Belgian ePassport

Back to Belgian eGov

RFID-enabled Passports

• ICAO MRTD

Readers

• http://wiring.org.co/learning/examples/rfid_reading.html ?

Hacks

• http://www.acbm.com/inedits/rfid.html
• http://www.schneier.com/blog/archives/2006/06/build_your_own.html

Tools

OpenMRTD

library

JMRTD

Java host API & Javacard applet to build your own epassport infrastructure

RFIDIOt

apt-get install python-pyscard
$ ./mrpkey.py -L
PCSC devices:
   No: 0               OMNIKEY CardMan 5x21 00 00
   No: 1               OMNIKEY CardMan 5x21 00 01
$ ./mrpkey.py -r 1 CHECK
mrpkey v0.1n (using RFIDIOt v0.1s)
 Reader: PCSC OMNIKEY CardMan 5x21 00 01
 Device is a Machine Readable Document
$ ./mrpkey.py -r 1 "EXnnnnnn<cBELyymmddcSyymmddc<<<<<<<<<<<<<<cc"

To fix reader number, edit RFIDIOtconfig.py
In MRZ passport number is coded with 9 chars. Belgian uses only 8 chars so some passport readers need a document number padded with char "<" ("EXnnnnnn<")

To use mrpkey under Windows you need:

• python
• pyscard
• pyserial
• pywin32
• pycrypto
• python imaging library

eCL0WN

Applet for Nokia NFC phone

Belgian ePassports

Characteristics

• Current versions demo
• Uses Opentrust PKI (former IDX-PKI from idealx)

Security of Belgian ePassports

• http://www.theregister.co.uk/2007/06/10/belgian_epassport_flaws/
• http://www.dice.ucl.ac.be/crypto/passport/index.html