E-passport: Cracking basic access control keys

Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Volumn 4804 LNCS, Issue PART 2, 2007, Pages 1531-1547

  Liu, Yifei ^a   Kasper, Timo ^a   Lemke Rust, Kerstin ^a   Paar, Christof ^a  

^a RUHR UNIVERSITY BOCHUM   (Germany)

Author keywords

Basic access control; COPACOBANA; E passport; Key search machine; MRTD; SHA 1 DES

Indexed keywords

COMPUTER HARDWARE; COMPUTER PROGRAMMING; ELECTRONIC DOCUMENT EXCHANGE;

BASIC ACCESS CONTROL (BAC); KEY SEARCH MACHINE COPACOBANA; MACHINE READABLE TRAVEL DOCUMENT (MRTD);

SECURITY OF DATA;

EID: 38349006182     PISSN: 03029743     EISSN: 16113349     Source Type: Book Series    
DOI: 10.1007/978-3-540-76843-2_30     Document Type: Conference Paper

References (32)

1. 3-millionster deutscher ePass ausgeliefert, http://www.bundesdruckerei. de/de/presse/pressemeldungen/pm_2007_04_02.html
2. Advanced Security Mechanisms for Machine Readable Travel Documents - Extended AccessControl, http://www.bsi.bund.de/fachthem/epass/EACTR03110_v101. pdf
3. Behördenkennzahl,
4. http://www.pruefziffernberechnung.de/Begleitdokumente/BKZ.shtml
5. Behördenkennzahlen für deutsche Personalausweise und Reisepässe, http://www.pruefziffernberechnung.de/Begleitdokumente/BKZ.pdf
6. Benefits of MRTD, http://mrtd.icao.int/content/view/28/203/
7. Bundestag verabschiedet Novelle des Passgesetzes, http://www.heise.de/ newsticker/meldung/90202
8. FIPS 180-1 Secure Hash Standard, http://www.itl.nist.gov/fipspubs/fip180- 1.htm
9. FIPS 46-3 Data Encryption Standard (DES), http://csrc.nist.gov/ publications/fips/fips46-3/fips46-3.pdf
10. Paßgesetz PaßG, http://www.gesetze-im-internet.de/ bundesrecht/pa_g_1986/gesamt.pdf
11. Privacy issues with new digital passport, http://www.riscure.com/news/ passport.html
12. Avoine, G., Kalach, K., Quisquater, J.-J.: Belgian Biometrie Passport does not get a pass. Your personal data are in danger!, http://www.dice.ucl.ac. be/crypto/passport/index.html
13. Bosselaers, A.: Fast Implementations on the Pentium, http://homes.esat. kuleuven.be/~bosselae/fast.html
14. Carluccio, D., Lemke-Rust, K., Paar, C., Sadeghi, A.-R.: E-Passport: The Global Traceability or How to Feel Like an UPS Package. In: WISA 2006. LNCS, vol. 4298, pp. 391-404. Springer, Heidelberg (2006)
15. Statistisches Bundesamt Deutschland. GENESIS-Online - Das statistische Informationssystem, https://www-genesis.destatis.de/genesis/online/logon
16. Finkenzeller, K.: RFID-Handbuch. Hanser Fachbuchverlag, 3rd edn. (October 2002)
17. Hancke, G.P.: Practical Attacks on Proximity Identification Systems (Short Paper). In: IEEE Symposium on Security and Privacy 2006 (2006),
18. http://www.cl.cam.ac.uk/~gh275/SPPractical.pdf
19. Hoepman, J.-H., Hubbers, E., Jacobs, B., Oostdijk, M., Schreur, R.W.: Crossing Borders: Security and Privacy Issues of the European e-Passport. In: Yoshiura, H., Sakurai, K., Rannenberg, K., Murayama, Y., Kawamura, S. (eds.) IWSEC 2006. LNCS, vol. 4266, pp. 152 -167. Springer, Heidelberg (2006)
20. ISO/IEC 14443. Identification cards - Contactless integrated circuit(s) cards -Proximity cards - Part 1-4 (2001), www.iso.ch
21. Vaudenay, S., Monnerat, J., Vuagnoux, M.: About Machine-Readable Travel Documents. In: Proceedings of the International Conference on RFID Security 2007, pp. 15-28 (2007)
22. Juels, A., Molnar, D., Wagner, D.: Security and Privacy Issues in E-passports. Cryptology ePrint Archive, Report 2005/095 (2005), http://eprint.iacr.org/2005/095.pdf
23. Kc, G.S., Karger, P.A.: Security and Privacy Issues in Machine Readable Travel Documents (MRTDs). RC 23575, IBM T. J. Watson Research Labs (April 2005)
24. Kumar, S., Paar, C., Pelzl, J., Pfeiffer, G., Rupp, A., Schimmler, M.: How to Break DES for € 8,980. In: SHARCS'06 - Special-purpose Hardware for Attacking Cryptographic Systems, pp. 17-35 (2006), http://www.hyperelliptic.org/ tanja/SHARCS/talks06/copa_sharcs.pdf
25. Kumar, S., Paar, C., Pelzl, J., Pfeiffer, G., Schimmler, M.: Breaking Ciphers with COPACOBANA - A Cost-Optimized Parallel Code Breaker. In: Goubin, L., Matsui, M. (eds.) CHES 2006. LNCS, vol. 4249, pp. 101-118. Springer, Heidelberg (2006)
26. ICAO TAG MRTD/NTWG. Biometrics Deployment of Machine Readable Travel Documents, Technical Report (2004), http://www.icao.int/mrtd
27. International Civil Aviation Organization. Annex I, Use of Contactless Integrated Circuit. Machine Readable Travel Documents (2004), http://www.icao.int/mrtd
28. International Civil Aviation Organization. Machine Readable Travel Documents, PKI for Machine Readable Travel Documents offering ICC Read-Only Access (2004), http://www.icao.int/mrtd
29. International Civil Aviation Organization. Machine Readable Travel Documents, Technical Report, Development of a Logical Data Structure - LDS For Optional Capacity Expansion Technologies (2004), http://www.icao.int/mrtd
30. International Civil Aviation Organization. Machine Readable Travel Documents, Supplement to Doc9303-part1-sixth edition (2005), http://www.icao.int/mrtd
31. International Civil Aviation Organization. Machine Readable Travel Documents, Doc 9303, Part 1 Machine Readable Passports, Fifth Edition (2003)
32. Robroch, H.: ePassport Privacy Attack, Presentation at Cards Asia Singapore (April 26, 2006), http://www.riscure.com