How Electronic Passports Use Cryptography for Security and Authentication
By
tatersolid
Fresh out the oven, still warm. Top of the tray.
Summary
This article explains how electronic passports (eMRTDs) function as embedded devices with filesystems and cryptographic protocols. It details the security mechanisms including access controls, encryption, and authentication protocols that prevent unauthorized reading, eavesdropping, forgery, and copying. The article also discusses the threat model for electronic passports and explores potential future applications like zero-knowledge identity proofs.
Key quotes
· 3 pulledMost modern passports are actually embedded devices containing an entire filesystem, access controls, and support for several cryptographic protocols
These documents use cryptography to prevent unauthorized reading, eavesdropping, forgery, and copying
The article discusses the implications of using electronic passports for novel applications, such as zero-knowledge identity proofs
You might also wanna read
Security Researcher Discloses Critical Vulnerabilities in CBSE's On-Screen Marking Portal
A security researcher (ni5arga) discloses critical vulnerabilities discovered in CBSE's On-Screen Marking Portal, including authentication b
ni5arga.com·5d ago
CipherLock: A minimalist, open-source interactive hub for learning and breaking classic ciphers
CipherLock is a minimalist, open-source, privacy-focused interactive platform for learning cryptography. It features five classic ciphers (C
Product Hunt·1mo ago
Threshold Signatures: Distributing Cryptographic Risk to Eliminate Single Points of Failure
The article discusses the security risks of single private keys as points of failure in cryptographic systems and introduces threshold signa
eric.mann.blog·2mo ago
An Interactive Introduction to Elliptic Curve Cryptography: From Mathematics to Practical Applications
This article provides an interactive introduction to Elliptic Curve Cryptography (ECC), explaining how it enables secure communication over
growingswe.com·3mo ago
Google Chrome Announces Quantum-Safe HTTPS Certificate Program
Google's Chrome team announces a new program to make HTTPS certificates secure against quantum computing threats, focusing on quantum-safe c
security.googleblog.com·3mo ago
Rubik's Cube Authentication System Uses Physical State as Cryptographic Key
Researchers have developed a novel authentication system called CubeAuthn that transforms a Rubik's Cube into a physical key for digital aut
ieeexplore.ieee.org·4mo ago