Website review: Steve Boggan and a computer expert ...

Draconis Draconis discovered this in Encryption 8 reviews since Nov 16, 2006
icon tagsencryption, security, privacy guardian.co.uk/idcards/story/0,,1950226,00.ht...

Thumbs up People who like this website

francescatiti
Saratoga
phickserviii
U S A F Academy
Codebender
Albany
Francdoggydog
Denver
justin
Alberta
Stettin
Carbondale
My-Bologna
Wisconsin
tjorsch
Kohler
krajewskil
Wheeling
dashcunning
M-Town
MotheroftheBean
Philadelphia
dzur
Massachusetts
travellersside
Swansea
PrawnFM
Scotland
Magic-Paws
Manchester

StumbleUpon is the best way to discover great web sites, videos, photos, blogs and more - based on your interests. Everything is submitted and rated by the community. Discover, share and review the best of the web!

Thumbs up Reviews of this website

Draconis discovered 22 months ago
Hackers Right Again!!!
Mari-Lou rated 20 months ago


An old (it's only dated November 2006!) article concerning
how safe and secure the new national ID cards will be. Recently
the ID cards project has been confirmed and will be due in 2009 and
become compulsory for anyone applying for a passport.

One of the issues dealing with ID cards is the microchip which will contain biometric information.


from the page:

"The Home Office has adopted a very high encryption technology called
3DES - that is, to a military-level data-encryption standard times
three. So they are using strong cryptography to prevent conversations
between the passport and the reader being eavesdropped, but they are
then breaking one of the fundamental principles of encryption by using
non-secret information actually published in the passport to create a
'secret key'. That is the equivalent of installing a solid steel front
door to your house and then putting the key under the mat"

othium rated 22 months ago
Looks like the U.K. has a big recall on their hands. National ID is not a good idea.
chouxette rated 22 months ago
FEELING SAFE AND SECURE?...DON'T.
Stettin rated 22 months ago
scary stuff
krajewskil rated 22 months ago
Three million Britons have been issued with the new hi-tech passport, designed to frustrate terrorists and fraudsters. So why did Steve Boggan and a friendly computer expert find it so easy to break the security codes [in 48 hours] ?
advena rated 22 months ago
Cracked in 48 hours - it seems the new U.K ID cards are pathetically easy to get into: By last month, Booth, Laurie and I each had access to a new biometric chipped passport and were ready to begin testing them. Laurie's first port of call was the ICAO's website, where the organisation had published specifications for the new travel documents. This is where he learned that the key to opening up the secure chip was contained in the passports themselves - passport number, date of birth and expiry date. "I was amazed that they made it so easy," Laurie says. "The information contained in the chip is not encrypted, but to access it you have to start up an encrypted conversation between the reader and the RFID chip in the passport. "The reader - I bought one for £250 - has to say hello to the chip and tell it that it is authorised to make contact. The key to that is in the date of birth, etc. Once they communicate, the conversation is encrypted, but I wrote some software in about 48 hours that made sense of it.
This page is not affiliated with guardian.co.uk.