Booman Tribune

Laurie Clones New UK Biometric Passport

by vieravisionary
Wed Mar 7th, 2007 at 06:04:46 PM EST

John Lattrice reports on the Daily  Mail's investigation into the ability to clone the new UK biometric passport.  A major security gap allows a would-be identity thief to obtain an individual's personal information without even opening the envelope the passport is delivered in.

"The Mail exploit draws on previous work by security consultant Adam Laurie and others, and puts together vulnerabilities in the chip technology, and in the chip security and logistics systems used by the Identity & Passport Service"

Lattrice goes on to state that:

"The data in the chip is essentially a digital version of what is printed inside the passport itself. The printed data can be read if the passport is presented and opened, and the chip's security system attempts to duplicate this process. The chip data can be read wirelessly, but it is encrypted, with the key printed inside the passport. So in theory, although the chip can be read without the passport (or indeed the delivery envelope) being opened, the data is meaningless without the key."

"But the key in this first generation of biometric passport is relatively easy to identify/crack. It is not random, but consists of passport number, the passport holder's date of birth and the passport expiry date. The Mail found it relatively easy to identify the holder's date of birth, while the expiry date is 10 years from the issue date, which for a newly-delivered passport would clearly fall within a few days. The passport number consists of a number of predictable elements, including an identifier for the issuing office, so effectively a significant part of the key can be reconstructed from the envelope and its address label."

This report highlights the major technology gaps that must be addressed before any nation should issue these  passports to its citizens.   The ease in which Adam Laurie, only using parts that can be purchased on the Internet or a local electronics store, underscores the reason why so many individuals view this form of passport technology as a danger to the well being of individuals throughout the world.

As a security consultant, I believe that more research and development is needed before using this technology to store personal information.  You can read Lattrice's report by clicking on the link provided below:

How to clone a biometric passport while it's still in the bag



Display:
As the article suggests, the universe of data that need to be tested to determine a passport key of known type similar to what's described here is tiny by modern standards. Any person who is likely to be alive and traveling will have been born within the past 40,000 days, and any passport issued with a 10-year expiration date will have been issued within about the past 3650 days, give or take, so there are really only about 150,000,000 combinations of the two. The passport number sounds like it is probably within a fairly finite universe of maybe about a billion or so possibilities (I'm just pulling that number out of my ear). The number of combinations you would have to test for the key would be the product of those two numbers.

Now that sounds like a lot of possibilities, and in fact it is, but there are brute-force cracks in the wild for other encryption systems that have a similar level of complexity. I'm willing to bet that a determined cloner with sufficient computer programming skill could retrieve the information from a cloned passport over a weekend with sufficient resounces for the task. It might take a cluster of computers working in tandem, but that's nothing these days, especially for someone determined enough.

I still don't see why they don't use some sort of optical technology coupled with a grocery-store style scanner to do what this is trying to accomplish. At least that way someone who wants to clone a passport would have to have the passport in their possession rather than just sniffing it from a distance.

The avalanche has started. It is too late for the pebbles to vote. -- Ambassador Kosh

by Omir the Storyteller (omir.the.storyteller -CAT- gmail -DOG- com) on Wed Mar 7th, 2007 at 06:40:25 PM EST
Omir,

Thanks for the expansion of the article.  I know it is not a hot topic at this time, but it is the type of thing that will hit us when we least expect it.

We must not continue to cure the symptoms and ignore the disease!
Spiritual Awakening

by vieravisionary (tdelaine (at) cfl (dot) rr (dot) com) on Wed Mar 7th, 2007 at 09:04:57 PM EST
[ Parent ]


Display:
Go to: [ Booman Tribune Homepage : Top of page : Top of comments ]
Menu
Login
. Make a new account
. Reset password





Proud member of

The Liberal Blog Network

a FeedBurner Network


Advertise in The Liberal Blog Network

Subscribe to this network

A-List Blogger

Find textbooks at Alibris!

NOTE: Overstock bests Amazon's prices and is "blue."

THE BOOKS WITH "BUZZ":
______________

Learn the real story behind the WMD in Iraq:

The Way of the World: A Story of Truth and Hope in an Age of Extremism
by Ron Suskind

Read Barack Obama's vision for America:

The Audacity of Hope: Thoughts on Reclaiming the American Dream
by Barack Obama

DaveW recommends:

I Am a Strange Loop
by Douglas Hofstadter

Need some laughs?

I Am America (and So Can You!)
by Stephen Colbert

rae recommends:

Dark Ages America: The Final Phase of Empire
by Morris Berman.

On BooMan’s shelf:

The End of Iraq: How American Incompetence Created a War Without End
by Peter W. Galbraith

This looks interesting:

Adventure Divas
by Holly Morris

Here’s a good one from
Elizabeth Gilbert:

Eat Pray Love
by Elizabeth Gilbert

"Crash" * Best Motion Picture, Academy Awards * Only $11.79 at Overstock * 2006 SAG Winner, Best Ensemble

Check out
Powell's new section:
NEW FAVORITES

Selected new arrivals at 30% off

Recommended by Indianadem and ejmw:
The Conscience of a Liberal
by Paul Wellstone

From northcountry’s bookshelf:

The New Golden Age:
The Coming Revolution Against
Political Corruption and Economic Chaos
by Ravi Batra

A novel about contractors in Iraq from the woman that runs The Spy That Billed Me:

Outsourced: A Novel
from RJ Hillhouse.


SOTW-120x90
Download Sleeper Cell on iTunes (Better than "24") Download Weeds on iTunes (Hilarious 1/2-hour adult comedy starring Mary-Louise Parker) Download Late Nite with Conan O'Brien on iTunes
John Belushi - SNL
Download South Park on iTunes
Verve Vault

James Hunter - People Gonna Talk:
James Hunter - People Gonna Talk
icon


Great Deals
----- * ^ * -----

Find mystery novels by Nancy Pickard ("Kansas")



Challenging Empire: How People, Governments, and the UN Defy US Power by Phyllis Bennis (interviewed on DN!)


Featured by Keith Olbermann, New (Powell's Sale): Rogue State: A Guide to the World's Only Superpower by William Blum (whose other books merit serious consideration)


"Explosive" State of War: The Secret History of the CIA and the Bush Administration
by James Risen


The book the CIA doesn't want you to read: Jawbreaker: The Attack on Bin Laden and Al Qaeda: A Personal Account by the CIA's Key Field Commander
Larry Johnson's review


BT's all-time best seller:

PERMACULTURE:
A Designers' Manual

$79.95 * Sale: $59.95


Unequal Sisters: A Multicultural Reader in U.S. Women's History (Third Edition)


The Undercover Economist: Exposing Why the Rich Are Rich, the Poor Are Poor And Why You Can Never Buy a Decent Used Car!


The Worst Hard Time: The Untold Story of Those Who Survived the Great American Dust Bowl
by Timothy Egan


Green Press Initiative
----- * ^ * -----


Journalistas: 100 Years of the Best Writing and Reporting by Women Journalists by Eleanor Mills * NYT review


Bury Me Standing: the Gypsies & Their Journey


1491: New Revelations of the Americas before Columbus



Brokeback Mountain
by Annie Proulx
----- * ^ * -----
Check out Powell's
"At The Movies"


Imperial Ambitions: Conversations on the Post-9/11 World by Noam Chomsky (Power & Terror: Post 9-11 Talks)


The Price of Privilege:

How Parental Pressure and
Material Advantage Are Creating a Generation of
Disconnected and Unhappy Kids

by Madeline Levine


Save 35-70% on
name brand clothing,
footwear, and outdoor gear
at SierraTradingPost.com

:





We listened to PEN American Center's "State of Emergency" and found 1940s books by Curzio Malaparte only at Alibris. (Selection (MP3) excerpted from "The Skin.")

Alibris - Books You Thought You'd Never Find
Banned Books * Are you a fan of Film Noir, Art House, Documentaries or Hong Kong Action? * Searching for a long-lost children's book or a first printing of Miles Davis' Kind of Blue on vinyl? Find it at Alibris!

:
:
www.Patagonia.com



Booman Tribune Homepage
admin@boomantribune.com
powered by Scoop

A-List Blogger

Blogarama - The Blog Directory

More blogs about Blogs at Technorati.

Listed on BlogShares

© 2007 Booman Tribune