[funsec] RFID enabled e-passport skimming proof of concept code re leased (RFIDIOt) (fwd)

[Fergie]

Wow. Sweet. :-)

- ferg




-- Gadi Evron <ge at linuxbox.org> wrote:

Anyone mentioned this?

---------- Forwarded message ----------
Date: Fri, 27 Oct 2006 17:35:43 +0100
From: Adam Laurie <adam.laurie at thebunker.net>
To: full-disclosure at lists.grok.org.uk, bugtraq at securityfocus.com
Subject: RFID enabled e-passport skimming proof of concept code released
    (RFIDIOt)


The latest version of RFIDIOt, the open-source python library for RFID 
exploration/manipulation, contains code that implements the ICAO 9303 
standard for Machine Readable Travel Documents in the form of a test 
program called 'mrpkey.py'.

This program will exchange crypto keys with the passport and read and 
display the contents therein, including the facial image and the 
personal data printed in the passport.  Currently the data read is 
limited to the following objects:

[snip]

The demonstration code (RFIDIOt.py version 0.1g) can be found here:

   http://rfidiot.org

[snip]


--
"Fergie", a.k.a. Paul Ferguson
 Engineering Architecture for the Internet
 fergdawg(at)netzero.net
 ferg's tech blog: http://fergdawg.blogspot.com/