Monday, February 28, 2005

Titled: No Encryption for E-Passports

Despite widespread criticism from security experts that a proposed high-tech upgrade to Americans' passports actually introduces new security risks, the government is declining to encrypt data on new high-tech e-passports, according to proposed new rules published last week.

..... [snip] .....

The new passports will include a radio frequency identification tag, a chip that will store all the information on the data page of the passport, including name, date and place of birth, and a digitized version of the photo passport, according to the proposal in the Federal Register.

..... [snip] .....

The lack of encryption baffles privacy advocates and security researchers, who say the new passports are vulnerable to "skimming," an attack that uses an unauthorized reader to gather information from the RFID chip without the passport owner's knowledge.

The State Department concedes that skimming is a legitimate threat, but says the chips will have a read range of inches, that eavesdropping at border stations would be very conspicuous and that the passports will have a shielding mechanism -- perhaps a foil case or a weave in the cover that will cloak the chip when the passport is closed.

At least they're taking security seriously. Or not.


Posted by Buck
posted on 2/28/2005 6:04:28 PM (Eastern Standard Time, UTC-05:00)  #   

Related Posts:
Some things need to be said
Detroit Police
Trawling for Email
Yes - It's Done
U.N. Gives In - Again
Momentum