The Guardian is reporting that the new UK Passports have been cracked.
“The Home Office has adopted a very high encryption technology called 3DES - that is, to a military-level data-encryption standard times three. So they are using strong cryptography to prevent conversations between the passport and the reader being eavesdropped, but they are then breaking one of the fundamental principles of encryption by using non-secret information actually published in the passport to create a ’secret key’. That is the equivalent of installing a solid steel front door to your house and then putting the key under the mat.”
I’m glad something like this has come out, i’ve been an opponent of this and ID cards since they were first mentioned. I frankly wouldn’t trust the government to be a ble to file some word documents securely let alone keep track of my biometric information, or be able to cope with 60 million citizen’s biometrics.
Who even came up with the system? The first rule of encryption is obviously to keep the key secure, not to write it on the document in plain text!
Tags:
news,
politics,
privacy,
security