News for hackers. Stuff that matters.

A comment on UK government's battle with Apple over EU citizens app. Parent comment

Re:UK government's battle with Apple over EU citizens app by Rjevski on Thursday November 01, 2018 @09:06AM (#18353496)
You don’t just need the UID (and by the way, passports don’t have one).

You need to do a proper cryptographic handshake with the passport, something impossible with the current SDK. You need to be able to send raw “APDUs” (commands) to the smart card/passport.

[ Parent | on HN ]
Re:UK government's battle with Apple over EU citizens app by andyjohnson0 on Thursday November 01, 2018 @09:35AM (#18353719)
> you need to be able to send raw “APDUs” (commands) to the smart card/passport.

Is this available via a private API in CoreNFC? Is that what they're asking for?

Edit:

> and by the way, passports don’t have one

Thanks - I didn't know that. Now reading about Pseudo-Unique IDs.

[ Parent | on HN ]
Re:UK government's battle with Apple over EU citizens app by Rjevski on Thursday November 01, 2018 @09:41AM (#18353763)
Not available as far as I know; I looked into it as I needed it as well.

Seems like there are some classes in the SDK that hint at that but so far they don’t work (presumably they require an entitlement that only Apple can provide).

[ Parent | on HN ]