Reversing 'France Identité': The New French Digital ID

Re:Reversing 'France Identité': The New French Digital ID by lxgr on Friday October 06, 2023 @08:53AM (#37790141)

Smartcards, including the contactless kind (often called NFC, but that’s technically a related but different set of standards), have been able to perform RSA signatures since the 90s.

A secure channel between a backend holding the keys (usually in an HSM) and a card read by a mobile device is pretty standard, actually. That's how remote card top-up usually works.

The relevant smartcard standards (ISO 7816 or GlobalPlatform, I can't remember) provide that type of secure channel protocol by default.

[ Parent | on HN ]

Re:Reversing 'France Identité': The New French Digital ID by mariusor on Friday October 06, 2023 @09:06AM (#37790265)

How about EC signatures?

My Yubikey (which I imagine is a bit more sophisticated than a NFC tag can be) is said to be able to hold Ed2519 keys and use them for signing, but I was never able to actually do that. :)

[ Parent | on HN ]

Re:Reversing 'France Identité': The New French Digital ID by lxgr on Friday October 06, 2023 @09:21AM (#37790435)

Elliptic curve signatures are even easier since they're computationally less efficient and can be implemented in software on newer smartcards!

I'm using a GPG key on my Yubikey, and while I haven't tried using Ed25519 and Curve25519 in particular (GPG support for these is still not ubiquitous), the GPG smartcard application in general works quite well for both SSH and actual OpenPGP use.

[ Parent | on HN ]

Re:Reversing 'France Identité': The New French Digital ID by petre on Saturday October 07, 2023 @10:33AM (#37802022)

Both. Newer digital tachograph cards use ECC signatures for signing gen2 smart tachograph data. Gen1 used RSA.

[ Parent | on HN ]