Date: June 5, 2006
Source: Flexilis web site
Title: “RFID Passport Shield Failure Demonstration”
Author: Flexilis
Summary: Claims to demonstrate a real world vulnerability associated with the failure of the shielding component in the US e-Passport design. When partially open, as could be the case when in a pocket, purse, or briefcase, the e-Passport can be detected by a nearby inquiring RFID reader. The security brief also demonstrates an improved shield design that requires a passport to be significantly open before reading is possible.
Our response: Only relevant if the e-Passport is not protected by BAC. If not, the "nearby" inquiring reader would have to be within 50cm or less for several seconds.
http://www.flexilis.com/epassport.php
http://www.flexilis.com/download/RFIDPassportShieldFailureDemonstration.pdf


