Privacy issue in electronic passports

Posted on 28 Jul 05

Marc Witteman of Riscure discovers that the privacy mechanism of new electronic passports is weak and presents this issue at the What the Hack conference:

• Presentation at What The Hack 2005

We also published the following on this topic [edited 2006]:

• Short paper
  
• Presentation at CardsAsia 2006

Inspector launched!

Posted on 01 May 05

Riscure launched the new security tool Inspector. Inspector is the first side-channel analysis tool on the market with a graphical user interface. The CardsNowAsia magazine published an article on Inspector [0.7 MB].

CardsNowAsia publishes on Java Card Security

Posted on 17 Jan 05

In an article titled Is Java Card Really That Secure? Marc Witteman, CTO at Riscure, discusses how penetration testing on Java cards performed by independent labs has advanced from the testing that is performed on proprietary cards.

According to him, "the level of penetration testing performed on a proprietary card is child's play compared to what is done on Java cards".

Further on in the article, he states that Java cards can be very secure as long as the specifications are implemented correctly. With the increased quality of penetration testing, a well-tested Java card contains far less undetected security vulnerabilities than a proprietary card. This leads to high quality cards offering excellent security and applet interoperability.

CardsNowAsia is a bi-monthly smart card magazine with a focus on the Asian region (www.cardsnowasia.com).

Demonstration on SIM Attack Scenario

Posted on 15 Nov 04

Riscure features in the CardsNowAsia magazine with a description of the SIM Attack Scenario that it demonstrated at the Cartes Exhibition in Nov 2004. 

Article on Java Card Security

Posted on 01 Oct 03

October 2003, Information Security Bulletin

In this article on Java Card security (pdf), Marc Witteman explores the security features and challenges in the emerging Java Card technology.

Advances in Smart Card Security

Posted on 01 Jul 02

July 2002, Information Security Bulletin

In this article on smart card security (pdf), Marc Witteman of Riscure describes the contemporary threats and countermeasures in smart card technology.