RSA public key

For the purposes of this document, an RSA public key consists of two components:

n - the RSA modulus, a positive integer

e - the RSA public exponent, a positive integer

https://www.ietf.org/rfc/rfc3447.txt

ID-card is a mandatory identity document for citizens of Estonia. In addition to regular identification of a person, an ID-card can also be used for establishing one's identity in electronic environment and for giving one's digital signature. Within the European Union, an ID-card can be used by the citizens of Estonia as a travel document.

https://www.politsei.ee/en/teenused/isikut-toendavad-dokumendid/

https://en.wikipedia.org/wiki/Estonian_ID_card

https://www.riigiteataja.ee/en/eli/511042016001/consolide#para9b4

Identity Documents Act

The issuer of the document shall issue a certificate that enables digital identification and a certificate that enables digital signing that are entered in a document.

The certificate that enables digital identification and the certificate that enables digital signing are connected to the personal data of the holder of the certificate and are publicly verifiable through the personal identification code.

The issuer of a document may, on the basis of a contract, transfer the technological creation of the certificate that enables digital signing entered in a document, to a service provider competent therein.

January 28,  2002

The first ID-cards issued to citizens

October 2005

Estonia became the first country to offer Internet voting

March 2015

Parliamentary Elections, Internet voting accounted for 30,5 percent of the votes cast.

[2005,2006...2016]

98% of banking transactions are conducted via the internet

https://idcredit.olerex.ee

Olerexi eraisiku krediitkaart on ID-kaardi põhine kuumaksu- ja intressivaba maksevahend.

Кредитная карточка частного клиента Olerex – это базирующееся на использовании ID-карты платежное средство без ежемесячной платы и процентной ставки.

Credit card Olerex private customer - it is based on the use of the ID-card payment means no monthly fees and interest rates .

Today We Have

1 269 241 Active Cards

~700K Electronic Users

290 400 771 Digital Signatures

443 843 413 Strong Authentications

Statistics from http://id.ee

Aargh. Supporting incorrect encodings of things would likely mean bleeding this tolerance of broken things all the way into very low-level function RSAPublicKey parsing function. That's kind of ugly.

The other Estonian ID card bug was not in such a low-level function.

It is far from nice, indeed. Answers to your questions:

>Which Estonian ID cards are broken like this?

actually it is not a “broken card”, it is the certificate(s) on the card

>Is it all of them or just ones from a particular vendor or time period?

the ones issued from Sep 2014 till yesterday

>Are at least the new ones going forward functional?

yes

> What's the lifetime of one?

5 years

...

Work around broken Estonian smart cards. Again.

...

Sep 17, 2015

6 months seems like a realistic target.

...

Sorry TPMs, there's another one of these. :-( Apparently Estonian IDs managed to screw something else up too, so we have to work around this bug as well. And, of course, it was only reported the day after I'd already merged the other workaround.

+

#eResidency

(Country as a service: Estonia’s new model)

Jul 10,  2012

https://joinup.ec.europa.eu/svn/mocca/trunk/smcc/src/main/java/at/gv/egiz/smcc/EstEIDCard.java

/*
This class implements support for EstEID card v1.0, v1.1 and v3.0. Note that signatures created with c3.0 cards cannot be verified by MOA-SP due to wrong encoding of the signer certificate (public key modulus is negative) 
*/

Remote Execution

Simple enough for a dumbuser to complete from home

Fail Safe

Resumable in every stage of the way

Fallback

For challenged cards and persons

Secure Connection

GlobalPlatform

Using the middlware as the proxy

Updating Certificates

for Gen2 is easy; we've done it before, sort of ..

Replacing the Applet

on Gen3 - no one has done anything like this before
... in the real world

PIN Codes

We cannot extract the keys nor PINs
from the original applet

Personal Data Integrity

Everything on card will be replaced

Attack Models

What if I get a card with just PIN1?

a) build a platform

b) build a point solution

Establish link​

https://github.com/martinpaljak/apdu4j

Talk to application

https://github.com/martinpaljak/esteidhacker

Global Platform

https://github.com/martinpaljak/GlobalPlatformPro