Apparently the new Spanish national ID cards (DNIe 3.0, the ones with NFC) are also vulnerable to ROCA. I have one of the older 2.0 ones and mine isn't affected, but DNIe 3.0 cards have been issued since last year.https://www.meneame.net/m/tecnolog%C3%ADa/certificados-electronicos-contenidos-dnie-seran-sustituidos/c097#c-97 …
If they're still using a legacy chip/codebase then perhaps not. Only way to find out is to pull a cert and check it.
-
-
It's up to the issuer (government) if they are serious about eID.
-
Any user should be able to grab their cert and test it for ROCA. That's how we know Spanish DNIe 3.0 cards are vulnerable. All you need is the public certificate to test for ROCA.
- Show replies
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.