Seems the Spanish government is finally admitting that new Spanish eIDs ("DNIe 3.0") are vulnerable to ROCA. Everyone gets to renew their certs. Supposedly they're "disabling" the old functionality (revoking the certs, I hope). https://www.dnielectronico.es/PortalDNIe/
-
Common criteria is worthless. The buggy code passed those evaluations. This is why we need *public* review, not shitty certifications that don't certify anything.
This Infineon fail passed every official certification of the problem chips and libraries. It was only found by researchers working black-box from the keys only.