Friday, January 31, 2025
HomeCryptocurrency hackEstonia Blocked 760,000 National Electronic ID cards due to Critical Crypto...

Estonia Blocked 760,000 National Electronic ID cards due to Critical Crypto Vulnerability Detected in ID Chip

Published on

SIEM as a Service

Follow Us on Google News

The Republic of Estonia Decides to Cancel 50,000 ID cards issued starting from October 2014 due to potential Crypto vulnerability affecting the digital use of Estonian ID cards.

This critical flaw allows to clone the national Identity card of  Estonia by attackers and use it for forgery activities.

Theoretically, the reported vulnerability could facilitate the use the digital identity for personal identification and digital signing without having the physical card and relevant PIN codes.

Also Read:  Cryptocurrency wallets Hacked by “CryptoShuffler” Trojan & Stole $140,000 From Many Wallet ID

A Chipset called TPM which is chipsets manufactured by Infineon has Affected by this Crypto Bug and week generation of RSA cryptographic keys helps to attacker  Calculating the private RSA key for respective Public key that can be accessed by anyone as per the crypto system.

However Simply knowing the public key alone is not enough to unlock the card and calculating the private key but also need some powerful and expensive computing power to calculate the secret key and special custom-made software for signing are also needed.

 Estonia Government Authorities  said, The possible vulnerability affects a total of almost 750,000 ID cards and all the cards will be suspended Until the certificates have been suspended or cancelled, nothing will change for the card holder. The ID card can be used as before.

Due to this Security flaw Estonians will be able to use the former “electronic” ID as a classic identification paper to prove their identity.

The solution is that all existing e-residents will need to update their certificates (once ready) using the ID card software on their computer.

Every digital ID card issued from November 2017 (including everyone now applying) will be unaffected by the security vulnerability.

A new ID card solution is being developed and applying for a new ID card will currently not fix the reported vulnerability. The ID card is still valid as proof of identity Officials said.

The new card receiving priority for 35,000 people, such as doctors, government officials working in the field of justice, as well as employees of the civil status office.

Balaji
Balaji
BALAJI is an Ex-Security Researcher (Threat Research Labs) at Comodo Cybersecurity. Editor-in-Chief & Co-Founder - Cyber Security News & GBHackers On Security.

Latest articles

Massive Hacking Forum Network Dismantled by Authorities, Impacting 10M Users

Authorities have delivered a major blow to the cybercrime world by dismantling two of...

Microsoft Enhances M365 Bounty Program with New Services & Rewards Up to $27,000

Microsoft has announced updates to its Microsoft 365 (M365) Bug Bounty Program, offering expanded...

Tata Technologies Hit by Ransomware Attack, Some IT Services Suspended

Tata Technologies, a leading provider of engineering and IT services, has reported a ransomware...

Hackers Exploiting DNS Poisoning to Compromise Active Directory Environments

A groundbreaking technique for Kerberos relaying over HTTP, leveraging multicast poisoning, has been recently...

API Security Webinar

Free Webinar - DevSecOps Hacks

By embedding security into your CI/CD workflows, you can shift left, streamline your DevSecOps processes, and release secure applications faster—all while saving time and resources.

In this webinar, join Phani Deepak Akella ( VP of Marketing ) and Karthik Krishnamoorthy (CTO), Indusface as they explores best practices for integrating application security into your CI/CD workflows using tools like Jenkins and Jira.

Discussion points

Automate security scans as part of the CI/CD pipeline.
Get real-time, actionable insights into vulnerabilities.
Prioritize and track fixes directly in Jira, enhancing collaboration.
Reduce risks and costs by addressing vulnerabilities pre-production.

More like this

Malicious Solana Packages Attacking Devs Abusing Slack And ImgBB For Data Theft

Malicious packages "solanacore," "solana login," and "walletcore-gen" on npmjs target Solana developers with Windows...

PHP Servers Vulnerability Exploited To Inject PacketCrypt Cryptocurrency Miner

Researchers observed a URL attempts to exploit a server-side vulnerability by executing multiple commands...

The Defender vs. The Attacker Game

The researcher proposes a game-theoretic approach to analyze the interaction between the model defender...