The Republic of Estonia Decides to Cancel 50,000 ID cards issued starting from October 2014 due to potential Crypto vulnerability affecting the digital use of Estonian ID cards.
This critical flaw allows to clone the national Identity card of Estonia by attackers and use it for forgery activities.
Theoretically, the reported vulnerability could facilitate the use the digital identity for personal identification and digital signing without having the physical card and relevant PIN codes.
Also Read: Cryptocurrency wallets Hacked by “CryptoShuffler” Trojan & Stole $140,000 From Many Wallet ID
A Chipset called TPM which is chipsets manufactured by Infineon has Affected by this Crypto Bug and week generation of RSA cryptographic keys helps to attacker Calculating the private RSA key for respective Public key that can be accessed by anyone as per the crypto system.
However Simply knowing the public key alone is not enough to unlock the card and calculating the private key but also need some powerful and expensive computing power to calculate the secret key and special custom-made software for signing are also needed.
Estonia Government Authorities said, The possible vulnerability affects a total of almost 750,000 ID cards and all the cards will be suspended Until the certificates have been suspended or cancelled, nothing will change for the card holder. The ID card can be used as before.
The solution is that all existing e-residents will need to update their certificates (once ready) using the ID card software on their computer.
Every digital ID card issued from November 2017 (including everyone now applying) will be unaffected by the security vulnerability.
