RSA Europe 2005 RSA's cryptography guru Burt Kaliski has warned the US' planned introduction of electronic passports represents a long-term challenge for the security industry.

The US government will begin trialling the passports containing an RFID chip in December before the full introduction early next year. United Airlines staff have been testing one version of the technology since June.

Speaking at the RSA Security conference in Vienna, Kaliski, chief scientist at RSA Security, Kaliski told the Reg: “You have to look the whole deployment over its lifetime to make sure you don't introduce new problems and it must improve on the prior generation.”

“A passport obviously contains personal information so you need fine-grained access control. But with a chip you don’t know what information you are giving away. You don’t know where and what data you are giving away.”

Kaliski said: “There’s been good public dialogue – it’s good to see it getting this attention. But it’s important not to just stop with release number one.”

Kaliski said there was a tendency in the security industry to look at the early stages of any effort but then move attention on to the next “new” thing.

RSA began working with other companies on a specification for one time passwords in February. Workshops were held in May and earlier this week. The informal collaboration has one specification ready for formal acceptance and five more in draft form.

Looking back at the conference Kaliski said he enjoyed Dame Stella Rimington’s endorsement and appreciation of the industry because the intelligence services had initially been so suspicious of encryption technology.

More on Kaliski’s blog here (http://www.rsasecurity.com/blog/entry.asp?id=1019).

Related stories

California mulls RFID privacy law (26 September 2006)
http://www.theregister.co.uk/2006/09/26/california_rfid_law/
US tests e-Passports (16 January 2006)
http://www.theregister.co.uk/2006/01/16/us_retests_epassports/
Skip the border guard, fast-track the IT - security, UK style (4 August 2005)
http://www.theregister.co.uk/2005/08/04/uk_border_security_analysis/
Ministers want e-borders fast-tracked (1 August 2005)
http://www.theregister.co.uk/2005/08/01/eborders_fast_tracked/
'RFID the lot of them!' UK ID card to use ICAO reader standard (25 July 2005)
http://www.theregister.co.uk/2005/07/25/id_card_goes_icao/
US lubes passports with RFID snake oil (20 May 2004)
http://www.theregister.co.uk/2004/05/20/us_passports/