README
¶
gmrtd
Go library for reading Machine Readable Travel Documents (MRTDs), such as Passports and Identity Cards.
As specified by the International Civil Aviation Organization (ICAO), in Doc Series 9303.
Demo application for use with a PCSC NFC Reader is available here.
Sample Documents
The following are sample documents that have been read:
| Country (Type,Year) |
PACE | Chip Authentication | Ext Len |
LDS Ver |
|---|---|---|---|---|
| 🇦🇺 Australia (P,2016) |
n/a (BAC) | AA-rsaEncryption | Yes | 0107 |
| 🇦🇹 Austria (P,2023) |
PACE-ECDH-GM-AES-CBC-CMAC-128 brainpoolP256r1 |
CA-ECDH-AES-CBC-CMAC-128 brainpoolP256r1 |
Yes | 0107 |
| 🇨🇦 Canada (PP,2023) |
PACE-ECDH-GM-AES-CBC-CMAC-128 secp384r1 |
CA-ECDH-AES-CBC-CMAC-128 secp384r1 |
No | 0108 |
| 🇨🇳 China (PO,2018) |
n/a (BAC) | AA-rsaEncryption | No | 0107 |
| 🇫🇮 Finland (I,2023) |
PACE-ECDH-GM-AES-CBC-CMAC-256 brainpoolP384r1 |
PACE-ECDH-CAM-AES-CBC-CMAC-256 brainpoolP384r1 |
Yes | 0108 |
| 🇫🇮 Finland (P,2024) |
PACE-ECDH-GM-AES-CBC-CMAC-256 brainpoolP384r1 |
PACE-ECDH-CAM-AES-CBC-CMAC-256 brainpoolP384r1 |
Yes | 0108 |
| 🇫🇷 France (P,2017) |
PACE-ECDH-GM-AES-CBC-CMAC-256 secp256r1 |
(Issue #9) secp256t1 |
Yes | 0107 |
| 🇫🇷 France (ID,2024) |
PACE-ECDH-GM-AES-CBC-CMAC-256 brainpoolP256r1 PACE-ECDH-IM-AES-CBC-CMAC-256 brainpoolP256r1 (PACE-IM not supported) |
CA-ECDH-AES-CBC-CMAC-256 brainpoolP256r1 |
Yes | 0108 |
| 🇩🇪 Germany (P,2023) |
PACE-ECDH-GM-AES-CBC-CMAC-128 brainpoolP256r1 |
PACE-ECDH-CAM-AES-CBC-CMAC-128 brainpoolP256r1 CA-ECDH-AES-CBC-CMAC-128 brainpoolP256r1 |
Yes | 0108 |
| 🇲🇾 Malaysia (P,2023) |
n/a (BAC) | CA-ECDH-3DES-CBC-CBC brainpoolP256r1 |
Yes | 0107 |
| 🇳🇿 New Zealand (P,2017) |
PACE-ECDH-GM-3DES-CBC-CBC brainpoolP256r1 |
AA-rsaEncryption | No | 0107 |
| 🇵🇭 Philippines (P,2020) |
n/a (BAC) | AA-rsaEncryption | Yes | 107 |
| 🇷🇺 Russia (P,2020) |
n/a (BAC) | CA-ECDH-3DES-CBC-CBC secp192 |
Yes | 0107 |
| 🇸🇬 Singapore (PA,2023) |
PACE-ECDH-GM-AES-CBC-CMAC-256 brainpoolP256r1 |
n/a | Yes | 0108 |
| 🇹🇼 Taiwan (P,2024) |
PACE-ECDH-GM-AES-CBC-CMAC-256 secp256r1 |
n/a | Yes | 0107 |
| 🇬🇧 United Kingdom (P,2021) |
PACE-ECDH-GM-AES-CBC-CMAC-256 secp256r1 |
CA-ECDH-AES-CBC-CMAC-256 secp256r1 |
Yes | 0108 |
| 🇺🇸 United States (P,2021) |
n/a (BAC) | n/a | ? | 0107 |
Contributors
Made with contrib.rocks.
Documentation
¶
Overview ¶
Package gmrtd provides mechanisms for reading and validating ICAO 9303 travel documents.
Source Files
Directories
¶
| Path | Synopsis |
|---|---|
|
Package activeauth implements the 'Active Authentication' mechanism for verifying the authenticity of the Contactless IC.
|
Package activeauth implements the 'Active Authentication' mechanism for verifying the authenticity of the Contactless IC. |
|
Package bac implements the 'Basic Access Control' (BAC) authentication protocol.
|
Package bac implements the 'Basic Access Control' (BAC) authentication protocol. |
|
Package chipauth implements the 'Chip Authentication' mechanism for verifying the authenticity of the Contactless IC.
|
Package chipauth implements the 'Chip Authentication' mechanism for verifying the authenticity of the Contactless IC. |
|
Package cms implements the 'Cryptographic Message Syntax' (CMS) as described in RFC-5652.
|
Package cms implements the 'Cryptographic Message Syntax' (CMS) as described in RFC-5652. |
|
Package cryptoutils provides cryptographic utility functions.
|
Package cryptoutils provides cryptographic utility functions. |
|
Package document implements data structures for representing the content of the MRTD.
|
Package document implements data structures for representing the content of the MRTD. |
|
Package iso7816 implements utilities for interacting with the Contactless IC.
|
Package iso7816 implements utilities for interacting with the Contactless IC. |
|
Package mrz provides utilities for parsing the 'Machine Readable Zone' (MRZ).
|
Package mrz provides utilities for parsing the 'Machine Readable Zone' (MRZ). |
|
Package oid provides utilities relating to ASN.1 'Object Identifiers' (OIDs).
|
Package oid provides utilities relating to ASN.1 'Object Identifiers' (OIDs). |
|
Package pace supports the 'Password Authenticated Connection Establishment' (PACE) authentication protocol.
|
Package pace supports the 'Password Authenticated Connection Establishment' (PACE) authentication protocol. |
|
Package password provides utilities for generating MRTD passwords (MRZ,MRZi,CAN) used during BAC/PACE authentication.
|
Package password provides utilities for generating MRTD passwords (MRZ,MRZi,CAN) used during BAC/PACE authentication. |
|
Package TLV provides support for 'Tag-Length-Value' (TLV) formatted data.
|
Package TLV provides support for 'Tag-Length-Value' (TLV) formatted data. |
|
Package utils provides generic utilities.
|
Package utils provides generic utilities. |
Click to show internal directories.
Click to hide internal directories.