<div dir="ltr">Dear Ondrej,<div class="gmail_extra"><br><div class="gmail_quote">On Tue, Oct 24, 2017 at 5:41 PM, Ondrej Mikle <span dir="ltr"><<a href="mailto:ondrej.mikle@gmail.com" target="_blank">ondrej.mikle@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div><div><div><div>Hi,<br><br></div>there was similar case with Taiwanese cards in 2013 (batch GCD+Coppersmith - <a href="https://smartfacts.cr.yp.to/smartfacts-20130916.pdf" target="_blank">https://smartfacts.cr.yp.to/<wbr>smartfacts-20130916.pdf</a>). However I can't seem to find how they handled it eventually. There was recent news that they will replace the ID cards for some unspecified reason - <a href="http://embeddedsecuritynews.com/2017/10/taiwan-to-issue-electronic-id-cards-in-a-year-minister/" target="_blank">http://embeddedsecuritynews.<wbr>com/2017/10/taiwan-to-issue-<wbr>electronic-id-cards-in-a-year-<wbr>minister/</a><br></div><div><br></div><div>Same goes for Estonian cards - no idea what mitigation or response was announced. It also seems that the news broke for Estonian cards one month sooner than for Slovak eID cards (source, but in Slovak: <a href="https://www.rtvs.sk/televizia/archiv/11580/139321#489" target="_blank">https://www.rtvs.sk/televizia/<wbr>archiv/11580/139321#489</a>).<br><br></div>Slovakia finally announced shutting down all e-government services and that's it for now. Not sure whether they plan on reissuing/repgramming the cards.<br></div></div></div></blockquote><div><br></div><div>AFAIK the problem is not with bad RNGs. At least for Slovakia and Estonia.</div><div>Estonia has already anounced that new cards are testing.</div></div><br clear="all"><div><br></div>-- <br><div class="gmail_signature" data-smartmail="gmail_signature">SY, Dmitry Belyavsky</div>
</div></div>