ePassports and ICAO 9303 chips
All AmbiSecure engineering content tagged ePassport, newest first. Newer entries reflect current thinking; earlier entries come from the engineering archive.
An electronic passport (ePassport) is a travel document with an embedded contactless chip holding the holder's data and a portrait, protected by an ICAO 9303 security architecture: Basic/PACE access control, Passive Authentication for data integrity, and Active/Chip Authentication against cloning. It is one of the largest deployments of secure-element identity in the world.
This category covers ePassport engineering end to end — the ICAO 9303 chip application, the CSCA/DSC public-key infrastructure that signs and verifies document data, and the enrolment and personalisation pipelines that issue documents at national scale. The emphasis is on the PKI and personalisation plumbing that make chip authentication trustworthy.
Frequently asked questions
What secures the data on an ePassport chip?
ICAO 9303 defines the model: access control (BAC/PACE) gates reads, Passive Authentication verifies a country-signed hash of the data groups, and Chip/Active Authentication proves the chip is genuine and not cloned.
What is the CSCA/DSC hierarchy?
Each country runs a Country Signing Certificate Authority (CSCA) that certifies Document Signer Certificates (DSC); the DSC signs the data on each passport, and inspection systems verify that chain to trust the document.
Where does personalisation fit?
Personalisation writes the holder's data groups and cryptographic keys into the chip during issuance; it must run inside a secure, audited pipeline because it establishes the document's trust anchor.
What is the difference between BAC and PACE?
Both control read access to the chip, but BAC derives keys from data printed in the machine-readable zone and is vulnerable to offline guessing. PACE uses a password-authenticated key agreement that removes that weakness, and has replaced BAC.
Does the same chip architecture serve documents other than passports?
Yes. The ICAO 9303 model now underpins national-ID, voter-ID and driver-licence programmes, reusing the same secure element, applet and PKI structure.