from http://www.dice.ucl.ac.be/crypto/passport/index.html
A research team in cryptography from the Catholic University of Louvain (Louvain-la-Neuve) disclosed serious weaknesses in the Belgian biometric passport, the only type of passport distributed in Belgium since the end of 2004. The work carried out in Louvain-la-Neuve during the course of May 2007 show that Belgian passports issued between end 2004 and July 2006 do not include any security mechanism to protect the personal data embedded in the passport’s microchip. Passports issued after July 2006 do benefit from security mechanisms but these ones are flawed. This means that anyone possessing a little electronic reading device, which is easy and cheap to acquire, can steal the passport content while it is still in the pocket of the victim owners and thus without their knowing. Face and signature are among the data at risk. This news is all the more surprising because Karel De Gucht, the Minister for Foreign Affairs, declared in the Parliament on 9th January 2007 that the Belgian passport benefited from the security mechanisms advocated by the International Civil Aviation Organization.
from http://www.theregister.co.uk/2007/06/10/belgian_epassport_flaws/
Gildas Avoine, Kassem Kalach, and Jean-Jacques Quisquater (leader of the crypto group at UCL) found that first-generation Belgian passports fail to include any security mechanism that would ensure the protection of personal data. The researchers carried out a demo that showed it was possible to read first generation passport from a short distance, potentially while it is still in the pocket of a prospective victim.
video: http://www.dice.ucl.ac.be/crypto/passport/passports-UCL-AKQ-2007.mpg
To be better protected you’ll need to create or buy an RFID blocking wallet. This way at least your data can’t be snooped without you consciously handing over (or unconsciously losing) your pasport and other rfid enabled stuff.
