eCL0WN: an NFC passport tool

INTRODUCTION

eCL0WN is an Android ePassport utility for NFC-enabled phones that allows you to read and clone your ePassport's chip content. The following functionality is implemented in the current release:

    - Read passport data using a given authentication key (if needed).

    - View passport details including the JPEG picture.

    - Write passport data to an emulator chip.

    - Write passport data to internal storage (not very secure).

SUPPORTED DEVICES

eCL0WN requires an NFC-enabled phone running Android 2.3+. Don't forget to enable the NFC interface.

DETAILS

eCL0WN reads ePassport files EF.COM, EF.SOD, EF.DG1 and EF.DG2. If present and accessible, the optional files EF.DG3, EF.DG7, EF.DG11, EF.DG12, EF.DG13, EF.DG14 and EF.DG15 will also be read. Retrieved data can be written to an ePassport emulator. Use Dexlab's epassport_emulator-v1.02 (or higher) as the target device. You need a JCOP card and a PC to prepare the emulator. Please refer to http://dexlab.nl/downloads.html#emulator for more details. Before writing files to the emulator all Active Authentication (AA) related, Extended Access Control (EAC) related and unknown files (if any) are removed from index EF.COM. This allows one to bypass AA and EAC checks of inspection systems vulnerable to downgrade-attacks.

Note that eCL0WN does not comply with ICAO Doc 9303 at all. Please do not use it to check authenticity or integrity of machine readable travel documents.

KNOWN PROBLEMS

ePassport chips typically comply with the ISO 14443 A or B standard. The A standard is widely used in at least Western Europe and the US. The B standard is widely used in at least Asia. Antenna quality of some NFC-enabled Android devices is very poor. If this is the case for your phone you won't be able to communicate with ISO 14443 type B ePassport chips. This is NOT an eCL0WN bug, this is a hardware problem. Problems are reported for the Google Nexus S (type B not readable) and the HTC One X (poor reception of type A chips, try disabling power saving mode).

CHANGELOG

Version 1.05 build 20160414:

    - Released on 14 April 2016.

    - Fixed bug in displaying nationality of document owner of specific ID card type.

    - Added support for switching NFC reading speed and showing debug messages.

Version 1.04 build 20140923:

    - Released on 23 September 2014.

    - Supports non-JP2 JPEG 2000 codestream pictures (at least Greek chips).

Version 1.03 build 20140824:

    - Released on 24 August 2014.

    - Improved handling of EAC-protected files.

    - Shows the tag technology of detected chips.

    - Cleaned up parts of the source code.

Version 1.02 build 20140408:

    - Released on 8 April 2014

    - Added support for data groups 3 and 14.

    - Shows the tag ID of detected chips.

    - Optimized reading order of data groups.

    - Optimized writing of data groups to emulator chips.

    - Optimized size of audio files.

    - Cleaned up parts of the source code.

Version 1.01 build 20140121:

    - Released on 21 January 2014.

    - Implements a workaround for ePassports that implement BAC in a non-standard way (at least Italian chips).

    - Shows a message during startup if NFC is disabled.

Version 1.0 build 20110927:

    - Released on 29 October 2013.

    - Shares codebase with version 0.99 beta 2.

    - Initial public release.

Version 0.99 beta 2 build 20110927:

    - Released on 27 September 2011.

    - Fixed bug in MRZ parsing.

    - Various user interface updates.

    - Non-public release.

Version 0.99 beta 1 build 20110912:

    - Released on 12 September 2011.

    - Initial version.

    - Non-public release.