Smartcards and RFID

Smartcards and RFID: open source software and tools

Research into RFID and smartcards, especially Java Card smartcards, in our research group has led to several open source projects over the years:

JavaCard XMSS, a JavaCard implementation of the post-quantum XMSS^MT signature scheme. This was developed by Joost Rijneveld for the Netherlands National Communication Security Agency (NL-NCSA, or in Dutch, NVB). There is also a paper about this.
ISO-DL, an open source reference implementation of the international standard for Electronic Driving Licences (ISO18013). This was developed by Wojciech Mostowski for RDW, the Dutch Department of Road Transport.
JMRTD, an open source implementation of the international standard for electronic passports (aka Machine Readable Travel Documents). This was mainly developed by Martijn Oostdijk, Cees-Bart Breunesse and Joe Kiniry. Based on this project Innovalor has gone on to make the ReadID NFC Passport Reader Android app.
OpenEMV, an open source implementation of parts of the EMV (Europay-Mastercard-Visa) protocol for electronic payments.

JavaCardSign, a Java Card smartcard application for creating digital signatures, following the ISO7816 standard (parts 8 and 15). This was developed by Joeri de Ruiter.

JavaCardOpenPGP, a Java Card smartcard implementation of the OpenPGP card. This was developed by Joeri de Ruiter
Java Card Firewall Tester, a suite of programs to thoroughly test the firewall on a JavaCard smartcard, by Wojciech Mostowski.

We also have software for reading our information from the ChipKnip, the old Dutch electronic purse system, which is no longer in use.

Shown in the pictures below:

Gerhard de Koning Gans developed the Smart Logic as man-in-the-middle device for analysing or modifying smartcard communications.
René Habraken built the most powerful RFID antenna to date that can be used for active or passive attacks on RFID tags. It is described in our paper at RFIDSec 2015 and set the world record dfor activating a contactless bankcard at a distance, at around 50 cm.
Stefan Peherstorfer, Georg Chalupar and Joeri de Ruiter built a Lego robot to find flaws in protocol implementations in internet banking devices, described in our WOOT'14 paper.