vPassport

Privacy-preserving ePassport · Android Keystore · PACE/BAC · Saarland University thesis

Context

Bachelor thesis project at Saarland University. A virtual ICAO ePassport prototype enabling privacy-preserving mobile authentication without revealing unnecessary personal data.

Attribute-level cryptography

Selective disclosure: prove you are over 18 without revealing your exact date of birth. Cryptographic signatures operate at the attribute level, not the document level. The verifier receives a zero-knowledge proof of attribute validity without seeing the underlying data.

Android Keystore integration

Device-bound private keys stored in hardware-backed Android Keystore. Prevents key extraction even with root access. PACE (Password Authenticated Connection Establishment) and BAC (Basic Access Control) protocols for secure NFC communication with physical ePassport chips.

Note

Source code is not publicly available. This project was completed as academic work under university supervision.