pushing csca_signature_algorithms.json

This commit is contained in:
0xturboblitz
2024-06-14 15:54:58 -07:00
parent 40d2084114
commit 4f74ebbcc5
4 changed files with 392 additions and 3 deletions

View File

@@ -32,7 +32,7 @@ Build the merkle tree used in the app, serialize it and place it in `common/pubk
ts-node src/dsc/build_merkle_tree.ts
```
Visualize the signature algorithms of each countries, run:
Visualize the signature algorithms of each country:
```
ts-node src/dsc/extract_sig_algs.ts
```
@@ -49,4 +49,9 @@ Visualize the content of a PEM file:
openssl x509 -text -in outputs/unique_cscas/unique_cert_0.pem
```
Visualize the signature algorithms of each country:
```
ts-node src/csca/extract_sig_algs.ts
```
More info: [ICAO website](https://www.icao.int/Security/FAL/PKD/Pages/icao-master-list.aspx)

View File

@@ -0,0 +1,343 @@
{
"ecdsa-with-SHA384": {
"CN=ePassCSCA, O=SUPERINTENDENCIA NACIONAL DE MIGRACIONES, OU=GERENCIA DE REGISTRO MIGRATORIO, C=PE": 1,
"C=LV, O=National Security Authority, CN=CSCA Latvia, serialNumber=006": 3,
"C=GB, O=UKKPA, CN=Country Signing Authority": 2,
"C=LB, O=GOV, OU=GDGS, CN=LEBANON CSCA": 3,
"C=DE, O=bund, OU=bsi, serialNumber=103, CN=csca-germany": 2,
"C=DE, O=bund, OU=bsi, serialNumber=101, CN=csca-germany": 3,
"C=AT, O=GV, OU=BMI, CN=CSCA-AUSTRIA": 3,
"C=CH, O=Admin, OU=Services, OU=Certification Authorities, CN=csca-switzerland-2": 10,
"C=DE, O=bund, OU=bsi, serialNumber=100, CN=csca-germany": 2,
"C=TH, O=Ministry Of Foreign Affairs, OU=Department of Consular Affairs, CN=Thailand CSCA": 1,
"C=CY, O=Republic of Cyprus, OU=Civil Registry and Migration Department, CN=CSCA-CYPRUS": 1,
"C=LV, O=National Security Authority, CN=CSCA Latvia, serialNumber=008": 2,
"C=JP, O=Japanese Government, OU=The Ministry of Foreign Affairs, CN=e-passportCSCA": 2,
"C=LV, O=National Security Authority, CN=CSCA Latvia, serialNumber=007": 1,
"C=CN, O=Hong Kong China, OU=Immigration Department, CN=Hong Kong China Country Signing Certificate Authority": 3,
"C=DE, O=bund, OU=bsi, serialNumber=102, CN=csca-germany": 1,
"C=UZ, O=GOV, OU=GCP, CN=CSCA-UZBEKISTAN": 5,
"C=LV, O=OCMA, CN=CSCA Latvia, serialNumber=009": 1,
"CN=EPPCSCA, OU=PIBA, O=State of Israel, C=IL": 1,
"C=CR, O=Junta Adm. de la Dirección General de Migración y Extranjería, OU=DGTI, CN=Costa Rica CSCA": 1,
"C=BY, O=Republic of Belarus, OU=NCES, CN=CSCA Belarus": 1
},
"sha256WithRSAEncryption": {
"serialNumber=4, CN=CSCA NL, OU=Ministry of Security and Justice, O=Kingdom of the Netherlands, C=NL": 1,
"C=HU, O=GOV, OU=KEKKH, CN=ID-CSCA-HUNGARY 01": 2,
"C=AT, O=GV, OU=BMI, CN=CSCA-AUSTRIA": 4,
"CN=CSCA-UZBEKISTAN, OU=GCP, O=GOV, C=UZ": 3,
"C=KS, O=GV, OU=MIA, CN=CSCA-KOSOVO": 2,
"OU=SMST, O=GOV, C=TM, CN=CSCA-Turkmenistan": 1,
"CN=CSCA-KOSOVO, OU=MIA, O=GV, C=KS": 3,
"C=ES, O=DIRECCION GENERAL DE LA POLICIA, serialNumber=3, CN=CSCA SPAIN": 3,
"C=HU, O=GOV, OU=CRO, CN=CSCA-HUNGARY 4": 1,
"C=HU, O=GOV, OU=CRO, CN=CSCA-HUNGARY 2017": 2,
"C=GR, O=Hellenic Republic, serialNumber=001, CN=CSCAeRP-HELLAS": 3,
"C=ro, O=DGP, CN=CSCA Romania": 2,
"C=SG, O=Ministry of Home Affairs, OU=Singapore Passport CA2": 2,
"serialNumber=4, CN=CSCA NL, OU=Ministry of the Interior and Kingdom Relations, O=State of the Netherlands, C=NL": 2,
"serialNumber=5, CN=CSCA NL, OU=Ministry of the Interior and Kingdom Relations, O=State of the Netherlands, C=NL": 2,
"C=EE, O=Estonia, OU=Police and Border Guard Board, serialNumber=01-2016, CN=CSCA Estonia": 2,
"C=EE, O=Estonia, OU=Police and Border Guard Board, serialNumber=01-2015, CN=CSCA Estonia": 2,
"C=MV, O=Department of Immigration and Emigration, OU=Travel Document Section, CN=CSCA-Maldives": 1,
"C=BE, O=FEDERAL, CN=Belgium Country Signing CA 02": 2,
"C=AR, O=gob, OU=mininterior, OU=renaper, CN=capasaporte": 1,
"C=GB, O=UKKPA, CN=Country Signing Authority": 3,
"CN=CSCA Turkey, O=Turkey Gov, C=TR": 7,
"C=MC, O=Principality of Monaco, OU=Foreign Office of Monaco, CN=CSCAPKI_MC": 4,
"C=IE, O=Department of Foreign Affairs, OU=Passport Office, CN=CSCA Ireland": 6,
"C=DK, O=Kingdom of Denmark, CN=Country Signing CA": 5,
"CN=GEO Country Signing CA, OU=Civil Registry Agency, O=Ministry of Justice of Georgia, C=GE": 1,
"CN=CSCA ALB, OU=Ministry of Interior, O=gov, C=al": 1,
"C=FI, O=Finland, OU=VRK, CN=CSCA Finland": 4,
"C=FR, O=Gouv, CN=CSCA-FRANCE": 5,
"C=CN, O=Chinese Government, OU=Ministry of Foreign Affairs, OU=China Passport CA, CN=China Passport Country Signing Certificate": 10,
"C=UA, serialNumber=UA-16286441-0001, O=Polygraph combine UKRAINA for securities production, OU=SCPD PCU, CN=CSCA-UKRAINE": 3,
"C=TH, O=Ministry Of Foreign Affairs, OU=Department of Consular Affairs, CN=Thailand CSCA": 3,
"C=UG, O=GO, OU=MIA, CN=CSCA-UGA": 3,
"C=BW, O=GOV, OU=MNIGA-DIC, CN=CSCA-BWA": 3,
"OU=MLHA-DIC, O=GOV, C=BW, CN=CSCA-BWA": 1,
"serialNumber=2, CN=Norwegian Passport Certificate Authority, OU=National Police Computing and Material Service, O=The Norwegian Police, C=NO": 1,
"CN=AZ-CSCA, OU=e-passport, O=MIA, C=AZ": 3,
"CN=Norwegian Passport Certificate Authority, OU=National Police Computing and Material Service, O=The Norwegian Police, C=NO": 1,
"C=PT, O=Republica Portuguesa - Portuguese Republic, OU=ICAO MRTD PKI - CSCA, CN=ECN Documentos de Viagem 005": 2,
"C=US, O=U.S. Government, OU=Department of State, OU=MRTD, OU=Certification Authorities, OU=U.S. Department of State MRTD CA": 9,
"C=gb, O=UKKPA, CN=Country Signing Authority": 3,
"C=TW, O=Taiwan Government, OU=Ministry of Foreign Affairs, OU=Bureau of Consular Affairs, CN=CSCA": 6,
"C=SK, L=Bratislava, O=NSA of the Slovak Republic, OU=Department of CAs Operation, CN=The Slovak CSCA": 1,
"C=NZ, O=Government of New Zealand, OU=Passports, OU=Identity Services Passport CA": 6,
"C=NO, O=The Ministry of Justice and the Police, OU=PDMT, CN=CSCA_NO": 1,
"C=EE, O=Estonia, OU=Citizenship and Migration Board, serialNumber=01-2007, CN=CSCA Estonia": 1,
"C=si, O=state-institutions, OU=e-passport, CN=CSCA-Slovenia": 6,
"C=NO, O=The Ministry of Justice, OU=PDMT, CN=CSCA_NO": 2,
"CN=CSCA, OU=Electronic Passports, O=Ministry of Interior, C=BG": 5,
"C=FI, O=Suomi Finland, OU=VRK, CN=Finland Country CA": 1,
"CN=CSCA NL, OU=Ministry of the Interior and Kingdom Relations, O=State of the Netherlands, C=NL": 2,
"serialNumber=1, CN=CSCA, OU=Servicio de Registro Civil e Identificación, O=Ministerio de Justicia, C=CL": 2,
"C=PL, O=ICAO CSCA, OU=MSWiA, CN=System Wydawania Paszportów z Danymi Biometrycznymi": 8,
"C=IS, L=REYKJAVIK, O=Thjodskra Islands, OU=Kt. 6503760649, OU=Country Signing CA, OU=Vottunarstefna http://www.vegabref.is/skilriki, CN=Ferdaskilriki - Island - G2": 1,
"C=UZ, O=GOV, OU=GCP, CN=CSCA-UZBEKISTAN": 1,
"serialNumber=1, CN=Panama ID CSCA, OU=Autoridad de Pasaportes de Panamá, O=República de Panamá, C=PA": 1,
"C=SK, O=NSA of the Slovak Republic, OU=Department of CAs Operation, CN=CSCA Slovakia, serialNumber=3": 1,
"CN=GEO Country Signing CA, OU=Public Service Development Agency, O=Ministry of Justice of Georgia, C=GE": 3,
"C=MD, O=State Enterprise REGISTRU, OU=MRTD Department, CN=ePassport CSCA": 3,
"C=KW, O=Ministry of Interior, OU=General Department of Nationality and Travel Documents, serialNumber=2016040101, CN=CSCA Kuwait": 1,
"serialNumber=1, O=Hellenic Republic, CN=CSCAeRP-HELLAS, C=GR, emailAddress=csca-erp@passport.gov.gr": 2,
"C=AU, O=GOV, OU=DFAT, OU=PTB, CN=Passport Country Signing Authority": 6,
"C=AU, O=GOV, OU=DFAT, OU=APO, CN=Passport Country Signing Authority": 3,
"serialNumber=5, O=Hellenic Republic, CN=CSCA-HELLAS, C=GR, emailAddress=csca@passport.gov.gr": 3,
"serialNumber=3, O=Hellenic Republic, CN=CSCA-HELLAS, C=GR, emailAddress=csca@passport.gov.gr": 3,
"C=SG, O=Ministry of Home Affairs, OU=ICA, CN=Singapore Passport CA": 1,
"serialNumber=4, CN=Panama ID CSCA, OU=Autoridad de Pasaportes de Panamá, O=República de Panamá, C=PA": 1,
"serialNumber=2, CN=Panama ID CSCA, OU=Autoridad de Pasaportes de Panamá, O=República de Panamá, C=PA": 1,
"C=GR, O=Hellenic Republic, serialNumber=002, CN=CSCAeRP-HELLAS": 1,
"C=TM, OU=SMST, O=GOV, CN=CSCA-Turkmenistan": 3,
"C=ES, O=DIRECCION GENERAL DE LA POLICIA, serialNumber=2, CN=CSCA SPAIN": 2,
"C=CI, O=COTE D'IVOIRE - MINISTERE DE L'INTERIEUR, CN=CSCA COTE D'IVOIRE - IVORY COAST": 1,
"C=CI, O=COTE D'IVOIRE - MINISTERE DE L'INTERIEUR, CN=CSCA 2015001 COTE D'IVOIRE - IVORY COAST, serialNumber=2015001": 3,
"C=CI, O=COTE D'IVOIRE - MINISTERE DE L'INTERIEUR, CN=CSCA 2011001 COTE D'IVOIRE - IVORY COAST, serialNumber=2011001": 1,
"CN=CSCA NL, OU=Kingdom of the Netherlands, O=Kingdom of the Netherlands, C=NL": 2,
"serialNumber=6, CN=CSCA NL, OU=Kingdom of the Netherlands, O=Kingdom of the Netherlands, C=NL": 1,
"C=MT, O=Government of Malta, CN=Malta Country Signing CA": 5,
"C=HU, O=GOV, OU=KEKKH, CN=ID-CSCA-HUNGARY 02": 2,
"C=HU, O=GOV, OU=OIF, CN=OIFCA-HUNGARY 2": 2,
"C=HU, O=GOV, OU=CRO, CN=CSCA-HUNGARY 2020": 2,
"C=BE, O=FEDERAL, CN=Belgium Country Signing CA 05": 1,
"C=BB, O=Government of Barbados, OU=Immigration Department, CN=Barbados Passport CSCA": 3,
"C=EE, O=Estonia, OU=Police and Border Guard Board, serialNumber=01-2019, CN=CSCA Estonia": 1,
"C=RO, O=DGP, CN=CSCA Romania": 3,
"C=BE, O=FEDERAL, CN=Belgium Country Signing CA 03": 2,
"C=BE, O=FEDERAL, CN=Belgium Country Signing CA 04": 2,
"CN=ECN Documentos de Viagem 006, OU=ICAO MRTD PKI - CSCA, O=Republica Portuguesa - Portuguese Republic, C=PT": 2,
"C=ME, O=Montenegro, OU=Ministry of Interior, CN=csca-montenegro-2": 3,
"C=ME, O=Montenegro, OU=Ministry of Interior and Public Administration, CN=csca-montenegro-1": 1,
"C=PL, O=Minister ds informatyzacji, OU=Centrum Certyfikacji, CN=CSCA Poland": 3,
"C=QA, O=Gov, CN=CSCA-QATAR": 5,
"C=TL, O=REPÚBLICA DEMOCRÁTICA DE TIMOR-LESTE, serialNumber=001, CN=CSCAePassportTimorLeste": 1,
"O=State of Israel, OU=PIBA, C=IL, CN=EPPCSCA, emailAddress=crypto@piba.gov.il, serialNumber=51": 1,
"C=UN, O=United Nations, OU=Certification Authorities, CN=United Nations CSCA": 4,
"C=MA, O=Gov, CN=CSCA-MAROC": 4,
"C=MA, O=Gov, CN=CSCA-MAROC, serialNumber=2": 1,
"C=MD, O=Public Service Agency, OU=MRTD Department, CN=ePassport CSCA": 1,
"serialNumber=7, O=Hellenic Republic, CN=CSCA-HELLAS, C=GR, emailAddress=csca@passport.gov.gr": 3,
"C=MD, O=Public Service Agency, OU=MRTD Department, CN=ePassport CSCA 07": 1,
"serialNumber=2, CN=CSCA NL, OU=Ministry of the Interior and Kingdom Relations, O=State of the Netherlands, C=NL": 2,
"C=ZZ, O=United Nations, OU=Certification Authorities, CN=United Nations CSCA": 1,
"serialNumber=2, CN=CSCA, OU=Servicio de Registro Civil e Identificacion, O=Ministerio de Justicia y Derechos Humanos, C=CL": 2,
"serialNumber=3, CN=CSCA NL, OU=Ministry of the Interior and Kingdom Relations, O=State of the Netherlands, C=NL": 2,
"serialNumber=3, CN=CSCA NL, OU=Ministry of Security and Justice, O=Kingdom of the Netherlands, C=NL": 1,
"C=IS, L=Reykjavik, O=Fjarmalaraduneyti, OU=Kt. 5501692829, OU=Country Signing CA, OU=Vottunarstefna https://www.thjodskra.is/repository/cps, CN=Ferdaskilriki - Island": 1,
"C=FI, O=Suomi Finland, OU=VRK, CN=Finland Country CA 2": 2,
"C=UA, L=Kyiv, street=38-44, Dehtiarivska str., postalCode=04119, O=SE \"Polygraph combine \"UKRAINA\" for securities` production\", CN=Polygraph combine \"UKRAINA\", serialNumber=UA-16286441-0001": 2,
"C=EE, O=Estonia, OU=Police and Border Guard Board, serialNumber=01-2012, CN=CSCA Estonia": 2,
"C=EE, O=Estonia, OU=Police and Border Guard Board, serialNumber=01-2009, CN=CSCA Estonia": 2,
"C=SG, O=Ministry of Home Affairs, OU=Singapore Passport CA": 2,
"C=HU, O=GOV, OU=CRO, CN=CSCA-HUNGARY 2": 1,
"C=ES, O=DIRECCION GENERAL DE LA POLICIA, OU=PASAPORTE, CN=AC RAIZ PASAPORTE": 1,
"C=LI, O=LIECHTENSTEIN, OU=Auslaender- und Passamt, CN=CSCA-LIECHTENSTEIN": 1,
"C=gb, O=UKKPA, CN=Domestic Use Only Country Signing Authority": 2,
"C=DK, O=Danish National Police, OU=Danish National Police, CN=Passport CSCA-Denmark, serialNumber=2": 1,
"C=SK, O=NSA of the Slovak Republic, OU=Department of CAs Operation, CN=CSCA Slovakia, serialNumber=2": 1,
"C=AD, O=GOV, OU=MJI, CN=CSCA-AND": 3,
"C=SK, O=Ministry of Interior of the Slovak Republic, OU=SITB, CN=CSCA Slovakia, serialNumber=4": 1,
"C=NP, O=Ministry of Foreign Affairs, OU=Department of Passports, CN=Nepal CSCA": 1,
"C=ES, O=DIRECCION GENERAL DE LA POLICIA, serialNumber=4, CN=CSCA SPAIN": 1,
"CN=CSCA Macedonia, OU=MOI, O=GOV, C=MK": 3,
"serialNumber=5, CN=Panama ID CSCA, OU=Autoridad de Pasaportes de Panamá, O=República de Panamá, C=PA": 1,
"serialNumber=3, CN=CSCA, OU=Servicio de Registro Civil e Identificacion, O=Ministerio de Justicia y Derechos Humanos, C=CL": 1,
"serialNumber=1, O=Hellenic Republic, CN=CSCA-HELLAS, OU=Hellenic Police, C=GR, emailAddress=csca@passport.gov.gr": 1,
"serialNumber=6, O=Hellenic Republic, CN=CSCA-HELLAS, C=GR, emailAddress=csca@passport.gov.gr": 1,
"serialNumber=4, O=Hellenic Republic, CN=CSCA-HELLAS, C=GR, emailAddress=csca@passport.gov.gr": 1,
"serialNumber=9, O=Hellenic Republic, CN=CSCA-HELLAS, C=GR, emailAddress=csca@passport.gov.gr": 1,
"CN=AC Pasaporte, C=VE, L=Caracas, ST=Distrito Capital, O=Sistema Nacional de Certificacion Electronica, OU=SUSCERTE, emailAddress=acpass@suscerte.gob.ve": 1,
"C=GA, O=GOUV, CN=CSCA-GABON": 1,
"C=LT, O=Consular department of Ministry of Foreign Affairs, OU=Certification Center of MFA CD, CN=CSCA LTU": 1,
"C=CN, O=Chinese Government, OU=Ministry of Public Security, OU=Passport, CN=Passport CSCA": 1,
"C=SN, ST=Dakar, L=Dakar, O=Ministry of Interior, OU=Passport Office, CN=Country Signer": 2,
"C=ar, O=gob, OU=mininterior, OU=renaper, CN=capasaporte": 1,
"C=ID, O=Direktorat Jenderal Imigrasi, OU=Direktorat Sistem dan Teknologi Informasi Keimigrasian, CN=CSCAProd": 3,
"CN=CSCA-Islamic Republic of IRAN, OU=Police CA Center, O=Ministry of Interior, C=IR": 1,
"C=IN, O=National Informatics Centre, OU=Sub-CA, CN=NIC sub-CA for ePassport-India 2011": 1,
"C=CI, O=COTE D'IVOIRE - MINISTERE DE L'INTERIEUR, CN=CSCA 2008001 COTE D'IVOIRE - IVORY COAST, serialNumber=2008001": 1,
"C=CO, O=Colombia, OU=Certification Authorities, CN=Government of Colombia CSCA": 1,
"C=SG, O=Ministry of Home Affairs, OU=Singapore Trial Passport CA": 1,
"C=NG, ST=FCT, L=Abuja, O=MSC Trustgate.com, OU=Federal Government of Nigeria, CN=Nigeria Country Signer 0705, emailAddress=ffatusin@imagetech.com.ng": 1,
"C=IR, O=Ministry of Interior, OU=Police CA Center, serialNumber=02, CN=CSCA-Islamic Republic of IRAN": 1,
"C=NG, ST=Abuja, L=Abuja, O=Nigeria Immigration Service, OU=Ministry of Interior, CN=Country Signer": 1,
"C=SK, L=Bratislava, O=NSA of the Slovak Republic, OU=Department of CAs Operation, CN=The Slovak eTP eID CSCA, serialNumber=3": 1,
"serialNumber=8, O=Hellenic Republic, CN=CSCA-HELLAS, C=GR, emailAddress=csca@passport.gov.gr": 1,
"C=KW, O=Ministry of Interior, OU=General Department of Nationality and Travel Documents, CN=CSCA Kuwait, serialNumber=2021050101": 1,
"C=DK, O=Danish National Police, OU=Danish National Police, CN=Passport CSCA-Denmark, serialNumber=1": 1
},
"ecdsa-with-SHA256": {
"CN=CSCA_FA_BE, OU=FEDERAL PUBLIC SERVICE FOREIGN AFFAIRS BELGIUM, O=KINGDOM OF BELGIUM, C=BE": 2,
"CN=CSCAEC_BE_3, OU=FEDERAL PUBLIC SERVICE FOREIGN AFFAIRS BELGIUM, O=KINGDOM OF BELGIUM, C=BE": 2,
"C=AE, O=MOI, OU=EPASS, CN=UAE CSCA 01": 7,
"CN=CSCA-UY, O=MI, OU=DNIC, C=UY": 1,
"C=CY, O=Republic of Cyprus, OU=Civil Registry and Migration Department, CN=CSCA-CYPRUS": 14,
"C=DE, O=bund, OU=bsi, serialNumber=013, CN=csca-germany": 2,
"CN=CSCAEC_BE_2, OU=FEDERAL PUBLIC SERVICE FOREIGN AFFAIRS BELGIUM, O=KINGDOM OF BELGIUM, C=BE": 1,
"C=NZ, O=Government of New Zealand, OU=Identity and Passport Services, CN=Passport CSCA": 5,
"C=RW, O=Republic of Rwanda, OU=ePassport, OU=Certification Authorities, CN=Republic of Rwanda CSCA": 1,
"CN=CSCA HUNGARY, OU=Ministry of Interior, O=GOV, C=HU": 3,
"C=OM, O=GOV, OU=Royal Oman Police, CN=OMAN CSCA": 3,
"C=GB, O=UKKPA, CN=Country Signing Authority": 1,
"CN=CSCAEC_BE, OU=FEDERAL PUBLIC SERVICE FOREIGN AFFAIRS BELGIUM, O=KINGDOM OF BELGIUM, C=BE": 1,
"C=AE, O=MOI, OU=EPASS, CN=UAE CSCA 02": 1,
"C=BJ, O=GOUV, OU=ANIP, OU=Certification Authorities, CN=CSCA-Benin": 1,
"C=BE, O=KINGDOM OF BELGIUM, OU=FEDERAL PUBLIC SERVICE FOREIGN AFFAIRS BELGIUM, CN=CSCA_FA_BE": 1,
"C=SC, O=Department of Information Communication and Technology (DICT), CN=CSCA": 1,
"C=AE, O=MOI OU=EPASS, CN=UAE CSCA 01": 1
},
"ecdsa-with-SHA512": {
"C=DZ, O=Gov, OU=MICL, CN=CSCA-ALGERIA": 4,
"CN=Autoridade Certificadora Ministerio das Relacoes Exteriores, OU=Autoridade Certificadora Raiz Brasileira v4, O=ICP-Brasil, C=BR": 1,
"C=TR, O=Republic of Turkey Ministry of Interior, OU=General Directorate of Civil Registration and Nationality, CN=Passport CSCA Turkey": 5,
"C=DE, O=bund, OU=bsi, CN=csca-germany": 3,
"C=BA, O=mcp, OU=iddeea, serialNumber=2, CN=csca-iddeea-ba": 1,
"CN=CSCA, serialNumber=001, O=Department of the Registrar General, C=ZW": 1,
"C=FI, O=Finland, OU=VRK, CN=CSCA Finland": 1,
"C=CH, O=FDJP, OU=fedpol, OU=eDoc-PKI, CN=CSCA-CHE": 1,
"C=VN, O=Vietnam Government Information Security Commission, CN=CSCA ePassport Vietnam": 1,
"C=IQ, CN=Iraqi Ministry of Interior CSCA, OU=General Directorate of Civil Status, Passports, and Residency, O=Iraqi Ministry of Interior": 1
},
"rsassaPss ": {
"C=CZ, O=Czech Republic, OU=Ministry of Interior, CN=CSCA_CZ": 9,
"CN=CSCA Serbia, OU=Ministry of Interior, O=Republic of Serbia, C=RS": 4,
"C=CN, O=Hong Kong China, OU=Immigration Department, CN=Hong Kong China Country Signing Certificate Authority": 3,
"C=KN, O=Government of St. Christopher (St. Kitts) and Nevis, OU=Passport Office, CN=CSCA1": 1,
"CN=China Passport Country Signing Certificate (Macao), O=Macao SAR, OU=Identification Services Bureau, C=CN": 2,
"C=JP, O=Japanese Government, OU=The Ministry of Foreign Affairs, CN=e-passportCSCA": 11,
"CN=Swedish Country Signing CA, O=Rikspolisstyrelsen, C=SE": 6,
"C=ca, O=gc, OU=pptc, CN=csca-canada": 1,
"C=HR, O=MUP RH, CN=CSCA-Croatia": 7,
"C=KR, O=Government, OU=MOFAT, CN=CSCA": 1,
"C=CA, O=gc, OU=pptc, CN=csca-canada": 5,
"CN=CSCA01004, O=DFA, C=PH": 1,
"C=NO, O=Ministry of Justice and Public Security, OU=National Police Directorate, CN=CSCA_NO": 3,
"CN=EU Laissez Passer CSCA, O=European Union, OU=European Commission, C=EU": 3,
"C=LU, O=Grand-Duchy of Luxembourg Ministry Foreign Affairs, CN=Grand-Duchy of Luxembourg Country Signing CA": 2,
"CN=Grand-Duchy of Luxembourg Country Signing CA eIdentity card, O=Grand-Duchy of Luxembourg Ministry of the Interior, C=LU": 3,
"C=LU, O=Grand-Duchy of Luxembourg Ministry Foreign Affairs, CN=Grand-Duchy of Luxembourg CSCA ePassport": 3,
"C=MN, O=General Authority for State Registration, CN=Mongolia CSCA": 1,
"C=KR, O=Government, OU=MOFA, CN=CSCA003": 2,
"C=KR, O=Government, OU=MOFA, CN=CSCA-KOREA": 1,
"C=MY, O=Jabatan Imigresen Malaysia, ST=WP, L=Putrajaya, OU=Bahagian Keselamatan dan Pasport, CN=Malaysia Country Signer": 4,
"O=State of Israel, OU=PIBA, C=IL, CN=EPPCSCA, emailAddress=crypto@piba.gov.il, serialNumber=53": 2,
"C=BS, O=gov, OU=mofa, CN=csca-bahamas": 1,
"CN=CSCA, OU=Passport and Consular Services, O=Ministry of Foreign Affairs, C=PY": 1,
"C=SG, O=Ministry of Home Affairs, OU=ICA, CN=Singapore Passport CA 4": 2,
"CN=Italian Country Signer CA, OU=National Electronic Center of State Police, O=Ministry of Interior, C=IT": 1,
"CN=Italian Country Signer CA, OU=National Electronic Center of Italian National Police, O=Ministry of Interior, C=IT": 1,
"C=PH, O=DFA, CN=CSCA01006": 2,
"C=SI, O=state-institutions, OU=e-passport, CN=CSCA-Slovenia": 1,
"C=LU, O=INCERT public agency, CN=Grand Duchy of Luxembourg CSCA": 2,
"CN=Grand-Duchy of Luxembourg CSCA eTravel Documents, O=Grand-Duchy of Luxembourg Ministry of Foreign Affairs, C=LU": 2,
"CN=CSCA01005, O=DFA, C=PH": 2,
"C=CN, O=Macao SAR, OU=Identification Services Bureau, CN=China Passport Country Signing Certificate (Macao)": 8,
"CN=Swedish Country Signing CA v2, O=Polismyndigheten, C=SE": 3,
"CN=CSCA01001, O=Immigration, C=TZ": 2,
"C=TZ, O=Immigration, CN=csca-tanzania": 3,
"C=EC, O=DIRECCION GENERAL DE REGISTRO CIVIL IDENTIFICACION Y CEDULACION, OU=DIGERCIC CSCA, serialNumber=1, CN=CSCA": 1,
"C=EE, O=Estonia, OU=Police and Border Guard Board, serialNumber=01-2019, CN=CSCA Estonia": 2,
"C=EE, O=Estonia, OU=Police and Border Guard Board, serialNumber=01-2020, CN=CSCA_Estonia": 1,
"C=SG, O=Ministry of Home Affairs, OU=ICA, CN=Singapore Passport CA 5": 1,
"CN=CSCA Tajikistan, OU=Ministry of Foreign Affairs, O=Republic of Tajikistan, C=TJ": 1,
"O=State of Israel, OU=PIBA, C=IL, CN=EPPCSCA, emailAddress=crypto@piba.gov.il, serialNumber=51": 1,
"C=KR, O=Government, OU=MOFA, CN=CSCA": 1,
"C=MY, ST=WP, L=Putrajaya, O=Jabatan Imigresen Malaysia, OU=Bahagian Keselamatan dan Pasport, CN=Malaysia Country Signer": 3,
"CN=CSCA Macedonia, OU=MOI, O=GOV, C=MK": 1,
"C=VC, O=gov, OU=mns, CN=csca-svg": 4,
"C=PH, O=DFA, CN=CSCA01007": 1,
"C=MT, O=Government of Malta, CN=Malta Country Signing CA": 1,
"CN=CSCA MKD, OU=MOI, O=GOV, C=MK": 1,
"C=AM, O=GovRA, CN=CSCA": 1,
"C=AG, O=gov, OU=pcd, CN=csca-antigua": 2,
"CN=Hong Kong China Country Signing Certificate Authority, O=Hong Kong China, OU=Immigration Department, C=CN": 1,
"CN=Grand-Duchy of Luxembourg Country Signing CA, O=Grand-Duchy of Luxembourg Ministry of Foreign Affairs, C=LU": 1,
"C=GH, O=Ghana Government, OU=NITA, serialNumber=2, CN=CSCA Ghana": 1,
"C=BZ, O=gov, OU=moi, CN=csca-belize": 1,
"C=BH, O=KINGDOM OF BAHRAIN, CN=csca-bahrain": 1,
"C=LU, O=INCERT public agency, serialNumber=2, CN=Grand Duchy of Luxembourg CSCA": 1
},
"sha1WithRSAEncryption": {
"C=MT, O=Government of Malta, CN=Malta Country Signing CA": 11,
"C=ro, O=DGP, CN=CSCA Romania": 6,
"C=BE, O=FEDERAL, CN=Belgium Country Signing CA 01": 2,
"CN=Italian Country Signer CA, OU=National Electronic Center of State Police, O=Ministry of Interior, C=IT": 3,
"C=IT, O=MINISTERO DELL'INTERNO, OU=PE, CN=CERTIFICATION AUTHORITY 01": 2,
"CN=ECN Documentos de Viagem 004, OU=ICAO MRTD PKI - CSCA, O=Republica Portuguesa - Portuguese Republic, C=PT": 2,
"CN=ECN Documentos de Viagem 003, OU=ICAO MRTD PKI - CSCA, O=Republica Portuguesa - Portuguese Republic, C=PT": 2,
"CN=ECN Documentos de Viagem 002, OU=ICAO MRTD PKI - CSCA, O=Republica Portuguesa - Portuguese Republic, C=PT": 1,
"C=HU, O=GOV, OU=CRO, CN=CSCA-HUNGARY 4": 2,
"C=HU, O=GOV, OU=CRO, CN=CSCA-HUNGARY 3": 3,
"C=CN, O=Chinese Government, OU=Ministry of Foreign Affairs, OU=China Passport CA, CN=China Passport Country Signing Certificate": 5,
"C=LU, O=Grand-Duchy of Luxembourg Ministry of Foreign Affairs, CN=Grand-Duchy of Luxembourg Country Signing CA": 2,
"C=FR, O=Gouv, CN=CSCA-FRANCE": 1,
"C=BE, O=Kingdom of Belgium, OU=Federal Public Service Foreign Affairs Belgium, CN=CSCAPKI_BE": 2,
"C=HU, O=GOV, OU=CRO, CN=CSCA-HUNGARY 2": 2,
"C=HU, O=GOV, OU=CRO, CN=CSCA-HUNGARY": 2,
"C=ES, O=DIRECCION GENERAL DE LA POLICIA, OU=PASAPORTE, CN=AC RAIZ PASAPORTE": 1,
"C=IT, O=MINISTERO DELL'INTERNO, OU=PE, CN=CERTIFICATION AUTHORITY": 3,
"C=ES, O=DIRECCION GENERAL DE LA POLICIA, serialNumber=2, CN=CSCA SPAIN": 1,
"C=IS, L=Reykjavik, O=Fjarmalaraduneyti, OU=Kt. 5501692829, OU=Country Signing CA, OU=Vottunarstefna https://www.thjodskra.is/repository/cps, CN=Ferdaskilriki - Island": 1,
"C=AU, O=GOV, OU=DFAT, OU=PTB, CN=Passport Country Signing Authority": 4,
"OU=SEGSTAT, CN=CERTIFICATION AUTHORITY, O=HSVATICAN, C=VA": 2,
"C=HU, O=GOV, OU=BMH, CN=BMHCA-HUNGARY 1": 2,
"C=HU, O=GOV, OU=OIF, CN=OIFCA-HUNGARY 1": 1,
"CN=CERTIFICATION AUTHORITY, OU=SEGSTAT, O=HSVATICAN, C=VA": 2,
"C=SM, O=RSM, OU=COUNTRY SIGNER CA, CN=RSM CSCA": 1,
"CN=CSCAPKI_MC3, OU=Foreign Office of Monaco, O=Principality of Monaco, C=MC": 1,
"CN=RSM-CSCA": 1,
"CN=CSCAPKI_MC4, OU=Foreign Office of Monaco, O=Principality of Monaco, C=MC": 1,
"CN=CSCAPKI_MC2, OU=Foreign Office of Monaco, O=Principality of Monaco, C=MC": 1,
"CN=CSCAPKI_MC1, OU=Foreign Office of Monaco, O=Principality of Monaco, C=MC": 1,
"C=HU, O=GOV, OU=BAH, CN=BAHCA-HUNGARY 2": 1,
"C=HU, O=GOV, OU=BAH, CN=BAHCA-HUNGARY": 1,
"C=MD, ST=Republic of Moldova, L=Kisinau, O=SE Center of spetial telecommunications 1003600096694, OU=Certification Authority, street=166 Stefan cel Mare bd, CN=Moldova ePassport CSCA, telephoneNumber=+373 22 250541, emailAddress=admin1-cert@biopass.gov.md": 1,
"CN=ePassport CSCA, OU=MRTD Department, O=REGISTRU, C=MD": 1,
"C=MD, ST=Moldova Republic of, L=Chisinau, O=IS Centrul de telecomunicatii speciale, OU=Centrul de certificare a cheilor publice, CN=Moldova ePassport CSCA": 1,
"C=TH, OU=Department of Consular Affairs, O=Ministry of Foreign Affairs, CN=Country Signing CA": 2,
"C=TH, OU=Country Signing CA, O=Country Signing CA, CN=Country Signing CA": 1,
"CN=Certificate Authority Offline-1, OU=eDocuments and eID, O=Republic of Kazakhstan, C=KZ": 3,
"C=GE, L=Tbilisi, O=Ministry of Justice of Georgia, OU=Civil Registry Agency, CN=GEO CSCA": 1,
"CN=CSCA-Islamic Republic of IRAN, OU=Police CA Center, O=Ministry of Interior, C=IR": 1,
"C=LU, O=Ministry of Foreign Affairs, CN=Grand-Duchy of Luxembourg CSCA , serialNumber=100": 2,
"CN=CSCA01003, O=DFA, C=PH": 1,
"CN=CSCA01002, O=DFA, C=PH": 1
},
"sha384WithRSAEncryption": {
"C=LI, O=LIECHTENSTEIN, OU=Auslaender- und Passamt, CN=CSCA-LIECHTENSTEIN": 1
},
"ecdsa-with-SHA1": {
"C=LV, O=National Security Authority, CN=CSCA Latvia, serialNumber=004": 2,
"C=LV, O=National Security Authority, CN=CSCA Latvia, serialNumber=005": 1,
"C=LT, O=ADIC under MoI, CN=CSCA, serialNumber=004": 1,
"C=RU, ST=Russia, L=Moscow, O=FSUE STC Atlas, OU=UZIS, CN=CSCA-Russia, emailAddress=camail@stcnet.ru": 3,
"C=BA, O=mcp, OU=iddeea, serialNumber=001, CN=csca-iddeea-ba": 2,
"C=CH, O=Admin, OU=Services, OU=Certification Authorities, CN=csca-switzerland-1": 1,
"C=DE, O=bund, OU=bsi, serialNumber=001, CN=csca-germany": 2,
"C=LT, O=ADIC under MOI, CN=CSCA, serialNumber=001": 2,
"C=LT, O=ADIC under MOI, CN=CSCA, serialNumber=006": 1,
"C=LV, O=National Security Authority, CN=CSCA Latvia, serialNumber=002": 2,
"C=LV, O=National Security Authority, CN=CSCA Latvia, serialNumber=003": 2,
"C=LT, O=ADIC under MoI, CN=CSCA, serialNumber=002": 3,
"C=RU, ST=Russian Federation, L=Moscow, O=STC Atlas, OU=SZD, CN=CSCA-Russia, emailAddress=camail@stcnet.ru": 1,
"C=LT, O=ADIC under MoI, CN=CSCA, serialNumber=005": 1,
"C=RU, L=Moscow, O=STC Atlas, OU=SZD, CN=Ilya Leoshkevich, emailAddress=szd@stcnet.ru": 1,
"CN=Country Signing CA Lithuania, C=LTU, serialNumber=001": 1,
"C=LV, O=National Security Authority, CN=CSCA Latvia, serialNumber=001": 2,
"C=LT, O=ADIC under MoI, CN=CSCA, serialNumber=003": 1
},
"sha512WithRSAEncryption": {
"C=IS, L=REYKJAVIK, O=Thjodskra Islands, OU=Kt. 6503760649, OU=Country Signing CA, OU=Vottunarstefna http://www.vegabref.is/skilriki, CN=Ferdaskilriki - Island - G2": 1,
"O=LIECHTENSTEIN, CN=CSCA-LIECHTENSTEIN, OU=Auslaender- und Passamt, C=LI": 3,
"C=IS, O=Thjodskra Islands, OU=Country Signing CA, SN=6503760649, CN=Ferdaskilriki - Island - G3": 1,
"CN=CSCA, C=KP": 1,
"CN=ECN Documentos de Viagem 007, OU=ICAO MRTD PKI - CSCA, O=Republica Portuguesa - Portuguese Republic, C=PT": 1,
"C=MX, O=SECRETARIA DE RELACIONES EXTERIORES, CN=CSCA MEXICO": 1,
"CN=Cameroon Passport CSCA, serialNumber=001, OU=DGSN, O=Republic of Cameroon, C=CM": 1,
"C=FI, O=Finland, OU=VRK, CN=CSCA Finland": 1
}
}

View File

@@ -1,8 +1,6 @@
import * as fs from 'fs';
import * as path from 'path';
import * as util from 'util';
import { execSync } from 'child_process';
const execAsync = util.promisify(execSync);
// extract masterlists from ICAO ldif file
const fileContent = fs.readFileSync("inputs/icao_download_section/icaopkd-002-complete-000243.ldif", "utf-8");

View File

@@ -0,0 +1,43 @@
import * as fs from 'fs';
import * as util from 'util';
import { exec } from 'child_process';
const execAsync = util.promisify(exec);
const numCertificates = fs.readdirSync('outputs/unique_cscas/').length;
const concurrencyLimit = 200; // Number of tasks to run at once
const obj: {[key: string]: {[key: string]: number}} = {}
async function extractSigAlg(i: number): Promise<void> {
try {
const { stdout } = await execAsync(`openssl x509 -text -in outputs/unique_cscas/unique_cert_${i}.pem`);
const sigAlg = (stdout.match(/Signature Algorithm: (.*)/) as RegExpExecArray)[1];
const issuer = (stdout.match(/Issuer: (.*)/) as RegExpExecArray)[1];
if (obj[sigAlg]) {
if (obj[sigAlg][issuer]) {
obj[sigAlg][issuer] = obj[sigAlg][issuer] + 1
} else {
obj[sigAlg][issuer] = 1
}
} else {
obj[sigAlg] = {}
obj[sigAlg][issuer] = 1
}
} catch (error) {
console.error(`Failed to extract data from certif ${i}: ${error}`);
}
}
async function main() {
for (let i = 0; i < numCertificates; i += concurrencyLimit) {
const tasks: Promise<void>[] = [];
for (let j = 0; j < concurrencyLimit && i + j < numCertificates; j++) {
tasks.push(extractSigAlg(i + j));
}
await Promise.all(tasks);
}
console.log("Finished scanning");
fs.writeFileSync("outputs/csca_signature_algorithms.json", JSON.stringify(obj));
}
main()