applet 1.7 eID cards with ECC certificates

[Frederik Vernelen]

Dear developers,

Please find attached the official communication regarding the change in specifications of the Belgian Electronic Identity Card files and objects for applet 1.7 eID cards that will have undergone a rekeying to benefit from the newer, more secure, ECC certificates. 

Applet 1.7 cards that will be re-keyed will now get certificates (authentication and non-repudiation) signed by citizen and foreigner CA’s that have an EC key, and which in turn will be signed by an EC Belgian Root CA. 

The RRN certificate is now an EC RRN certificate that falls under an EC Belgian rootCA. The signature files (EF SGN#ID and EF SGN#Address), that will be re-created during the re-keying on the eID card, will now be in the EC format like on the applet 1.8 eID cards.

Wkr,

 The eID Middleware Team