Keys Not Included: Researchers Recover Signing Keys for US Driver's License Barcodes
Ryan5453 · hn · 2026-09-17
In the blog post Keys Not Included, Ryan demonstrates that the digital signature scheme used in US driver's license PDF417 barcodes can be reversed: the signing keys used to issue the barcodes can be recovered from publicly available hardware and software materials, theoretically enabling forged barcodes with 'valid' signatures.
The write-up walks through the technical path to key recovery, the tools and verification process, and common weaknesses in how states manage key material for ID issuance. The findings directly challenge the security of barcode-based ID verification systems used at bars, banks, and age checks.
More from Safety
- Full thread compiles agent messages and reasoning traces from the Hugging Face x OpenAI incident — RileyRalmuto · 2026-09-17
- Joe Lonsdale: skip AI regulators, hold companies heavily liable for damages instead — DavidSacks · 2026-09-17
- 42 Royal Society Fellows Sign Letter Urging AI Risks Be Treated as Emergency — Miles_Brundage · 2026-09-17
- Flock privacy debate: 'no local facial recognition' is a meaningless defense — GlenBradley · 2026-09-17
- Ilya warns neoclouds' weak cybersecurity invites rogue AI agents to hijack compute — Miles_Brundage · 2026-09-17
- AI safety researcher warns against regulation that looks like regulatory capture — DavidSKrueger · 2026-09-17