webshield-dev / eudvcdecoder

Decodes EU Digital COVID-19 Certificates (sometimes referred to as Digital Green Certificates).
MIT License
19 stars 4 forks source link

This is not an issue #11

Closed jojo2234 closed 2 years ago

jojo2234 commented 3 years ago

Hello, on my account I've setted up a repository with the public keys and now I'm trying to implement the verification step, if you are interested here is the link:

https://github.com/jojo2234/GreenPassHack/

I've read about your legal doubts, I think it is legal get the public keys, you can have trouble if you get the private key of a person without his/her consensus. Public Keys are downloaded in personal phones of many people and are secure, I means you are not able to identify the person from his/her public key.

maslick commented 2 years ago

In addition, the public keys belong to Health institutions that sign COVID certificates (using their private keys), and NOT to people. Public keys are meant to verify the signature, so they are public and can (and should) be shared with the public.

jojo2234 commented 2 years ago

I'm sorry I was thinking this issue was closed the link I've posted is a bit old.