Sceau

Sceau reads the chip of ICAO 9303 identity documents over NFC and checks that they are genuine. It works entirely offline: no network permission, nothing is kept, nothing is sent. Supported documents

• Biometric passports from any country, using the document number, date of birth and expiry date
• French national identity card (credit card format, since 2021), using the 6-digit CAN printed on the card
• European identity cards, using the CAN or the MRZ

• The photo stored in the chip
• Identity: surname, given names, sex, date of birth, nationality, document number, issuing state, expiry date
• The holder's handwritten signature, if the issuing state stored it in the chip
• Additional data when the chip holds it (place of birth, address, issuing authority and date of issue…)

• The issuing state's signature over the data, up to a known root certificate, and the integrity of each data group (Passive Authentication)
• That the chip is not a clone, when the document supports it (Chip Authentication, Active Authentication)

• German identity cards issued before 2 August 2021: the chip is reserved for authorities; Sceau cannot read it and says so. On newer cards, the address and place of birth cannot be read.
• German eID card for EU citizens: the chip holds no identity data; only its authenticity is verified.
• Italian CIE 3.0 identity cards from late 2017 to early 2018: Italy published an anomaly in their additional data; Sceau discards that data and verifies the rest of the document.

• Only permission: NFC
• No data read from the chip is saved; memory is wiped when leaving the result or when the app goes to the background
• Screenshots are blocked throughout the app
• No ads, no trackers, no Google services

• Four-page introduction on first launch, and a "What the chip contains" screen
• Interface in 45 languages

First public release.
• NFC reading of biometric passports, the French ID card and European ID cards (PACE or BAC)
• Photo, identity, signature and additional data
• Passive, Chip and Active Authentication, verdict and checklist
• CSCAs from ANTS and 3 states, BSI Master List, Master List and certificate import
• Offline, no data kept, 45 languages