I want to use e-ID number for performing Encryption/Decryption and Digital Signing - and in order to do so, I've opted a PGP-oriented approach which goes a bit like this.
- Generating PGP key-pair using e-ID Number (pass-phrase protected)
- Digital Signing using e-ID Number (private-key) - and verifying the signature legitimacy by matching the sender's e-ID public-key fingerprint/key-id which has been pre-shared (via telephone/meeting) with the recipient.
- Encrypting using e-ID Number (pre-shared) public-key of the recipient - and will then be Decrypted by using his/her private-key.
There will be a use of 'Random Session Key' for each session - as per the PGP concept and the implementation of classical (RSA, Elgamal) for Encryption/Decryption and (RSA or DSA) for Digital Signatures will be realized.
This is still a quite rogue approach - and therefore I would like you to share your view-point concerning the feasibility and the possible weaknesses of such a mechanism.
I will also appreciate other possible (effective) ways to use the e-ID card features for performing the Encryption/Decryption and Digital Signing - excluding the fact that card's electronic chip itself is equipped with a key-pair (by the reason of not being supported/compatible/encouraged for encryption and just for digital signing).