Passport Model Support Table

The table below is a list of the intented passport model support for various countries. It includes information on whether the passport supports Basic Access Control (BAC), Password Authenticated Connection Establishment (PACE), and Active Authentication (AA). The "Tested" column indicates whether the passport model has been tested with the DMRtd library.

Country	Passport Model(s) (Introduction Date)	BAC	PACE	AA	Tested	Description / Notes
United States	Electronic Passport (ICAO-compliant e-passport, introduced 2006)	✅	❌	❌	❌	The U.S. ePassport stores a digital photo and biographical data on a 64KB chip (no fingerprints). It uses BAC for access control but does not implement PACE or Active Authentication (no anti-cloning mechanism). The “Next Generation Passport” introduced in 2021 added a polycarbonate data page and new physical security features, but chip security features remain BAC-only (no PACE, no AA).
United Kingdom	Biometric Passport (ePassport) – introduced March 2006; Second generation with polycarbonate data page from 2010; “Series C” (blue-cover post-Brexit model) from March 2020.	✅	✅	✅	❌	The UK’s ePassport includes a facial biometric (no fingerprints). All UK biometric passports use BAC and, since EU SAC mandate in 2014, also support PACE. Active Authentication was introduced for UK passports issued from 2015/2016 onwards to enable clone detection, so newer passports have anti-cloning capability. Older UK ePassports (2006–2015) lacked AA, but those will expire by ~2025.
Canada	ePassport (Biometric passport) – introduced 1 July 2013; new design update in 2023 (with updated artwork).	✅	❌	✅	❌	Canada’s ePassport stores the holder’s photo, name, DOB, etc., and is secured with BAC. It does not implement PACE. Active Authentication is implemented as an anti-cloning measure – each Canadian ePassport chip has a unique public-private key pair, allowing the chip to prove it’s genuine during inspection. (Canada included AA from the start of ePassport issuance in 2013.)
Australia	“M-Series” ePassport (introduced Oct 2005); “N-Series” (from 2009) with added AA; “P-Series” (launched 2014) with enhanced security; “R-Series” (current, introduced 2022).	✅	❌	✅	❌	Australian ePassports have included an embedded chip with photo since 2005. BAC is supported on all series. Active Authentication was introduced in 2009 with the N-series passports, meaning Australian passports issued 2009 onward have anti-cloning capability. Australia has not adopted PACE/SAC (not required outside EU), so chips still rely on BAC for the initial key exchange. The P-series (2014) and newer R-series (2022) feature upgraded physical security (polycarbonate data page, etc.) but continue to use BAC (with AA) instead of PACE.
New Zealand	Biometric Passport – introduced Nov 2005; New model with enhanced security from June 2010 (black cover with silver fern, 5-year validity).	✅	❌	✅	❌	New Zealand issued its first ePassports in 2005 (containing a facial image, no fingerprints). A new version unveiled in 2009 and issued from mid-2010 introduced additional security features including Active Authentication to detect cloned chips. NZ passports use BAC for chip access and have not implemented PACE. (Initially NZ passports had 5-year validity; since 2015 adult passports are 10-year, and those newer passports continue to support AA. No fingerprint biometric is stored in NZ passports, so EAC is not used — clone protection is via AA.)
Austria	ePass (biometric passport) – introduced 2006; second generation with fingerprints (and EAC) from 2009; current model supports SAC.	✅	✅	✅	❌	Austria was among the early adopters of biometric passports in 2006. The second-generation Austrian ePass (from mid-2009) included two fingerprints in the chip (EU mandate) and uses Extended Access Control with Chip Authentication. Austria also implemented Active Authentication in its ePassports, and as an EU member it introduced PACE (SAC) by end of 2014. Thus, modern Austrian passports support BAC and PACE for access, and they include a clone-detection mechanism (AA or Chip Auth).
Belgium	Biometric Passport – first issued 2004 (chip with photo only); updated model from 2006; fingerprints added 2009; current model supports SAC.	✅	✅	✅	❌	Belgium’s passports have used an electronic chip since 2004–2006. Fingerprint biometrics were added in 2009 in compliance with EU specs. Belgium supports BAC and implemented PACE in 2014. Belgium is also known to support Active Authentication (or at least Chip Authentication via EAC) in its ePassports, providing protection against cloned chips.
Bulgaria	Biometric Passport – introduced 2007; fingerprints added c.2009; current model with SAC.	✅	✅	✅	❌	Bulgaria introduced ICAO-compliant ePassports by 2007. The passports use BAC and, following EU requirements, added fingerprint data and EAC security around 2009. PACE was implemented by 2014. Bulgaria’s ePassports have clone-detection security (via Active Auth or Chip Authentication), so AA is effectively supported.
Croatia	Biometric Passport – introduced 2009 (with fingerprints from start); current version supports PACE.	✅	✅	✅	❌	Croatia began issuing ePassports in 2009 with an electronic chip (facial image and fingerprints). BAC and EAC are used. By joining the EU (and even prior to full membership), Croatia’s passports adopted PACE for compliance. Active Authentication is supported in Croatian passports (at least in early generations or via chip auth for fingerprints).
Cyprus	Biometric Passport – introduced c.2008; fingerprints added 2010; current model supports SAC.	✅	✅	✅	❌	Cyprus issues ePassports with BAC and, since the EU mandate, PACE. Fingerprints have been included since around 2010, so Extended Access Control with Chip Authentication is used. Active Authentication is supported (Cyprus’s passport chip OS supports AA, as most EU-issued documents after 2014 do).
Czech Republic	Biometric Passport – introduced 2006; fingerprints added 2009; current model with PACE.	✅	✅	✅	❌	The Czech Republic’s biometric passports have used BAC from the start and added fingerprints in mid-2009 (requiring EAC). Czech ePassports support PACE/SAC (from late 2014). They also implement a clone-detection mechanism – either Active Authentication or Chip Authentication – hence AA is marked as supported.
Denmark	Biometric Passport – introduced 2006; fingerprints added 2009; current model with SAC.	✅	✅	✅	❌	Denmark introduced ePassports in 2006 and added two fingerprint images to the chip by 2009 (despite not being in the Schengen passport regulation originally, Denmark chose to align with EU specs). Danish passports use BAC and PACE (post-2014) for chip access. Active Authentication is supported as a cloning safeguard (either via AA itself or the chip-auth in the fingerprint EAC setup).
Estonia	Biometric Passport – introduced 2007; fingerprints added 2009; current model supports PACE.	✅	✅	✅	❌	Estonia’s ePassports have included a chip since 2007 (with BAC). Fingerprints were added around mid-2009 (with EAC). Estonia implemented Supplemental Access Control (PACE) by 2014. Estonian passports are known for advanced security and support clone-detection (Active Auth or Chip Auth), so AA is marked as supported.
Finland	Biometric Passport – introduced 2006; fingerprints added 2009; current model with SAC.	✅	✅	✅	❌	Finland has issued biometric passports since 2006. Two fingerprints were added to the chip in 2009 (requiring EAC). Modern Finnish passports use both BAC and PACE for the MRTD chip. They have an anti-cloning feature implemented (Finland’s passport architecture supports AA or at least Chip Authentication under EAC).
France	Biometric Passport (“Passeport Biométrique”) – introduced 2006; second-generation with fingerprints from 2009; current model (2016 design) supports SAC.	✅	✅	❌	France’s ePassports have included an RFID chip since 2006 (photo only initially). In 2009 France added two digital fingerprints to the chip, using EAC (Chip Authentication) for security. PACE was implemented in French passports by the end of 2014, per EU requirements. Active Authentication has not been implemented by France (France opted not to use AA in its passports, relying on EAC’s chip authentication for clone protection)【48†L35-L38**】.
Germany	“ePass” (biometric passport) – 1st Gen introduced Nov 2005; 2nd Gen (with fingerprints and EAC) from Nov 2007; 3rd Gen introduced March 2017 (polycarbonate data page, PACE-only access).	✅	✅	✅	❌	Germany’s ePassports are issued in generations. The 1st generation (2005) had a chip with the holder’s photo and supported BAC (Germany also enabled Active Authentication on early ePassports). The 2nd generation ePass 2.0 (from 1 Nov 2007) added two fingerprint images in the chip, protected by Extended Access Control. The third-generation ePass (ePass 3.0) launched 1 March 2017 features a polycarbonate data page and implemented PACE as the sole access-control mechanism (no BAC fallback). German passports thus support PACE and have clone detection via Chip Authentication (and previously via AA as well), so all three security features are effectively present.
Greece	Biometric Passport – introduced 2006; fingerprints added 2009; current model supports SAC.	✅	✅	✅	❌	Greece began issuing ePassports in 2006. Fingerprints were included by 2009, with the passport chip protected by EAC. Greek passports use BAC and, since late 2014, PACE for secure communication. Active Authentication is supported (at least one form of anti-cloning mechanism is present in Greek ePassports).
Hungary	Biometric Passport – introduced 2006; fingerprints added 2009; current model with SAC.	✅	✅	✅	❌	Hungary’s biometric passports have been in circulation since 2006, with fingerprints added in 2009 per EU requirements. The passports use BAC and PACE (post-2014) for chip access. A clone-detection feature is supported (Hungary’s passports have been reported to implement Active Authentication or Chip Authentication for this purpose).
Ireland	Biometric Passport (ePassport) – introduced 2006; new model from 2013 (“Passport Card” in 2015 for ID travel).	✅	✅	✅	❌	Ireland, while not bound by certain EU regulations, introduced ePassports in 2006 with a chip storing the holder’s facial image. (Ireland did not add fingerprints to passports due to its opt-out from the EU fingerprint mandate.) Irish ePassports use BAC and also support PACE (Ireland voluntarily implemented SAC around 2014 for interoperability). To compensate for no fingerprints, Ireland enabled Active Authentication for anti-cloning in its ePassports (post-2014 Irish ePassports include AA keys). The Irish passport got a design update in 2013, and a polycarbonate passport card (credit-card sized companion ID) was introduced in 2015, but the card is a separate document.
Italy	Biometric Passport – introduced 2006; fingerprints added 2010; current model supports SAC.	✅	✅	❌	❌	Italy’s biometric passports (Passaporto Elettronico) were launched in 2006 and have included two fingerprint images in the chip since 2010 (with EAC security). Italy implemented BAC and later PACE for chip access (PACE became mandatory by end-2014). Active Authentication is not implemented in Italian passports【48†L35-L38**】 – instead, clone detection is achieved via the Chip Authentication mechanism of EAC.
Latvia	Biometric Passport – introduced 2007; fingerprints added 2008/09; current model with SAC.	✅	✅	✅	❌	Latvia introduced ePassports in 2007 and quickly included fingerprints (by 2008–2009) in the chip, using EAC. Latvian passports use BAC and support PACE since 2014. They also implement a clone-detecting feature (Active Auth or Chip Auth), so AA is checked in this context.
Lithuania	Biometric Passport – introduced 2008; fingerprints added 2009; current model supports SAC.	✅	✅	✅	❌	Lithuania’s ePassports have been issued since 2008, with fingerprints added by mid-2009 in compliance with EU rules. BAC and PACE are both supported for chip access. Lithuania’s passports have an anti-cloning security mechanism (e.g. Active Authentication) implemented, hence AA is marked as supported.
Luxembourg	Biometric Passport – introduced 2006; fingerprints added 2009; current model with SAC.	✅	✅	✅	❌	Luxembourg has issued ePassports since 2006, adding fingerprint biometrics in 2009 (with EAC). Luxembourg’s current passports use BAC+PACE and have clone-detection capability (via AA or chip auth). All security features – BAC, PACE, AA – are supported in practice.
Malta	Biometric Passport – introduced ~2008; fingerprints added c.2010; current model supports SAC.	✅	✅	✅	❌	Malta’s biometric passports use BAC and PACE for the chip, and include fingerprint data (with EAC) since around 2009–2010. Malta supports Active Authentication (or at least chip-based authentication) to guard against cloned chips, so a form of AA is present.
Netherlands	Nederlands Paspoort (biometric passport) – introduced Aug 2006; updated model with fingerprints & EAC from 28 June 2009; Model 2014 with polycarbonate page (PACE enabled); Model 2021 with latest security features.	✅	✅	✅	❌	The Netherlands implemented ePassports in 2006 (with BAC and optional AA). By 28 June 2009, Dutch passports included two fingerprints in the chip (per EU mandate) and implemented Extended Access Control. In 2014, the Dutch passport was updated with a polycarbonate data page and Supplemental Access Control (PACE) support (EU-wide requirement). Dutch ePassports also support Active Authentication – the Netherlands was one of the countries planning AA from the start, providing a way to detect cloned chips. Recent Dutch passports (2014 model and the 2021 redesign) continue to support BAC+PACE and AA.
Poland	Biometric Passport – introduced 2006; fingerprints added 2009; current model supports SAC.	✅	✅	✅	❌	Poland’s first ePassports were issued in 2006, and by 2009 they included fingerprint biometrics on the chip. Polish passports use BAC and have implemented PACE since 2014. Poland’s ePassport supports clone detection (Active Auth or Chip Auth), thus AA is considered supported.
Portugal	Biometric Passport (Passaporte Electrónico Português) – introduced Aug 2006; fingerprints added 2009; current model with PACE.	✅	✅	✅	❌	Portugal launched its electronic passport in 2006 and added fingerprint data by 2009 (EAC protected). Portuguese ePassports use BAC and PACE for chip access (SAC implemented by end-2014). They also have an anti-cloning mechanism; Active Authentication is supported in Portugal’s passports (the country has been noted among those with AA on ePassports).
Romania	Biometric Passport – introduced 2008; fingerprints added 2009; current model supports SAC.	✅	✅	✅	❌	Romania started issuing biometric passports in 2008, adding fingerprints by 2009–2010. Romanian passports use BAC and PACE, and they support clone-detection (Active Authentication capability is present in the passport chip software).
Slovakia	Biometric Passport – introduced 2008; fingerprints added 2009; current model with SAC.	✅	✅	✅	❌	Slovakia’s ePassports have been issued since 2008, with fingerprint biometrics included starting 2009. Slovakia supports BAC and, as required, PACE on newer passports. A clone-detection mechanism (likely Active Auth or Chip Auth) is supported, so AA is marked yes.
Slovenia	Biometric Passport – introduced 2006; fingerprints added 2009; current model supports SAC.	✅	✅	✅	❌	Slovenia began issuing ePassports in 2006 and added fingerprint data to them around 2009. Slovenian passports use BAC + PACE and have a clone-detection security feature (Active Authentication support is present in their passport chips).
Switzerland	Biometric Passport (E-Passport 10 and Passport 13) – introduced 2006; updated model from 2010 (Passport 10 with fingerprints); current Passport 22 (issued from 2022) supports SAC.	✅	✅	✅	❌	Switzerland (not EU, but following ICAO/EU standards) introduced biometric passports in 2006 (containing a chip with photo). The Passport 10 model (from 2010) added two fingerprints in the chip, using EAC security. Switzerland’s latest Passport 22 supports BAC and PACE for chip access (Switzerland joined the SAC interoperability tests and adopted PACE). Swiss ePassports are equipped with clone-detection: they implemented Active Authentication and Chip Authentication. (Notably, Swiss passports have been shown to support all ICAO security mechanisms including AA and SAC.)
Spain	Biometric Passport – introduced 2006; fingerprints added 2009; current model (2015 design) uses BAC+PACE.	✅	✅	❌	❌	Spain rolled out ePassports in 2006 and added fingerprint biometrics by mid-2009 (per EU requirements). Spanish passports use BAC and starting in 2015 they were upgraded to also support PACE (SAC) for stronger access control. Active Authentication has not been implemented in Spain’s passports (Spain relies on the EAC chip authentication for anti-cloning, similar to France/Italy)【48†L35-L38**】.
Sweden	Biometric Passport – introduced Oct 2005; fingerprints added 2009; current model supports SAC.	✅	✅	✅	❌	Sweden was one of the first to issue ePassports (late 2005). Fingerprints were incorporated by 2009 (with EAC security). Swedish passports use BAC and have supported PACE since the end of 2014. Sweden’s passport chips also implement Active Authentication (Sweden is often cited among countries with AA enabled) as a means to prevent chip cloning.

Note: BAC = Basic Access Control, PACE = Password Authenticated Connection Establishment, AA = Active Authentication

Sources​

Sources