eMRTD authenticity and integrity verification

[genaris]

Following the inspection process in section 5.1.1 of ICAO 9303 part 11, Service Agent's eMRTD capabilities should add means of integrity/authenticity verification of the documents by:

• Validating the certification path of EF_SOD. This means that it should load ICAO certificates master list and check that the signature of this file contents corresponds to the entity signing the document and that the trust chain is valid. A good implementation to check our development could be https://github.com/ZeroPass/pymrtd
• Once it is validated, calculate the hash of the read data groups (namely EF_DG1 and EF_DG2) and compare it to the ones in EF_SOD in order to check the integrity of the data on the document.

Some other interesting implementation I've found recently that we can look at: https://github.com/Fethbita/eMRTD_face_access