Sens. Wyden and McCaskill say US CBP hasn't been verifying e-passports at borders for a decade due to lack of software to verify the digital signatures
Context & Ripple Effects
Wyden and McCaskill's disclosure lands in the middle of a documented DHS IT-decay arc: a hardware failure tied to biometric data had already frozen US visa processing for weeks in 2015, and a week after this story a DHS watchdog report found agency computers running unpatched, outdated operating systems. The pattern is an agency whose physical screening infrastructure outpaced its software.
First-order effects
- For a decade, the cryptographic protection on every US-issued passport chip was decorative at the border — officers admitted travelers without confirming the digital signatures, so tampered or cloned chips carried no detection risk at inspection.
- The senators' letter puts CBP on the defensive before Congress, forcing the agency to explain why the gap persisted years after the chips were issued.
Second-order effects
- Congressional pressure of this kind feeds directly into DHS modernization mandates — the same watchdog findings that surfaced days later gave the agency a deadline-driven patching program to answer both stories at once.
- With signature verification absent, CBP leaned harder on compensating controls it did have: the device searches and traveler databases Wyden separately flagged, where data from roughly 10K travelers' devices per year reaches 2,700 warrantless officers.
Third-order effects
- If biometric identity becomes the trusted layer while document cryptography goes unverified, the border shifts from checking what you carry to who you are — the trajectory DHS itself set by expanding facial recognition toward screening most US departures, per its own airport rollout.
- The eventual fix arrived only in mid-2022, when CBP confirmed deploying e-passport verification software nearly sixteen years after the chips shipped — establishing that federal verification gaps close on decade timescales unless Congress names them.
The trend: US border security is migrating from document-based trust to biometric surveillance, with hardware rolling out years ahead of the software needed to verify it.