If you actually look at how the software work it's clear they're not doing that - they are just having the passport encrypt a nonce. Then they decrypt it with t

If you actually look at how the software work it's clear they're not doing that - they are just having the passport encrypt a nonce. Then they decrypt it with the passport's public key to confirm that the passport is authentic.