The likely approach would probably be less technical and more covert ops, tricking the target country into issuing a (technically) genuine passport. No need to

The likely approach would probably be less technical and more covert ops, tricking the target country into issuing a (technically) genuine passport. No need to break encryption/signing this way.