Eric Rescorla wrote: > Can you clarify what, if any, the security properties of this system > are: > > In particular: > > 1. Will the RFID tag in question respond to any reader or just those > controlled by the secretariat? > 2. Is the information on the tag in the clear or encrypted? normal 125khz tags don't contain much data. The radio equivalent of a 1 dimensional barcode is just a serial number. any data is a product of association with that token stays in the network rather than the chip. These are vulnerable to (trivial) replay attacks. but challenge response requires more logic. more powerful card systems of course exist in profusion it's just a matter of picking one. _______________________________________________ Ietf@xxxxxxxx https://www.ietf.org/mailman/listinfo/ietf