Tell me more ×
IT Security Stack Exchange is a question and answer site for IT security professionals. It's 100% free, no registration required.
up vote 0 down vote favorite

Can anyone provide me with a list of RFID tags that are still currently secure? That is, they cannot be cloned or modified and no attacks have been demonstrated against them. For example MIFARE is obviously broken, HID cards are simple to clone. What's secure?

I'm looking at recommendations for access control to a data center housing various types of data including financial, government and medical. Are there any regulatory requirements for physical access to server rooms?

What about for locks? Currently we are planning on using Abloy Protec Keys. Will these do? I'm an accomplished lock-picker and to the best of my knowledge these haven't been defeated.

Hope someone can help! :)

share|improve this question
This is very time localised- a correct answer today may be proven wrong tomorrow. – Rory Alsop♦ Feb 3 at 7:22
Look for RFID tags where the complete security protocols are published. Unfortunately I don't know any such product. As with the physical lock, I advise to ask some people in the community who regularly break Tags or pick locks. There may be no perfect solution, but choosing a solution that is not obviously flawed is better than nothing. – pepe Feb 3 at 9:38
The German ID card has a well-documented and reviewed RFID-based authentication, but may be difficult to aquire for your employees. How about just using some certified smartcards, they are well researched and not routinely broken. – pepe Feb 3 at 9:45
All RFID tags can be cloned because the resource limitations prohibit sufficient key sizes. Most RFID "solutions" rely upon deceptive sales tactics and insecurity though obscurity. – Rook Feb 3 at 18:35
Perhaps, in the case of Passive tags. What about active tags? – D3C4FF Feb 4 at 1:26

closed as too localized by Rory Alsop♦ Feb 3 at 7:22

This question is unlikely to help any future visitors; it is only relevant to a small geographic area, a specific moment in time, or an extraordinarily narrow situation that is not generally applicable to the worldwide audience of the internet. For help making this question more broadly applicable, see the FAQ.

Browse other questions tagged or ask your own question.