Videos / Defcon / Dan Petro & David Vargas: Vulnerabilities in the OSDP Protocol for Access Control Systems

Dan Petro & David Vargas: Vulnerabilities in the OSDP Protocol for Access Control Systems

Duration: 42min 45sec Type: Presentation (lecture) Playlist: 4 of 146 in Defcon
A DEF CON 31 talk on security issues in the OSDP protocol — a newer encrypted standard designed to replace the legacy Wiegand protocol in access control systems.

The researchers present more than a dozen vulnerabilities that allow interception or bypass of access systems, including flaws in both cryptography and protocol implementation.

The talk also introduces a practical pentesting tool that can be connected to an RFID reader to exploit these vulnerabilities.