Unlocking NFC eID Security: Understanding BAC Key Derivation
Blog post from Didit
Excluded from normalized aggregate trends after staff review: 3056 posts were attributed to March 2026; 671 shared March 14, 2026. The preceding six-month median was 13.5 posts.
Review evidence: 3,056 posts in March 2026; 671 shared March 14, 2026; preceding six-month median 13.5. Reviewed August 9, 2026.
This company's pages remain public, but its content is excluded from normalized aggregate trends. Unfiltered raw trends and advanced filtering are available to Accelerate and Lead accounts.
Basic Access Control (BAC) is an ICAO 9303 security protocol used in NFC-enabled electronic identity documents, such as e-passports and national ID cards, to restrict access to chip data and establish encrypted communication with authorized readers. It derives cryptographic keys from Machine Readable Zone information, including the document number, date of birth, date of expiry, and associated check digits, using standardized hashing and key-derivation procedures that commonly involve SHA-1 and Triple DES. The resulting encryption and message-authentication keys protect confidentiality, integrity, and authenticity during exchanges between the chip and reader, preventing access when the correct MRZ data is unavailable. Although BAC remains widely deployed and compliant with existing standards, the text notes that newer protocols such as PACE offer stronger protection against modern cryptographic threats. It also presents Didit’s NFC document-reading service as an implementation of these standards for identity verification, fraud detection, and regulatory compliance.
No tracked trend matches for this post yet.
Use this post, company, and trend context to find content marketing opportunities, perform competitive analysis, or address product feature gaps via the Plushcap MCP server or the Plushcap API.