Wiegand was open, unencrypted, one-way, point-to-point, and limited to a 26-bit string. It was also good enough, until cloning, sniffing, and integration with badging databases became routine. OSDP fixes the security and the topology in one move.
Four ideas to carry into the next specification conversation you have.
26 bits over two data wires (D0/D1), no encryption, no acknowledge. Easily cloned and replayed.
RS-485, up to 1.2 km, AES-128 secure channel (OSDP-SC), up to 8 readers per loop, full feedback to controller.
Variable payload size, handles fingerprint templates, facial vectors, mobile NFC/BLE IDs natively.
Older OSDP (v1.x, v2.0 without SC) is downgrade-attackable. New installs must spec v2.2 with SC mandatory.
SIA AC-01 (Wiegand) vs SIA OSDP v2.2 (Open Supervised Device Protocol).
| Attribute | Wiegand · OSDP | Notes |
|---|---|---|
| Cable distance | 150 m · 1,200 m | OSDP uses RS-485 |
| Wires required | 5 (V, GND, D0, D1, LED) | OSDP: 4 (V, GND, +A, -B) |
| Direction | One-way · Bidirectional | OSDP confirms reader state |
| Encryption | None · AES-128 (SC) | OSDP-SC mandatory in v2.2 |
| Multi-drop | 1 reader per port · 8 readers per port | OSDP saves controller ports |
| Card data size | 26 bits typical · variable | OSDP supports 200-bit credentials |
| Biometric support | No · Yes (native) | Critical for KSA government / banking |
| Mobile credential | Hack-via-emulation · Native NFC/BLE | OSDP-2.2 packets |
Five reasons new builds in Saudi increasingly mandate OSDP.
Tools like the Proxmark3 clone 125 kHz HID Prox cards in seconds. ESPKey and similar devices sit in the cable between reader and controller, recording card data in real-time and replaying it to unlock the door. OSDP-SC's AES-128 makes both attacks impractical.
Wiegand's one-way wire means the controller never knows if the reader heard a request, lost power, was tampered, or was even there. OSDP polls each reader continuously, door alarms, tamper alerts, and offline events all log to the access management system.
A 100-door office in Wiegand needs 100 home-runs to the access controller. The same office in OSDP can use multi-drop loops of 8 readers, 13 cable runs cover 100 doors. Saves conduit, panel space, and termination labour.
MOH, MOE, MOI, NEOM, Aramco all spec OSDP v2.2 with Secure Channel on new builds. The trigger was a regional banking incident in 2022 where Wiegand sniffing exposed 12,000 employee badges. Migration projects are in flight across major sectors.
HID Mobile Access, Stid, Smart-i, modern mobile credentials use NFC or BLE to transmit larger, encrypted credential payloads. Wiegand's 26-bit limit cannot carry them. The move to phone-based access is the practical forcing function for OSDP migration.
Our access control deployments use HID Signo, LenelS2, or Genetec readers, all OSDP v2.2 with mandatory Secure Channel for KSA government and banking spec.
Practical lighting know-how from NLC Academy. No spam, unsubscribe anytime.
By subscribing you agree to receive NLC emails.