Secure auth with dumb chips, secret outside of NDEF (xSIID?)

You could check out the