Security flaws in a recent ultralightweight RFID protocol

Cryptology and Information Security Series

Volumn 4, Issue , 2010, Pages 83-94

  Peris Lopez, Pedro ^a   Hernandez Castro, Julio C ^b   Tapiador, Juan M E ^c   Van Der Lubbe, Jan C A ^a  

^a Technical University of Delft ^*  (Netherlands)

^b UNIVERSITY OF PORTSMOUTH   (United Kingdom)

^c UNIVERSITY OF YORK   (United Kingdom)

Author keywords

authentication; cryptanalysis; RFID; ultralightweight protocols

Indexed keywords

AUTHENTICATION;

ARITHMETIC OPERATIONS; CRYPTANALYSIS; DESYNCHRONIZATION; FULL DISCLOSURES; SECURITY LEVEL; SECURITY OBJECTIVES; ULTRA LIGHTWEIGHTS; ULTRA-LIGHTWEIGHT PROTOCOLS;

RADIO FREQUENCY IDENTIFICATION (RFID);

EID: 84865472816     PISSN: 18716431     EISSN: 18798101     Source Type: Book Series    
DOI: 10.3233/978-1-60750-485-6-83     Document Type: Article

References (20)

1. P. Peris-Lopez, J. C. Hernandez-Castro, J. M. Estevez-Tapiador, and A. Ribagorda. M2AP: A minimalist mutual-authentication protocol for low-cost RFID tags. In Proc. of UIC'06, volume 4159 of LNCS, pages 912-923. Springer-Verlag, 2006.
2. P. Peris-Lopez, J. C. Hernandez-Castro, J. M. Estevez-Tapiador, and A. Ribagorda. LMAP: A real lightweight mutual authentication protocol for low-cost RFID tags. In Hand. of Workshop on RFID and Lightweight Crypto, 2006.
3. P. Peris-Lopez, J. C. Hernandez-Castro, J. M. Estevez-Tapiador, and A. Ribagorda. EMAP: An efficient mutual authentication protocol for low-cost RFID tags. In Proc. of IS'06, volume 4277 of LNCS, pages 352-361. Springer-Verlag, 2006.
4. H.-Y. Chien. "SASI: A new ultralightweight RFID authentication protocol providing strong authentication and strong integrity". IEEE Transactions on Dependable and Secure Computing 4(4):337-340. Oct.-Dec. 2007.
5. H.-M. Sun, W.-C. Ting, and K.-H. Wang. "On the Security of Chien's Ultralightweight RFID Authentication Protocol". In Cryptology ePrint Archive. http://eprint.iacr.org/2008/083, 2008.
6. T. Cao, E. Bertino, and H. Lei. "Security Analysis of the SASI Protocol". IEEE Transactions on Dependable and Secure Computing 6(1):73-77. Jan.-Mar. 2009.
7. P. D'Arco and A. De Santis. "From Weaknesses to Secret Disclosure in a Recent Ultra-Lightweight RFID Authentication Protocol". In Cryptology ePrint Archive. http://eprint.iacr.org/2008/470, 2008.
8. P. Peris-Lopez, J. C. Hernandez-Castro, J. M. Estevez-Tapiador, and A. Ribagorda. Advances in Ultra-lightweight Cryptography for Low-cost RFID Tags: Gossamer Protocol. In Proc. of WISA'08, Volume 5379 of LNCS, pages 56-68. Springer-Verlag, 2008.
9. Y.-C. Lee, Y.-C. Hsieh, P.-S. You, T.-C. Chen A New Ultralightweight RFID Protocol with Mutual Authentication, In Proc. of WASE'09, Volume 2 of ICIE, pages 58-61, 2009.
10. S. Weis. Security and Privacy in Radio-Frequency Identification Devices. In Master Thesis, MIT, 2003.
11. T. Li and G. Wang. Security analysis of two ultra-lightweight RFID authentication protocols. In Proc. of IFIP-SEC'07, 2007.
12. H. Y. Chien and C.-W. Huang. Security of ultra-lightweight RFID authentication protocols and its improvements. SIGOPS Oper. Syst. Rev. 41(4):83-86, 2007.
13. M. Bárász, B. Boros, P. Ligeti, K. Lója, and D. Nagy. "Breaking LMAP", In Proc. of RFIDSec'07, 2007.
14. M. Bárász, B. Boros, P. Ligeti, K. Lója, and D. Nagy. "Passive attack against the M2AP mutual authentication protocol for RFID tags", In Proc. of the First International EURASIP Workshop on RFID Technology, 2007.
15. A. Klimov and A. Shamir. "New applications of T-functions in block ciphers and hash functions". Proc. of FSE'05, LNCS vol. 3557, pp. 18-31. Springer-Verlag, 2005.
16. R. Phan. Cryptanalysis of a new ultralightweight RFID authentication protocol - SASI. IEEE Transactions on Dependable and Secure Computing 6(4):316-320. Oct.-Dec. 2009.
17. J. C. Hernandez-Castro, J. M. E. Tapiador, P. Peris-Lopez, T. Li and J.-J. Quisquater. Cryptanalysis of the SASI Ultralightweight RFID Authentication Protocol with Modular Rotations. In Proc. of WCC'09, Lofthus, Norway, May 10-15, 2009.
18. P. Peris-Lopez, J. C. Hernandez-Castro, J. M. Estevez-Tapiador, T. Li and J. C. A. van der Lubbe. Weaknesses in Two Recent Lightweight RFID Authentication Protocols. In Hand. of Workshop on RFID Security, 2009.
19. A. Juels and S. Weis. Defining strong privacy for RFID. In Proc. of PerCom 2007, pp. 342-347. IEEE Computer Society Press, 2007.
20. B. Alomair and R. Poovendran. On the authentication of RFID systems with bitwise pperations. In Proc. of NTMS'08, pages 1-6, 2008.