On selecting the nonce length in distance-bounding protocols

Computer Journal

Volumn 56, Issue 10, 2013, Pages 1216-1227

  Mitrokotsa, Aikaterini ^a,b   Peris Lopez, Pedro ^c   Dimitrakakis, Christos ^a   Vaudenay, Serge ^a  

^a EPFL   (Switzerland)

^b UNIVERSITY OF APPLIED SCIENCES WESTERN SWITZERLAND   (Switzerland)

^c UNIVERSIDAD CARLOS III DE MADRID   (Spain)

Author keywords

cryptanalysis; distance bounding protocols; high probability bounds; relay attacks; RFID

Indexed keywords

AUTHENTICATION PROTOCOLS; CHALLENGE RESPONSE; CRYPTANALYSIS; DISTANCE-BOUNDING PROTOCOLS; EXPERIMENTAL ANALYSIS; HIGH PROBABILITY; RELAY ATTACK; SECURITY PARAMETERS;

COMPUTER SCIENCE; RADIO FREQUENCY IDENTIFICATION (RFID);

PROBABILITY;

EID: 84885202616     PISSN: 00104620     EISSN: 14602067     Source Type: Journal    
DOI: 10.1093/comjnl/bxt033     Document Type: Article

References (29)

1. Desmedt, Y. (1988) Major Security Problems with the ?Unforgeable? (Feige)-Fiat-Shamir Proofs of Identity and How to Overcome Them. Proc. 6thWorldwide Congress on Computer and Communications Security and Protection-SecuriCom ?88, Paris, France, March 15-17, pp. 147-159. SEDEP.
2. Brands, S. and Chaum, D. (1994) Distance-Bounding Protocols. Proc. Advances in Cryptology-EUROCRYPT ?93, Lofthus, Norway, May, Lecture Notes in Computer Science 765, pp. 344-359. Springer, Berlin.
3. Hancke, G. and Kuhn, M. (2005) An RFID Distance Bounding Protocol. Proc. SECURECOMM?05, Athens, Greece, September 5-9, pp. 67-73. IEEE Computer Society,Washington DC, USA.
4. Munilla, J. and Peinado, A. (2008) Distance bounding protocols for RFID enhanced by using void-challenges and analysis in noisy channels. Wirel. Commun. Mob. Comput., 8, 1227-1232.
5. Singelée, D. and Preneel, B. (2007) Distance Bounding in Noisy Environments. Proc. Security and Privacy in Ad-hoc and Sensor Networks: 4th European Workshop-ESAS?07, Cambridge, UK, July, Lecture Notes in Computer Science 4572, pp. 101-115. Springer, Berlin.
6. Munilla, J. and Peinado,A. (2010)Attacks on a distance dounding protocol. Comput. Commun., 33, 884-889.
7. Tu, Y.-J. and Piramuthu, S. (2007) RFID Distance Bounding Protocols. Proc. 1st Int. EURASIP Workshop on RFID Technology, Vienna, Austria, September, pp. 67-68. EURASIP, Greece.
8. Reid, J., Gonzalez Nieto, J.M., Tang, T. and Senadji, B. (2007) Detecting Relay Attacks with Timing-based Protocols. ASIACCS ?07: Proc. 2nd ACM Symp. Information, Computer and Communications Security, Singapore, March, pp. 204-213. ACM.
9. Kapoor, G., Zhou, W. and Piramuthu, S. (2008) Distance Bounding Protocol for Multiple RFID Tag Authentication. In Xu, C.-Z. and Guo, M. (eds), Proc. 2008 IEEE/IFIP Int. Conf. Embedded and Ubiquitous Computing-Volume 02-EUC?08, Shanghai, China, December, pp. 115-120. IEEE, Washington DC, USA.
10. Kim, C.H., Avoine, G., Koeune, F., Standaert, F.-X. and Pereira, O. (2008) The Swiss-Knife RFID Distance Bounding Protocol. Int. Conf. Information Security and Cryptology-ICISC, Seoul, Korea, December, Lecture Notes in Computer Science 5461, pp. 98-115. Springer, Berlin.
11. Bussard, L. and Roudier, Y. (2004) Embedding Distance-Bounding Protocols within Intuitive Interactions. Security in Pervasive Computing: 1st Int. Conf., Boppard, Germany, Lecture Notes in Computer Science 2802, pp. 143-156. Springer.
12. Bussard, L. and Bagga, W. (2004) Distance-Bounding Proof of Knowledge Protocols toAvoid Terrorist Fraud Attacks. Technical Report RR-04-109, Institute EURECOM.
13. Rasmussen, K. and C? apkun, S. (2008) Location Privacy of Distance Bounding. Proc. Annual Conf. Computer and Communications Security (CCS),Alexandria,VA, USA, pp. 149-160. ACM.
14. Mitrokotsa, A., Dimitrakakis, C., Peris-Lopez, P. and Castro, J.C.H. (2010) Reid et al.?s distance bounding protocol and mafia fraud attacks over noisy channels. IEEE Commun. Lett., 14, 121-123.
15. Aumasson, J.-P., Mitrokotsa, A. and Peris-Lopez, P. (2011) A Note on a Privacy-Preserving Distance-Bounding Protocol. Proc. 13th Int. Conf. Information and Communications Security (ICICS 2011), Beijing, China, November, Lecture Notes in Computer Science, pp. 78-92. Springer-Verlag, Berlin, Heidelberg.
16. Bay, A., Boureanu, I., Mitrokotsa, A., Spulber, I. and Vaudenay, S. (2012) The Bussard-Bagga and Other Distance Bounding Protocols under Man-in-the-Middle Attacks. Proc. Inscrypt?2012, 8th China Int. Conf. Information Security and Cryptology, Beijing, China, Lecture Notes in Computer Science. Springer.
17. Mitrokotsa, A., Onete, C. and Vaudenay, S. (2012) Mafia Fraud Attack against the RC Distance-Bounding Protocol. Proc. 2012 IEEE RFIDTechnology and Applications (IEEE RFIDT-A), Nice, France, November, pp. 74-79. IEEE Press.
18. Peris-Lopez, P., Hernandez-Castro, J.-C., Dimitrakakis, C., Mitrokotsa, A. and M.E. Tapiador, J. (2010). Shedding light on RFID distance bounding protocols and terrorist fraud attacks. Preprint, 2009, arXiv:0906.4618.
19. Cam-Winget, N., Housley, R.,Wagner, D. andWalker, J. (2003) Security flaws in 802.11 data link protocols. Commun. ACM, 46, 35-39.
20. Vaudenay, S. and Vuagnoux, M. (2007) Passive-Only Key Recovery Attacks on RC4. Proc. Selected Areas in Cryptography, 14th Int. Workshop, SAC 2007, Ottawa, Canada, August 16-17, Revised Selected Papers, Lecture Notes in Computer Science 4876, pp. 344-359. Springer.
21. Dimitrakakis, C., Mitrokotsa, A. and Vaudenay, S. (2012) Expected Loss Bounds for Authentication in Constrained Channels. Proc. INFOCOM 2012, Orlando, FL, USA, March, pp. 478-85. IEEE press.
22. Bogart, K., Stein, C. and Drysdale, S. (2004) Discrete Math for Computer Science Students. Key College Publishing, CA, USA.
23. Thomas, S. and Reynolds, M. (2010) QAM Backscatter for Passive UHF RFID tags. Proc. 2010 IEEE Int. Conf. RFID, April, Orlando, Florida, USA, pp. 210-214. IEEE Press.
24. Lazaro, A., Girbau, D. and Villarino, R. (2009) Effects of interferences in UHF RFID systems. Prog. Electromagn. Res., 98, 445-443.
25. Avoine, G., Lauradoux, C. and Martin, B. (2011) How secretsharing can defeat terrorist fraud. Proc. 4th ACM Conf. Wireless Network Security-iSec?11, Hamburg, Germany, June, pp. 145-156. ACM Press, NewYork, NY, USA.
26. Abyaneh, S. and Reza, M. (2011) Security Analysis of Two Distance-Bounding Protocols. Proc. Workshop on RFID Security-RFIDSec?11,Amherst, MA, USA, June, Lecture Notes in Computer Science 7055, pp. 94-107. Springer, Berlin.
27. Boureanu, I., Mitrokotsa, A. and Vaudenay, S. (2012) On the Pseudorandom Function Assumption in (Secure) Distance-Bounding Protocols-PRF-nessAlone Does Not Stop the Frauds! Progress in Cryptology-LATINCRYPT 2012-2nd Int. Conf. Cryptology and Information Security in Latin America, October, Lecture Notes in Computer Science 7533, Santiago, Chile, pp. 100-120. Springer.
28. Azuma, K. (1967) Weighted sums of certain dependent random variables. Tôhoku Math. J., 13, 357-367.
29. Impagliazzo, R., Levin, L. and Luby,M. (1989) Pseudo-Random Generation from One-Way Functions. Proc. 21st Annual ACM