Multiple Attacks on Authentication Protocols for Low-Cost RFID Tags

Authors

Zeeshan Bilal, Information Security Group, Royal Holloway University of London, Egham, Surrey, TW20 0EX, United KingdomFollow
Keith Martin, Information Security Group, Royal Holloway University of London, Egham, Surrey, TW20 0EX, United KingdomFollow
Qasim Saeed, Information Security Group, Royal Holloway University of London, Egham, Surrey, TW20 0EX, United KingdomFollow

Author Country (or Countries)

United Kingdom

Abstract

In this paper, we present a security analysis of two authentication protocols SIDRFID and DIDRFID, proposed for low-cost RFID systems. These protocols are considered to employ ultra-lightweight functions and are very efficient. However, we demonstrate design flaws that result in full secret disclosure in both protocols. These disclosure attacks undermine the security of both protocols. Further analysis highlights additional attacks including traceability and reader impersonation.

Recommended Citation

Bilal, Zeeshan; Martin, Keith; and Saeed, Qasim (2015) "Multiple Attacks on Authentication Protocols for Low-Cost RFID Tags," Applied Mathematics & Information Sciences: Vol. 09: Iss. 2, Article 3.
Available at: https://digitalcommons.aaru.edu.jo/amis/vol09/iss2/3