Consideration on the brute-force attack cost and retrieval cost: A hash-based radio-frequency identification (RFID) tag mutual authentication protocol

A realistic lightweight authentication protocol preserving strong anonymity for securing RFID system

“…[18]. Subsequently, some other schemes [12][13][14][15][16] based on the one-way hash function and exclusive-OR were proposed. However, they are also M A N U S C R I P T…”

“…In 2012, Cho et al proposed a hash-based mutual authentication protocol [16] and the authors claimed that their protocol addresses all the privacy [17][18][19] and forgery issues [20][21] [11][12][13][14][15][16] based on one-way hash function and exclusive-OR are impractical.…”

“…However, because of the modular exponential operations, these schemes are inadequate for the tiny-powered tags. On the other hand, among NPKC, hash based RFID systems [11][12][13][14][15][16] would be the best choice due to their reasonable computational overhead. Particularly, in 2005, Yang et al…”

“…Now, to accomplish this property (tag anonymity), in the existing state of the art lightweight authentication protocols, such as [11][12][13][14][15][16] a tag needs to encode its original identity by using the lightweight cryptographic primitive such as one-way non-collision hash function. In that case, when a tag requests a reader, then none of the request parameter can help the reader's database server to realize the identity of the tag, where the database server needs to do more exercise (possibly an exhaustive search operation) or needs to have a backend channel in order to figure out the tag identity, which is not relevant at all.…”

“…Over the past few years, some interesting anonymous RFID authentication protocols have been proposed [5][6][7][8][9][10][11][12][13][14][15][16][17][18][19][20][21][22], where we can divide them into public key cryptosystem (PKC) and non-public key crypto system (NPKC) based schemes. Among PKC based RFID systems [5][6][7][8][9][10], most of them are based on so called elliptic curve crypto system (ECC) based algorithms.…”