EMAP: An Efficient Mutual-Authentication Protocol for Low-Cost RFID Tags

Peris-López, Pedro; Hernández-Castro, Julio; Tapiador, Juan E.; Ribagorda, Arturo

doi:10.1007/11915034_59

Cited by 201 publications

(153 citation statements)

References 8 publications

Supporting

Mentioning

152

Contrasting

Unclassified

Order By: Relevance

“…First, assume two parties are synchronized in the state S (1) . To resist possible desynchronization attacks, the reader keeps also the previous state S (0) .…”

Section: A Attack Descriptionmentioning

confidence: 99%

“…To resist possible desynchronization attacks, the reader keeps also the previous state S (0) . The aim of the attacker is to force the tag to update its state to, say S (2 ′ ) while the reader has updated its state to S (2) and keeping S (1) as its old state. The attack is outlined as follows:…”

Section: A Attack Descriptionmentioning

confidence: 99%

“…Since the introduction of this class by PerisLopez et al [1], [2], [3] all of the proposals put forward in this area such as SASI [4], Gossamer [5], LMAP ++ [6] and Yeh et al [7] have made use of the mentioned operations. The exclusive or wide use of T-functions in these protocols is widely criticized since it makes some successful cryptanalysis possible [8], [9] and [10].…”

Section: Introductionmentioning

confidence: 99%

See 2 more Smart Citations

Desynchronization attack on RAPP ultralightweight authentication protocol

Ahmadian¹,

Salmasizadeh²,

Aref³

2013

Information Processing Letters

View full text Add to dashboard Cite

Abstract-RAPP (RFID Authentication Protocol with Permutation) is a recently proposed efficient ultralightweight authentication protocol. The operation used in this protocol is totally different from the other existing ultralightweight protocols due to the use of new introduced data dependent permutations and avoidances of modular arithmetic operations and biased logical operations such as AND and OR. The designers of RAPP claimed that this protocol resists against desynchronization attacks since the last messages of the protocol is sent by the reader and not by the tag. This letter challenges this assumption and shows that RAPP is vulnerable against desynchronization attack. This attack has a remarkable probability of success and is effective whether Hamming weight-based or modular-based rotations are used by the protocol.

show abstract

“…First, assume two parties are synchronized in the state S (1) . To resist possible desynchronization attacks, the reader keeps also the previous state S (0) .…”

Section: A Attack Descriptionmentioning

confidence: 99%

Section: A Attack Descriptionmentioning

confidence: 99%

Section: Introductionmentioning

confidence: 99%

See 1 more Smart Citation

Desynchronization attack on RAPP ultralightweight authentication protocol

Ahmadian¹,

Salmasizadeh²,

Aref³

2013

Information Processing Letters

View full text Add to dashboard Cite

show abstract

“…Several families of protocols have been proposed, such as the influential HB family (see [2] for a thorough presentation of the HB family), and other "human authentication" protocols. In [4], Peris-Lopez, Hernandez-Castro, Estevez-Tapiador, and Ribagorda introduced a mutual protocol, called LMAP, which is the first of what came to be known as the "ultralightweight protocols family". Many proposals followed (see [1] for a comprehensive introduction to this protocol family), but almost all of them have been broken.…”

Section: Introductionmentioning

confidence: 99%

Yet Another Ultralightweight Authentication Protocol That Is Broken

Avoine

Carpent

2013

Radio Frequency Identification. Security and Privacy Issues

View full text Add to dashboard Cite

show abstract

“…The HB-family(HB + ,HB ++ , HB*,etc.) [1,2,3,4,5,7,6,8] and the MAPfamily(LMAP,EMAP,M2AP,etc) [9,10,11] authentication protocols, are some examples of this kind. However, proposed lightweight protocols so far have been targeted to various successful attacks and therefore, the search for a concrete lightweight solution for authentication in low-cost RFID tags still continues.…”

Section: Introductionmentioning

confidence: 99%

Passive Cryptanalysis of the UnConditionally Secure Authentication Protocol for RFID Systems

Abyaneh

2011

Information Security and Cryptology - ICISC 2010

View full text Add to dashboard Cite

Abstract. Recently, Alomair et al. proposed the first UnConditionally Secure mutual authentication protocol for low-cost RFID systems(UCS-RFID). The security of the UCS-RFID relies on five dynamic secret keys which are updated at every protocol run using a fresh random number (nonce) secretly transmitted from a reader to tags. Our results show that, at the highest security level of the protocol (security parameter= 256), inferring a nonce is feasible with the probability of 0.99 by eavesdropping(observing) about 90 runs of the protocol. Finding a nonce enables a passive attacker to recover all five secret keys of the protocol. To do so, we propose a three-phase probabilistic approach in this paper. Our attack recovers the secret keys with a probability that increases by accessing more protocol runs. We also show that tracing a tag using this protocol is also possible even with less runs of the protocol.

show abstract

EMAP: An Efficient Mutual-Authentication Protocol for Low-Cost RFID Tags

Cited by 201 publications

References 8 publications

Desynchronization attack on RAPP ultralightweight authentication protocol

Desynchronization attack on RAPP ultralightweight authentication protocol

Yet Another Ultralightweight Authentication Protocol That Is Broken

Passive Cryptanalysis of the UnConditionally Secure Authentication Protocol for RFID Systems

Contact Info

Product

Resources

About