Weaknesses in a new ultralightweight RFID authentication protocol with permutation—RAPP. Issue 6 (21st June 2013)

• Record Type: Journal Article
• Authors: Bagheri, Nasour; Safkhani, Masoumeh; Peris‐Lopez, Pedro; Tapiador, Juan E.
• Is Part Of: Security and communication networks. Volume 7:Issue 6(2014:Jun.)
• Page Start: 945
• Page End: 949
• Publication Date: 2013-06-21
• Subjects: Computer networks -- Security measures -- Periodicals; Computer security -- Periodicals; Cryptography -- Periodicals; 005.805
• DOI: 10.1002/sec.803
• Languages: English
• ISSNs: 1939-0114

Abstract

<abstract abstract-type="main" id="sec803-abs-0001"> <title>ABSTRACT</title> <p id="sec803-para-0001">Tian <italic>et al.</italic> proposed a novel ultralightweight RFID mutual authentication protocol [1] that has recently been analyzed in several articles. In this letter, we first propose a desynchronization attack that succeeds with probability almost 1, which improves upon the 0.25 given in a previous analysis by Ahmadian <italic>et al.</italic> We also show that the bad properties of the proposed permutation function can be exploited to disclose several bits of the tag's secret (rather than just 1 bit as previously shown by Avoine <italic>et al.</italic>), which increases the power of a traceability attack. Finally, we show how to extend the aforementioned attack to run a full disclosure attack, which requires to eavesdrop less protocol runs than the proposed attack by Wang <italic>et al.</italic> (i.e., 192 &lt; &lt; 2 ³⁰). Copyright © 2013 John Wiley &amp; Sons, Ltd.</p> </abstract>