Cryptology ePrint Archive: Report 2016/731

SRMAP and ISLAP Authentication Protocols: Attacks and Improvements

Mohammad Mardani Shahrbabak and Shahab Abdolmaleky

Abstract: RFID technology is a system which uses radio frequency to transmit data. Data transmission between Tags and Readers is wireless which can be easily eavesdropped by adversary. Due to security and privacy reasons, various authentication protocols proposed. In this paper, we cryptanalyze two different RFID authentication protocols and it is shown that either of them have some weaknesses. In 2014, Chang et al. proposed a mutual authentication protocol for RFID technology based on EPC Class 1 Generation 2 standard. We show that their protocol is not safe regard to privacy and cannot repulse neither Traceability attack nor Forward Traceability attack. Also, in 2015, Pourpouneh et al. proposed a server-less authentication protocol. We discover that their protocol is not able to thwart security and privacy attacks such as Secret Parameter Reveal, Traceability and Forward Traceability. In addition, we robust the two schemes to defend those attacks which can protect RFID users against different threats. Then, analyzing of the protocols are compared with some state-of-art ones.

Category / Keywords: cryptographic protocols /

Date: received 25 Jul 2016

Contact author: abdolmaleky sh at gmail com

Available format(s): PDF | BibTeX Citation

Version: 20160727:181222 (All versions of this report)

Short URL: ia.cr/2016/731

Discussion forum: Show discussion | Start new discussion


[ Cryptology ePrint archive ]