Paper 2012/389

Wide Strong Private RFID Identification based on Zero-Knowledge

Roel Peeters and Jens Hermans


We present the first wide-forward-insider and wide-strong RFID identification protocols that are based on zero-knowledge. Until now these notions have only been achieved by schemes based on IND-CCA2 encryption. We discuss why wide-forward-insider privacy is sufficient for most practical applications. Rigorous proofs in the standard model are provided for the security and privacy properties of our protocols. Furthermore, our protocols are the most efficient solution presented in the literature. Using only Elliptic Curve Cryptography (ECC), the required circuit area can be minimized such that our protocol even fits on small RFID tags. Concerning computation on the tag, we only require two scalar-EC point multiplications for the wide-forward-insider protocol.

Available format(s)
Public-key cryptography
Publication info
Published elsewhere. Unknown where it was published
identification protocolsellitpic curve cryptographyprivate RFID identification
Contact author(s)
roel peeters @ esat kuleuven be
2013-03-21: last of 4 revisions
2012-07-16: received
See all versions
Short URL
Creative Commons Attribution


      author = {Roel Peeters and Jens Hermans},
      title = {Wide Strong Private RFID Identification based on Zero-Knowledge},
      howpublished = {Cryptology ePrint Archive, Paper 2012/389},
      year = {2012},
      note = {\url{}},
      url = {}
Note: In order to protect the privacy of readers, does not use cookies or embedded third party content.