Untraceable RFID protocols are not trivially composable: Attacks on the revision of EC-RAC

Ton van Deursen; Saša Radomirović

Untraceable RFID protocols are not trivially composable: Attacks on the revision of EC-RAC

Ton van Deursen (Lead / Corresponding author), Saša Radomirović

Computing

Research output: Contribution to journal › Article

52 Downloads (Pure)

Abstract

It is well-known that protocols that satisfy a security property when executed in isolation do not necessarily satisfy the same security property when they are executed in an environment containing other protocols.

We demonstrate this fact on a family of recently proposed RFID protocols by Lee, Batina, and Verbauwhede. We invalidate the authentication and untraceability claims made for several of the family's protocols.

We also present man-in-the-middle attacks on untraceability in all of the protocols in the family. Similar attacks can be carried out on some other protocols in the literature, as well.

We briefly indicate how to repair the protocols.

Original language	English
Pages (from-to)	1-8
Number of pages	8
Journal	Cryptology ePrint Archive
Volume	2009
Issue number	332
Publication status	Published - 8 Jul 2009

Keywords

Cryptographic protocols/RFID protocols
Authentication
Compositionality
Untraceability

Access to Document

Publisher final versionFinal published version, 91 KBLicence: CC BY

Cite this

@article{971e35eed22e4686841be86bd84ec69d,

title = "Untraceable RFID protocols are not trivially composable: Attacks on the revision of EC-RAC",

abstract = "It is well-known that protocols that satisfy a security property when executed in isolation do not necessarily satisfy the same security property when they are executed in an environment containing other protocols.We demonstrate this fact on a family of recently proposed RFID protocols by Lee, Batina, and Verbauwhede. We invalidate the authentication and untraceability claims made for several of the family's protocols.We also present man-in-the-middle attacks on untraceability in all of the protocols in the family. Similar attacks can be carried out on some other protocols in the literature, as well.We briefly indicate how to repair the protocols. ",

keywords = "Cryptographic protocols/RFID protocols , Authentication, Compositionality, Untraceability ",

author = "{van Deursen}, Ton and Sa{\v s}a Radomirovi{\'c}",

note = "Ton van Deursen was supported by a grant from the Fonds National de la Recherche (Luxembourg)",

year = "2009",

month = jul,

day = "8",

language = "English",

volume = "2009",

pages = "1--8",

journal = "Cryptology ePrint Archive",

publisher = "International Association for Cryptologic Research",

number = "332",

}

TY - JOUR

T1 - Untraceable RFID protocols are not trivially composable

T2 - Attacks on the revision of EC-RAC

AU - van Deursen, Ton

AU - Radomirović, Saša

N1 - Ton van Deursen was supported by a grant from the Fonds National de la Recherche (Luxembourg)

PY - 2009/7/8

Y1 - 2009/7/8

N2 - It is well-known that protocols that satisfy a security property when executed in isolation do not necessarily satisfy the same security property when they are executed in an environment containing other protocols.We demonstrate this fact on a family of recently proposed RFID protocols by Lee, Batina, and Verbauwhede. We invalidate the authentication and untraceability claims made for several of the family's protocols.We also present man-in-the-middle attacks on untraceability in all of the protocols in the family. Similar attacks can be carried out on some other protocols in the literature, as well.We briefly indicate how to repair the protocols.

AB - It is well-known that protocols that satisfy a security property when executed in isolation do not necessarily satisfy the same security property when they are executed in an environment containing other protocols.We demonstrate this fact on a family of recently proposed RFID protocols by Lee, Batina, and Verbauwhede. We invalidate the authentication and untraceability claims made for several of the family's protocols.We also present man-in-the-middle attacks on untraceability in all of the protocols in the family. Similar attacks can be carried out on some other protocols in the literature, as well.We briefly indicate how to repair the protocols.

KW - Cryptographic protocols/RFID protocols

KW - Authentication

KW - Compositionality

KW - Untraceability

UR - http://eprint.iacr.org/2009/332

M3 - Article

VL - 2009

SP - 1

EP - 8

JO - Cryptology ePrint Archive

JF - Cryptology ePrint Archive

IS - 332

ER -

Untraceable RFID protocols are not trivially composable: Attacks on the revision of EC-RAC

Abstract

Keywords

Access to Document

Other files and links

Fingerprint

Cite this