Title
Cryptanalysis of the SASI Ultralightweight RFID Authentication Protocol with Modular Rotations
Abstract
In this work we present the first passive attack over the SASI lightweight authentication protocol with modular rotations. This can be used to fully recover the secret $ID$ of the RFID tag, which is the value the protocol is designed to conceal. The attack is described initially for recovering $\lfloor log_2(96) \rfloor=6$ bits of the secret value $ID$, a result that by itself allows to mount traceability attacks on any given tag. However, the proposed scheme can be extended to obtain any amount of bits of the secret $ID$, provided a sufficiently large number of successful consecutive sessions are eavesdropped. We also present results on the attack's efficiency, and some ideas to secure this version of the SASI protocol.
Year
Venue
Keywords
2008
Clinical Orthopaedics and Related Research
index terms,rfid,cryptanalysis,authentication,sasi,protocol.,indexing terms,authentication protocol,rfid tag
Field
DocType
Volume
Computer science,Computer security,Cryptanalysis,Authentication protocol,Modular design,Traceability,Mount,Passive attack
Journal
abs/0811.4
Citations 
PageRank 
References 
20
0.91
8
Authors
7