NDLI: Security Analysis of Ultra-lightweight Cryptographic Protocol for Low-cost RFID Tags: Gossamer Protocol

Content Provider	IEEE Xplore Digital Library
Author	Bilal, Z. Masood, A. Kausar, F.
Copyright Year	2009
Abstract	Gossamer protocol has been recently published to achieve mutual authentication in low-cost RFID tags. This protocol is considered to fall in ultra-lightweight class as it incorporates simple and low cost operations. Most of the earlier proposals in this class were exposed soon after their publication. Common weaknesses included use of Triangular functions and improper use of logic operators. Gossamer protocol used two non-triangular functions a) ROTbits and b) MIXbits. These functions provide confusion and diffusion properties and are implemented as cheaper operations. Thus, this protocol can be used for EPCglobal Class-1 Generation-2 standard (considered as universal standard for low-cost tags). This protocol is able to overcome existing weaknesses and is considered to be more attractive for low-capability devices as compared to earlier protocols of this class. In this paper, we analyze the security features provided by Gossamer protocol. The vulnerabilities discovered during this analysis reveal that different attacks including denial of service, memory and computation exhaustive, de-synchronization, replay, attack on data integrity and IDS (index pseudonym) collision are possible. As a consequence, we propose a new mutual authentication protocol keeping in mind the constraints and making use of the existing operations without addition of any expensive one. The analysis of the proposed protocol shows that it is resistant to all the attacks possible in case of Gossamer protocol. A comparative security analysis shows that proposed protocol provides better security features with a small compromise of communication overheads. Two additional public messages are exchanged between the reader and the tag to address the vulnerabilities present in Gossamer protocol.
Starting Page	260
Ending Page	267
File Size	413043
Page Count	8
File Format	PDF
ISBN	9781424447466
DOI	10.1109/NBiS.2009.9
Language	English
Publisher	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Publisher Date	2009-08-19
Publisher Place	USA
Access Restriction	Subscribed
Rights Holder	Institute of Electrical and Electronics Engineers, Inc. (IEEE)
Subject Keyword	Costs Ubiquitous Computing Educational institutions Security RFID tags Cryptographic protocols Privacy Ultralightweight Cryptography Authentication Mutual Authentication Cryptography Logic Radiofrequency identification
Content Type	Text
Resource Type	Article

Sl.	Authority	Responsibilities	Communication Details
1	Ministry of Education (GoI), Department of Higher Education	Sanctioning Authority	https://www.education.gov.in/ict-initiatives
2	Indian Institute of Technology Kharagpur	Host Institute of the Project: The host institute of the project is responsible for providing infrastructure support and hosting the project	https://www.iitkgp.ac.in
3	National Digital Library of India Office, Indian Institute of Technology Kharagpur	The administrative and infrastructural headquarters of the project	Dr. B. Sutradhar bsutra@ndl.gov.in
4	Project PI / Joint PI	Principal Investigator and Joint Principal Investigators of the project	Dr. B. Sutradhar bsutra@ndl.gov.in Prof. Saswat Chakrabarti will be added soon
5	Website/Portal (Helpdesk)	Queries regarding NDLI and its services	support@ndl.gov.in
6	Contents and Copyright Issues	Queries related to content curation and copyright issues	content@ndl.gov.in
7	National Digital Library of India Club (NDLI Club)	Queries related to NDLI Club formation, support, user awareness program, seminar/symposium, collaboration, social media, promotion, and outreach	clubsupport@ndl.gov.in
8	Digital Preservation Centre (DPC)	Assistance with digitizing and archiving copyright-free printed books	dpc@ndl.gov.in
9	IDR Setup or Support	Queries related to establishment and support of Institutional Digital Repository (IDR) and IDR workshops	idr@ndl.gov.in

Enhancements to a Lightweight RFID Authentication Protocol

FLMAP: A fast lightweight mutual authentication protocol for RFID systems

A Secure and Efficient Mutual Authentication Protocol for Low-Cost RFID Systems

Security and Privacy Analysis of RFID Authentication Protocol for Ubiquitous Computing

A Privacy-preserving Lightweight Authentication Protocol for Low-Cost RFID Tags

An ultralightweight mutual authentication protocol for low cost rfid tags.

Vulnerability Analysis of EMAP-An Efficient RFID Mutual Authentication Protocol

Mutual authentication protocol based on tag ID number updating for low-cost RFID

Hardware implementation of ultralightweight cryptographic protocols

Security Analysis of Ultra-lightweight Cryptographic Protocol for Low-cost RFID Tags: Gossamer Protocol

Similar Documents

Enhancements to a Lightweight RFID Authentication Protocol

FLMAP: A fast lightweight mutual authentication protocol for RFID systems

A Secure and Efficient Mutual Authentication Protocol for Low-Cost RFID Systems

Security and Privacy Analysis of RFID Authentication Protocol for Ubiquitous Computing

A Privacy-preserving Lightweight Authentication Protocol for Low-Cost RFID Tags

An ultralightweight mutual authentication protocol for low cost rfid tags.

Vulnerability Analysis of EMAP-An Efficient RFID Mutual Authentication Protocol

Mutual authentication protocol based on tag ID number updating for low-cost RFID

Hardware implementation of ultralightweight cryptographic protocols

Security Analysis of Ultra-lightweight Cryptographic Protocol for Low-cost RFID Tags: Gossamer Protocol