Cryptanalysis of ultralightweight mutual authentication protocol for radio frequency identification enabled Internet of Things networks

Internet of Things is one of the most important components of modern technological systems. It allows the real time synchronization and connectivity of devices with each other and with the rest of the world. The radio frequency identification system is used as node identification mechanism in the In...

Full description

Saved in:
Bibliographic Details
Main Authors: Madiha Khalid, Umar Mujahid, Muhammad Najam-ul-Islam
Format: Article
Language:English
Published: Wiley 2018-08-01
Series:International Journal of Distributed Sensor Networks
Online Access:https://doi.org/10.1177/1550147718795120
Tags: Add Tag
No Tags, Be the first to tag this record!
_version_ 1832556802567307264
author Madiha Khalid
Umar Mujahid
Muhammad Najam-ul-Islam
author_facet Madiha Khalid
Umar Mujahid
Muhammad Najam-ul-Islam
author_sort Madiha Khalid
collection DOAJ
description Internet of Things is one of the most important components of modern technological systems. It allows the real time synchronization and connectivity of devices with each other and with the rest of the world. The radio frequency identification system is used as node identification mechanism in the Internet of Thing networks. Since Internet of Things involve wireless channel for communication that is open for all types of malicious adversaries, therefore many security protocols have been proposed to ensure encryption over wireless channel. To reduce the overall cost of radio frequency identification enabled Internet of Thing network security, the researchers use simple bitwise logical operations such as XOR , AND , OR , and Rot and have proposed many ultralightweight mutual authentication protocols. However, almost all the previously proposed protocols were later found to be vulnerable against several attack models. Recently, a new ultralightweight mutual authentication protocol has been proposed which involves only XOR and Rotation functions in its design and claimed to be robust against all possible attack models. In this article, we have performed cryptanalysis of this recently proposed ultralightweight mutual authentication protocol and found many pitfalls and vulnerabilities in the protocol design. We have exploited weak structure of the protocol messages and proposed three attacks against the said protocol: one desynchronization and two full disclosure attacks.
format Article
id doaj-art-2e24e5a5681a47bca4e9fb4ea72b910b
institution Kabale University
issn 1550-1477
language English
publishDate 2018-08-01
publisher Wiley
record_format Article
series International Journal of Distributed Sensor Networks
spelling doaj-art-2e24e5a5681a47bca4e9fb4ea72b910b2025-02-03T05:44:19ZengWileyInternational Journal of Distributed Sensor Networks1550-14772018-08-011410.1177/1550147718795120Cryptanalysis of ultralightweight mutual authentication protocol for radio frequency identification enabled Internet of Things networksMadiha Khalid0Umar Mujahid1Muhammad Najam-ul-Islam2Department of Electrical Engineering, Bahria University, Islamabad, PakistanDepartment of Information Technology, Georgia Gwinnett College, Lawrenceville, GA, USADepartment of Electrical Engineering, Bahria University, Islamabad, PakistanInternet of Things is one of the most important components of modern technological systems. It allows the real time synchronization and connectivity of devices with each other and with the rest of the world. The radio frequency identification system is used as node identification mechanism in the Internet of Thing networks. Since Internet of Things involve wireless channel for communication that is open for all types of malicious adversaries, therefore many security protocols have been proposed to ensure encryption over wireless channel. To reduce the overall cost of radio frequency identification enabled Internet of Thing network security, the researchers use simple bitwise logical operations such as XOR , AND , OR , and Rot and have proposed many ultralightweight mutual authentication protocols. However, almost all the previously proposed protocols were later found to be vulnerable against several attack models. Recently, a new ultralightweight mutual authentication protocol has been proposed which involves only XOR and Rotation functions in its design and claimed to be robust against all possible attack models. In this article, we have performed cryptanalysis of this recently proposed ultralightweight mutual authentication protocol and found many pitfalls and vulnerabilities in the protocol design. We have exploited weak structure of the protocol messages and proposed three attacks against the said protocol: one desynchronization and two full disclosure attacks.https://doi.org/10.1177/1550147718795120
spellingShingle Madiha Khalid
Umar Mujahid
Muhammad Najam-ul-Islam
Cryptanalysis of ultralightweight mutual authentication protocol for radio frequency identification enabled Internet of Things networks
International Journal of Distributed Sensor Networks
title Cryptanalysis of ultralightweight mutual authentication protocol for radio frequency identification enabled Internet of Things networks
title_full Cryptanalysis of ultralightweight mutual authentication protocol for radio frequency identification enabled Internet of Things networks
title_fullStr Cryptanalysis of ultralightweight mutual authentication protocol for radio frequency identification enabled Internet of Things networks
title_full_unstemmed Cryptanalysis of ultralightweight mutual authentication protocol for radio frequency identification enabled Internet of Things networks
title_short Cryptanalysis of ultralightweight mutual authentication protocol for radio frequency identification enabled Internet of Things networks
title_sort cryptanalysis of ultralightweight mutual authentication protocol for radio frequency identification enabled internet of things networks
url https://doi.org/10.1177/1550147718795120
work_keys_str_mv AT madihakhalid cryptanalysisofultralightweightmutualauthenticationprotocolforradiofrequencyidentificationenabledinternetofthingsnetworks
AT umarmujahid cryptanalysisofultralightweightmutualauthenticationprotocolforradiofrequencyidentificationenabledinternetofthingsnetworks
AT muhammadnajamulislam cryptanalysisofultralightweightmutualauthenticationprotocolforradiofrequencyidentificationenabledinternetofthingsnetworks