Strong Authentication and Strong Integrity (SASI) Is Not That Strong

In this work, we present a practical passive attack on SASI, an ultra-lightweight mutual authentication protocol for RFID. This attack can be used to reveal with overwhelming probability the secret ID of the prover by eavesdropping about 217 authentications. The result dismantles SASI and, more generally, provides a new approach that threatens ultra-lightweight authentication protocols. Key words: RFID, authentication, lightweight cryptography, privacy, passive attack

• Type: Journal
• Year: 2010
• Where: RFIDSEC
• Authors: Gildas Avoine, Xavier Carpent, Benjamin Martin 0002
• Keywords: Authentication Protocols, Passive Attack, RFIDSEC 2010, Security Privacy, Ultra-lightweight Mutual Authentication