On the Security of Two RFID Mutual Authentication Protocols

TLDR: Huang et al. as discussed by the authors investigated the security of two RFID mutual authentication protocols and showed that these two protocols have several weaknesses, such as passive adversary can determine the 32-bit secret password with a probability of 2.2.

Abstract: In this paper, the security of two recent RFID mutual authentication protocols are investigated. The first protocol is a scheme proposed by Huang et al. [7] and the second one by Huang, Lin and Li [6]. We show that these two protocols have several weaknesses. In Huang et al.’s scheme, an adversary can determine the 32-bit secret password with a probability of \(2^{-2}\), and in Huang-Lin-Li scheme, a passive adversary can recognize a target tag with a success probability of \(1-2^{-4}\) and an active adversary can determine all 32 bits of Access password with success probability of \(2^{-4}\). The computational complexity of these attacks is negligible.