A practical implementation attack on weak pseudorandom number generator designs for EPC Gen2 tags - Archive ouverte HAL Accéder directement au contenu
Article Dans Une Revue Wireless Personal Communications Année : 2011

A practical implementation attack on weak pseudorandom number generator designs for EPC Gen2 tags

Résumé

The Electronic Product Code Generation 2 (EPC Gen2) is an international standard that proposes the use of Radio Frequency Identification (RFID) in the supply chain. It is designed to balance cost and functionality. As a consequence, security on board of EPC Gen2 tags is often minimal. It is, indeed, mainly based on the use of on board pseudorandomness, used to obscure the communication between readers and tags; and to acknowledge the proper execution of password-protected operations. In this paper, we present a practical implementation attack on a weak pseudorandom number generator (PRNG) designed specifically for EPC Gen2 tags. We show that it is feasible to eavesdrop a small amount of pseudorandom values by using standard EPC commands and using them to determine the PRNG configuration that allows to predict the complete output sequence.
Fichier principal
Vignette du fichier
wpc2010_rev.pdf (228.86 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)
Loading...

Dates et versions

hal-00623631 , version 1 (14-09-2011)

Identifiants

Citer

Joan Melia Segui, Joaquin Garcia Alfaro, Jordi Herrera Joancomarti. A practical implementation attack on weak pseudorandom number generator designs for EPC Gen2 tags. Wireless Personal Communications, 2011, 59 (1), pp.27-42. ⟨10.1007/s11277-010-0187-1⟩. ⟨hal-00623631⟩
83 Consultations
228 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More