Security Analysis of Two Distance-Bounding Protocols
From MaRDI portal
Abstract: In this paper, we analyze the security of two recently proposed distance bounding protocols called the Hitomi and the NUS protocols. Our results show that the claimed security of both protocols has been overestimated. Namely, we show that the Hitomi protocol is susceptible to a full secret key disclosure attack which not only results in violating the privacy of the protocol but also can be exploited for further attacks such as impersonation, ma?a fraud and terrorist fraud attacks. Our results also demonstrates that the probability of success in a distance fraud attack against the NUS protocol can be increased up to (3/4)^n and even slightly more, if the adversary is furnished with some computational capabilities.
Recommendations
- The Bussard-Bagga and Other Distance-Bounding Protocols under Attacks
- Formal analysis of distance bounding with secure hardware
- Protocol security analysis based on an ideal
- Towards secure distance bounding
- scientific article; zbMATH DE number 1927581
- scientific article; zbMATH DE number 1949618
- scientific article; zbMATH DE number 1977207
Cited in
(9)- Assumption-based analysis of distance-bounding protocols with \textsc{cpsa}
- Short paper: Terrorist fraud in distance bounding: getting around the models
- Analysis of false-reject probability in distance bounding protocols with mixed challenges over RFID noisy communication channel
- On modeling terrorist frauds. Addressing collusion in distance bounding protocols
- On the pseudorandom function assumption in (secure) distance-bounding protocols. PRF-ness alone does not stop the frauds!
- Optimal proximity proofs
- scientific article; zbMATH DE number 1977207 (Why is no real title available?)
- The Bussard-Bagga and Other Distance-Bounding Protocols under Attacks
- On the security of carrier phase-based ranging
This page was built for publication: Security Analysis of Two Distance-Bounding Protocols
Report a bug (only for logged in users!)Click here to report a bug for this page (MaRDI item Q2902477)