Pitfalls in an Ultra-Lightweight Authentication Protocol for Low-Cost RFID

Radio Frequency Identification (RFID) is a radio communication technique. It identifies specific targets and acquires related data from the backend database by using radio frequency signal and no physical touch needed. Because of its advantages of low cost and remote identity recognition, RFID has been widely used in many applications. In 2011, Bassil et al. proposed an RFID authentication protocol based on physically unclonable functions. In this paper, we demonstrate that this protocol still insecure against forgery reader attack, de-synchronization attack and physical analytic cloning attack.