Implementation of secret disclosure attack against two IoT lightweight authentication protocols

摘要

Recently, security of the Internet of things on mobile phones, especially the fifth generation (5G), has attracted much attention. In this regard, state-of-the-art authentication protocols have been proposed with their focus on lightweight computations while preserving strong security. However, it has been shown that there are several attacks against these protocols, including denial of service, impersonation and desynchronization. In this paper, we present a secret disclosure attack which can be applied to many of these lightweight protocols that rely on rotation function. The complexity of our attack is only two consecutive protocol runs and with the success probability of 1. We also implement our proposed attack on two existing protocols to show its correctness. It is obvious that with revealing secret values, all other attacks can be applied.