Cryptanalysis of SPA Protocol

Abstract

In this paper, we analyze the security vulnerabilities of SPA, a Strong and lightweight RFID private authentication protocol proposed by Li Lu et al. We present an effective de-synchronization attack against the protocol, which permanently disables the authentication capability of a RFID tag by destroying synchronization between the tag and the reader. The de-synchronization attack can be carried out in just two rounds of interaction in SPA. Then we improved their scheme to protect against DoS attack.