Designing secure PUF-based authentication protocols for constrained environments
Sang-Woong Lee, Masoumeh Safkhani, Quynh Le, Omed Hassan Ahmed, Mehdi Hosseinzadeh, Amir Masoud Rahmani, Nasour Bagheri · 2023
Read Designing secure PUF-based authentication protocols for constrained environments by Sang-Woong Lee, Masoumeh Safkhani, Quynh Le, Omed Hassan Ahmed, Mehdi Hosseinzadeh, Amir Masoud Rahmani, Nasour Bagheri (2023) in the Tower of Babel, a free online library of public-domain works preserved in clean, searchable text. No sign-up. The full text is served as a plain-text file at a predictable URL, where text is present: https://antarctic-labs.com/tower-of-babel/pmc-10709365.txt.
Description
Sang-Woong Lee and co-authors examined login protocols built on physical unclonable functions in 2023. These functions use unique traits of a chip to prove identity in small devices with little power. Two recent protocols, PLAKE and EV-PUF, claim to do this safely.
Their tests found serious flaws in both. An attacker who listens to a few PLAKE sessions can pull out the shared secret key with little work. A like attack on EV-PUF reveals keys, and one bad client can threaten the whole network. The authors then offer an improved protocol meant to block all the attacks they describe. The work stresses tight design and testing for such systems.
Catalog record
| CREATOR | Sang-Woong Lee, Masoumeh Safkhani, Quynh Le, Omed Hassan Ahmed, Mehdi Hosseinzadeh, Amir Masoud Rahmani, Nasour Bagheri |
|---|---|
| YEAR | 2023 |
| COLLECTION | PAPERS |
| FORMAT | TXT |
| FILE SIZE | 360 KB |
| VERSION | 1.0 |
| LICENSE | CC BY 4.0 |
| RIGHTS | CC BY |
| SOURCE | Europe PMC |