Verification of PUF-based IoT Protocols with AVISPA and Scyther

Tomáš Rabas, Róbert Lórencz, Jiří Buček

2022

Abstract

Paper from 2020 (Buchovecká et al., 2020) suggests protocols suitable for lightweight IoT Devices. They are based on physical unclonable functions (PUF) which among others simplify the problem of key management on simple hardware devices and microcontrollers. These protocols are supposed to authenticate a device and distribute keys safely so that only the intended parties can know the key. We analysed suggested protocols using two automated verification tools AVISPA and Scyther. The analysis shows that there are several issues concerning the authentication property. We demonstrate the results from the tools and describe several attacks that exploit this vulnerability. Finally, we provide modified versions of these protocols that are resistant to those attacks and satisfy authentication as desired.

Paper Citation

in Harvard Style

Rabas T., Lórencz R. and Buček J. (2022). Verification of PUF-based IoT Protocols with AVISPA and Scyther. In Proceedings of the 19th International Conference on Security and Cryptography - Volume 1: SECRYPT, ISBN 978-989-758-590-6, pages 627-635. DOI: 10.5220/0011299000003283

in Bibtex Style

@conference{secrypt22,
author={Tomáš Rabas and Róbert Lórencz and Jiří Buček},
title={Verification of PUF-based IoT Protocols with AVISPA and Scyther},
booktitle={Proceedings of the 19th International Conference on Security and Cryptography - Volume 1: SECRYPT,},
year={2022},
pages={627-635},
publisher={SciTePress},
organization={INSTICC},
doi={10.5220/0011299000003283},
isbn={978-989-758-590-6},
}

in EndNote Style

TY - CONF

JO - Proceedings of the 19th International Conference on Security and Cryptography - Volume 1: SECRYPT,
TI - Verification of PUF-based IoT Protocols with AVISPA and Scyther
SN - 978-989-758-590-6
AU - Rabas T.
AU - Lórencz R.
AU - Buček J.
PY - 2022
SP - 627
EP - 635
DO - 10.5220/0011299000003283