A Provably Secure, Lightweight Protocol for Anonymous Authentication

We propose a lightweight, anonymous authentication protocol that can be based on any block cipher and is suitable for use by, e.g., RFID tags. We formally define three security properties that our protocol is intended to satisfy-mutual authentication, anonymity, and desynchronization resilience-and prove concrete bounds on the probability the protocol satisfies these properties in the presence of an active attacker. Our protocol is more efficient than any other protocol we are aware of that achieves these three properties.