Best Effort and Practice Activation Codes

Activation Codes are used in many different digital services and known by many different names including voucher, e-coupon and discount code. In this paper we focus on a specific class of ACs that are short, human-readable, fixed-length and represent value. Even though this class of codes is extensively used there are no general guidelines for the design of Activation Code schemes. We discuss different methods that are used in practice and propose BEPAC, a new Activation Code scheme that provides both authenticity and confidentiality. The small message space of activation codes introduces some problems that are illustrated by an adaptive chosen-plaintext attack (CPA-2) on a general 3-round Feis- tel network of size 2^(2n) . This attack recovers the complete permutation from at most 2^(n+2) plaintext-ciphertext pairs. For this reason, BEPAC is designed in such a way that authenticity and confidentiality are in- dependent properties, i.e. loss of confidentiality does not imply loss of authenticity.Comment: 15 pages, 3 figures, TrustBus 201

The SmartLogic Tool: Analysing and Testing Smart Card Protocols

Contains fulltext : 94132.pdf (preprint version ) (Open Access)ICST 2012 : IEEE Fifth International Conference on Software Testing, Verification and Validation (ICST), SECTEST 2012, 17 april 201

Outsmarting smart cards

Contains fulltext : 106920.pdf (publisher's version ) (Open Access)Radboud Universiteit Nijmegen, 11 april 2013Promotor : Jacobs, B.P.F. Co-promotor : Garcia, F. D.180 p

Tutorial: Proxmark, the Swiss Army Knife for RFID Security Research : Tutorial at 8th Workshop on RFID Security and Privacy (RFIDSec 2012)

Contains fulltext : 94153.pdf (preprint version ) (Open Access)9 p

Exposing iClass key diversification

Contains fulltext : 91798.pdf (author's version ) (Open Access)WOOT'11 Proceedings of the 5th USENIX conference on Offensive technologie

A Toolbox for RFID Protocol Analysis

Contains fulltext : 103299.pdf (author's version ) (Open Access)2012 Fourth International EURASIP Workshop on RFID Technology (EURASIP RFID), 27-28 Sept. 2012, Torino, Ital

Dismantling MIFARE Classic

Contains fulltext : 72188.pdf (publisher's version ) (Closed access)Computer security - ESORICS 2008 : 13th European Symposium on Research in Computer Security, 6 oktober 200