Cryptanalysis of a Lightweight Privacy Enhancing Authentication Scheme for Internet of Vehicles
Arijit Karati, Li-Chun Chang · 2023
Recent attention has been focused on using authentication and key agreement (AKA) protocols to allow secure vehicle-to-everything (V2X) communication. Typically, such security solutions are effective against passive eavesdroppers who tap the lines and attempt to decipher the message. It has been noted, however, that an improperly designed protocol could be susceptible to an active saboteur, who could impersonate another vehicle or alter the broadcast message. In this paper, we conduct cryptanalytic attacks on a recently proposed energy-efficient authentication protocol. To do this, we employ hybrid techniques to solve the algebraic systems that occur naturally while mounting multiple forgeries. Based on cryptanalysis, we demonstrate that the algorithms and characterizations utilized in this protocol are susceptible to several security flaws, such as inappropriate anonymity, session-independent key agreement, exposing multiple keys, replay, and vehicle impersonation. In addition, this paper provides precepts for constructing a safe V2X authentication system.