No abstract uploaded!

No abstract uploaded!

MIFARE Classic is the world’s most widely deployed RFID (radio-frequency identification) technology. It was claimed to be cryptographically protected by the proprietary Crypto-1 stream cipher. However, it proved inadequate after weaknesses in the design and implementation of Crypto-1 and MIFARE Classic started surfacing since late 2007 [7, 8, 12–17]. Some operators of MIFARE Classic-based systems reacted by upgrading to more secure alternatives such as MIFARE DESFire. However, many (especially in Asia) opted to “patch” MIFARE Classic instead. Their risk analysis might have gone as follows: “The most serious threat comes from efficient card-only attacks, where the attacker only needs an off-the-shelf reader and a PC to tamper a target tag. All efficient card-only attacks depend on certain implementation flaws. Ergo, if we just fix these flaws, we can stop the most serious attacks without an expensive infrastructure upgrade.” One such prominent case is “EasyCard 2.0,” today accepted in Taiwan as a means of electronic payment not only in public transportation but also in convenient stores, drug stores, eateries, cafes, supermarkets, book stores, movie theaters, etc. Obviously, the whole “patching” approach is questionable because Crypto-1 is fundamentally a weak cipher. In support of the proposition, we present a new card-only attack based on state-of-the-art algebraic differential cryptanalytic techniques [1, 2]. Still using the same cheap reader as previous attacks, it takes 2–15 min of computation on a PC to recover a secret key of EasyCard 2.0 after 10–20 h of data collection. We hope the new attack makes our point sufficiently clear, and we urge that all MIFARE-Classic operators with important transactions such as electronic payment upgrade their systems to the more secure alternatives soon.

An explicit Fredholm determinant formula is derived for the multipoint distribution of the height function of the totally asymmetric simple exclusion process (TASEP) with arbitrary right-finite initial condition. The method is by solving the biorthogonal ensemble/non-intersecting path representation found by [54], [10]. The resulting kernel involves transition probabilities of a random walk forced to hit a curve defined by the initial data. In the KPZ 1:2:3 scaling limit the formula leads in a transparent way to a Fredholm determinant formula, in terms of analogous kernels based on Brownian motion, for the transition probabilities of the scaling invariant Markov process at the centre of the KPZ universality class. The formula readily reproduces known special self-similar solutions such as the Airy1 and Airy2 processes. The process takes values in real valued functions which look locally like Brownian motion, and is Hölder 1/3−in time. Both the KPZ fixed point and TASEP are shown to be stochastic integrable systems in the sense that the time evolution of their transition probabilities can be linearized through a new Brownian scattering transform and its discrete analogue.

No abstract uploaded!