{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,10,12]],"date-time":"2025-10-12T04:26:58Z","timestamp":1760243218403,"version":"build-2065373602"},"reference-count":37,"publisher":"MDPI AG","issue":"4","license":[{"start":{"date-parts":[[2014,4,9]],"date-time":"2014-04-09T00:00:00Z","timestamp":1397001600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/3.0\/"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Sensors"],"abstract":"<jats:p>This paper analyzes the cryptographic security of J3Gen, a promising pseudo random number generator for low-cost passive Radio Frequency Identification (RFID) tags. Although J3Gen has been shown to fulfill the randomness criteria set by the EPCglobal Gen2 standard and is intended for security applications, we describe here two cryptanalytic attacks that question its security claims: (i) a probabilistic attack based on solving linear equation systems; and (ii) a deterministic attack based on the decimation of the output sequence. Numerical results, supported by simulations, show that for the specific recommended values of the configurable parameters, a low number of intercepted output bits are enough to break J3Gen. We then make some recommendations that address these issues.<\/jats:p>","DOI":"10.3390\/s140406500","type":"journal-article","created":{"date-parts":[[2014,4,9]],"date-time":"2014-04-09T12:05:28Z","timestamp":1397045128000},"page":"6500-6515","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":19,"title":["EPCGen2 Pseudorandom Number Generators: Analysis of J3Gen"],"prefix":"10.3390","volume":"14","author":[{"given":"Alberto","family":"Peinado","sequence":"first","affiliation":[{"name":"Escuela T\u00e9cnica Superior de Ingenier\u00eda de Telecomunicaci\u00f3n, Universidad de M\u00e1laga, M\u00e1laga, Spain"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2795-312X","authenticated-orcid":false,"given":"Jorge","family":"Munilla","sequence":"additional","affiliation":[{"name":"Escuela T\u00e9cnica Superior de Ingenier\u00eda de Telecomunicaci\u00f3n, Universidad de M\u00e1laga, M\u00e1laga, Spain"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Amparo","family":"F\u00faster-Sabater","sequence":"additional","affiliation":[{"name":"Instituto de Tecnolog\u00edas F\u00edsicas y de la Informaci\u00f3n, Consejo Superior de Investigaciones Cient\u00edficas, Madrid, Spain"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"1968","published-online":{"date-parts":[[2014,4,9]]},"reference":[{"key":"ref_1","first-page":"97","article-title":"That \u2018Internet of Things\u2019 Thing","volume":"22","author":"Ashton","year":"2009","journal-title":"RFID J."},{"key":"ref_2","doi-asserted-by":"crossref","unstructured":"Finkenzeller, K. (2003). RFID Handbook: Fundamentals and Applications in Contactless Smart Cards and Identification, John Wiley & Sons. [2nd ed.].","DOI":"10.1002\/0470868023"},{"key":"ref_3","unstructured":"European Comission Commission launches consultation on Radio Frequency Identification (RFID). Available online: http:\/\/ec.europa.eu\/digital-agenda\/en\/news\/commission-launches-consultation-radio-frequency-identification-rfid."},{"key":"ref_4","unstructured":"The European Parliament and the Council of the European Union. Directive 95\/46\/EC."},{"key":"ref_5","unstructured":"Gohring, N. California Makes It a Crime to \u2018skim\u2019 RFID Tags. Available online: http:\/\/www.pcworld.com\/article\/151822\/article.html."},{"key":"ref_6","unstructured":"EPC Global UHF Air Interface Protocol Standard Generation2\/Version2. Available online: http:\/\/www.gs1.org\/gsmp\/kc\/epcglobal\/uhfc1g2."},{"key":"ref_7","unstructured":"ISO\/IEC Standard # 18000\u2014RFID Air Interface Standard. Available online: http:\/\/www.hightechaid.com\/standards\/18000.htm."},{"key":"ref_8","doi-asserted-by":"crossref","first-page":"303","DOI":"10.1007\/11832072_21","article-title":"Shoehorning security into the EPC standard","volume":"4116","author":"Bailey","year":"2006","journal-title":"Secur. Cryptogr. Netw."},{"key":"ref_9","doi-asserted-by":"crossref","unstructured":"Karthikeyan, S., and Nesterenko, M. (2005, January 7\u201310). RFID Security without Extensive Cryptography. Alexandria, VA, USA.","DOI":"10.1145\/1102219.1102229"},{"key":"ref_10","doi-asserted-by":"crossref","first-page":"254","DOI":"10.1016\/j.csi.2006.04.004","article-title":"Mutual authentication protocol for RFID conforming to EPC Class 1 Generation 2 standards","volume":"29","author":"Chien","year":"2007","journal-title":"Comput. Stand. Interfaces"},{"key":"ref_11","doi-asserted-by":"crossref","unstructured":"Qingling, C., Yiju, Z., and Yonghua, W. (2008, January 3\u20134). A Minimalist Mutual Authentication Protocol for RFID System and BAN Logic Analysis. Guangzhou, China.","DOI":"10.1109\/CCCM.2008.305"},{"key":"ref_12","unstructured":"Burmester, M., and Munilla, J. (2009, January 30). A Flyweight RFID Authentication Protocol. Leuven, Belgium."},{"key":"ref_13","doi-asserted-by":"crossref","first-page":"1124","DOI":"10.1016\/j.csi.2008.12.002","article-title":"Anti-cloning protocol suitable to EPCglobal Class-1 Generation-2 RFID systems","volume":"31","author":"Choi","year":"2009","journal-title":"Comput. Stand. Interfaces"},{"key":"ref_14","doi-asserted-by":"crossref","unstructured":"Burmester, M., and Munilla, J. (2011). Lightweight RFID authentication with forward and backward security. ACM Trans. Inf. Syst. Secur.","DOI":"10.1145\/1952982.1952993"},{"key":"ref_15","doi-asserted-by":"crossref","first-page":"1589","DOI":"10.1016\/j.eswa.2011.07.053","article-title":"Improvement of the Securing RFID systems conforming to EPC Class 1 Generation 2 standard","volume":"39","author":"Yoon","year":"2012","journal-title":"Expert Syst. Appl."},{"key":"ref_16","doi-asserted-by":"crossref","first-page":"7678","DOI":"10.1016\/j.eswa.2010.04.074","article-title":"Securing RFID systems conforming to EPC Class 1 Generation 2 standard","volume":"37","author":"Yeh","year":"2010","journal-title":"Expert Syst. Appl."},{"key":"ref_17","doi-asserted-by":"crossref","first-page":"1573","DOI":"10.1109\/TIE.2009.2037098","article-title":"Hardware Implementation of RFID Mutual Authentication Protocol","volume":"57","author":"Huang","year":"2010","journal-title":"IEEE Trans. Ind. Electron."},{"key":"ref_18","doi-asserted-by":"crossref","first-page":"3","DOI":"10.1007\/978-3-642-14992-4_2","article-title":"Hummingbird: Ultra-Lightweight Cryptography for Resource-Constrained Devices","volume":"6054","author":"Engels","year":"2010","journal-title":"Financ. Cryptogr. Data Secur."},{"key":"ref_19","unstructured":"Bono, S.C., Green, M., Stubblefield, A., Juels, A., Rubin, A.D., and Szydlo, M. (August, January 31). Security Analysis of a Cryptographically-Enabled RFID Device. Baltimore, MD, USA."},{"key":"ref_20","doi-asserted-by":"crossref","first-page":"86","DOI":"10.1504\/IJWMC.2007.013798","article-title":"Grain: A stream cipher for constrained environments","volume":"2","author":"Hell","year":"2007","journal-title":"Int. J. Wirel. Mob. Comput."},{"key":"ref_21","unstructured":"De Canni\u00e8re, C., and Preneel, B. Available online:http:\/\/www.ecrypt.eu.org\/stream\/triviumpf.html."},{"key":"ref_22","doi-asserted-by":"crossref","first-page":"88","DOI":"10.1016\/j.csi.2007.11.013","article-title":"LAMED\u2013A PRNG for EPC Class-1 Generation-2 RFID specification","volume":"31","author":"Ribagorda","year":"2009","journal-title":"Comput. Stand. Interfaces"},{"key":"ref_23","doi-asserted-by":"crossref","unstructured":"Martin, H., San Millan, E., Entrena, L., Lopez, P., and Castro, J. (2011, January 13\u201315). AKARI-X: A pseudorandom number generator for secure lightweight systems. Athens, Greece.","DOI":"10.1109\/IOLTS.2011.5994534"},{"key":"ref_24","doi-asserted-by":"crossref","unstructured":"Gelenbe, E., and Lent, R. (2013). Computer and Information Sciences III, Springer.","DOI":"10.1007\/978-1-4471-4594-3"},{"key":"ref_25","doi-asserted-by":"crossref","unstructured":"Meli\u00e0-Segu\u00ed, J., Garcia-Alfaro, J., and Herrera-Joancomart\u00ed, J. (2011, January 7\u201310). Multiple-polynomial LFSR based pseudorandom number generator for EPC Gen2 RFID tags. Melbourne, Australia.","DOI":"10.1109\/IECON.2011.6119932"},{"key":"ref_26","doi-asserted-by":"crossref","first-page":"82","DOI":"10.20533\/ijrfidsc.2046.3715.2013.0011","article-title":"Warbler: A Lightweight Pseudorandom Number Generator for EPC C1 Gen2 Passive RFID Tags","volume":"2","author":"Mandal","year":"2013","journal-title":"Int. J. RFID Secur. Cryptogr."},{"key":"ref_27","doi-asserted-by":"crossref","first-page":"3816","DOI":"10.3390\/s130303816","article-title":"J3Gen: A PRNG for Low-Cost Passive RFID","volume":"13","year":"2013","journal-title":"Sensors"},{"key":"ref_28","doi-asserted-by":"crossref","first-page":"727","DOI":"10.1016\/j.adhoc.2010.08.020","article-title":"A light-weight authentication scheme for wireless sensor networks","volume":"9","author":"Sierra","year":"2011","journal-title":"Ad Hoc Netw."},{"key":"ref_29","doi-asserted-by":"crossref","first-page":"193","DOI":"10.1016\/j.adhoc.2011.09.002","article-title":"Information security for sensors by overwhelming random sequences and permutations","volume":"12","author":"Dolev","year":"2014","journal-title":"Ad Hoc Netw."},{"key":"ref_30","unstructured":"Nohl, K., Evans, D., Starbug, S., and Pl\u00f6tz, H. (August, January 28). Reverse-engineering a Cryptographic RFID Tag. San Jose, CA, USA."},{"key":"ref_31","unstructured":"Rukhin, A., Soto, J., Nechvatal, J., Smid, M., Barker, E., Leigh, S., Levenson, M., Vangel, M., Banks, D., and Heckert, A. A Statistical Test Suite for Random and Pseudorandom Number Generators for Cryptographic Applications. Available online: http:\/\/csrc.nist.gov\/publications\/nistpubs\/800-22-rev1a\/SP800-22rev1a.pdf."},{"key":"ref_32","unstructured":"Golomb, S. (1982). Shift-Register Sequences, Aegean Park Press."},{"key":"ref_33","doi-asserted-by":"crossref","first-page":"2596","DOI":"10.1016\/j.mcm.2011.07.023","article-title":"Generation of pseudorandom binary sequences by means of linear feedback shift registers (LFSRs) with dynamic feedback","volume":"57","author":"Peinado","year":"2013","journal-title":"Math. Comput. Model."},{"key":"ref_34","doi-asserted-by":"crossref","first-page":"637","DOI":"10.1109\/12.589245","article-title":"Comments on \u201cTheory and Applications of Cellular Automata in Cryptography\u201d","volume":"46","author":"Blackburn","year":"1997","journal-title":"IEEE Trans. Comput."},{"key":"ref_35","doi-asserted-by":"crossref","first-page":"400","DOI":"10.1109\/18.370141","article-title":"Theory and applications of q-ary interleaved sequences","volume":"41","author":"Gong","year":"1995","journal-title":"IEEE Trans. Inf. Theory"},{"key":"ref_36","doi-asserted-by":"crossref","first-page":"122","DOI":"10.1109\/TIT.1969.1054260","article-title":"Shift-register synthesis and BCH decoding","volume":"15","author":"Massey","year":"1969","journal-title":"IEEE Trans. Inf. Theory"},{"key":"ref_37","doi-asserted-by":"crossref","first-page":"1097","DOI":"10.1049\/el:20020750","article-title":"Pseudorandom bit generator based on dynamic linear feedback topology","volume":"38","author":"Mita","year":"2002","journal-title":"Electron. Lett."}],"container-title":["Sensors"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/1424-8220\/14\/4\/6500\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,11]],"date-time":"2025-10-11T21:10:03Z","timestamp":1760217003000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/1424-8220\/14\/4\/6500"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2014,4,9]]},"references-count":37,"journal-issue":{"issue":"4","published-online":{"date-parts":[[2014,4]]}},"alternative-id":["s140406500"],"URL":"https:\/\/doi.org\/10.3390\/s140406500","relation":{},"ISSN":["1424-8220"],"issn-type":[{"type":"electronic","value":"1424-8220"}],"subject":[],"published":{"date-parts":[[2014,4,9]]}}}