Overview
ISO/IEC 29192-4:2013/Amd 1:2016 is an amendment to the international standard focused on lightweight cryptography mechanisms using asymmetric techniques. Published by the International Organization for Standardization (ISO) and the International Electrotechnical Commission (IEC), this document extends the original part 4 of ISO/IEC 29192, which specifies efficient cryptographic methods designed for constrained environments. The amendment, issued in 2016, notably introduces the ELLI mechanism-a unilateral authentication scheme based on elliptic curve cryptography over finite fields of characteristic two.
This standard is crucial for the development of secure, lightweight cryptographic solutions that are suitable for devices with limited computational power, such as passive RFID tags. It enables enhanced security for identification, authentication, and anti-counterfeiting applications within distributed, resource-constrained systems.
Key Topics
-
Lightweight Cryptography: Focus on cryptographic methods optimized for low-resource environments, including IoT devices and RFID technology.
-
Asymmetric Cryptographic Mechanisms: The amendment adds four lightweight mechanisms based on asymmetric techniques, particularly emphasizing elliptic curve cryptography (ECC).
-
ELLI Unilateral Authentication:
- A novel scheme designed for passive RFID vicinity tags (operating at distances up to 1 meter).
- Based on discrete logarithms on elliptic curves defined over finite fields with characteristic two.
- Implements a challenge-response protocol allowing a verifier to authenticate a claimant securely and efficiently.
-
Elliptic Curve Parameters:
- Defines curves via short affine Weierstrass equations, focusing on properties such as subgroup order and domain parameters.
- Uses finite fields of characteristic two for efficient arithmetic compatible with resource-constrained devices.
-
Security Requirements: The document outlines essential cryptographic environment constraints, including key generation, verification processes, and protocol integrity checks, to ensure computational infeasibility of attacking the underlying discrete logarithm problem.
-
Mathematical Foundations: Incorporates advanced mathematical notations and operations critical for implementation, such as projective and affine coordinates, scalar multiplication functions (MUL), and field arithmetic.
-
Key Production and Authentication Workflow: Detailed steps are provided for generating key pairs, as well as executing the authentication procedure between verifier and claimant following a challenge-response paradigm.
Applications
-
RFID Tags and Smart Cards:
The ELLI scheme enables strong cryptographic authentication in passive RFID systems, particularly those compliant with ISO/IEC 15693 and ISO/IEC 18000-3 standards. This supports secure identification and brand protection in supply chains and logistics.
-
Resource-Constrained Devices:
Lightweight asymmetric cryptography mechanisms allow devices with limited processor power, memory, and energy to implement robust security protocols without sacrificing performance.
-
Anti-Counterfeiting Measures:
By embedding efficient unilateral authentication features in RFID tags, products and assets gain enhanced protection against counterfeiting and unauthorized duplication.
-
Internet of Things (IoT):
ECC-based lightweight authentication mechanisms such as ELLI promote secure communication and device identity verification within IoT ecosystems featuring constrained nodes.
-
Secure Key Exchange and Signature Applications:
The amendment supports additional schemes included in part 4, such as authenticated key exchange and identity-based signature mechanisms-critical for lightweight secure communication infrastructures.
Related Standards
-
ISO/IEC 29192 Lightweight Cryptography Series:
Part 1 to Part 3 cover general principles, stream ciphers, block ciphers, and hash functions tailored for lightweight applications.
-
ISO/IEC 15946-1:2008:
Details elliptic curve cryptography foundations, referenced extensively for mathematical consistency and elliptic curve group properties within ISO/IEC 29192-4.
-
ISO/IEC 15693 / 18000-3:
RFID communication standards defining vicinity tag operations relevant for deploying ELLI authentication on passive RFID systems.
-
ISO/IEC JTC 1/SC 27:
The subcommittee responsible for information security, cybersecurity, and privacy protection standards, under which ISO/IEC 29192 series is developed.
Practical Value
Implementing ISO/IEC 29192-4:2013/Amd 1:2016 allows organizations and developers to deploy lightweight asymmetric cryptography mechanisms that provide strong security guarantees with minimal resource overhead. The ELLI mechanism's introduction enhances RFID authentication capabilities, enabling scalable, cost-effective, and secure identification systems. This standard supports the evolving needs of IoT security, supply chain integrity, and anti-counterfeiting efforts, aligning international best practices with cutting-edge cryptographic advancements.
Adopting this standard facilitates compliance with recognized international security frameworks, ensuring interoperability and long-term support for lightweight security solutions in constrained environments.
Open preview (PDF)Information technology — Security techniques — Lightweight cryptography — Part 4: Mechanisms using asymmetric techniques — Amendment 1