However, it
is a challenging task to design an authentication protocol due
to the limited resource of low-cost RFID tags. Kulseng et al.
recently proposed a lightweight RFID authentication protocol
at INFOCOM 2010. They also extended this scheme to secure
the ownership transfer of RFID tags. Both protocols use a
combination of Physically Unclonable Functions (PUFs) and
Linear Feedback Shift Registers (LFSRs). They claim that in
this way the number of gates can be significantly decreased and
the most efficient protocol can be obtained with respect to the
existing protocols. In this paper, we revisit their protocol and
show that there are actually several serious protocol issues which
compromises the overall security.