In this work, we present a practical passive attack on SASI,an ultra-lightweight mutual authentication protocol for RFID. This attack can be used to reveal with overwhelming probability the secret ID of the prover by eavesdropping about 217 authentications. The result dismantles SASI and, more generally, provides a new approach that threatens ultraightweight authentication protocols.
Avoine, G., Carpent, X., & Martin, B. (2010). Strong authentication and strong integrity (SASI) is not that strong. Proceedings of the 6th international conference on Radio frequency identification: security and privacy issues, p. 50-64. https://hdl.handle.net/2078.5/221693