ISO/IEC 29167-13:2015

Overview

ISO/IEC 29167-13:2015 specifies a crypto suite based on the Grain-128A stream cipher for air‑interface communications in RFID systems. It defines how Grain‑128A is used within the ISO/IEC 18000 family to provide optional security services for tags and interrogators (readers). The document covers cipher initialization, authentication flows, authenticated communication, key management and conformance rules so implementers can deploy a common, lightweight cryptographic option for RFID air interfaces.

Key topics and technical requirements

• Cipher and parameters: Description and use of the Grain‑128A stream cipher (part of the Grain family designed for hardware efficiency; supports 128‑bit keys and IV handling consistent with air‑interface needs).
• Authentication methods: Defined procedures for Tag Authentication (TA), Interrogator Authentication (IA) and Mutual Authentication (MA) including message payloads and final processing steps.
• Communication modes:
  • Authenticated Communication (integrity/authentication)
  • Secure Authenticated Communication (confidentiality plus authentication)
• Initialization and state management: State diagrams, initialization/reset rules, and state transition tables for robust protocol behavior.
• Key management: Key tables, key update mechanisms and requirements for claiming conformance.
• Conformance and obligations: Mandatory vs optional commands; rules for tags and interrogators to claim compliance.
• Supporting material: Normative cipher description, protocol specifics, test vectors and error handling in annexes for validation and interoperability testing.
• Intellectual property considerations: Patent declarations are noted (e.g., IP from vendors such as Impinj), with guidance to consult ISO patent listings.

Applications and who should use it

ISO/IEC 29167-13 is intended for organizations and professionals working with RFID security who need a lightweight, standardized crypto option:

• RFID tag and reader manufacturers implementing air‑interface security services.
• System integrators deploying secure RFID solutions for supply chain, inventory, access control, tolling and asset tracking.
• Security architects and embedded engineers choosing a hardware-efficient stream cipher for low-power, constrained devices.
• Standards bodies and test labs validating conformance, interoperability and compliance with ISO/IEC 18000 family requirements.

Practical benefits include standardized authentication mechanisms, reduced integration risk, and an interoperable lightweight crypto option suitable for constrained RFID devices.

Related standards

• ISO/IEC 29167-1 (security services for RFID air interfaces)
• ISO/IEC 18000 series (air interface standards for RFID)
• Other ISO/IEC 29167 parts (e.g., AES, PRESENT, ECC‑DH) for alternative crypto suites

Keywords: ISO/IEC 29167-13:2015, Grain-128A, RFID security, air interface, crypto suite, authentication, stream cipher, ISO/IEC 18000.