Overview
ISO/IEC 29167-11:2025 specifies a crypto suite based on the lightweight block cipher PRESENT-80 for air interface communications used in RFID systems (the ISO/IEC 18000 series). The third edition formalizes security services and methods of use for PRESENT with 80‑bit keys and also considers the 128‑bit key variant. The standard defines common security building blocks aligned with existing air interfaces to enable interoperable, resource‑efficient cryptographic protection for RFID tags and interrogators.
Key topics and requirements
- Scope and conformance: Defines requirements for both Interrogators (readers) and Tags to conform with the crypto suite; includes mandatory and optional commands and conformance testing references.
- PRESENT cipher use: Specifies use of the lightweight block cipher PRESENT-80 and notes consideration of a 128‑bit key variant. Annex C provides an informative description of PRESENT.
- Security services: Specifies basic security services for air interface communications, including Tag Authentication (TA), Interrogator Authentication (IA) and Mutual Authentication (MA). Message types and flows (e.g., TAM1, IAM1/IAM2, MAM1/MAM2) are detailed.
- Protocol elements: Defines parameters, variables, state diagrams, initialization/reset behavior, message/response formatting, and communication procedures for the crypto suite.
- Key management: Includes key table structure and key update mechanisms appropriate for constrained RFID devices.
- Error handling & testing: Normative annexes cover state transition tables and error handling; informative annexes include test vectors for validation.
- Alignment with air interfaces: Protocol‑specific guidance (Annex E) updated to reflect over‑the‑air protocol changes.
Practical applications
- RFID item management and supply chain security: Protects tag-reader exchanges against cloning, impersonation and replay attacks while maintaining low computational footprint.
- Asset tracking & inventory control: Enables authenticated reads/writes and secure device identification in logistics and retail.
- Access control and IoT endpoints: Suitable where ultra‑low‑power or cost‑constrained RFID tags require cryptographic protection.
- Device manufacturers and integrators: Provides a standardized crypto suite for tag and reader firmware, enabling interoperability across air interface implementations.
Who should use this standard
- RFID tag and reader manufacturers implementing lightweight cryptography
- System integrators and solution architects designing secure RFID deployments
- Test laboratories and conformity assessors validating ISO/IEC 18000 implementations
- Standards developers and security engineers specifying air interface security requirements
Related standards
Keywords: ISO/IEC 29167-11:2025, PRESENT-80, RFID security, lightweight block cipher, air interface communications, ISO/IEC 18000.