SoK: Attacks on Modern Card Payments

Fuente: arXiv
Guardado en:
Detalles Bibliográficos
Autores principales: Hofmeier, Xenia, Basin, David, Sasse, Ralf, Toro-Pozo, Jorge
Formato: Preprint
Publicado: 2025
Materias:
Acceso en línea:
Etiquetas: Agregar Etiqueta
Sin Etiquetas, Sea el primero en etiquetar este registro!
_version_ 1866913776427597824
author Hofmeier, Xenia
Basin, David
Sasse, Ralf
Toro-Pozo, Jorge
author_facet Hofmeier, Xenia
Basin, David
Sasse, Ralf
Toro-Pozo, Jorge
contents EMV is the global standard for smart card payments and its NFC-based version, EMV contactless, is widely used, also for mobile payments. In this systematization of knowledge, we examine attacks on the EMV contactless protocol. We provide a comprehensive framework encompassing its desired security properties and adversary models. We also identify and categorize a comprehensive collection of protocol flaws and show how different subsets thereof can be combined into attacks. In addition to this systematization, we examine the underlying reasons for the many attacks against EMV and point to a better way forward.
format Preprint
id arxiv_https___arxiv_org_abs_2504_03363
institution arXiv
publishDate 2025
record_format arxiv
spellingShingle SoK: Attacks on Modern Card Payments
Hofmeier, Xenia
Basin, David
Sasse, Ralf
Toro-Pozo, Jorge
Cryptography and Security
EMV is the global standard for smart card payments and its NFC-based version, EMV contactless, is widely used, also for mobile payments. In this systematization of knowledge, we examine attacks on the EMV contactless protocol. We provide a comprehensive framework encompassing its desired security properties and adversary models. We also identify and categorize a comprehensive collection of protocol flaws and show how different subsets thereof can be combined into attacks. In addition to this systematization, we examine the underlying reasons for the many attacks against EMV and point to a better way forward.
title SoK: Attacks on Modern Card Payments
topic Cryptography and Security
url https://arxiv.org/abs/2504.03363