On the Claimed Privacy of EC-RAC III

@article{Fan2010OnTC,
  title={On the Claimed Privacy of EC-RAC III},
  author={Junfeng Fan and Jens Hermans and Frederik Vercauteren},
  journal={IACR Cryptology ePrint Archive},
  year={2010},
  volume={2010},
  pages={132}
}
In this paper we show how to break the most recent version of EC-RAC with respect to privacy. We show that both the ID-Transfer and ID&PWD-Transfer schemes from EC-RAC do not provide the claimed privacy levels by using a man-in-the-middle attack. The existence of these attacks voids the presented privacy proofs for EC-RAC.