 50 bits of known (or chosen) key stream are available.This attack reveals the key from sniffed transactions under certain (common) circumstances and/or allows an attacker to learn the key by challenging the reader device.The attack proposed in recovers the secret key in about 40 ms on a laptop.