Active attack against HB+: a provably secure lightweight authentication protocol.
H. Gilbert, M. Robshaw, and H. Sibert.
Abstract:

Much research has focused on providing RFID tags with lightweight cryptographic functionality. The HB+ authentication protocol was recently proposed and claimed to be secure against both passive and active attacks. A linear-time active attack against HB+ is proposed.