In this paper, we present a security analysis of two authentication protocols SIDRFID and DIDRFID, proposed for low-cost RFID systems. These protocols are considered to employ ultra-lightweight functions and are very efficient. However, we demonstrate design flaws that result in full secret disclosure in both protocols. These disclosure attacks undermine the security of both protocols. Further analysis highlights additional attacks including traceability and reader impersonation.