  The Internet of Drones has emerged as a transformative technology with
applications spanning various domains, including surveillance, delivery
services, and disaster management. Secure communication between controller
users and drones is paramount to ensure the transmitted data's confidentiality,
integrity, and authenticity. Key agreement protocols are crucial in
establishing secure communication channels between users and drones, enabling
them to exchange sensitive information and control their operations securely.
Recently Nikooghadam et al. proposed a lightweight mutual authentication and
key agreement protocol for the Internet of drones. In this article, we provide
a descriptive analysis of their proposed scheme and prove that Nikooghadam et
al.'s scheme is vulnerable to user tracking attacks and stolen verifier
attacks.
