3 ms·

I hope the next revision of MAVLink (one of the most common message serialization/transport protocols used for UAVs) will have built-in encryption. While syste

by fest 9y ago

I hope the next revision of MAVLink (one of the most common message serialization/transport protocols used for UAVs) will have built-in encryption. While systems can encrypt MAVLink messages in transit, I have not seen it actually done- everyone is relying on security of the physical layer (i.e. obscurity of telemetry radio frequency hopping/channel negotiation, WiFi security). So in most implementations, MAVLink messages are actually transmitted in plaintext, over plain TCP/UDP connections.

SkyDrone 9y ago
In our product "Sky Drone FPV" we encrypt the MAVLink channel via DTLS.
- fest 9y ago
  Cool, kudos for taking a responsible approach!
- fest 9y ago
  I understand it might be a trade secret, but what LTE modem do you use on receiver side? I would like to use LTE more, but finding suitable modems for embedded uses has been a challenge.
  - SkyDrone 9y ago
    True, LTE modem protocols are a bit of a mess. You can get a good overview here: https://aleksander.es/data/FOSDEM2013%20-%20Mobile%20broadband%20modem%20control%20protocols.pdf https://aleksander.es/data/FOSDEM2013%20-%20Mobile%20broadba...
mburshteyn 9y ago
We're working on this at CryptoMove: https://www.dhs.gov/science-and-technology/news/2017/03/29/news-release-cbp-and-st-award-200k-san-mateo-start https://www.dhs.gov/science-and-technology/news/2017/03/29/n...
cnnsucks 9y ago
Many of these systems are using the amateur radio service bands. Often 5GHz for video, 2.3-2.4GHz for control and telemetry and less frequently 1.2GHz, 900MHz and 70cm are also used. The FCC doesn't allow encrypted traffic on amateur bands except for specific cases such as satellite telecommand. I suppose that has discouraged adoption of cryptography. What are commercial operators doing? Another limitation of Amateur bands is that they can't be used for commercial purposes, so licensed commercial drone operators must be using commercial bands where cryptography is permitted. Don't know myself; haven't looked into it.
- monkmartinez 9y ago
  > Another limitation of Amateur bands is that they can't be used for commercial purposes, so licensed commercial drone operators must be using commercial bands where cryptography is permitted. I don't think so. I think we can agree that many, many commercial operators use DJI. There are also lots of amateurs using DJI. Both use the same firmware. There is no option for me to encrypt or unencrypt my Phantom which I could easily use commercially if I had my FAA Part 107.
  - cnnsucks 9y ago
    I see. So they're operating in the ISM portion of 2.4 and 5GHz. In that case they can encrypt. So the original question seems a good one; why haven't they yet?
- bradyd 9y ago
  My understanding is that there is an exemption in amateur radio for model aircraft control signals that allows encryption [1]. [1] https://www.govregs.com/regulations/title47_chapterI_part97_subpartC_section97.215 https://www.govregs.com/regulations/title47_chapterI_part97_...
- zkms 9y ago
  > The FCC doesn't allow encrypted traffic on amateur bands Would traffic that is not encrypted but is instead authenticated (with a MAC tag or AEAD'd) be allowed? What are the exact FCC rules and laws at work?

by fest 9y ago

SkyDrone 9y ago

In our product "Sky Drone FPV" we encrypt the MAVLink channel via DTLS.

fest 9y ago
Cool, kudos for taking a responsible approach!
fest 9y ago
I understand it might be a trade secret, but what LTE modem do you use on receiver side? I would like to use LTE more, but finding suitable modems for embedded uses has been a challenge.
- SkyDrone 9y ago
  True, LTE modem protocols are a bit of a mess. You can get a good overview here: https://aleksander.es/data/FOSDEM2013%20-%20Mobile%20broadband%20modem%20control%20protocols.pdf https://aleksander.es/data/FOSDEM2013%20-%20Mobile%20broadba...

mburshteyn 9y ago

We're working on this at CryptoMove: https://www.dhs.gov/science-and-technology/news/2017/03/29/news-release-cbp-and-st-award-200k-san-mateo-start https://www.dhs.gov/science-and-technology/news/2017/03/29/n...

cnnsucks 9y ago

Many of these systems are using the amateur radio service bands. Often 5GHz for video, 2.3-2.4GHz for control and telemetry and less frequently 1.2GHz, 900MHz and 70cm are also used. The FCC doesn't allow encrypted traffic on amateur bands except for specific cases such as satellite telecommand. I suppose that has discouraged adoption of cryptography. What are commercial operators doing? Another limitation of Amateur bands is that they can't be used for commercial purposes, so licensed commercial drone operators must be using commercial bands where cryptography is permitted. Don't know myself; haven't looked into it.

monkmartinez 9y ago
> Another limitation of Amateur bands is that they can't be used for commercial purposes, so licensed commercial drone operators must be using commercial bands where cryptography is permitted. I don't think so. I think we can agree that many, many commercial operators use DJI. There are also lots of amateurs using DJI. Both use the same firmware. There is no option for me to encrypt or unencrypt my Phantom which I could easily use commercially if I had my FAA Part 107.
- cnnsucks 9y ago
  I see. So they're operating in the ISM portion of 2.4 and 5GHz. In that case they can encrypt. So the original question seems a good one; why haven't they yet?
bradyd 9y ago
My understanding is that there is an exemption in amateur radio for model aircraft control signals that allows encryption [1]. [1] https://www.govregs.com/regulations/title47_chapterI_part97_subpartC_section97.215 https://www.govregs.com/regulations/title47_chapterI_part97_...
zkms 9y ago
> The FCC doesn't allow encrypted traffic on amateur bands Would traffic that is not encrypted but is instead authenticated (with a MAC tag or AEAD'd) be allowed? What are the exact FCC rules and laws at work?