3 ms·
BLE Secure Connections, supported on Bluetooth 4.2 and later.
by ctz 9y ago
BLE Secure Connections, supported on Bluetooth 4.2 and later.
- IshKebab 9y agoNo, those are what I am talking about. The connection is secure but the key exchange is not. There are various flaws depending on the mode used. There is an Out-of-Band mode which means you could implement your own actually-secure key exchange but for extremely annoying reasons it isn't implemented on iOS or Android (except via NFC on Android).
- ctz 9y agoCould you provide some references to how the LESC key exchange is insecure? That is notably different information from that in (eg.) NIST SP800-121.
- IshKebab 9y agoSome links here: https://devzone.nordicsemi.com/question/83373/secure-ble-pairing-is-it-possible/ https://devzone.nordicsemi.com/question/83373/secure-ble-pai... Not 100% sure how accurate it all is but it's not exactly reassuring and I never found anyone claiming that it is inaccurate.
- ctz 9y agoThanks! That's enlightening.