4 ms·

Data will only be allowed to pass to a certified accessory Theoretically it should be possible for a cable to spoof the ID of what it's connected to though, ri

Data will only be allowed to pass to a certified accessory Theoretically it should be possible for a cable to spoof the ID of what it's connected to though, right?

CubsFan1060 4y ago
That was why I had it as a probably. I don't feel qualified enough to comment on what is or what is not possible there.
error503 4y ago
Lightning accessories used crypto-based verification. I would be surprised if the next iteration for USB-C is not significantly stronger. So more than a simple spoof / replay attack will likely be required.
CharlesW 4y ago
> Theoretically it should be possible for a cable to spoof the ID of what it's connected to though, right? Yes, but the authentication doesn't appear to be simple ID spoofing. This is from the announcement of the standard they're using: "The USB 3.0 Promoter Group today announced the USB Type-C Authentication specification, defining cryptographic-based authentication for USB Type-C chargers and devices. Using this protocol, host systems can confirm the authenticity of a USB device or USB charger, including such product aspects as the descriptors/capabilities and certification status. All of this happens right at the moment a wired connection is made – before inappropriate power or data can be transferred." https://usb.org/sites/default/files/article_files/USB_Type-C_Authentication_PR_FINAL.pdf https://usb.org/sites/default/files/article_files/USB_Type-C...
- layer8 4y ago
  Wouldn’t want to transfer any inappropriate data, haha.
palata 4y ago
No, I don't think so. At least for MFi (which this rumor suggests they will extend to USB-C), there is an authentication co-processor. That's not just an ID, it's cryptography. So theoretically it could be possible to break the authentication, but in practice, we can assume it's at least very hard.

4 ms·

Data will only be allowed to pass to a certified accessory Theoretically it should be possible for a cable to spoof the ID of what it's connected to though, ri

by onion2k 4y ago

Data will only be allowed to pass to a certified accessory Theoretically it should be possible for a cable to spoof the ID of what it's connected to though, right?

CubsFan1060 4y ago
That was why I had it as a probably. I don't feel qualified enough to comment on what is or what is not possible there.
error503 4y ago
Lightning accessories used crypto-based verification. I would be surprised if the next iteration for USB-C is not significantly stronger. So more than a simple spoof / replay attack will likely be required.
CharlesW 4y ago
> Theoretically it should be possible for a cable to spoof the ID of what it's connected to though, right? Yes, but the authentication doesn't appear to be simple ID spoofing. This is from the announcement of the standard they're using: "The USB 3.0 Promoter Group today announced the USB Type-C Authentication specification, defining cryptographic-based authentication for USB Type-C chargers and devices. Using this protocol, host systems can confirm the authenticity of a USB device or USB charger, including such product aspects as the descriptors/capabilities and certification status. All of this happens right at the moment a wired connection is made – before inappropriate power or data can be transferred." https://usb.org/sites/default/files/article_files/USB_Type-C_Authentication_PR_FINAL.pdf https://usb.org/sites/default/files/article_files/USB_Type-C...
- layer8 4y ago
  Wouldn’t want to transfer any inappropriate data, haha.
palata 4y ago
No, I don't think so. At least for MFi (which this rumor suggests they will extend to USB-C), there is an authentication co-processor. That's not just an ID, it's cryptography. So theoretically it could be possible to break the authentication, but in practice, we can assume it's at least very hard.