I set IRK on Zephyr and it seems to keep the same mac address(after bonding), why?

RE: I set IRK on Zephyr and it seems to keep the same mac address(after bonding), why?

Hung Bui — Tue, 01 Aug 2023 12:18:52 GMT

Hi Ben,

I think can be a bug in LESC that it require privacy to allow LESC.

Can you capture a sniffer trace ?

Could you check if you can reproduce the issue using 2 samples in NCS ?

Please be aware that even with CONFIG_BT_PRIVACY =y

but if you use BT_LE_ADV_OPT_USE_IDENTITY when advertising, the MAC address will not change.

RE: I set IRK on Zephyr and it seems to keep the same mac address(after bonding), why?

BenSiso — Sun, 30 Jul 2023 07:54:19 GMT

Hi
We have 2 products, the first one is central(build in typescript and using PC-BLE-DRIVER repo). The other product is build on softdevice(c).

The two communicate with each other over ble.

Since we dont need IRK, we set on central side:
"id: false /** Identity Resolving Key and Identity Address Information. */,"

But sec level 4 not working (we are getting zero in the ltk array).

Only when we set id:true it working as expected.

What we are doing wrong ?

const secParamsCentral: SecurityParameters = {
      bond: true,
      mitm: true,
      lesc: true,
      keypress: false,
      // eslint-disable-next-line camelcase
      io_caps: this.adapter.driver.BLE_GAP_IO_CAPS_KEYBOARD_ONLY,
      oob: false,
      // eslint-disable-next-line camelcase
      min_key_size: 7,
      // eslint-disable-next-line camelcase
      max_key_size: 16,
      // eslint-disable-next-line camelcase
      kdist_own: {
        enc: true /** Long Term Key and Master Identification. */,
        id: true /** Identity Resolving Key and Identity Address Information. */,
        sign: false /** Connection Signature Resolving Key. */,
        link: false /** Derive the Link Key from the LTK. */,
      },
      // eslint-disable-next-line camelcase
      kdist_peer: {
        enc: true /** Long Term Key and Master Identification. */,
        id: true /** Identity Resolving Key and Identity Address Information. */,
        sign: false /** Connection Signature Resolving Key. */,
        link: false /** Derive the Link Key from the LTK. */,
      },
    };

RE: I set IRK on Zephyr and it seems to keep the same mac address(after bonding), why?

Sigurd Hellesvik — Fri, 28 Jul 2023 13:01:46 GMT

[quote user="BenSiso"]Already set to no by default, and I still receive the all zeroes LTK unless you set ID:true in the central (which is IRK I think)[/quote]

I think I missed the question in your previous message.

Is the problem that you were unable to disable IRK?

RE: I set IRK on Zephyr and it seems to keep the same mac address(after bonding), why?

BenSiso — Wed, 26 Jul 2023 13:36:44 GMT

We would like to use zephyr with ble security level 4 but without IRK. Is it possible in zephyr?

RE: I set IRK on Zephyr and it seems to keep the same mac address(after bonding), why?

BenSiso — Tue, 18 Jul 2023 11:58:42 GMT

Hi Sigurd
Already set to no by default, and I still receive the all zeroes LTK unless you set ID:true in the central (which is IRK I think)
thank you,
ben

RE: I set IRK on Zephyr and it seems to keep the same mac address(after bonding), why?

Sigurd Hellesvik — Tue, 11 Jul 2023 13:48:54 GMT

CONFIG_BT_PRIVACY is not required for security level 4.
This should be possible in Zephyr.

RE: I set IRK on Zephyr and it seems to keep the same mac address(after bonding), why?

BenSiso — Mon, 10 Jul 2023 15:13:44 GMT

Hi Sigurd,
We would like to use zephyr with ble security level 4 but without IRK. Is it possible in zephyr?
Our central is using PC-BLE-DRIVER-JS (typescript) as mention above.

**The difference from the other case is that I am not asking about the IRK logic / howto etc.
thank you,
Ben

RE: I set IRK on Zephyr and it seems to keep the same mac address(after bonding), why?

Sigurd Hellesvik — Tue, 04 Jul 2023 14:25:32 GMT

Hi Ben,

I see that you also got case How does Identity Resolving Key work? Why does LESC only work when IRK is set to true(zephyr)? which seems similar to me.

Can you shortly explain how this ticket is different? I think that will help me better provide you help.

Regards,
Sigurd Hellesvik