Zephyr sample for pairing without passkey

[snowuyl]

When I set CONFIG_BT_FIXED_PASSKEY=y in prj.conf. The following warning messages are generated by west build command.

CONFIG_BT_FIXED_PASSKEY is enabled

A fixed passkey is easy to deduce during the pairing procedure, do not use in production.

Does Nordic provide sample code for pairing without passkey?

[Einarh]

Hello

I think you have misunderstood what this warning means.

It isn't telling you to not use a passkey, it is telling you to not use a fixed passkey. 

Instead you should use a unique randomized passkey, which should be default if you haven't set CONFIG_BT_FIXED_PASSKEY.

Best regards,

Einar

[snowuyl]

Thanks for your reply! I use nRF Connect iOS APP to connect nRF5340 device. How does nRF Connect iOS APP know which passkey to enter if passkey is random generated?

[snowuyl]

Thanks for your reply! I can see the following description from URL you provided. My nRF5340 device belongs to NoInputNoOutput. Does the following description suggest no pairing or static pairing for NoInputNoOutput device?

None of the pairing algorithms can use Yes/No input and no output, therefore, “NoInputNoOutput” is used as the resulting IO capability.

[Einarh]

No it does not suggest anything like that, this sentence only clarifies the corresponding table.

Please read the whole document.

[snowuyl]

What is your pairing suggestion for NoInputNoOutput device?

[Einarh]

https://www.bluetooth.com/blog/bluetooth-pairing-part-2-key-generation-methods/

[snowuyl]

Thanks for your reply! I can see the following description from URL you provided. What is meaning of "Just works unauthenticated"?

Step 4: Below is a mapping of the IO Capabilities to Key Generation Method. With this table, both devices, initiator and responder, will find an appropriate method for connecting depending on their pairing features.
Just works unauthenticated

[Einarh]

https://academy.nordicsemi.com/topic/security-models/

In most cases "just works" is the default BLE pairing method. Unless you have activated something else, your BLE device probably uses "just works".

You can read more about how it works in detail here:

https://lembergsolutions.com/blog/how-secure-ble-communication-standard

-Einar

[snowuyl]

There are four levels of security mode. What is level of security mode that "just works" belongs?
Level 1: No security (open text, meaning no authentication and no encryption)
Level 2: Encryption with unauthenticated pairing
Level 3: Authenticated pairing with encryption
Level 4: Authenticated LE Secure Connections pairing with encryption

[Einarh]

Hi

Three lines below the text you copied it says what security level "just works" belongs to.

Please try to find the answers yourself before asking here.

-Einar

[snowuyl]

Thanks for your reply.  I found answer.

Each connection starts at security level 1, and then upgraded to a higher security level depending on which pairing method is used.

Using Just Works will bring the connection to security level 2

[oliv25menz]

Interesting post. 

The project is a cloud-based data backup solution designed to protect critical files and information for both individuals and businesses. It enables automatic backups, encryption, and secure storage, ensuring data remains safe from hardware failures, accidental deletions, or cyberattacks. The platform supports multi-device compatibility, enabling users to back up data from PCs, Macs, smartphones, and tablets. With advanced features like versioning and file-sharing, it provides flexibility for data recovery and collaboration. Its user-friendly interface and robust security protocols make it a reliable choice for safeguarding digital assets.