This post is older than 2 years and might not be relevant anymore
More Info: Consider searching for newer posts

When do encryption keys exchange?

I have a problem with bonding with a static passkey. I have some sensors, which have a static passkey hardcoded in them. If I want to bond with them, I have to provide this passkey from my custom central app, which uses s120 and SDK 8.1.0. For the past few days I wasn't able to make a successfull bond, because I keep getting BLE_GAP_SEC_STATUS_AUTH_REQ from the sensor. I can't find much information on what to do in this case. I can bond with MCP just fine.

I compared log file from MCP and sniffer trace from my central bonding attempt and they are different in one very impotant aspect. MCP exchanges keys and encrypts the connection before trying to authenticate the link. Default behavioral of the device manage in SDK 8.1.0 is not the same. If I call dm_security_setup_req it only forces authentication without previous key exchange. This is why authentication fails. If I go into debug mode, I can see that keys are always 0. Does anyone have any suggestions about this matter? Are there any examples that mimic MCP behavioral?

Edit: added trace logs for windows phone, s120 and MCP log file, all done with the same sensor (which uses TI stack).

Windows phone pairing attempt: windows_pairing_with_adv.pcapng

S120 pairing attempt: s120_central_pairing.pcapng

MCP log file: log.txt

Android bonding attempt: android_bonding.pcapng

Parents
  • That is correct, MCP sends request: "Bond, MITM, Initiator keys: 0, Responder keys LTK IRK..." As you said, there is no CSRK key involved. I will try to understand what the deal is, but it seems to me, I'm stuck in a dead end for now. If I come up with some kind of solution or breakthrough, I will post a comment or an answer. For the time being, if anyone has some kind of suggestion about this issue, I will appreciate it.

Reply
  • That is correct, MCP sends request: "Bond, MITM, Initiator keys: 0, Responder keys LTK IRK..." As you said, there is no CSRK key involved. I will try to understand what the deal is, but it seems to me, I'm stuck in a dead end for now. If I come up with some kind of solution or breakthrough, I will post a comment or an answer. For the time being, if anyone has some kind of suggestion about this issue, I will appreciate it.

Children
No Data
Related