BLE Encryption without any

RE: BLE Encryption without any

Jusang Kim — Wed, 08 Feb 2017 08:53:28 GMT

I did not know that. Anyway I followed what you said.

Thank you.

RE: BLE Encryption without any

Petter Myhre — Wed, 08 Feb 2017 08:02:52 GMT

Np. If I answered your question, please accept my answer by clicking the grey circle next to it.

RE: BLE Encryption without any

Jusang Kim — Wed, 08 Feb 2017 06:24:47 GMT

Thank you!

RE: BLE Encryption without any

Petter Myhre — Tue, 07 Feb 2017 11:50:44 GMT

Yes, that is possible.

RE: BLE Encryption without any

Jusang Kim — Mon, 06 Feb 2017 23:31:30 GMT

Thank you for reply.

Whst about the role of the central ? Is it possible to call sd_ble_gap_encrypt () without calling any pairing API functions or bonding API function in the role of central in nRF52 DK just for test purpose ?

RE: BLE Encryption without any

Petter Myhre — Mon, 06 Feb 2017 15:02:07 GMT

The peripheral/slave cannot initiate the encryption procedure, it cannot call sd_ble_gap_encrypt().

It can only call sd_ble_gap_authenticate(), and then it is up to the central device to initiate the procedure and encrypt the link (if the devices have a bond).

RE: BLE Encryption without any

Jusang Kim — Mon, 06 Feb 2017 10:48:34 GMT

Thank you for your reply.

Firstly let me check the specification that you mentioned about. I'll let you know if i have a further question.

RE: BLE Encryption without any

Youssif — Mon, 06 Feb 2017 09:15:37 GMT

According to the Bluetooth Specification: "If at least one authentication has been performed, encryption may be used". So no, this is not possible. The reason for this is that ediv and rand (along with the other keys) are distributed during the pairing process (specifically phase 3, Key Distribution).

Have a look at the Core Specification Version 5.0, Vol 3, Part H, Section 2.4. It covers the details of pairing and encryption.

The only workaround is if the two devices were bonded (i.e. if the devices were previously paired, and the keys distributed have been stored by the slave). The previously distributed keys can then be used to encrypt the connection.

RE: BLE Encryption without any

Jusang Kim — Sun, 05 Feb 2017 04:35:16 GMT

Well... what i ment is that i want to know whether there is a way for slave to encrypt a link by using ediv and rand from a master through sd_ble_gap_encrypt() or not.