How does replay cache prevent replay attacks in BLE Mesh?

Question

Hi, can someone explain in simple terms how it works? 
 I don't really have a clear concept of what a replay attack is, but I suppose it has something to do with recording a message, and then spams it through out the mesh network, overloads all the nodes thus achieving a DDoS style attack result? 
 Anyhow I don't know the particulars. What role does the replay cache play? How does it distinguish from a genuine piece of repeated message that should be repeated under certain circumstances or an actual attack? Time stamp? A counter?

ovrebekk · Accepted Answer

Hi 
 Most wireless encryption schemes use AES encryption at the core. The simplest way to encrypt your data with AES is simply to use a fixed AES key, and run an AES encryption operation on all your data. 
 The problem with this method is that every time you encrypt the same data you get the same encrypted 'cipher text', and this leaves you vulnerable to replay attacks. 
 Say you make a wireless door opener, and every time you open the door you send the same command, then it is really easy for a hacker to figure out how to open the door, even if he is unable to decrypt the message, as illustrated by this chart . 
 The normal method to avoid replay attacks is to append a rolling counter (also called sequence number) to your data before encryption. As long as the counter is unique for every packet then the encrypted cipher text will always change.
Then it is up to the receiver to verify the counter after decryption to ensure that it receives a counter value that has never been sent before, and discard any packet that uses an old counter value. The easiest way to do this is simply to increment the counter for each packet, then the receiver can just store the previous counter value and make sure any new packet has a higher counter. 
 In a peer to peer connection this is quite easy, but the mesh makes it a bit more complicated. Essentially each node needs to keep track of the current sequence number for each node it is receiving from, since they all have unique sequence numbers, and this is where the replay cache come in.
By default the replay cache has room for 32 elements, which means you can not receive data from more than 32 different devices. 
 Best regards 
Torbjørn

How does replay cache prevent replay attacks in BLE Mesh?

Top Replies