Is re-pairing necessary with MITM protection?

RE: Is re-pairing necessary with MITM protection?

Mateusz — Mon, 16 Oct 2017 13:56:36 GMT

Looks like the issue was with non-volatile memory. Security properties were not being saved properly. Why or how - I'm not sure yet, but that's a different issue.

So if a device is paired and bonded with MITM protection, authenticated reads or writes should succeed on the initial and following connections.

Thanks Hung Bui for your help. I deleted my previous "answer" as I was misunderstanding the book quote.

RE: Is re-pairing necessary with MITM protection?

Hung Bui — Mon, 16 Oct 2017 07:42:47 GMT

The log didn't show how the initial bonding is performed. I would suggest you to get hold of a nRF51 DK (or nRF52 DK ) and capture a sniffer trace.

RE: Is re-pairing necessary with MITM protection?

Mateusz — Sun, 15 Oct 2017 00:53:56 GMT

Here's a log - see link below. It was captured on MacOS with Xcode's PacketLogger, but it's viewable with WireShark. The flow is (more or less) - connect to the device, pair and bond, read and write the characteristic value (successfully), then disconnect. Then, connect again and attempt to read the characteristic value (fails). MacOS then begins to re-pair. In the PacketLogger, I see that the LTK is distributed properly - it's used on next connection for encryption. https://goo.gl/BYKNeS

RE: Is re-pairing necessary with MITM protection?

Hung Bui — Fri, 13 Oct 2017 14:35:35 GMT

Hi,

Could you provide a sniffer trace ?

Have you make sure when you re-establish the connection, the LTK is used and the connection is encrypted using the LTK.

My suspicion is that the LTK was not stored properly (or not exchanged at all if it was only pairing not bonding, initially). So when re-establishing connection, the link is not encrypted , causing Insufficient Authentication.

You can check in the code if BLE_GAP_EVT_CONN_SEC_UPDATE is triggered or not when the connection is established. But it's the best to have the sniffer trace.

RE: Is re-pairing necessary with MITM protection?

Mateusz — Thu, 12 Oct 2017 16:10:32 GMT

According to a book "Getting Started With Bluetooth Energy" by Kevin Townsend & others, "Insufficient Authentication (...) denotes (...) that the link is encrypted, but the LTK used to perform the encryption procedure is not authenticated (generated with man-in-the-middle protection (...)) while the permissions required authenticated encryption".