Having Problem with encryption on iOS nRF51822

RE: Having Problem with encryption on iOS nRF51822

Vidar Berg — Wed, 13 Feb 2019 07:35:24 GMT

[quote user="Soan"]Today we noticed that the issue does not occur most of the time (but not all of the time) if we clear the bond table in the nRF51822 - can you confirm whether an overflowing bond table could be the cause of such re-connection issues?[/quote]

It depends on how it is implemented. Bonds are managed by the application code, not by the bluetooth stack. I think you need to debug the application FW to figure out why the disconnects occur.

RE: Having Problem with encryption on iOS nRF51822

Soan — Tue, 12 Feb 2019 22:15:25 GMT

We see the issue across all 3 iOS devices we have used in our testing, but the behaviour is slightly different across devices - they fail at different points. The WireShark logs show the following failure points when our custom app tries to reconnect with the aid:

- iPhone 7 (iOS 12.1.2) fails on CONNECT_REQ (frame 302)

- iPad 4 (iOS 10.3.3) fails on LL_VERSION_IND (frame 524)

- iPhone 5 (iOS 10.3.3) fails on LL_START_ENC_RSP (frame 559)

The test procedure that was followed to produce these logs was as follows:

a. Clear Devices from iOS Bluetooth Settings
b. Run the App
c. Search for Devices
d. Connect to Device
e. Subscribe to Notifications
f. Accept Pairing Alert Raised by iOS Platformg

g. Everything works fine(Read/Write Data)
h. Kill iOS Mobile APP
i. Disconnections Happens
j. Restart App
k. App Tries to Connect again to old Remembered Device.
l. App Never gets Connected

Today we noticed that the issue does not occur most of the time (but not all of the time) if we clear the bond table in the nRF51822 - can you confirm whether an overflowing bond table could be the cause of such re-connection issues?

RE: Having Problem with encryption on iOS nRF51822

Vidar Berg — Thu, 31 Jan 2019 11:17:53 GMT

Have you tested this with other phones, an Android phone for instance? If it works with other phones you could use the sniffer trace from those connections to compare against. To me it looks more like an issue with the 51 FW. I couldn't spot any errors in the pairing procedure at least.

[quote user="Soan"]And i am curious after analysing Sniffer Logs, i can see More Data bit is set to 1 in frame 371(Which is start Encryption request), But its 0 in frame 66, During first time Connection.[/quote]

I'm afraid I don't have a good explanation for this. I don't think it's a spec. violation, but seems strange that the MD bit is always set on this control packet.

RE: Having Problem with encryption on iOS nRF51822

Soan — Thu, 31 Jan 2019 06:22:57 GMT

Thanks Vidar, For your response and Letting us know about the impact on s110 because of Deprecation.

I am sorry we dont have the Complete code, its the compiled system that has been passed on to me.

But if you can point me to some place which can detail out how should the encryption proceed if everything is right. And how to understand Packets being transmitted, while looking at sniffer logs.

And i am curious after analysing Sniffer Logs, i can see More Data bit is set to 1 in frame 371(Which is start Encryption request), But its 0 in frame 66, During first time Connection.

Much appreciate your help.

RE: Having Problem with encryption on iOS nRF51822

Vidar Berg — Wed, 30 Jan 2019 12:04:59 GMT

Thanks for providing the sniffer trace. Have you tried to debug the code to see if the program gets stuck or reset once you re-connect after the bond is established? I see that there are lot of re-transmits after the slave sends the encryption request which indicate that the link becomes lost as soon as the request is sent.

Edit. not related to the issue here, but wanted to add that you may impacted by this if you use s110: https://devzone.nordicsemi.com/b/blog/posts/what-impact-does-the-deprecation-and-withdrawal-of-bluetooth-core-specification-v4-0-and-v4-1-have-on-your-current-and-future-products?CommentId=84db79f6-ea63-4381-81f5-ca0520ab0cf4

RE: Having Problem with encryption on iOS nRF51822

Soan — Tue, 29 Jan 2019 23:14:03 GMT

devzone.nordicsemi.com/.../FacettWireSharkLogs.pcapng

Yes the above BAD MIC was because sniffer could not capture the long term key, My bad starting the Sniffer at the end of process.

The Logs i attached currently shows most of the interaction happening between iOS and BLE Device.

App Finds the Device.

Connects to it

Try to Retreive the Services and Characteristics

Tries to subscribe to notifications.(After which Pairing Alert is visible to user on UI)

Then you can see in Logs It proceeds with encryption.

Then on packet number 153. I terminate the App, which kills the connection between the device and iOS.

Then at around packet number 359, i again start the mobile app to connect to the BLE Device. but it never gets connected. It keeps on transferring data.

And yes i can see the Paired/Bonded device in iOS settings even after disconnection from App, So looks like Mobile is not throwing any kind of information. but BLE device is not responding to Mobiles encryption request.

RE: Having Problem with encryption on iOS nRF51822

Vidar Berg — Tue, 29 Jan 2019 16:22:08 GMT

Hi,

Will this code run on the nRF51 DK? In that case, can you upload the application FW along with the softdevice so I can test it here? I'm pretty sure that the "RemoveFromWhiteList" line isn't related to pairing. You can check if the peripheral is bonded with the phone by looking at the "My device" list in Settings->Bluetooth. All bonded devices will be listed there.

[quote user=""]Encrypted packet decrypted incorrectly (bad MIC)[/quote]

Note that you will get the same error if the sniffer has not captured the long term key during the initial key exchange.