RE: OOB Provisioning and OOB Authentication

Joakim Jakobsen — Thu, 21 Feb 2019 09:05:49 GMT

Hi.

[quote user=""]I have no idea what "enables the authentication" means. Is that statement redundant?[/quote]

It wouldn't say redundant, but the two statements might be a little repetitive.

___________________________________________________

The OOB methods are steps that can happen after the public key exchange. I really recommend you to read through section "5.4.2 Provisioning behavior" in the Mesh Profile specification. The subsections correspond to the various stages that provisioning goes through. Section 5.4.2.3 is the public key exchange, and section 5.4.2.4 (called "Authentication") is the one where the Static/Output/Input OOB methods can be applied.

[quote user=""]Can my devices generate their OOB information from the MAC and a private algorithm and this be used for both initial key exchange and authentication?[/quote]

I don't see why that shouldn't be possible, but i don't think this is something that is supported in our SDK.

I think using a 128-bit randomly generated Static OOB value should be considered as a secure way to provision your device.

Best regards.