This post is older than 2 years and might not be relevant anymore
More Info: Consider searching for newer posts

[nRF Mesh]how to handle the replay attacks in the Mesh SDK after power reset or power failure

Hi Experts,

I have looked into the Mesh SDK for several days, i found one question is the device how to handle the same message they transmitted before after power reset or power failed as the replay attacker. even if this possibility is very low.

as we all know, the message cache and replay list can discard some messages they sent before. but they are all stored in the RAM area and they will be lost after power reset or power failure and then the device received one message they sent before (same seq and src and iv_index)at this moment as the replay attacker. 

for the situation i mentioned above, i consider it cannot prevent this attack against the replay attacker for the first time. however, it can work well on the next time as the message cache and replay list have updated.

are my understandings correct?

thanks in advance.

Parents Reply Children
No Data
Related