ble_app_uart example with encryption

RE: ble_app_uart example with encryption

Einar Thorsrud — Wed, 03 Jun 2020 12:27:09 GMT

Hi,

[quote user="Deeper"]According to my understanding，maybe the crypto frontend and backend should also be included to support encryption. Is my understanding correct? [/quote]

Yes, but that does not require any specific code changes in your code since it is all handled by the peer manager. But you need to add nrf_crypto files and include, in the same way as you need to add other libraries that are used by the peer manager.

RE: ble_app_uart example with encryption

Deeper — Tue, 02 Jun 2020 14:41:19 GMT

Hi,

Thanks for your kindly help. According to your suggestions, there are at least two adjustments should be done:

1. Include the peer mannager.

2. adjust the security configuration for characteristics.

3. modify the 'sdk_config.h' file to enable these changes.

According to my understanding，maybe the crypto frontend and backend should also be included to support encryption. Is my understanding correct?

look forward to your reply.

RE: ble_app_uart example with encryption

Einar Thorsrud — Tue, 02 Jun 2020 14:10:20 GMT

Hi,

[quote user=""]1. How can I modify the source code to enable encryption with Just Work.[/quote]

You should refer to an example that includes the peer manager and implement support for pairing/bonding as done there. You should also reference the peer manager documentation for that. Lastly, you must adjust the security configuration for the characteristics that you want to protect, so that they are only readable/writable when paired. You can for instance refer to the HRS example (ble_app_hrs), but to require pairing you would set hrs_init.hrm_cccd_wr_sec to SEC_JUST_WORKS instead of SEC_OPEN.

[quote user=""]2. If modified, shall UART apps need to modify, too?[/quote]

What do you mean? The application needs to be adjusted to use the Peer manager library as described above. But if you refer to apps on a phone, then most likely not, depending on the app. Most of the pairing/bonding is handled by the OS.