Security manager and how to enable the encryption

RE: Security manager and how to enable the encryption

Sigurd — Mon, 21 Sep 2020 14:41:26 GMT

The Peer Manager and the SoftDevice handles this for you. The LTK generation is taken care of by the SoftDevice. LTK can be accessed when you receive the BLE_GAP_EVT_AUTH_STATUS event from the SoftDevice.

Any keys generated and/or distributed as a result of the ongoing security procedure will be stored into the memory referenced by the pointers inside the p_sec_keyset used in sd_ble_gap_sec_params_reply(). The keys will be stored and available to the application upon reception of a BLE_GAP_EVT_AUTH_STATUS event. The Peer Manger( security_dispatcher.c) handles this, and will store the keys for you when you bond with a device.

RE: Security manager and how to enable the encryption

Hussain — Mon, 21 Sep 2020 06:59:22 GMT

Hi Sigurd,

I mean that in ble there are phases of pairing and bonding. During these phases it establish a Long term key or symmetric key. How can I see or observe the key or the function which is taking care of it in the code? nrf5

RE: Security manager and how to enable the encryption

Sigurd — Tue, 08 Sep 2020 09:00:38 GMT

Using the Peer Manager, you set the min/max key size as input to pm_sec_params_set().

    sec_param.min_key_size      = SEC_PARAM_MIN_KEY_SIZE;
    sec_param.max_key_size      = SEC_PARAM_MAX_KEY_SIZE;

What do you mean by transport the key, and key status ?

RE: Security manager and how to enable the encryption

Hussain — Mon, 07 Sep 2020 08:19:34 GMT

Thank you for your reply. How can I check the key size in nrf5 SDK? How can I transport the key during the pairing? How can I see the key status in the program?

RE: Security manager and how to enable the encryption

Sigurd — Mon, 07 Sep 2020 07:25:00 GMT

Hi,

[quote user=""]I am using the code that is built-in and I want to know about the Security manager[/quote]

Are you using the SoftDevice and the nRF5 SDK? If yes, I recommend using the Peer Manager to handle this. Call the function pm_conn_secure() to encrypt the link. Use the function pm_conn_sec_status_get() to get the security status of a connection. See this link.