RE: Peer manager and LESC possibilities

Amanda Hsieh — Tue, 15 Sep 2020 13:13:44 GMT

Hi,

In the LESC, the Public key and private key of each device have to be randomly generated according to the Elliptic Curve Diffie-Hellman (ECDH) rules. In our SDK this is done by calling nrf_crypto_ecc_key_pair_generate() which will use the micro-ECC module to generate the key pair.

Note though that static passkey in combination with LESC is not any more secure than LESC "just works". The protocol is designed for a random passkey and breaks totally if a passkey is reused. See this post Questions about LESC, MITM and passkey.

The key is intended to encrypt the connection. If you want to limit the connection authentication, you can consider bonding. See this post.

See the Peripheral LESC Pairing and Central LESC Pairing.

-Amanda H.