RE: Bluetooth LESC question

Karl Ylvisaker — Mon, 21 Sep 2020 06:42:00 GMT

Hello,

In addition to Dmitry's reply I highly recommend reading Emil's reply in this ticket for a more detailed explanation of both LESC, and how it is different from Legacy pairing.

Best regards,
Karl

RE: Bluetooth LESC question

Dmitry — Sat, 19 Sep 2020 09:24:07 GMT

Hi,

[quote userid="72896" url="~/f/nordic-q-a/66122/bluetooth-lesc-question"]1) Why LESC should have I/O capabilities or OOB?[/quote]

There are three ways to protect a link against Man-in-the-middle attack:

- OOB channel that cannot be eavesdropped

- human interface (user can ensure that keys are the same at both sides)

- device key signed with ECDSA (ensuring strong readout protection of private key achievable only using external Secure Element chip).

In LESC, first two methods are used. Of course, you can set up LESC in "just works" mode, but security level will be the same as with legacy pairing.

[quote userid="72896" url="~/f/nordic-q-a/66122/bluetooth-lesc-question"]2) It is basic, Is the word "bluetooth connection" equivalent to "bluetooth pairing"?[/quote][quote userid="72896" url="~/f/nordic-q-a/66122/bluetooth-lesc-question"]3) What differences has bluetooth pairing and bonding?[/quote]

See this answer.