is it possible to decrypt the BT mesh packets that device key encrypted with nRF 52840 dongle

RE: is it possible to decrypt the BT mesh packets that device key encrypted with nRF 52840 dongle

daviddedwin — Mon, 21 Dec 2020 17:34:27 GMT

Super. Do give it an upvote .Thanks

RE: is it possible to decrypt the BT mesh packets that device key encrypted with nRF 52840 dongle

xiaolongba — Mon, 21 Dec 2020 14:21:22 GMT

Hi Bro,

many thanks for your tips. it works very well. the root is that i misunderstood the SRC address as Mac address before.

Hung Bui

you can close this ticket now.

thank you all

RE: is it possible to decrypt the BT mesh packets that device key encrypted with nRF 52840 dongle

daviddedwin — Sun, 20 Dec 2020 19:17:50 GMT

The first screen shot seems to have used the device key for the encryption (as you have stated). You will have to input the device keys in wireshark to decrypt the message. The device keys will be in the provisioner JSON file. I am not sure if the device key support was enabled in the Bluetooth Mesh wireshark dissector.

Can you confirm if the device key has been input into wireshark ?

Edited: I have confirmed that device keys can be loaded on to the Bluetooth mesh dissector in wireshark v3.4.2, so please verify that you have got the unicast address for the node and the device address and try again.

RE: is it possible to decrypt the BT mesh packets that device key encrypted with nRF 52840 dongle

Hung Bui — Fri, 18 Dec 2020 15:41:00 GMT

Ok, let us know if you find anything.
Please be aware that the device key is generated randomly for each provionee. So you need to catch the key when the device being provisioned.

RE: is it possible to decrypt the BT mesh packets that device key encrypted with nRF 52840 dongle

xiaolongba — Fri, 18 Dec 2020 15:20:54 GMT

Hi Hung Bro,

Yes, i can understand. i just want to know if it is related to the firmware. if not, the root is caused by the Wireshark. of course, i reported this issue to Wireshark support already. any updates i will let you know

RE: is it possible to decrypt the BT mesh packets that device key encrypted with nRF 52840 dongle

Hung Bui — Fri, 18 Dec 2020 15:17:15 GMT

Hi Helon,
I hope someone here have a solution for you. We also struggling with this.
Please be aware that the BLE mesh plugin for Wireshark was not developed by us. You may need to send your question to Wireshark support.

We unfortunately don't usually use Wireshark and nRF sniffer for debugging mesh communication.