BLE Secure connection with LE Secure Connection

RE: BLE Secure connection with LE Secure Connection

Simonr — Thu, 04 Mar 2021 11:31:23 GMT

Do you want the nRFConnect app to be prompted to enter a passkey as soon as it's connected to your device? If so, you should take another look at the ble_app_gls example, where a passkey will be prompted upon connection.

Best regards,

Simon

RE: BLE Secure connection with LE Secure Connection

Hamza_HK — Wed, 03 Mar 2021 08:32:57 GMT

Hi,

I just checked the case you linked. It is similar to what I have been doing but nothing going forward. The issue is that

BLE_GAP_EVT_AUTH_KEY_REQUEST event is never triggered.

The nRFConnect app on my phone is connected to the peripheral without the need of authorization (entering OOB key or something similar).

Any tips on where to look into for this to work?

Best Regards,
Hamza

RE: BLE Secure connection with LE Secure Connection

Simonr — Wed, 03 Mar 2021 07:34:38 GMT

The examples we have in our SDK (the ble_app_gls for instance) use randomly generated keys in order to do pairing and not pre-shared keys. You can check out this case regarding pre-shared keys.

If you use the nRFConnect app on your phone to connect and pair to your device, you should be able to see a log of what exactly happens after entering the passkey. Sorry for not mentioning this in my last reply.

Best regards,

Simon

RE: BLE Secure connection with LE Secure Connection

Hamza_HK — Tue, 02 Mar 2021 07:14:02 GMT

Hi Simon!

By default, the keys generated in nrf_ble_lesc_keypair_generate, are those random keys? How is that possible if both devices has to have the same shared secret to compute correct LTK?

We want to simply have a pre-shared key on the our devices such that the phone application has to have the correct key (shared secret) for it to acquire the symmetric key, based on ECDH protocol.

Regards,
Hamza

RE: BLE Secure connection with LE Secure Connection

Simonr — Fri, 26 Feb 2021 11:43:39 GMT

Setting these defines in the peer manager settings, that should make connections go through this pairing process. In order to know if all the authentication steps are done we would need a sniffer trace of the pairing process. Please check out the nRFSniffer to see how to capture a trace using an nRF52 DK as a sniffer device for instance.

The keys are generated by the nrf_ble_lesc_keypair_generate()

Best regards,

Simon