Encryption problem using nRF52840 sniffing BLE air-log on wireshark

RE: Encryption problem using nRF52840 sniffing BLE air-log on wireshark

ryuu-k — Tue, 05 Oct 2021 08:26:24 GMT

Thanks for the reply.

And I will let you know whether it works after I tried the method.

Kenneth — Tue, 05 Oct 2021 07:31:56 GMT

Do you have access to the firmware of the earhphone? You will need to set the earphone in a LESC debug mode, in Nordic this is typically done by:

#define LESC_DEBUG_MODE 1 /**< Set to 1 to use LESC debug keys, allows you to use a sniffer to inspect traffic. */

ryuu-k — Tue, 05 Oct 2021 00:06:59 GMT

I am using the latest one, nRF52840 Dongle and followed the "LE secure connections in debug mode".

Should I input any key in like SC LTK?

I got the link key which is generated when the earphone and iPhone are bonded, which is in length 0x10 (LINK_KEY_UNAUTHEN).

The BLE packets I want to sniff is those between the app and the earphone.

Kenneth — Mon, 04 Oct 2021 11:14:32 GMT

Kenneth