AES Encryption on BLE Mesh.

[Sumedh L]

Hello All.

I am new to BLE mesh development as well as the Zephyr RTOS. We are testing BLE mesh sensor network and we require AES encryption as the hardware supports it. I have seen the AES CCM example provided but fail to understand how to utilize it. I have based my testing application for BLE mesh using the Sensor Server and Sensor Client example. As I am not manually publishing the sensor data, I am not understanding where to encrypt the outgoing data. I also have to ask if I have to use the PSA Crypto library or the Bluetooth Crypto library or both.

Any sample code regarding this specific case would be appreciated.

Currently using the following for development:

nRF Connect v2.1.2 and nRF52840 Dongle for evaluation and development.

Thank you.

[Vidar Berg]

Hello, 

Encryption and authentication of mesh messages are required by the Bluetooth specification as you can read here https://www.bluetooth.com/blog/bluetooth-mesh-security-overview/, so this is already implemented in our Mesh stack.

The encryption info needed to secure the link will be exchanged during the provisioning stage which is covered by the SDK documentation here: https://developer.nordicsemi.com/nRF_Connect_SDK/doc/2.2.0/zephyr/connectivity/bluetooth/api/mesh/provisioning.html, https://developer.nordicsemi.com/nRF_Connect_SDK/doc/latest/nrf/ug_bt_mesh_concepts.html#provisioning, and here https://developer.nordicsemi.com/nRF_Connect_SDK/doc/latest/nrf/ug_bt_mesh_concepts.html#security.   

Best regards,

Vidar

[Sumedh L]

Hello Vidar.

First of all, thanks for a prompt response.

I referred to the documentation you have provided. It helped me sort the issue.

Thanks and Regards,

Sumedh Lele.