zeros LTK as a result of LESC pairing in Zephyr

RE: zeros LTK as a result of LESC pairing in Zephyr

Kenneth — Tue, 30 May 2023 13:45:46 GMT

Hello,

I still think an on-air sniffer log (using for instance nRF sniffer for BLE) would be useful here, is that a possibility? Since this case was created we have launched a devacademy tutorial for BLE, which also cover security in BLE, maybe you can take a look at this?
https://academy.nordicsemi.com/lessons/lesson-5-bluetooth-le-security-fundamentals/

Kenneth

RE: zeros LTK as a result of LESC pairing in Zephyr

BenSiso — Tue, 30 May 2023 12:55:37 GMT

Hi Kenneth, I am a part of Roi team, Yes we did try to bond on Android - successfully.
However with NRF connectivity on DK(840 & 840) bonding didn't work(nRF connect 4.0.4).
Thank you,
Ben

RE: zeros LTK as a result of LESC pairing in Zephyr

Kenneth — Tue, 24 Jan 2023 10:11:30 GMT

Hello again,

An on-air sniffer log could be useful.

Can you try bonding with the nRF connect app on Android/iOS as well to find out if the pairing issue may be isolated to the pc-ble-driver-js implementation.

Best regards,
Kenneth

RE: zeros LTK as a result of LESC pairing in Zephyr

Roiger — Mon, 23 Jan 2023 16:06:07 GMT

Yep - I had seen this post, and therefore all of these flags are on in our KConfig :)

RE: zeros LTK as a result of LESC pairing in Zephyr

Kenneth — Mon, 23 Jan 2023 15:58:15 GMT

Does this answer your question?
LTK Zephyr Central

The config flags may be outdated (since the case is 4 years old), but I expect the handling may be the same.

Kenneth

RE: zeros LTK as a result of LESC pairing in Zephyr

Roiger — Mon, 23 Jan 2023 15:33:33 GMT

Hi Kenneth,
I do receive a bond "ack" on both ends (the pairing terminates with bond=1), so I believe it is not that.
Is there some baseline KConfig file that exists for LESC with bonds + enc?
Thanks!
Roi

RE: zeros LTK as a result of LESC pairing in Zephyr

Kenneth — Mon, 23 Jan 2023 14:29:04 GMT

Hello,

Are you able to perform a on-air sniffer log of working vs. failing? E.g. using nrf sniffer for ble:
https://www.nordicsemi.com/Products/Development-tools/nrf-sniffer-for-bluetooth-le

I am thinking that you for some reason are not able to bond here (either something fails and/or that you are pairing (not bonding)), if you pair you do not create a permanent bond.

It's always a good idea to look at example projects that support bonding in parallell.

Kenneth