BR/EDR Security
Secure Connections
BR/EDR Security
Message Sequence Charts(SSP)
BR/EDR Security
Message Sequence Charts(SSP)
BR/EDR Security
BR/EDR Security
Security Overview
建立基带连接
传统认证 Kmaster Kc Encryption(E0) Ka Kab 数字比对 Link key
SSP 密码输入 AES-key AES-CCM
BR/EDR Security
OOB
SAFER+
HMAC-SHA256
Authentication(Link Key)
BR/EDR Security
Encryption(E0)
Kc address clock RAND
BR/EDR Security
Creation of the Link Key(Legacy)
BR/EDR Security
Creation of the Link Key(Legacy)
Kmaster=Kinit
E0
AES-CCM
BR/EDR Security
Secure Simple Pairing(Authentication Stage1)
Secure Simple Pairing Numeric Comparison Protocol Passkey Entry Protocol Out of Band Protocol
Authentication(Device)
BR/EDR Security
Authentication Stage1(Numeric Comparison Protocol)
BR/EDR Security
Authentication Stage1(Out of Band Protocol)
BR/EDR Security
BR/EDR Security
Secure Simple Pairing
There are five phases of Secure Simple Pairing: • Phase 1: Public key exchange • Phase 2: Authentication Stage 1 • Phase 3: Authentication Stage 2 • Phase 4: Link key calculation • Phase 5: LMP Authentication and Encryption
BR/EDR Security
Secure Simple Pairing
BR/EDR Security
Secure Simple Pairing(Public Key Exchange)
BR/EDR Security
Secure Simple Pairing(Authentication Stage1)
BR/EDR Security
Creation of the Link Key(Legacy)
K
init
if one device sends an LMP_unit_key PDU and the other device sends LMP_comb_key, the unit key will be the link key.
K
init
if both devices send an LMP_unit_key PDU, the master's unit key will be the link key.
BR/EDR Security
Creation of the Link Key(Legacy)
K
init
if both devices send an LMP_comb_key PDU, the link key shall be calculated as described in [Part H] Section 3.2tage1(Passkey Entry Protocol)
BR/EDR Security
Authentication Stage2
BR/EDR Security
Link key calculation
LMP Authentication and Encryption
Secure Simple Pairing Numeric Comparison Protocol Passkey Entry Protocol Out of Band Protocol
Authentication(Device)
Link Key Authentication(Link key) Kc AES-key