BLURtooth
Daniele Antonioli, Nils Ole Tippenhauer, Kasper Rasmussen, Mathias Payer
2022Proceedings of the 2022 ACM on Asia Conference on Computer and Communications Security24 citationsDOI
Abstract
Bluetooth is a pervasive wireless technology specified in an open standard. The standard defines Bluetooth Classic (BT) for high-throughput wireless services and Bluetooth Low Energy (BLE) very low-power ones. The standard also specifies security mechanisms, such as pairing, session establishment, and cross-transport key derivation (CTKD). CTKD enables devices to establish BT and BLE security keys by pairing just once. CTKD was introduced in 2014 with Bluetooth 4.2 to improve usability. However, the security implications of CTKD were not studied carefully.
Topics & Concepts
BluetoothComputer scienceKey (lock)Computer networkBluetooth Low EnergyUsabilityWirelessSession (web analytics)Computer securityTelecommunicationsOperating systemWorld Wide WebBluetooth and Wireless Communication TechnologiesUser Authentication and Security Systems