On Bluetooth Repairing: Key Agreement Based on Symmetric-Key Cryptography

Abstract. Despite many good (secure) key agreement protocols based on publickey cryptography exist, secure associations between two wireless devices are often established using symmetric-key cryptography for cost reasons. The consequence is that common daily used security protocols such as Bluetooth pairing are insecure in the sense that an adversary can easily extract the main private key from the protocol communications. Nevertheless, we show that a feature in the Bluetooth standard provides a pragmatic and costless protocol that can eventually repair privateless associations, thanks to mobility. This proves (in the random oracle model) the pragmatic security of the Bluetooth pairing protocol when repairing is used. 1 Setting up Secure Communications Digital communications are often secured by means of symmetric encryption and message authentication codes. This provided high throughput and security. However, setting up this channel requires agreeing on a private key with large entrop...

• Type: Conference
• Year: 2005
• Where: CISC
• Authors: Serge Vaudenay
• Keywords: Bluetooth Pairing, CISC 2005, Key Agreement, Private Key