This thread has been locked.

If you have a related question, please click the "Ask a related question" button in the top right corner. The newly created question will be automatically linked to this question.

Several questions about security of Z-stack for CC2530

Other Parts Discussed in Thread: Z-STACK

Thanks.

Question 1: In f8wConfig.cfg, is -DSECURE=5 has the same result with -DSECURE=1?

 Question 2: In f8wConfig.cfg, there is a line like -DDEFAULT_KEY="{'Z','i','g','B','e','e','A','l','l','i','a','n','c','e','0','9'}". Are the quotation marks necessary?

 Question 3: Trust center has two mode of operation: commercial mode and residential mode. But in Z-stack there are four definitions: ZG_SECURITY_RESIDENTIAL, ZG_SECURITY_PRO_STANDARD, ZG_SECURITY_PRO_HIGH and ZG_SECURITY_SE_STANDARD. ZG_SECURITY_RESIDENTIAL and ZG_SECURITY_PRO_STANDARD has the same value, and I think they represent residential mode. what's the difference between ZG_SECURITY_PRO_HIGH and ZG_SECURITY_SE_STANDARD? What's AMI_PROFILE and SE_PROFILE stand for?

Question 4:

I use sniffer to track the messages of the joining and authentication.

The TRANSPORT-KEY command is plaintext:

*********  

Packet index: 18  

Length: 54  

Raw data (hex): 61 88 8E DA 72 AB 26 00 00 48 00 AB 26 00 00 1E DC 01 00 05 01 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F 00 87 95 CB 01 00 4B 12 00 D7 90 CB 01 00 4B 12 00  

RSSI [dBm]: -48  

Correlation value: 108  

CRC OK: 1

*********

key type is = 01

key = 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F

key sequence num = 00

*********

NEXT message is ciphertext

*********  

Packet index: 20  

Length: 55  

Raw data (hex): 61 88 B2 DA 72 00 00 AB 26 08 02 FD FF AB 26 1E 74 28 00 00 00 00 87 95 CB 01 00 4B 12 00 00 4F 31 09 A5 CB 28 D4 A8 72 2F 72 C5 17 D3 9D 94 9C 3C 2A 6A 2F EC B4 D8  

RSSI [dBm]: -47  

Correlation value: 108  

CRC OK: 1

*********

auxiliary header = 28(security control) + 00 00 00 00(frame counter) + 87 95 CB 01 00 4B 12 00(source address) + 00(key sequence num) + 4F 31 09 A5 CB 28 D4 A8 72 2F 72 C5 17 D3 9D 94 9C 3C 2A 6A 2F EC B4 D8(encrypted payload)

*********

Since security control is 0x28, means security level is 0, and no MIC and no data encryption. Why the network payload is encrypted? This message was a ZDO announce, network payload should be something like 08 00 13 00 00 00 00 00 00 AB 26 87 95 CB 01 00 4B 12 00 00.