CC2340R5: About OAD image block transfer security

kei

Part Number: CC2340R5

When using a device equipped with a peripheral on-chip OAD, is it possible to make any settings as a security measure when the perisisitent app communicates with the connected device?

Specifically, I would like to know if there is a way to prevent eavesdropping from outside during image block transfer.

over 1 year ago

0 Clément over 1 year ago

TI__Guru** 101450 points

Hi,

I guess you could consider enabling GATT encryption (see https://software-dl.ti.com/simplelink/esd/simplelink_lowpower_f3_sdk/7.40.00.64/exports/docs/ble5stack/ble_user_guide/html/ble-stack-5.x/gatt-cc23xx.html).

I hope this will help,

Best regards,

0 kei over 1 year ago in reply to Clément

Intellectual 625 points

I see. It was helpful.

However, I would like to take more measures against Bluetooth security vulnerabilities.
We are aware that LESC itself has vulnerabilities.
For example, spoofing.
This could be strengthened if there was a mechanism to encrypt the plain text of OAD image writing, but is such a function available?

+1 Clément over 1 year ago in reply to kei

TI__Guru** 101450 points

Hi Kei,

Image encryption is also possible as described in the MCUboot documentation: https://docs.mcuboot.com/encrypted_images.html (see also https://docs.mcuboot.com/design.html).

Also, in case you are also looking at ways to prevent connection eave dropping, you can Out Of Band (OOB) pairing. This possibility is described here: https://software-dl.ti.com/simplelink/esd/simplelink_lowpower_f3_sdk/7.40.00.64/exports/docs/ble5stack/ble_user_guide/html/ble-stack-5.x/gapbondmngr-cc23xx.html

I hope this will help,

Best regards,

Bluetooth®︎

Bluetooth forum

CC2340R5: About OAD image block transfer security