CC2564 Security

Rudresh NB

Other Parts Discussed in Thread: CC2564

Hi Joseph,

We are using CC2564 BLE chip for our project. We want to know the security features available on BT stack. wheather SMP layer has following capability?

the Long Term Key (LTK) used for Link Layer encryption and authentication,
the Connection Signature Resolving Key (CSRK) used for data signing at the ATT layer, and
the Identity Resolving Key (IRK) used to generate a private address.

Basically we are looking to encrypt the data payload that should not be sniffed and hacked. I believe AES 128 bit encryption suffices our need . So we dont want any external mechanism for security? Please advise.

Regards,

Rudresh

over 10 years ago

0 Joseph Gigi over 10 years ago

TI__Guru* 85400 points

Hi Rudresh,

You can take a look at the "Security Manager Protocol" PICS from: www.bluetooth.org/.../QLI_viewQDL.cfm

Regards,
Gigi Joseph.

0 Rudresh NB over 10 years ago in reply to Joseph Gigi

Intellectual 700 points

Hi Joseph,
I just looked and found the following.
AD Type – Security Manager TK Value 11.1.7 C.1

So i believe the security manager supports AES 128 bit with dynamic key exchanges. Please correct me.

Regards,
Rudresh

0 Miguel over 10 years ago in reply to Rudresh NB

TI__Mastermind 23565 points

Rudresh,

Are you looking for LE Privacy 1.1 or 1.2 feature?

~Miguel

0 Rudresh NB over 10 years ago in reply to Miguel

Intellectual 700 points

Hi Miguel,
I am new to BLE, so i found following

Security Mode 1: non-secure
Security Mode 2: service level enforced security
Security Mode 3: link level enforced security
Security Mode 4: link level enforced security with encrypted key exchange

So we require Security mode 4 to be supported by CC2564 chip. I believe Mode 4, prevents MITM attacks and make secure channel.

From the demo, processors.wiki.ti.com/.../CC256x_TI_Bluetooth_Stack_SPPLEDemo_App

I see the command ChangePairingParameters set the mode 4. Please clarify my understandings are correct.

Also once the LTK is generated, is it necessary to save the key in flash or somewhere to keep in RAM, will stack take care of this?

Regards,
Rudresh

0 Miguel over 10 years ago in reply to Rudresh NB

TI__Mastermind 23565 points

Rudresh,

The current solution (CC256x + TI Dual Mode Bluetooth Stack) is BT 4.0 compliant. It does not implement the latest LE Privacy 1.2 feature.

~Miguel

0 Rudresh NB over 10 years ago in reply to Miguel

Intellectual 700 points

Thanx Miguel

Bluetooth®︎

Bluetooth forum

CC2564 Security