Enabling AES encryption for ZStack 1.4.3-1.2.1

GrantHatamosa

Expert 1930 points

Other Parts Discussed in Thread: Z-STACK

Hi,

I was using the accompanying application note, Application-Level Tuning of Z-Stack_F8W-2006-0005_.pdf, to enable security and encryption for my ZigBee wireless network.

However, it seems that the document is out dated since the variable aesEngineSetting is not declared anywhere in the ZStack code.

Now, how can I enable encryption for my network without this variable?

I see in Mac_api.h that there are a few defines to enable security (i.e. MAC_SEC_LEVEL_NONE, MAC_SEC_LEVEL_ENC, etc) but I only see that the ZStack is hardcode to run with MAC_SEC_LEVEL_NONE. Is there a reason why this is so? Can I set the security level to MAC_SEC_LEVEL_ENC or MAC_SEC_LEVEL_ENC_MIC_32?

Please advice.

Regards,

Grant

over 16 years ago

0 Lisa TI over 16 years ago

TI__Guru*** 130875 points

Hi Grant,

There does exist a new application note about using security on the Zigbee radios. However, for export control reasons, this is not freely available.

Please the contact technical support centre for your area and we will be happy to send you the app note!

http://www-k.ext.ti.com/sc/technical-support/product-information-centers.htm?DCMP=TIHomeTracking&HQS=Other+OT+home_d_contact

Cheers,

Yoda

0 "Double 0" over 16 years ago

TI__Expert 4155 points

Hi Grant,

You're right, the document in 1.4.3 is probably out of date. You can download the installer for the 2.1.0 z-stack and this document is more up to date. Also see the Z-stack developer's guide section on security.
essentially all you have to do is to declare the compile option SECURE=1, and set the zgpreconfigkey to FALSE or TRUE (see ZGlobals.c), depending on whether you are obtaining the key from the trustcenter or it is preconfigured (in which case the key in the aps transport key packet is the null key). The default network key is set in nwk_globals.c

-Z

0 GrantHatamosa over 16 years ago in reply to "Double 0"

Expert 1930 points

thanks

i am now able to get security enabled and working properly with zgpreconfigkey=TRUE.

i still have an issue with zgpreconfigkey=FALSE but that is on another thread -> https://community.ti.com/forums/t/2533.aspx

cheers,

grant

Zigbee & Thread

Zigbee & Thread forum

Enabling AES encryption for ZStack 1.4.3-1.2.1