• State Resolved
  • Locked Locked
  • Replies 9 replies
  • Subscribers 57 subscribers
  • Views 538 views
  • Users 0 members are here
Support feedback
Options
Options
Related

This thread has been locked.

If you have a related question, please click the "Ask a related question" button in the top right corner. The newly created question will be automatically linked to this question.

Key Establishment default response when using ZAP.

Kiwi
Prodigy 120 points
Other Parts Discussed in Thread: CC2530

Hi,

When our coordinator (ESP) sends out an initiate Key Establishment to a IPD that has already joined correctly the IPD responds with a Key Establishment default response instead of continuing with the Key Establishment.

We have tested with the TI examples using a Smart RF05 board as the co-ordinator and a EXP430F5438 board (running ZAP) as the IPD and we get the same incorrect default response as above.

If we Test with 2 Smart RF05 boards (one co-ordinator, one IPD ) we get the correct action and the Key Establishment proceeds correctly.

All firmware versions are using the sample apps supplied in 2.5.0.

Any ideas of what we are missing in the ZAP version?

We need this to pass SEP1.1 testing.

  • 0
    Intellectual 320 points

    Hi,

    Is device end point is correctly mentioned in Initiation command for Key Establishment for IPD. Else you have to discover the end point for key establishment cluster before starting it.

    --Varun

  • 0 in reply to Varun Shukla
    Prodigy 120 points

    Hi,

    Yes it is correct. It works in the SmartRf05 setup but not the ZAP setup.

    Also this issue was brought to our attention by our Testing Lab who have exactly the same issue with our product and we can reproduce it.

  • 0 in reply to Kiwi
    TI__Genius 10650 points

    Hello Kiwi,

    Can you verify the following, when creating the ZNP image did you use the live Certicom library and also had the following compile options when creating the ZNP image:

    POWER_SAVING
    ZCL_KEY_ESTABLISH
    TC_LINKKEY_JOIN
    TEST_CERT_DATA
    SECURE=1

    Also, when using the ZAP project you had -DSECURE=1 in the zap.cfg file and TC_LINKKEY_JOIN enabled.

    I was able to create a setup with ZAP-ZNP (IPD) and CC2530 (ESP) with out of box sample SE applicaiton to have succesful Key Establishment procedure.

    Let me know if this is able to help you. Thanks

    Regards

     

  • 0 in reply to Suyash Jain
    Prodigy 120 points

    Hi,

    Thankyou for your reply.

    I think you may have missed that the initial CBKE process works fine and everything works perfectly.

    It is when the ESP initiates another Key Establishment as per the SEP 1.1 Test Specification 075384r30 test case 15.30.

    In this case it does not continue with the key establishment process but sends a Default response.

    If needed I can send you a capture of this.

    Thanks

  • 0 in reply to Kiwi
    TI__Intellectual 1700 points

    Can you please provide us the sniffer capture of your observation. We are trying to understand the issue and that will be helpful in providing the solution.

    Thanks Carlo.

  • 0 in reply to Carlo Marsano
    Prodigy 120 points

    Hi Carlo,

    Below is a sniffer screenshot.

    The highlighted line shoes the incorrect response.

    I have also emailed you the original file.

    Thanks

  • 0 in reply to Kiwi
    Prodigy 120 points

    Attached this time..

    15-30.pdf
  • 0 in reply to Kiwi
    TI__Genius 10650 points

    Hello Kiwi,

    From the log, line 303, I see that the Initiate Key Establishment Request is sent to endpoint 0x0C while the KeyEstablishment cluster on your device is supported on endpoint 0x0A, I think this as the first time the end-device initiates the Key-Establishment procedure it does it from the Endpoint 0x0A. When initiating the Key Establishment for the second time from the coordinator can I ask you to start by sending the request to endpoint 0x0A or you can start by sending a match descriptor request for Key Establishment cluster from the coordinator or employ some code to determine on which end point is the key establishment supported on the remote device and then start the key establishment procedure. Please let me know if you have any question and let me know if this helps you. Thanks

    Regards

  • 0 in reply to Suyash Jain
    Prodigy 120 points

    Hi,

    Thankyou you are correct.

    What we didn't realise ( and our test house didn't notice either) was when using ZAP the Key Establishment is on a different endpoint from the other clusters.

    Thanks again.