blur

README AsiaCCS'22で発表されたBLUR攻撃に関するリポジトリです。論文タイトル: BLURtooth: Bluetooth ClassicおよびBluetooth Low Energyにおけるクロストランスポート鍵導出の悪用 便利なリンク: pdf, video, slides, website. BibTexエントリ: @inproceedingsantonioli22blur, author=Antonioli, Daniele and Tippenhauer, Nils Ole and Rasmussen, Kasper and Payer, Mathias,...

New Bluetooth Vulnerability

Theres a new unpatched Bluetooth vulnerability: The issue is with a protocol called Cross-Transport Key Derivation or CTKD, for short. When, say, an iPhone is getting ready to pair up with Bluetooth-powered device, CTKDs role is to set up two separate authentication keys for that phone: one for a...

Devices supporting Bluetooth BR/EDR and LE using CTKD are vulnerable to key overwrite

Overview Devices supporting both Bluetooth BR/EDR and LE using Cross-Transport Key Derivation CTKD for pairing are vulnerable to key overwrite, which enables an attacker to to gain additional access to profiles or services that are not restricted by reducing the encryption key strength or...