简体繁体 English

BlueZ：从命令行使用椭圆曲线 Diffie-Hellman 进行 LE 安全配对

[英]BlueZ: LE secure pairing using Elliptical Curve Diffie-Hellman from command line

原文 2016-03-28 10:07:53 9 1 linux/ bluetooth-lowenergy/ bluez/ diffie-hellman

One of the main features of Bluetooth v4.2 is LE secure connections, where Elliptic Curve Diffie Helman (ECDH) is used for the key agreement protocol.蓝牙 v4.2 的主要特性之一是 LE 安全连接，其中 Elliptic Curve Diffie Helman (ECDH) 用于密钥协商协议。 As of BlueZ v5.26, support for LE secure connections has been added as follows:-从 BlueZ v5.26 开始，对 LE 安全连接的支持已添加如下：-

" BlueZ 5.26 is the first release with support for Blueooth 4.2 features. Perhaps the most notable one of these is Low Energy Secure Connections which will require a 3.19 or newer kernel. "[1] “ BlueZ 5.26 是第一个支持蓝牙 4.2 功能的版本。其中最值得注意的可能是低能耗安全连接，它需要 3.19 或更新的内核。 “[1]

Is there a way to test ECDH pairing through the command line?有没有办法通过命令行测试 ECDH 配对？ if not, what is the easiest way to test this?如果没有，测试这个最简单的方法是什么？

I'm using BlueZ v5.38 on kernel 3.19 but I can't figure out how to do this.我在内核 3.19 上使用 BlueZ v5.38，但我不知道如何做到这一点。

[1] http://www.bluez.org/release-of-bluez-5-26/ [1] http://www.bluez.org/release-of-bluez-5-26/

1 个解决方案

In Linux, the secure connections feature using ECDH can be verified by performing pairing (using bluetoothctl) between two Bluetooth v4.2 devices and observing the output through btmon.在 Linux 中，可以通过在两个蓝牙 v4.2 设备之间执行配对（使用 bluetoothctl）并通过 btmon 观察输出来验证使用 ECDH 的安全连接功能。 Look for HCI Event: Link Key Notification and observe the Key type.查找 HCI 事件：链接密钥通知并观察密钥类型。 If it shows P-256, then Secure Connections feature is verified.如果显示 P-256，则验证安全连接功能。 If it shows P-192, then it is using Secure Simple Pairing (SSP).如果它显示 P-192，则它正在使用安全简单配对 (SSP)。

Additional background on this can be found in the Bluetooth Core Specification v4.2 in Vol 1, Part A, Section 5.1: Security Architecture.可以在第 1 卷 A 部分第 5.1 节：安全架构中的蓝牙核心规范 v4.2 中找到关于此的更多背景信息。

I hope this helps.我希望这有帮助。