Product Security Vulnerability Report –LPC#5
■主题
●“密钥输入协议中的模拟”漏洞
■对话框产品类别
●连接>蓝牙低能耗
■漏洞参考
●ANSSI在一篇题为“蓝牙低能耗实现中的弱密钥管理测试”的论文中发表的研究。
●关于“密码输入协议中的模拟”漏洞的Bluetooth SIG声明。
●宣布为CVE-2020-26558
■漏洞描述
●ANSSI论文描述了LE安全连接与密钥认证过程配对如何受到中间人（MITM）攻击。配对时，攻击者必须在启动和响应设备附近。攻击者通过反映真实的响应来模拟启动器，将攻击者建立为响应者的启动器。为了使攻击成功，它必须在密钥身份验证过程中攻击涉及20位6位密钥的所有20次。攻击者无法通过此方法成功模拟响应程序，从而阻止对启动器和响应程序之间的配对过程进行完全透明的MITM攻击。
●此攻击暴露了蓝牙规范中的漏洞，而不是实现漏洞。
| 世强硬创平台www.sekorm.com | |
| 世强硬创平台电子商城www.sekorm.com/supply/ | |
| 世强硬创平台www.sekorm.com | |
| 世强硬创平台www.sekorm.com |
- +1 Like
- Add to Favorites
All reproduced articles on this site are for the purpose of conveying more information and clearly indicate the source. If media or individuals who do not want to be reproduced can contact us, which will be deleted.
Recommend
DA14580/DA14581/DA14582/DA14583/DA14585 RoHS 2 compliance certificate
22-May-2018 - Test Report
DA14580,DA14582,DA14581,DA14583,DA14586,DA14585
DA14580/DA14581/DA14582/DA14583/DA14585/DA14586 REACH Reach compliance certificate
21-Nov-2018 - Test Report
DA14580,DA14582,DA14581,DA14583,DA14586,DA14585
Product Security Vulnerability Report –LPC#5
25 June 2021 - Test Report
DA14697,DA14699,DA14585-00T,DA14683,DA14583,DA14682,DA14531,DA14586,DA14681-01,DA14530,DA14585,DA14695,DA14580,DA14581,DA14680,DA14691
DA1458x Software Platform Reference UM-B-051 User Manual
20-Dec-2016 - User's Guide
DA14580,DA14581,DA1458X,DA14583
DA1458x SoC Platform Software Release Notes for version5.0.4
JULY 29, 2016 - Development Environment（Software/Firmware）
DA14580,DA14581,DA1458X,DA14583
DA1458x SoC Platform Software Release Notes for version 5.0.3
OCT 16, 2015 - Development Environment（Software/Firmware）
DA14580,DA14581,DA1458X,DA14583
DA1458x Software Developer’s Guide UM-B-050 User Manual
22-Jul-2016 - User's Guide
DA14580,DA14581,DA1458X,DA14583
SmartBond™ DA14586 Smallest, lowest power and most integrated Bluetooth 5 SoC with integrated Flash
2018/03/08 - Technical Documentation
DA14580,DA14581,DA1458X,DA14586-00F02AT2,DA14583,DA14586
SmartBond™ DA1458x Product Family Power, Size and System Cost Without Compromise
2018/03/08 - Technical Documentation
DA14580,DA14581,DA1458X,DA14583,DA14586,DA14585
SmartSnippets™ Studio User Manual
09 Jun 2022 - User's Guide
DA14580,DA14581,DA1453X,DA1469X,DA1468X,DA14583,DA14586,DA14585
查看更多版本
User Manual SmartSnippets™ Studio UM-B-057
29-May-202 - User's Guide
DA14580,DA14581,DA1453X,DA1469X,DA1468X,DA14583,DA14586,DA14585
SmartSnippets™ Studio UM-B-057 User Manual
24-Dec-2020 - User's Guide
DA14580,DA14581,DA1453X,DA1469X,DA1468X,DA14583,DA14586,DA14585
DA14531/D2632 Basic Development Kit (USB dongle)
Wednesday, September 16, 2020 - Schematics
D2632,D2632-DEVKT-B-USB,DA14531
查看更多版本
Electronic Mall
Auth. Dist.
Auth. Dist.
Auth. Dist.
Auth. Dist.
Auth. Dist.
Auth. Dist.
Integrated Circuits
Discrete Components
Connectors & Structural Components
Assembly UnitModules & Accessories
Power Supplies & Power Modules
Electronic Materials
Instrumentation & Test Kit
Electrical Tools & Materials
Mechatronics
Processing & Customization
