[Bluez-users] Bluetooth security in bluez ?

[Bluez-users] Bluetooth security in bluez ?

[Thomas PEYRIN]

hi everybody !

i'm interested in how is the bluetooth security
implemented in linux ... do bluez drivers take care of
that ? if yes, where is the corresponding source code
?? i didn't manage to find it !

thanks in advance !

a bluetooth noob


	

	
		
Yahoo! Mail : votre e-mail personnel et gratuit qui vous suit partout ! 
Créez votre Yahoo! Mail sur http://fr.benefits.yahoo.com/

Dialoguez en direct avec vos amis grâce à Yahoo! Messenger !Téléchargez Yahoo! Messenger sur http://fr.messenger.yahoo.com


-------------------------------------------------------
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
_______________________________________________
Bluez-users mailing list
Bluez-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bluez-users

Re: [Bluez-users] Bluetooth security in bluez ?

[Michal Semler (volny.cz)]

Hi,

security can be enabled using security optin in hcid.conf - your dongle mus=
t=20
support it.

Michal

Dne po 29. b=C5=99ezna 2004 00:08 Thomas PEYRIN napsal(a):
> hi everybody !
>
> i'm interested in how is the bluetooth security
> implemented in linux ... do bluez drivers take care of
> that ? if yes, where is the corresponding source code
> ?? i didn't manage to find it !
>
> thanks in advance !
>
> a bluetooth noob
>
>
>
>
>
>
> Yahoo! Mail : votre e-mail personnel et gratuit qui vous suit partout !
> Cr=C3=A9ez votre Yahoo! Mail sur http://fr.benefits.yahoo.com/
>
> Dialoguez en direct avec vos amis gr=C3=A2ce =C3=A0 Yahoo! Messenger !T=
=C3=A9l=C3=A9chargez
> Yahoo! Messenger sur http://fr.messenger.yahoo.com
>
>
> -------------------------------------------------------
> This SF.Net email is sponsored by: IBM Linux Tutorials
> Free Linux tutorial presented by Daniel Robbins, President and CEO of
> GenToo technologies. Learn everything from fundamentals to system
> administration.http://ads.osdn.com/?ad_id=3D1470&alloc_id=3D3638&op=3Dcli=
ck
> _______________________________________________
> Bluez-users mailing list
> Bluez-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/bluez-users


-------------------------------------------------------
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
_______________________________________________
Bluez-users mailing list
Bluez-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bluez-users

Re: [Bluez-users] Bluetooth security in bluez ?

[Marcel Holtmann]

Hi Michal,

> security can be enabled using security optin in hcid.conf - your dongle must 
> support it.

setting auth and encrypt in hcid.conf enables security mode 3, which is
not what most people want. Leave it off and use security mode 1/2 and
let the remote device trigger the security mechanism.

Regards

Marcel




-------------------------------------------------------
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
_______________________________________________
Bluez-users mailing list
Bluez-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bluez-users

[Bluez-users] Re: Bluetooth security in bluez ?

[Anssi Saari]

On Mon, Mar 29, 2004 at 12:56:57AM +0200, Marcel Holtmann wrote:
 
> setting auth and encrypt in hcid.conf enables security mode 3, which is
> not what most people want. Leave it off and use security mode 1/2 and
> let the remote device trigger the security mechanism.

How can you tell whether a connection is encrypted or not in Bluez if
security mode is 2?



-------------------------------------------------------
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
_______________________________________________
Bluez-users mailing list
Bluez-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bluez-users

Re: [Bluez-users] Re: Bluetooth security in bluez ?

[Marcel Holtmann]

Hi Anssi,

> > setting auth and encrypt in hcid.conf enables security mode 3, which is
> > not what most people want. Leave it off and use security mode 1/2 and
> > let the remote device trigger the security mechanism.
> 
> How can you tell whether a connection is encrypted or not in Bluez if
> security mode is 2?

check with "hcitool con"

Connections:
        < ACL 00:0A:xx:xx:xx:xx handle 43 state 1 lm MASTER ENCRYPT 

Regards

Marcel




-------------------------------------------------------
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
_______________________________________________
Bluez-users mailing list
Bluez-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bluez-users

[Bluez-users] Re: Bluetooth security in bluez ?

[Anssi Saari]

On Thu, Apr 01, 2004 at 12:40:08PM +0200, Marcel Holtmann wrote:
> Hi Anssi,
> 
> > > setting auth and encrypt in hcid.conf enables security mode 3, which is
> > > not what most people want. Leave it off and use security mode 1/2 and
> > > let the remote device trigger the security mechanism.
> > 
> > How can you tell whether a connection is encrypted or not in Bluez if
> > security mode is 2?
> 
> check with "hcitool con"
> 
> Connections:
>         < ACL 00:0A:xx:xx:xx:xx handle 43 state 1 lm MASTER ENCRYPT 

Great, thanks. Are RFCOMM connections for dialup usually encrypted? I
have Bray & Sturman's BT book, but it only mentions in passing that
"RFCOMM will enforce security for dialup networking" where it talks
about the security manager.

Anssi



-------------------------------------------------------
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
_______________________________________________
Bluez-users mailing list
Bluez-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bluez-users

Re: [Bluez-users] Re: Bluetooth security in bluez ?

[Marcel Holtmann]

Hi Anssi,

> > > How can you tell whether a connection is encrypted or not in Bluez if
> > > security mode is 2?
> > 
> > check with "hcitool con"
> > 
> > Connections:
> >         < ACL 00:0A:xx:xx:xx:xx handle 43 state 1 lm MASTER ENCRYPT 
> 
> Great, thanks. Are RFCOMM connections for dialup usually encrypted? I
> have Bray & Sturman's BT book, but it only mentions in passing that
> "RFCOMM will enforce security for dialup networking" where it talks
> about the security manager.

the RFCOMM connection itself can't be encrypted, but the underlaying ACL
link can. The link is shared across every connection between two devices
and this means if you enforce once the encryption it is there for every
other RFCOMM, L2CAP etc. connection at that time. Some books don't make
this point very clear and talking about a security manager is another
topic, because the Bluetooth security mechanism are part of the lower
(hardware and firmware) layers.

Regards

Marcel




-------------------------------------------------------
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
_______________________________________________
Bluez-users mailing list
Bluez-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bluez-users

Re: [Bluez-users] Bluetooth security in bluez ?

[Michal Semler (volny.cz)]

It's done by dongle - ask Marcel for details in bluez mailing list.

Michal

Dne po 29. b=C5=99ezna 2004 00:35 Thomas PEYRIN napsal(a):
> ok but i'm intersted in how the security is
> implemented (E0, E1, E21, E22, E3 algorithms) ... i'm
> looking for the source code that does the
> authentification and encryption. You mean that it's
> done inside the dongle ?
>
> thomas
>
>  --- "Michal Semler (volny.cz)" <cijoml@volny.cz> a
> =C3=A9crit=C2=A0: > Hi,
>
> > security can be enabled using security optin in
> > hcid.conf - your dongle must
> > support it.
> >
> > Michal
> >
> > Dne po 29. b=C3=85=C2=99ezna 2004 00:08 Thomas PEYRIN
> >
> > napsal(a):
> > > hi everybody !
> > >
> > > i'm interested in how is the bluetooth security
> > > implemented in linux ... do bluez drivers take
> >
> > care of
> >
> > > that ? if yes, where is the corresponding source
> >
> > code
> >
> > > ?? i didn't manage to find it !
> > >
> > > thanks in advance !
> > >
> > > a bluetooth noob
> > >
> > >
> > >
> > >
> > >
> > >
> > > Yahoo! Mail : votre e-mail personnel et gratuit
> >
> > qui vous suit partout !
> >
> > > Cr=C3=83=C2=A9ez votre Yahoo! Mail sur
> >
> > http://fr.benefits.yahoo.com/
> >
> > > Dialoguez en direct avec vos amis gr=C3=83=C2=A2ce =C3=83=C2=A0 Yahoo!
> >
> > Messenger !T=C3=83=C2=A9l=C3=83=C2=A9chargez
> >
> > > Yahoo! Messenger sur http://fr.messenger.yahoo.com
>
> -------------------------------------------------------
>
> > > This SF.Net email is sponsored by: IBM Linux
> >
> > Tutorials
> >
> > > Free Linux tutorial presented by Daniel Robbins,
> >
> > President and CEO of
> >
> > > GenToo technologies. Learn everything from
> >
> > fundamentals to system
>
> administration.http://ads.osdn.com/?ad_id=3D1470&alloc_id=3D3638&op=3Dcli=
ck
>
> > > _______________________________________________
> > > Bluez-users mailing list
> > > Bluez-users@lists.sourceforge.net
>
> https://lists.sourceforge.net/lists/listinfo/bluez-users
>
>
>
> -------------------------------------------------------
>
> > This SF.Net email is sponsored by: IBM Linux
> > Tutorials
> > Free Linux tutorial presented by Daniel Robbins,
> > President and CEO of
> > GenToo technologies. Learn everything from
> > fundamentals to system
>
> administration.http://ads.osdn.com/?ad_id=1470&alloc_id638&op=3Dclick
>
> > _______________________________________________
> > Bluez-users mailing list
> > Bluez-users@lists.sourceforge.net
>
> https://lists.sourceforge.net/lists/listinfo/bluez-users
>
>
>
>
>
>
> Yahoo! Mail : votre e-mail personnel et gratuit qui vous suit partout !
> Cr=C3=A9ez votre Yahoo! Mail sur http://fr.benefits.yahoo.com/
>
> Dialoguez en direct avec vos amis gr=C3=A2ce =C3=A0 Yahoo! Messenger !T=
=C3=A9l=C3=A9chargez
> Yahoo! Messenger sur http://fr.messenger.yahoo.com


-------------------------------------------------------
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
_______________________________________________
Bluez-users mailing list
Bluez-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bluez-users

Re: [Bluez-users] Bluetooth security in bluez ?

[Marcel Holtmann]

Hi Thomas,

first if you start asking on a mailing list you should keep posting also
your answers to it.

> > ok but i'm intersted in how the security is
> > implemented (E0, E1, E21, E22, E3 algorithms) ... i'm
> > looking for the source code that does the
> > authentification and encryption. You mean that it's
> > done inside the dongle ?

The Bluetooth host stack only handles everything at the HCI level and
its upper layers. Everything down like link manager, baseband and radio
is part of the Bluetooth chip. And this also means that every security
mechanism is implemented in the chip. From the host side you can only
trigger them.

Regards

Marcel




-------------------------------------------------------
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
_______________________________________________
Bluez-users mailing list
Bluez-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bluez-users