Enhancement Of Security In Bluetooth Pairing Schemes

Abstract

An infrared-based wireless technology Bluetooth is extended to realise Wireless Personal Area Network. Inherent short-range wireless radio transmitter embedded in Bluetooth devices gives up to 24 Mbps data rate and further employs 2.4 GHz bandwidth. The use of Bluetooth technology has turned into a trendy method for short range wireless interconnections for trading data. Therefore, it is imperative to keep up Bluetooth security issues exceptional. It is a demanding assignment for researchers to present an absolute secure Bluetooth device. newlineBefore transmitting the data, the two Bluetooth device form a trusted pair through the methodology called pairing. Up to Bluetooth 2.0 + EDR (Enhanced Data Rate) either the user used to select the Personal Identification Number (PIN) or a fixed PIN was used in the devices that are to be paired. Various Man-In-The-Middle (MITM) attacks on Bluetooth 2.0 forced to improve Bluetooth pairing process. Bluetooth variant 2.1 + EDR include new specification for the pairing method, in particular Secure Simple Pairing (SSP) with Elliptic Curve Diffie-Hellman (ECDH) key exchange algorithm. The aim of SSP is to provide security against passive eavesdropping and MITM attacks. newlineAlthough SSP paid much attention on security issues, several security weaknesses are discovered, including passive off-line guessing attack and active on-line guessing attack. In addition, MITM attack through insecure channel provides a way to access sensitive information during pairing. Therefore, research aims to improve and assess SSP in current version Bluetooth 5.0 through two proposed protocols. First, SSP with Authenticated Public Key Exchange and Delayed Encrypted Capability Exchange (SSP-APKE-DECE) that employs elliptic curve for Diffie-Hellman key exchange algorithm. Second, Classiquantum Resistance Delayed Capability Exchange SSP (CR-DCE-SSP) that utilizes Ring-Learning with Errors (R-LWE) lattice based cryptography. These protocols have been implemented on Ubuntu 14.04 in Numeric Comparison mode, using python