BLURtooth
Daniele Antonioli, Nils Ole Tippenhauer, Kasper Rasmussen, Mathias Payer · Proceedings of the 2022 ACM on Asia Conference on Computer and Communications Security · 2022
Bluetooth is a pervasive wireless technology specified in an open standard. The standard defines Bluetooth Classic (BT) for high-throughput wireless services and Bluetooth Low Energy (BLE) very low-power ones. The standard also specifies security mechanisms, such as pairing, session establishment, and cross-transport key derivation (CTKD). CTKD enables devices to establish BT and BLE security keys by pairing just once. CTKD was introduced in 2014 with Bluetooth 4.2 to improve usability. However, the security implications of CTKD were not studied carefully.