2009-01-21 15:04:12

by Ed Tsang

Subject: Is it possible to completely turn off encryption

Hi, Is it possible to completely turn off the encryption (even if the remote device want it).
hciconfig hcio noencrypt -- seem to turn off our request of encryption
But if the remote device request it, we seem to still go through with it.
Situtation: when we search the BlackBerry's SDP server, they pop up and ask for pin. They seem to be very secure minded.
hciconfig hcio noencrypt
sdptool browse --tree <BDADDR>
will cause the BlackBerry 7290 to pop up the pairing screen (PIN).
hciconfig hci1 feature
shown the dongle (BroadCom chip) support encryption (mandated feature?)
There seem no way (e.g. hciconfig hci1 feature set) to fool the other side that we don't have encryption capabilities (not sure if it is "legal" as this might be an mandated feature).

Any suggestion? Anyone?

Edwin

2009-01-28 05:59:04

by Marcel Holtmann

Subject: Re: Is it possible to completely turn off encryption

Hi,

> Is it possible to completely turn off the encryption (even if the remote device want it).
> hciconfig hcio noencrypt -- seem to turn off our request of encryption
> But if the remote device request it, we seem to still go through with it.
> Situtation: when we search the BlackBerry's SDP server, they pop up and ask for pin. They seem to be very secure minded.
> hciconfig hcio noencrypt
> sdptool browse --tree <BDADDR>
> will cause the BlackBerry 7290 to pop up the pairing screen (PIN).
> hciconfig hci1 feature
> shown the dongle (BroadCom chip) support encryption (mandated feature?)
> There seem no way (e.g. hciconfig hci1 feature set) to fool the other side that we don't have encryption capabilities (not sure if it is "legal" as this might be an mandated feature).

you are confusing authentication with encryption and with the security
mode 3 that most RIM devices are using. Please read up in the Bluetooth
specification what these terms mean and how they work together.

Regards

Marcel