[43899] in cryptography@c2.net mail archive
Fw: [Cfrg] Invitation to review Bluetooth Simple Pairing draft
daemon@ATHENA.MIT.EDU (Steven M. Bellovin)
Sun Sep 17 11:25:25 2006
X-Original-To: cryptography@metzdowd.com
X-Original-To: cryptography@metzdowd.com
Date: Sat, 16 Sep 2006 23:18:55 -0400
From: "Steven M. Bellovin" <smb@cs.columbia.edu>
To: cryptography@metzdowd.com
This is a multi-part message in MIME format.
--Multipart=_Sat__16_Sep_2006_23_18_55_-0400_53GzuRYGHpdmGOy0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
Forwarded with permission.
------------
Begin forwarded message:
Date: Fri, 15 Sep 2006 17:17:55 -0700
From: "Robert Hulvey" <rwhulvey@broadcom.com>
To: cfrg@ietf.org
Subject: [Cfrg] Invitation to review Bluetooth Simple Pairing draft
specification
Hello,
My name is Robert Hulvey and I am a Systems Engineer with Broadcom Corp.
working on Bluetooth products. I participate in several groups within the
Bluetooth Special Interest Group (SIG) including the Core Specification
Working Group (CSWG), the Human Interface Device (HID) Working Group, and
the Bluetooth Architecture Review Board (BARB). Within the CSWG, we have
been developing a feature called Simple Pairing to address the weaknesses
which were part of the original Bluetooth specification's pairing
mechanism. Our hope is that the new pairing method will be FIPS compliant,
and as such we would appreciate your review and feedback on whether we are
on track to achieve this goal. "Pairing" refers to the method of
associating 2 devices so that they can communicate via the Bluetooth
wireless protocol.
Note that Simple Pairing is just a first step, and does nothing to change
the Bluetooth encryption mechanism (the Massey-Rueppel stream cipher, also
known within the specification as E0). We anticipate changing to AES in
counter-mode, similar to what WiFi currently uses, in a future version of
the specification.
The following is a link to a whitepaper which has been made publicly
available for the express purpose of encouraging outside review of the the
draft specification. Please feel free to forward this to any other
interested parties.
See:
<http://www.bluetooth.com/Bluetooth/Apply/Technology/Research/Simple_Pairing
.htm>
http://www.bluetooth.com/Bluetooth/Apply/Technology/Research/Simple_Pairing.
htm
Please send any feedback to the address shown in the document (
<mailto:radio-feedback@bluetooth.org> radio-feedback@bluetooth.org), but
please also copy me at rwhulvey@broadcom.com.
Thank you for your time.
Best Regards,
-Rob
Robert W. Hulvey
Principal Systems Engineer Broadcom Corporation
Mobile
<http://maps.yahoo.com/py/maps.py?Pyt=Tmap&addr=16215+Alton+Parkway&csz=Irvi
ne%2C+CA+92618&country=us> & Wireless Group
16215 Alton Parkway
Irvine, CA 92618
hulvey@broadcom.com
http://www.broadcom.com <http://www.broadcom.com/>
tel:
mobile: 949-926-6239
310-384-0996
<https://www.plaxo.com/add_me?u=30065054807&v0=565779&k0=68427479> Add me
to your address book... <http://www.plaxo.com/signature> Want a
signature like this?
--Steven M. Bellovin, http://www.cs.columbia.edu/~smb
--Multipart=_Sat__16_Sep_2006_23_18_55_-0400_53GzuRYGHpdmGOy0
Content-Type: image/jpeg;
name="ConnectBt.jpg"
Content-Disposition: attachment;
filename="ConnectBt.jpg"
Content-Transfer-Encoding: base64
/9j/4AAQSkZJRgABAQEASABIAAD/2wBDAAUDBAQEAwUEBAQFBQUGBwwIBwcHBw8LCwkMEQ8SEhEP
ERETFhwXExQaFRERGCEYGh0dHx8fExciJCIeJBweHx7/2wBDAQUFBQcGBw4ICA4eFBEUHh4eHh4e
Hh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh7/wAARCAAyAeMDASIA
AhEBAxEB/8QAHAABAAEFAQEAAAAAAAAAAAAAAAYBAgUHCAQD/8QAQhAAAQMDAwIDBAcGBAQHAAAA
AQIDBAAFEQYSIQcxEyJBCBRRYRUyVHGBlNEWM1KTofAXI0KjJHKi0mJzhJGSscH/xAAZAQEAAwEB
AAAAAAAAAAAAAAAAAQIDBAX/xAAsEQACAQIDBgYCAwAAAAAAAAAAARECAxIhMQRBUVKR4QUTYXGB
oSKSU2LR/9oADAMBAAIRAxEAPwDsulKUApSlAKUpQHjk3S3Rrgxb5E6O1LkAlllbgC14+A7mvZXI
/VZyRJ6o6j1Il9wKstziMtHdkJA7/dyn+prrWO6l+O28jOxxIUnPwIzWdFzE2uB7HifhS2KzZuKq
cal5aPJx0ZfSlK0PHFKUoBSlKAUpSgFKUoBSlKAUpSgFKUoBSlKAUpSgFKUoBSlKAUpSgFUNVqho
AKtedZZCS64hsKUEJKlAZUeAB8z8KuHeo/cY1k1jHLDdxccREeO8R1gebGMnIII74I474PerUUy8
9CtTjTU+t7uF5jXy3RIFsD0N9Q8d8pKtg3YPY+XA5ye+eOxpd2dRL1BBVbpLTds8vvKVBOeFEq7j
PKcAYPp6d6iqNdP3zWGoNBWm3y4Fxt0fezLfUR4gSpAXwRlIIUNqsncCDkZGc67ZZb13ssu5agSm
awj9ygbQ8QSpe0ZHoQDgcgdh2rpdt24xpLL31zTMabiuThc5ntn3G8s6piQY1s8W3uIBdf2nynnP
mzgY44IyfxFZhDzC3nGUPNqdax4iAoFSM9sj0zWsdXa0vfTa1C4agiuXlE2cGWg27sDSdqipW7aQ
M4TtRxnCu2DmXMQbVbJcjVsiVNaEhoKWmQFDwwsjgpxuGPKNp7f+2IuWGqVU1k9Gt7JovJ1OlarX
0JJimK+UOTHmRW5UV5DzLgylaTkGvrXK1BuMUxSlAMUxSlAMUxSlAMUxSlAMUxSvNMuNvhPR2Jk6
LGdlL8OOh11KFOq/hSCfMeRwKlJvQhtLU9OKYpSoJGKYpSgGKoarVDQClKUBWlKUApUP616ok6L6
Uak1RCLQl2+CtyMXE7k+KcJRkZGRuUK5OPtK9VrXbJ6rpKtapCrIxNjJkWlUZxLrriAnYlRw6jaV
HcOD3HagO4aVxVbvaZ6kwlXOA6uy3yQ6iLFhvuwVwjFmv8hK21EKUhIC+cAEhJzjvKpnXXXOgL9r
jS+tblZNQXK125hdrfhR/BSqa8UhDBTnkDeVH1w2fjUwDyz2FXPQvUq7rJLir4klXfhDo/8AxVdN
aCme/wCibJMxjxYLKv8AoFcoReq+on+isZmNb9NN6pumtDYpTbcBv3ZzgEqKAcKOSjzev417YXXj
qDaLjN6YMRtOzL+i+M2S1XWLHU3CQCdqipsE8p8oAHxPBxzlatuk9vxPxWnbbaoVMQ5XthSj6Ova
VzHc+qvVjTlxY0LKuOjr5qG73gW+23SO4CiOngOF9hByhaSpOAcf6sg4qJ6u9oLqdpiNfNOOSrTd
L1a70IqbnHh4beaS2suI2dgoFKTn5Ec960PEOyKVzx0l606h6iddV2K2e7jSzFs94cPu2FrWlCUq
WFEkhHiqIHySPjXQ9AR/9qG3L0bfEtdxltNyPdn5bTWWm3OMjOc8E+Y+lZtMmOqSqKmQ0X0p3KaC
xvA+JHfFRCw3M2a73CyyYMxcyXd1vMhDRKVMuqz4m7ttSM5+Y+/GGs7Dn7TQI4ihN8Yukh6bI93I
BYVuyd23soEBP3jtmgNiRLjb5a9kSdFkK2lW1p1KjgHBPB7Z4pDuECYcRJsaQdu7DTqVcfHg9qgO
j7aWJmmJKIBadP0gZLqWcKI3YRvP3HjNea02aQzaGxDt6mZEjTclKyGMKccK04BPGVEHjNAbKiy4
soKMaSy/sOFeG4FbT88dqx161DbrbaFXISGJDaXUNDY8nBUogYz8gdx+QNQK22uQ7pG9PWSWt152
G0y7Fatqo+FJwVDOcLXtKwdvfI+VZa+DT0zR9xetFoCY7clhalCFsCyFoCilJGeElQPA7q+JNASz
6XY+kAzvj+6mF737z7yjG3OM7c52453/AFa9LFwgPtOOszYzrbQ3OKQ6khAxnJIPHFQy/NJkTZb8
CMoQnNLPtsYZKB9YYSEkDHGOPurFXm0ORbPMbh2xbINjhqfS0ztKlB7Lmcd1bUnPrQGyYU+DO3+5
TY0nZjf4LqV7c9s4PFUXcICEvqXOjJEb9+S6keF/zc+X8aieglwnbxqVyystMx1KY93T4Sm0g+Gf
9JAIG7PpWA0Rp5uc2uM7MXHkohvRpkb6NUgjfwN7udqiDhQHfj5UBs9cqMh1TK5DSXEN+KpBWAUo
/iI+HB5r5KuNvTGbkqnxUsOr2NuF5IStXPAOcE8Hj5GtaIg3SZpG4XCTGkMuKdiR323Y5cWWWAgL
UE/6gV5JHHCSM16WbTHVaball/6Rgyr+06pH0cphtI2KCsIVnyHj5elAbBaulsdQ4tq4xFpab8Vw
peSQhH8R54HB5ryMagt72oBZ2pDC3DGS+hSXknfuyQkD1O0bvuINRfX9vcjT4TNta8Fq6MC0kNja
hkFxKgcD02+IMVkSzbYfUpvdDbbW9bkJjKTGz50qWDhQHB2YH3DFAZSzahh3a0e/xS34hbW6mOt5
IXtSSAVc+XOBz2Ge9feNeoKocZ6XJiw3XmEveE5JbJCT6gg4Un/xDg1BtNWtyLbrGti3uMvvW2cJ
KkM4WvJSUbzjn5Zq2VbhIisCRA8Ys6POwLa3bHQBjGRwrvj1oDYc642+CQJs+LFKhkeM8lGR+Jq+
XMixAkyXkN7s7cnvj+/6getap1O0iLHl/TENxTr1njJgLcZKvDUgDxEg48pzknt/Wto3G3xp4b8c
Ky3ykg/cf/sA/h8MigPW2tLiEuIUFIUAUqByCPiKrVrLaGWUNNp2oQkJSPgB2q6gFKUoBVDVaoaA
+MyVHhRXJUp1LTLSdy1q9B/fpUZCtOQ9LXCfY5jcFuSC2ZCSslLnIA28qSefQcA5qTTIsebFciym
kusup2rQr1H9+tRlA03N0tcIFjiImtxklzwEpXlTnJScnClcp9DnAx8q3tRG/VexnXMnxU8bToZt
uXqFDcuW3/w0rYpR2nzBI434wSN2PLuHyFY2eqxQtT6dt2ptSoRqRSEiM1gqS9hxRbyrbxk+XzEF
RGBzWVejm6aIaXL08Fzobf8AkxFFSCkA7QRzv24GdpOVbfuNY6SnT03U2nrlqnTu7UqUJ92dCfKy
FOKCMpK+4PmGQSknIwa6aGs5nfpHDL44/RhXMKI3az8/PAyelFywblZZt/al3IZWjahToYIwN25Q
AOFFPl9CPvxTS7VvlWC42u53ZN0S08VylKW4EtjOR5zjIygqyDjk/ebtLNS0uXO8T7C1EuRJbT4a
ygPnjygKJSMqA8w4OfvzTTLkKHYLhc7taBag68UykqbcKXEk8HYrOB5yMDjv9wzr3x6aRqXp3T6k
N9oO+t272bNU3HRlyk29cFhttiRDW4w40rxm87VcKBIVyfXJrUWiLNpO7aLsd1vPtZ6ot9zm26PI
mRFa3aQY7y20qW2UqXuTtUSMHkY5rbvtB2Ju4+zZqm3aMtsm4LnMNuMR4aHH3HVeM3nanlRICeR6
YNat0JddA2nQ9htd99lfWc+7Q7bHjzpX+H7DnjvoaSlxzeshStygTlQBOcnmuWuMTj7NqdMyOa+1
DK6Y33TF26ader31JuM25IiO6ckXdN0EptRyeUFSWyTsbHl3kuZSfKRUx0lf1aW9o/r7qMRzLTab
IieY3i+GHizHSsJ3YOM4Izg4z2NRTqbptHUm56XgdJehmpOn1+g3RMpd9nWJFnZjNDHJKDhxQVsW
M5WPDIQDuUKmcbQ+qrn1h6+oask1hi/6fMG2S5LKmo8l1yNsAQ4RtUAe5GcetVLHQehL7+1Gh7Dq
b3X3T6Xtsed7v4m/wvFaSvZuwN2N2M4GcdhUU6idT0aR6m6I0SLKqavVLzzZle8+GIoRtwdu0787
jxlOMeueID0/6tXPR2hbFpC89Geq7txsduYtslyBYBIjrcYbDRU26HAFoJTkKHBB4JHNYa5Pan6u
e0H0/wBRWzp5q7Tlm0sp56fK1HBELO/kBtJUSv6gHlzyoZAHNAR/p/rHqrG9orqZcYHRz368zGbY
Ljaf2mjN+4BEcBs+MU7Xd6fN5R5c4NbX1p1k1HZ9S6f0XYemczUGsrjaUXO42pq6NtN2xB4KVyNq
kHCwU7jtSfKQfOBUZvVxv/Sr2jdaavm6E1PqXT+qrfDcjydPQjLXFcjNJaU28k7QnOFKzu7bcZyr
ZjnL1ebJ11Z61J6da7uVh1Hpc29uFCtHiXCG8h9s4fZ3+RJS3uCs8hQ+dASPVHWHrFpnT8y/3r2e
nmLbBaL0p1rVkZ9TbY+svY22pRAHJIGAAScAE1ktV9eYzMjRln0PpWXqrUmrrcm6wrWua1C8KIWl
ObnHVbkBfkWNgJ+ovJHlCo/1L6wz9T9O9R6ZtXRfq4idd7XJgMLlacLbSFvNqbClqCyQBuz29Kie
ldBausftI9FnZmnrn7pZtEtw7lMbjKcjRZAjzQppbyMthQUtKfrc5TjuKA2PM6l9cokR6U77Obqm
2W1OKDWsIjqyAMnahKCpR+ASCT2AJrVnUTWWl+qMrpjqtkXSB+1csWF2N4aFmK8h9KT5sgKGXyQo
ZyNvlBykdfVwroTQmt42keiLMjR2oWXbbrhyTPQ5bXkqismRGIcdBTlCMJUdysDAPPFbWL9yxXjt
uGZXrNF6nDWpR0v0Q6mN6y1PrXRbVmfhI0RMbtaZb073hybhbzXiKGxO0/5GTyrO7vxzIOtuuv8A
DXphd9a/Rf0r9HeD/wAJ7x4PieI+219farGN+exzjHzrSGiv2j6JdY+p0+89P9ZalgatuaLhbZWm
raJrYb8SQ4pLnmSUKHjhOCOSlRHGCfp1215euqnSy7aA070f6oxLpd1xm471zsIjRUFElpw+I6XM
IGEHk8Zxkgc1k3Lk1SjIml265XRxWj7TpDp3O1NqbUdgYv67c3cER2YUVxBOVyFp28LGwZCQTjkF
SUnBX/r91G07qS16av3QebFvN78lnjs6iZfTKcC0BSS4hva2EpUVFRJ2+XICTuHu6a6Ov+muvumW
Z0B5yJaulEWzv3FllZiKlNSkhTaXSkAqwkqCThW3nArK9ZLNeLh7QHRu5wbVOlQbdIuqpslmOpbU
YLYaCC4sDCNxBAyRkjioBjp3W/XOmb7p+P1F6OP6XtF5uTdtTckaijzUsuuZ27kNo7cZOSPKFEZI
wdqaE1N+1VnduCrTPtS2pK46481sodBTjkpOCAc8ZAPyrWPti2O9X3R+j2LHaLhdHY+sIUh5EOMt
5TbSW3wpxQSDhIJGVHgZFbuNAKUpQGtP8c+n32+b+Rc/Sn+OfT77fN/IufpWxPcYX2OP/LFPcYX2
OP8AyxWcV8fruel5uwfx1fsv8NO9QOpHSXWuk5emr+7dZdumbfGZZjvNqXtUFAbhj1A9a1hD6TxL
/CzpbpH4VrLjbiJF7uj4kvBvOxIJXlKB/D2PHwrrEQYQORDj5/8ALFeipwt6stTtmzWc7VqX/Zyu
ig5uFi6Yamv9/hdSdLv2HUl9Wy5MEuUsIdU0MNrYczhPBxxjvjmvBrzRHRzSTdkg2bSTGpLqudva
hyJ63RIWsY8R/JV4mOAAoY5OPWuidTaZsGpoYiX61Rp7QOUh1PKT8iOR+BrE6X6a6H0zPE+y6fjx
pQ+q6pxbqk/cVqOPwqHTVxL0X/D2/MqoafKowz76pemZCVezj0ulwUtybDIihcn35caJcHW2Wn1J
AJbCSNoGMDGOAKiMHSnTGVcLh0l1Bo2LYYttl+9251qY4HHlkY8UOnCt5Tt7k/8ATXSNR/V+itLa
tS0NQ2aPOU0MNrUVIWkfAKSQcfLNWae5nHstyxTVUr9Lae9arqaW1npDopbdNQ9GW7Ty7tPTK95i
x7bIWqap8gAuLdB3DIAySfTtxWJPTW4W23W95/pLANpgeOtESNclmTh9G1xTitx8Re31IJHpW/dK
aI0ppVSlWCyx4S1DBcBUtZH/ADKJP9akVVwt6s6Vtey2fxtWsS3urX4h5fZzjZFdCLfGcaXZrvbn
XYjESRHdTICktsrCwg7T6rSCT645xWyR1o0Ge02Z+Tc/StgORYziytyO0tR7lSATVvuUP7Ix/LFW
iriZu7sTz8t/t2IGnrJoY9psz8m5+lXjrDog9pkz8m5+lTn3KH9kY/linucT7Kx/LFIq4keZsfI+
vYhI6uaKPaZL/KL/AEq8dWNGntMlflV/pUz9zifZWf5YqvukT7Mz/wDAUiriR5mx8j69iHJ6p6PV
2lyfyy/0q8dTtJHtKk/ll/pUzSlKQEpAAHAA9KriphlPM2bkf7diHDqVpU9pMn8sv9KvT1F0urtJ
kfl1/pUuxTFMyuOxyPr2IRZtT6MtLLyYcuStbzpW64404tx1X8RUR/fwrIo11p1SgPeXhn1LCuP6
VJsUpmVx2eV9exgE6x04rtcCf/Tuf9tXjVlgPacr+Q5/21nMUqSuK1yvr2I3JvOm5U+HNcmuF2GV
loBtwDK07SSNvPHavcNR2Y9pn+0v9Ky1KCbfB9exjBf7Se0r/bV+lXC92w9pP+2r9KyNKFZo4Pr2
MTdItsv0JDUlbzkcK3ltCloDoT3BSPrDOPxrK5FVpQoUyKrmlKAZpmlKAVQ1WqGgA71H7lIsujoi
pLVvUhMt8bwwjue/cnAAGcJ+/A7mpAO9WutNPBIdbQ4EqC0hSQcKHII+Y+NWoqh56FalOmprpvQb
9g1dqDXdmny59xuTO1qK+P3QUpKl8k5VjaNqSBtAx5sCs85epjV3s0S5aeBmvp/fIUFeCSSle04P
G0BRweAefjXvvEC9P323zIFzSzDZP+fHJI3jPPYEKyOOe2MjvXyvUy/s6ntseBFDluc/fr2ZA582
Tny4TgjtknHPaup3HdjHDce2i0MabatzhUZkO1Zoy9dSbT9HahkOWdEOel5ott7g4naoLRt3AHGU
7VkHGT3yalzE2z3SQ/pF1ubJEdoJcW8VefYU8ledxOccnv8AE5GftNt16d1VGnsXQN25CQHGNx57
5G3GDnjknI/AVmW2GG3nX22W0Ou48RaUgKXgYGT64qty+3SqW8loluZNFpKp1JZvX1LYUWPCitxY
rSWWWxhCEjgf38a+1KVytybilKUApSlAKUpQClKUApSlAKUpQClKUAqhqtUNAKUpQFaUpQClKUAp
SlAKUpQClKUApSlAKUpQClKUApSlAKUpQClKUApSlAKUpQClKUApSlAKUpQClKUAqhpSgFKUoBSl
KAUpSgFKUoBSlKAUpSgFKUoBSlKAUpSgFKUoBSlKAUpSgFKUoD//2Q==
--Multipart=_Sat__16_Sep_2006_23_18_55_-0400_53GzuRYGHpdmGOy0--
---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo@metzdowd.com
