Skip to contentSkip to conversation

Enabling authentication and encryption in C

Bluez-users Ståle Andreas Kleppe 2 participants 2 messages Jul 27, 2006 – Jul 28, 2006 Bluetooth drivers

lore
Share & tools
lore

Ståle Andreas Kleppe

author
#0 lore raw

Hi,

I'm working on my master thesis about Bluetooth security, and are going =

to test the security and possibly implement some improvements. I program =

in C, and am currently trying to enable authentication and encryption =

through some function calls in hci_lib.h, namly hci_authenticate_link =

and hci_encrypt_link respectively. Below is a part of my code.

int main(void) {
    struct hci_conn_info_req *cr;
    struct sockaddr_rc resciever =3D { 0 };
    struct sockaddr_rc local =3D { 0 };
    uint16_t handle;
    int s, status, dd;

    char destination[17] =3D "00:09:DD:60:02:45";

    resciever.rc_family =3D AF_BLUETOOTH;
    resciever.rc_channel =3D (uint8_t) 1;
    str2ba( destination, &resciever.rc_bdaddr );

    local.rc_family =3D AF_BLUETOOTH;
    local.rc_channel =3D (uint8_t) 1;
    //lokal_addr.rc_bdaddr =3D *BDADDR_ANY;
    str2ba("00:14:A4:D4:0F:A1", &local.rc_bdaddr);

=

dd =3D hci_open_dev(hci_get_route(&local.rc_bdaddr)); cr =3D (struct hci_conn_info_req*) malloc(sizeof(struct =

hci_conn_info_req));
    ioctl(dd, HCIGETCONNINFO, (unsigned long) cr);
    handle =3D cr->conn_info->handle;

    status =3D hci_authenticate_link(dd, handle, 0);
    printf("status: %d\n", status);
    status =3D hci_encrypt_link(dd, handle, (uint8_t)1, 0);
    printf("status: %d\n", status);
    ....
    .... }

Both calls always return -1, and things obviously aren't going as =

expected. I've managed to digg down through several function calls:
hci_authenticate_link -> hci_send_req -> hci_send_cmd -> writev. writev returns -1 as well and sets the error code variable 'errno' to 77 =

(EBADFD, defined in asm/errno.h and means 'File descriptor in bad state'). I'm not sure what this means.
Thoughts?
Any help will be appreciated!

Regards

St=E5le

-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys -- and earn cash
http://www.techsay.com/default.php?page=3Djoin.php&p=3Dsourceforge&CID=3DDE=
VDEV
_______________________________________________
Bluez-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/bluez-users

maintainer
#1 lore raw

Hi Stale,

Quoted 37 lines

I'm working on my master thesis about Bluetooth security, and are going to test the security and possibly implement some improvements. I program in C, and am currently trying to enable authentication and encryption through some function calls in hci_lib.h, namly hci_authenticate_link and hci_encrypt_link respectively. Below is a part of my code.

int main(void) {
    struct hci_conn_info_req *cr;
    struct sockaddr_rc resciever = { 0 };
    struct sockaddr_rc local = { 0 };
    uint16_t handle;
    int s, status, dd;

    char destination[17] = "00:09:DD:60:02:45";

    resciever.rc_family = AF_BLUETOOTH;
    resciever.rc_channel = (uint8_t) 1;
    str2ba( destination, &resciever.rc_bdaddr );

    local.rc_family = AF_BLUETOOTH;
    local.rc_channel = (uint8_t) 1;
    //lokal_addr.rc_bdaddr = *BDADDR_ANY;
    str2ba("00:14:A4:D4:0F:A1", &local.rc_bdaddr);
   
    dd = hci_open_dev(hci_get_route(&local.rc_bdaddr));
    cr = (struct hci_conn_info_req*) malloc(sizeof(struct 
hci_conn_info_req));
    ioctl(dd, HCIGETCONNINFO, (unsigned long) cr);
    handle = cr->conn_info->handle;

    status = hci_authenticate_link(dd, handle, 0);
    printf("status: %d\n", status);
    status = hci_encrypt_link(dd, handle, (uint8_t)1, 0);
    printf("status: %d\n", status);
    ....
    .... }
Quoted 6 lines

Both calls always return -1, and things obviously aren't going as expected. I've managed to digg down through several function calls:
hci_authenticate_link -> hci_send_req -> hci_send_cmd -> writev. writev returns -1 as well and sets the error code variable 'errno' to 77 (EBADFD, defined in asm/errno.h and means 'File descriptor in bad state'). I'm not sure what this means.

run "hcidump -X -V" and see if they really got sent. And take a look at hidd, because this daemon already implements this.

Regards

Marcel

-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys -- and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
Bluez-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/bluez-users