Silicon Labs SoC's - Githubissues

Matheus-Garbelini / sweyntooth_bluetooth_low_energy_attacks

Proof of Concept of Sweyntooth Bluetooth Low Energy (BLE) vulnerabilities.

267 stars 69 forks source link

Silicon Labs SoC's #14

Open rafaribe opened 4 years ago

rafaribe commented 4 years ago

There is nothing in the report about Silicon Labs SoC's but have they been subject to testing from your side? I'm specially interested in the Blue Gecko SoC's As far as I can see they implemented some protection on another product

Cheers and keep up the good work!

Matheus-Garbelini commented 4 years ago

Hi @rafaribe thanks for reporting, We didn't test Blue Gecko, but we were contacted some time ago by Silabs to assist in their use of the test scripts.

I guess they silently updated their SDK. We will buy this board and run some tests with it.

If you happen to have this board, feel free to report if any of the existing scripts are successful.

rafaribe commented 3 years ago

I have the board, unfortunately I don't have the Nordic nRF52840 Dongle. I have a couple of BlueGiga dongles and 3x Micro:bit that I've used with bltejack, any chance I can use this hardware in conjunction with the provided scripts? Otherwise, I'll try to buy the Nordic dongle.

rafaribe commented 3 years ago

@Matheus-Garbelini I've bought the dongle and tested this scripts. So far only these seemed to affect our Silabs board.

ESP32 HCI Desync
Invalid Connection Request
Invalid Channel Map

Since we're requiring authentication by writing into some pre-determined characteristic, I'm wondering if modifying the scripts to write the password into the characters would have any effect on the scripts? What do you think?

Please feel free to ask for specific tests because I have the hardware and I'm also looking to find out if the Silabs chips are secure.