Messages in this thread | | | Date | Wed, 19 Jun 2019 18:24:56 +0200 | From | Pavel Machek <> | Subject | (Small) bias in generation of random passkeys for pairing |
| |
Hi!
There's a (small) bias in passkey generation in bluetooth:
get_random_bytes(&passkey, sizeof(passkey)); passkey %= 1000000; put_unaligned_le32(passkey, smp->tk);
(there are at least two places doing this).
All passkeys are not of same probability, passkey "000000" is more probable than "999999", but difference is small.
Do we care? Pavel -- (english) http://www.livejournal.com/~pavelmachek (cesky, pictures) http://atrey.karlin.mff.cuni.cz/~pavel/picture/horses/blog.html [unhandled content-type:application/pgp-signature] | |