All of
 help / color / mirror / Atom feed
From: Brian Gix <>
To: Johan Hedberg <>
Cc: Luiz Augusto von Dentz <>,
	Vinicius Costa Gomes <>,
Subject: Re: LE Kernel (bluetooth-le-2.6) and LE Security Manager
Date: Tue, 25 Jan 2011 10:35:40 -0800	[thread overview]
Message-ID: <1295980540.2656.85.camel@ubuntuLab1> (raw)
In-Reply-To: <20110125175922.GA16442@jh-x301>

Hi Johan,

On Tue, 2011-01-25 at 19:59 +0200, Johan Hedberg wrote:
> Hi Brian,
> On Tue, Jan 25, 2011, Brian Gix wrote:
> > >From Page 607:
> > "If both devices have out of band authentication data, then the
> > Authentication Requirements Flags shall be ignored when selecting the
> > pairing method and the Out of Band pairing method shall be used. If both
> > devices have not set the MITM option in the Authentication Requirements
> > Flags, then the IO capabilities shall be ignored and the Just Works
> > association model shall be used. Otherwise the IO capabilities of the
> > devices shall be used to determine the pairing method as defined in
> > Table 2.4."
> > 
> > In the test case I ran, only One device (i.e. NOT BOTH) had the MITM
> > option set. So my reading is that the IO Capabilities should be ignored,
> > and JUST_WORKS used.
> It certainly is an unusual form of English. It's saying "If both devices
> have <x>", i.e. the condition <x> needs to be fulfilled by both devices
> for the statement to be true. In this case the condition is "not set the
> MITM option", i.e. both devices need to fulfill the condition "not set
> the MITM option". Doesn't that then mean that it's not enough for one
> device to not set the MITM flag, but both devices need to have it unset
> for just-works to take place?

Yes, it is very unfortunate and awkward English.

I am going to look for any errata that might be more explicit, so that
an absolute truth table based on: MITM, OOB, and IO-Caps can be

But the Truth table as I understood it from conversations at UPFs and
WGs and in my notes was:

1. If BOTH devices have OOB available, it is used and results in MITM
2. If NEITHER device wants MITM, JUST_WORKS used resulting in no MITM
3, If One or more want MITM, the IO Caps Table 2.4 on page 608 is used
and MAY or MAY NOT result in MITM.

In every case, MITM outcome is known, and propagated up the stack.

I have nothing to prove this, but it appears to be what the mature
stacks were using at UPF in Barcelona. But it is apparent that the spec
is not 100% clear, and that an errata is required to explicitly spell it

I am going to either find the errata if it exists, or propose one to the
Core Working Group if it doesn't. Whatever the outcome, I will post it

Brian Gix
Employee of Qualcomm Innovation Center, Inc.
Qualcomm Innovation Center, Inc. is a member of Code Aurora Forum

  reply	other threads:[~2011-01-25 18:35 UTC|newest]

Thread overview: 18+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2010-12-03 19:11 LE Kernel (bluetooth-le-2.6) and LE Security Manager Brian Gix
2010-12-03 22:05 ` Vinicius Costa Gomes
2010-12-04  0:40   ` Brian Gix
2010-12-06 14:50     ` Vinicius Costa Gomes
2011-01-24 19:03   ` Brian Gix
2011-01-24 20:09     ` Luiz Augusto von Dentz
2011-01-24 20:33       ` Brian Gix
2011-01-24 21:34     ` Vinicius Costa Gomes
2011-01-25  8:35       ` Luiz Augusto von Dentz
2011-01-25 16:58         ` Brian Gix
2011-01-25 17:10           ` Brian Gix
2011-01-25 17:59           ` Johan Hedberg
2011-01-25 18:35             ` Brian Gix [this message]
2011-01-25 21:44               ` Luiz Augusto von Dentz
2011-01-25 22:04                 ` Brian Gix
2011-01-26 17:54                   ` Brian Gix
2011-01-28 23:19       ` GATT and D-Bus Inga Stotland
2011-01-29  0:07         ` Vinicius Costa Gomes

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=1295980540.2656.85.camel@ubuntuLab1 \ \ \ \ \ \

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.