Vatsvagiri kubva kuÉcole Polytechnique Federale de Lausanne kusagadzikana munzira dzekubatanidza dzemidziyo inoenderana neBluetooth Classic standard (Bluetooth BR/EDR). Kusagadzikana kwakapihwa zita rekodhi () Dambudziko rinobvumira anorwisa kuronga kubatanidzwa kwechishandiso chake chenhema panzvimbo pechimbo chakabatana chemushandisi, uye nekubudirira kupedzisa maitiro echokwadi asingazive kiyi yekubatanidza inogadzirwa panguva yekutanga kupetwa kwemidziyo uye kubvumira munhu kuti adzivise kudzokorora nzira yekusimbisa yemanyorero pa. kubatana kwega kwega.
Chinokosha cheiyo nzira ndechekuti kana uchibatanidza kune zvishandiso zvinotsigira Secure Connections mode, anorwisa anozivisa kusavapo kweiyi modhi uye anodzokera kukushandisa yekare nzira yekusimbisa ("legacy" mode). Mu "legacy" mode, anorwisa anotanga tenzi-muranda shanduko yebasa, uye, achipa mudziyo wake se "tenzi," anotora paari kuti asimbise maitiro ehuchokwadi. Anorwisa anobva atumira chiziviso chekuti huchokwadi hwakabudirira, kunyangwe asina kiyi yechiteshi, uye mudziyo unova wechokwadi kune rimwe bato.
Mushure meizvi, anorwisa anogona kuwana kushandiswa kwekiyi yekuvharira iyo ipfupi, ine chete 1 byte ye entropy, uye kushandisa kurwisa kwakambogadzirwa nevatsvagiri vakafanana. kuitira kuronga yakavharidzirwa yeBluetooth yekubatanidza pasi pechifukidziro chechishandiso chiri pamutemo (kana chishandiso chakadzivirirwa kubva kukurwisa kweKNOB uye saizi kiyi haina kuderedzwa, zvino anorwisa haakwanisi kumisikidza chiteshi chekutaura chakavanzika, asi chichaenderera mberi. kuti irambe yakatendeseka kune muridzi).
Kuti ubudirire kusazvibata, zvinodikanwa kuti mudziyo weanorwisa ive mukati mekusvikirwa neiyo inotambura yeBluetooth mudziyo uye anorwisa anofanira kuona kero yemudziyo uri kure uko kubatana kwakamboitwa. Vatsvakurudzi prototype yeturusi rekushandisa nekushandiswa kweyakarongwa nzira yekurwisa uye mashandisiro elaptop neLinux uye kadhi reBluetooth fake kubatana kweiyo yakambopetwa Pixel 2 smartphone.
Dambudziko rinokonzerwa nekusakwana kwechirevo uye rinozviratidza mune dzakasiyana siyana dzeBluetooth stacks uye Bluetooth chip firmwares, kusanganisira. Intel, Broadcom, Cypress Semiconductor, Qualcomm, Apple uye Samsung inoshandiswa mumafoni efoni, malaptop, maPC mabhodhi mamwechete uye maperipherals kubva kune vakasiyana vagadziri. Vatsvakurudzi 30 zvishandiso (Apple iPhone/iPad/MacBook, Samsung Galaxy, LG, Motorola, Philips, Google Pixel/Nexus, Nokia, Lenovo ThinkPad, HP ProBook, Raspberry Pi 3B+, nezvimwewo) zvinoshandisa makumi maviri nemasere machipisi, uye vagadziri vakaziviswa nezve kusagadzikana muna Zvita gore rapfuura. Ndeupi wevagadziri akatoburitsa firmware zvigadziriso negadziriso haisati yatsanangurwa.
Iyo Bluetooth SIG, sangano rinotarisira kugadzira Bluetooth zviyero, nezve kuvandudzwa kweiyo Bluetooth Core yakatarwa. Shanduro itsva iyi inotsanangura zvakajeka nyaya idzo dzinotenderwa kushandura tenzi-muranda, yakaunza chinosungirwa kutendeseka kana uchidzokera ku "legacy" mode, uye yakakurudzira kutarisa rudzi rwe encryption kudzivirira kudzikira kwedanho re kuchengetedzwa kwekubatanidza.
Source: opennet.ru