francozappa/knob

Key Negotiation Of Bluetooth (KNOB) attacks on Bluetooth BR/EDR and BLE [CVE-2019-9506]

README

Repository about the Key Negotiation Of Bluetooth (KNOB) attacks on Bluetooth BR/EDR and Bluetooth Low Energy.

Related Work

• From the Bluetooth Standard to Standard-Compliant 0-days [HWIO20]
• Key Negotiation Downgrade Attacks on Bluetooth and Bluetooth Low Energy [TOPS20]
• Bluetooth blues: KNOB attack explained [CyberWire19]
• The KNOB is Broken: Exploiting Low Entropy in the Encryption Key Negotiation of Bluetooth BR/EDR [SEC19]
• BIAS: Bluetooth Impersonatoin AttackS [S&P20]

Links

• CVE-2019-9506.
• PoC to perform the KNOB attack using internalblue v0.1
• Code to validate and brute force E0 encryption keys
• How to patch the Linux kernel to perform the KNOB attack on BLE
• Wireshark files