esp-idf/components/bt
Chinmay Chhajed d73ebb570b Bluedroid: Fixes for some vulnerabilities.
This commit fixes 'Impersonation in Passkey entry protocol'
(CVE-2020-26558) and suggests fixes for other vulnerabilites like
'Impersonation in the Pin Pairing Protocol' (CVE-2020-26555) and
'Authentication of the LE Legacy Pairing Protocol'

CVE-2020-26558 can be easily implemented if the peer device can
impersonate our public key. This commit adds a check by comparing our
and received public key and returns failed pairing if keys are same.

This commit also adds comments suggesting to use secure connection when
supported by all devices.
2020-12-24 10:52:12 +00:00
..
common ble_mesh: stack: Support reporting normal ble adv packets 2020-12-21 09:08:25 +00:00
controller bugfix: clear the timer after remote reject when respond the parameters update 2020-12-17 22:19:44 +08:00
esp_ble_mesh ble_mesh: stack: Support reporting normal ble adv packets 2020-12-21 09:08:25 +00:00
host Bluedroid: Fixes for some vulnerabilities. 2020-12-24 10:52:12 +00:00
include
test
CMakeLists.txt ble_mesh: stack: Add a btc file for ble coex functions 2020-12-21 09:08:25 +00:00
Kconfig
component.mk
linker.lf
sdkconfig.rename