⬇ Download holy card: ·
Saint BLUFFS, Who Shortened the Bluetooth Keys
Patron of Bluetooth headsets and devices, past and future sessions, and everyone who trusts the first pairing.
Life
On 27 November 2023 Daniele Antonioli presented BLUFFS, a set of attacks on classic Bluetooth: a man in the middle could force the negotiation toward a short, predictable session key, breaking the secrecy of both past and future communications between two already-paired devices. The weakness lay in the standard itself, from versions 4.2 through 5.4, and allowed decrypting traffic and injecting data.
Prayer
O Saint BLUFFS, who negotiates short keys like a bluffer at the table, let our Bluetooth demand strong keys. Amen.
How to celebrate
Celebrated by updating the firmware of Bluetooth devices and enforcing, where possible, strong session keys.
A short key negotiated, a conversation revealed.