38 citations · 134 across the 19 of their papers we have counts for
7 papers · 1 filter
Firmware Insider: Bluetooth Randomness is Mostly Random
Jörn Tillmanns, Jiska Classen, Felix Rohrbach +1
Bluetooth chips must include a Random Number Generator (RNG). This RNG is used internally within cryptographic primitives but also exposed to the operating system for chip-external…
Frankenstein: Advanced Wireless Fuzzing to Exploit New Bluetooth Escalation Targets
Jan Ruge, Jiska Classen, Francesco Gringoli +1
Wireless communication standards and implementations have a troubled history regarding security. Since most implementations and firmwares are closed-source, fuzzing remains one of…
DEMO: Attaching InternalBlue to the Proprietary macOS IOBluetooth Framework
Davide Toldo, Jiska Classen, Matthias Hollick
In this demo, we provide an overview of the macOS Bluetooth stack internals and gain access to undocumented low-level interfaces. We leverage this knowledge to add macOS support to…
DEMO: Extracting Physical-Layer BLE Advertisement Information from Broadcom and Cypress Chips
Jiska Classen, Matthias Hollick
Multiple initiatives propose utilizing Bluetooth Low Energy (BLE) advertisements for contact tracing and SARS-CoV-2 exposure notifications. This demo shows a research tool to analy…
Lost and Found: Stopping Bluetooth Finders from Leaking Private Information
Mira Weller, Jiska Classen, Fabian Ullrich +2
A Bluetooth finder is a small battery-powered device that can be attached to important items such as bags, keychains, or bikes. The finder maintains a Bluetooth connection with the…
MagicPairing: Apple's Take on Securing Bluetooth Peripherals
Dennis Heinze, Jiska Classen, Felix Rohrbach
Device pairing in large Internet of Things (IoT) deployments is a challenge for device manufacturers and users. Bluetooth offers a comparably smooth trust on first use pairing expe…