论文标题
魔术师：苹果公司正在固定蓝牙外围设备
MagicPairing: Apple's Take on Securing Bluetooth Peripherals
论文作者
论文摘要
对于设备制造商和用户来说，在大型物联网（IoT）部署中配对的设备配对是一个挑战。蓝牙在首次使用配对体验方面提供了相当流畅的信任。但是，蓝牙在配对过程中以安全缺陷而闻名。在本文中，我们分析了Apple如何提高蓝牙配对的安全性，同时仍保持其可用性和规范合规性。位于蓝牙之上的专有协议称为MagicPairing。它使用户可以将设备与Apple的生态系统配对，然后将其与所有其他Apple设备无缝使用。我们分析了该协议提供的安全属性及其实现。通常，其他物联网供应商可以对MagicPairing进行改编，以提高蓝牙安全性。即使整体协议是精心设计的，我们还是在Apple的实现中确定了多个漏洞，并具有空中和进程的模糊性。
Device pairing in large Internet of Things (IoT) deployments is a challenge for device manufacturers and users. Bluetooth offers a comparably smooth trust on first use pairing experience. Bluetooth, though, is well-known for security flaws in the pairing process. In this paper, we analyze how Apple improves the security of Bluetooth pairing while still maintaining its usability and specification compliance. The proprietary protocol that resides on top of Bluetooth is called MagicPairing. It enables the user to pair a device once with Apple's ecosystem and then seamlessly use it with all their other Apple devices. We analyze both, the security properties provided by this protocol, as well as its implementations. In general, MagicPairing could be adapted by other IoT vendors to improve Bluetooth security. Even though the overall protocol is well-designed, we identified multiple vulnerabilities within Apple's implementations with over-the-air and in-process fuzzing.
