apache / apache/mynewt-nimble

Ble Mesh需要考虑密钥的安全管理

Open
#1,285 2 comments 0 reactions 0 assignees View on GitHub
Dominant language
C
Stars
893
Forks
512
Avg merge
13d 31m
Merged PRs (30d)
7

Description

Ble Mesh在配网阶段使用的公私钥在设备上电后主动生成,并保存在全局变量里,后续并未释放。是否需要遵循密钥安全管理,使用完后清除密钥对,在每次使用时再生成?

Contributor guide

No contributing guide indexed for this repository

Research direction

No file, test, or entry point is named. Start by locating the BLE Mesh provisioning code that generates and stores the key pair, then review its lifetime and the project's security requirements; done means an agreed key-management policy is documented and covered by appropriate tests.

Written by the indexing model from the issue text.

Assessment

Tech stack
c
Domain
embedded-iot, networking, security
Issue type
Refactor
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.