Invited Talk: BLERP: BLE Re-Pairing Attacks and Defenses

Source: Dev.to

Overview

Bluetooth Low Energy (BLE) is a ubiquitous wireless technology that connects billions of devices. It relies on a pairing process to generate secret keys for secure communication. When previously paired devices need to negotiate a new security level, they use a procedure called re‑pairing.

Vulnerabilities in the Re‑pairing Mechanism

Researchers discovered significant weaknesses in the official specifications governing BLE re‑pairing:

• The standard lacks proper authentication checks.
• It permits attackers to force connections into weaker security states.

Because these flaws are rooted in the core Bluetooth design, billions of compliant devices remain exposed.

Potential Impact

Exploiting these blind spots allows an attacker to:

• Secretly intercept data.
• Trick a device into establishing a connection with a malicious machine.

For example, a hacker could deceive a smartphone into believing it is communicating with a trusted wireless mouse.

Real‑World Demonstrations

The researchers successfully carried out impersonation attacks against twenty‑three different products from major brands, including:

• Apple
• Google
• Microsoft
• Logitech

Industry Response

• Some companies acknowledged the vulnerabilities and released software patches.
• Other manufacturers ignored the reports.
• The Bluetooth Special Interest Group (SIG), which maintains the standard, officially declined to update the vulnerable specification.