Hot answers tagged

5

If the attacker can make the end device send plenty join-request messages and if the server always responds with a corresponding join-accept message, can the attacker gain knowledge of the AppKey using the flaws in AES ECB? No. ECB is flawed, but not that flawed. At worst the attacker can know the encryption of a message if they have already seen the same ...


4

ECB mode has several weaknesses as discussed in Why shouldn't I use ECB encryption? but in this specific case, it does not allow to gain information about the secret key AppKey involved. Indeed, encrypting the same block with the same AppKey will returns the same ciphertext. But in the LoRaWAN join-accept message, it does not matter because the server ...



Only top voted, non community-wiki answers of a minimum length are eligible