Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

My goal is to create a simple one-way intercom using B Speech TX2 and B Speech RX2, an Audio2Bluetooth and Bluetooth2Audio converter.

My question is, how secure is the audio(in my case voice) being transmitted via AD2P using this setup? Can other people in bt-range easily listen to what I say?

Or in other words: How do I test it for vulnerabilities?

share|improve this question

1 Answer 1

Bluetooth 2.1 and forward require encryption on all connections other than service discovery. A key is exchanged during pairing and used for all future service delivery. If your hardware is using a standard prior to 2.1, then it is possible it could use an unencrypted connection, but otherwise it is guaranteed to use encryption.

In fact, the NSA has even has a post that says they have found it secure enough for unclassified government use, so they don't see any critical flaws in the encryption. So as long as you use encrypted connections, you should be secure. The chances of a sufficiently advanced attacker to be able to hook in to it are pretty much non-existent if used and paired properly.

share|improve this answer
    
According to the specs it's Bluetooth V. 2.0, class II –  Peak Reconstruction Wavelength May 20 '13 at 20:20
    
How do I test it for vulnerabilities? –  Peak Reconstruction Wavelength May 20 '13 at 20:20
    
@PeakReconstructionWavelength - I'm not even sure how you would begin. You could try connecting with a device that isn't paired and see if you can discover or pair, but really, I think you'd need some kind of broad spectrum receiver to try to pull the raw information out of the air. I don't really think testing for vulnerabilities is all that viable on an individual's budget. Maybe someone else knows of a bluetooth radio that can do it, but I think they use frequency hoping that would make it a challenge. –  AJ Henderson May 20 '13 at 20:23
    
You said that only starting from bt 2.1 it was safe and below it might not be. So I need to know hoe to test this. –  Peak Reconstruction Wavelength May 20 '13 at 22:00
    
@PeakReconstructionWavelength - oh, I see, it's a BT2.0 Class 2 device, so you aren't sure if it is encrypted or not. Sorry, didn't understand what you were looking for. I'll do a little digging and see what I can find for you. –  AJ Henderson May 20 '13 at 22:11

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.