5

Suppose there is a computer with a Bluetooth keyboard linked to it. The keyboard uses a simple 4-digit PIN. Now, I am able to crack the PIN and then program my own keyboard to use the same PIN. Would it be possible for me to gain access to the computer by impersonating the legitimate keyboard in some way?

2
  • It has been done. Do some Google searches and you can find examples.
    – SDsolar
    Feb 25, 2017 at 8:45
  • This depends on what version of Bluetooth it uses. If it uses anything older than BR/EDR version 2.1, than the encryption will be really weak, requiring nothing more than brute forcing that 4-digit PIN.
    – forest
    Jan 6, 2019 at 7:43

1 Answer 1

1

Would it be possible for me to gain access to the computer by impersonating the legitimate keyboard in some way?

Probably.

But there are a few question you need to ask yourself here:

  1. Is the computer generating the PIN or is the keyboard?
  2. Does the PIN change? If yes, how often?

If the PIN does not change, it doesn't really matter what device generates the PIN and all you have to do is obtain/crack it.

After you obtained the PIN you will need to knock the other keyboard offline (or when the user is not in the room) in order for the PC to connect to your keyboard.

3
  • would the PC automatically connect to my keyboard? Also, how would I knock the other keyboard offline?
    – tpm900
    Nov 27, 2016 at 16:42
  • Those are two questions. If your signal overpowers the keyboard (or mouse) then it is possible to both make it connect and to knock the other offline. Keep in mind that this stackexchange is not intended to encourage lawbreakers of any kind, so I will assume you are asking an academic question. If you really want to know the answer, try it out in a lab environment.
    – SDsolar
    Feb 25, 2017 at 8:48
  • This is only true for very old versions of Bluetooth (prior to 2.1). For anything newer, the PIN itself is not used directly for encryption, only authentication. So I think this answer is wrong.
    – forest
    Jan 6, 2019 at 7:46

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .