I found information about KillerBee which sniffs Zigbee networks. Here is the tutorial: https://www.willhackforsushi.com/presentations/toorcon11-wright.pdf My question, is since Zigbee Xbee can use AES-128 encryption key, and from the few I know, AES is unbreakable, how can a 40$ equipment bypass this? Am I missing something here??


If you read the slides you linked you can see that there are several methods used to extract the encryption key. If the encryption key is known, AES can be decrypted!

|improve this answer|||||
  • Ok, if the encryption key is known, obviously yes. But if is not known, can an adversary found it and eavesdrop? Ok, I will look it again. – just_learning Nov 23 '19 at 18:01
  • To ask it different, If I store the key on Zigbee by X-CTU, and not send it over the air. Can this be extracted? – just_learning Nov 23 '19 at 18:34
  • 1
    If you never send the key over the air it can not be extracted over the air. This is why the PDF you linked also describes how to extract it from a device. – Josef says Reinstate Monica Nov 23 '19 at 19:57
  • So, a solution to prevent the key extraction is what? – just_learning Nov 25 '19 at 10:34
  • 1
    @just_learning don't put devices where an adversary can reach them. – Josef says Reinstate Monica Nov 25 '19 at 14:38

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.