Security Technical Overview
Parameter
H1
H2
H
MK
The smartphone and the tablet share an initial pairing key.
Related topics
Cryptosystem parameters that the BlackBerry Bridge pairing process uses to generate an initial pairing key, 11
Cryptosystem parameters that the BlackBerry Bridge pairing process uses
to generate an initial pairing key
A BlackBerry PlayBook tablet and BlackBerry smartphone are designed to share the following cryptosystem
parameters.
Parameter
E(Fq)
Fq
P
xR
s
S
Generating a BlackBerry Bridge pairing key during the
BlackBerry Bridge pairing process
If the initial key establishment protocol process is successful, the BlackBerry PlayBook tablet and the BlackBerry
smartphone share an initial pairing key. The tablet and smartphone use the initial pairing key to generate a
BlackBerry Bridge pairing key. The BlackBerry Bridge pairing key is used to encrypt and authenticate the data that
the tablet and smartphone send between each other.
The BlackBerry Bridge pairing key establishment protocol uses ECDH and the elliptic curve that the initial key
establishment protocol negotiates. The ECDH algorithm provides PFS, which prevents the protocol from deriving
previous or subsequent encryption keys. Each run of the BlackBerry Bridge pairing key establishment protocol
Generating a BlackBerry Bridge pairing key during the BlackBerry Bridge pairing process
Description
This parameter is the NIST-approved 521-bit random elliptic curve over Fq, which has a
cofactor of 1.
The initial key establishment protocol performs all mathematical operations in the group
E(Fq).
This parameter is a finite field of prime order q.
This parameter is a point of E that generates a subgroup of E(Fq) of prime order r.
This parameter is a representation of elliptic curve scalar multiplication, where x is the
scalar and R is a point on E(Fq).
This parameter is the shared secret that appears on the tablet screen.
The shared secret must be known only to the authorized user of the smartphone and the
tablet until the protocol completes.
This parameter is the shared secret converted to a point on E(Fq).
Value
SHA-512 (sent data packets)
SHA-512 (received data packets)
H1 + H2
SHA-256 ( H || K )
11
Imprimir página