LoRaWAN security: Can the Network Server generate the AppSKey? -
i little bit confused lorawan security mechanism.
the nwkskey used both network server , end-device calculate , verify mic (message integrity code) of data messages ensure data integrity.
the appskey application session key specific end-device. used both application server , end-device encrypt , decrypt payload field of application-specific data messages
so technically network server not know appskey. dont understand in otaa procedure, network server responds join-accept encrypted using appkey. if network server has appkey, can generate appskey using formula:
appskey = aes128_encrypt(appkey, 0x02 | appnonce | netid | devnonce | pad16)
in case network server if can decrypt message destinated application.
is analysis correct or missing something?
thanks , best reagrds!
got answer on ttn forum: https://www.thethingsnetwork.org/forum/t/lorawan-security-can-the-network-server-generate-the-appskey/8672
Comments
Post a Comment