LoRaWAN security: Can the Network Server generate the AppSKey? -


i little bit confused lorawan security mechanism.

the nwkskey used both network server , end-device calculate , verify mic (message integrity code) of data messages ensure data integrity.

the appskey application session key specific end-device. used both application server , end-device encrypt , decrypt payload field of application-specific data messages

so technically network server not know appskey. dont understand in otaa procedure, network server responds join-accept encrypted using appkey. if network server has appkey, can generate appskey using formula:

appskey = aes128_encrypt(appkey, 0x02 | appnonce | netid | devnonce | pad16)

in case network server if can decrypt message destinated application.

is analysis correct or missing something?

thanks , best reagrds!

got answer on ttn forum: https://www.thethingsnetwork.org/forum/t/lorawan-security-can-the-network-server-generate-the-appskey/8672


Comments

Popular posts from this blog

python - Selenium remoteWebDriver (& SauceLabs) Firefox moseMoveTo action exception -

html - How to custom Bootstrap grid height? -

transpose - Maple isnt executing function but prints function term -