Search papers, labs, and topics across Lattice.
This paper conducts a formal investigation into privacy vulnerabilities in wireless protocols, particularly focusing on pairing-based threats that can be exploited through replay and relay techniques. By employing condition-oblivious responses and distance bounding measures, the authors model and analyze protocols like Wi-Fi P2P and Bluetooth Low Energy to identify both existing and emerging privacy risks. The findings reveal significant gaps in current privacy protections, leading to design recommendations that have garnered recognition from industry standards bodies such as the Wi-Fi Alliance and Bluetooth SIG.
Uncovering both old and new vulnerabilities, this research reveals critical privacy gaps in widely used wireless protocols that could reshape industry standards.
With the surge in privacy-sensitive data from sources such as social media and IoT devices, there is a pressing need for formal, automated methods to assess privacy risks within these intricate systems. This paper formally investigates root sources of pairing-based privacy threats exploited using replay/relay techniques in wireless communication. Our research harnesses condition-oblivious responses, replay-resistance, and distance bounding measures vital for protocols utilizing shared keys in allowlists for authenticated reconnections. Particularly, the paper uses formal modeling of notable wireless networks, like the Wi-Fi P2P persistent group formation and the Bluetooth Low Energy reconnection procedure, to illustrate the root causes and countermeasures. Our model rigorously validates the proposed solution against association inference attacks, along with existing formalizations of well-authentication, frame opacity, and no-desynchronization. The ensuing analysis reveals not only uncharted privacy realms in wireless communication but also identifies old and new vulnerabilities. Our proposed design changes are acknowledged by Wi-Fi Alliance and Bluetooth SIG, paving the way for future advancements in resilient, privacy-preserving wireless protocols.
