Chaos Communication Congress

BLUFFS: Bluetooth Forward and Future Secrecy Attacks and Defenses (37x71)

Air date: Dec 28, 2023

Ciao! We present the BLUFFS attacks (CVE-2023-24023), six novel attacks breaking Bluetooth's forward and future secrecy. Our attacks enable device impersonation and machine-in-the-middle across sessions by compromising and re-using one session key.