askvity

What is a Link Key?

Published in Bluetooth Security 3 mins read

A link key is essentially a shared secret between two devices, used for secure communication. It's a critical component in processes like Bluetooth pairing, ensuring that only authorized devices can connect.

Understanding Link Keys

Here’s a breakdown of what a link key entails:

  • Definition: A link key is a 128-bit random number generated during the pairing or bonding process between two Bluetooth devices. Think of it as a unique, digital password that only these two devices know.
  • Shared Secret: The link key is a “shared secret” meaning both devices involved possess the exact same key. This shared knowledge is fundamental to establish a secure and authenticated connection. This secret is crucial for the entire communication process between the paired devices.
  • Confidentiality: Importantly, the link key is never transmitted over the air. This ensures it remains private, preventing eavesdropping by third parties. Instead, it is created during pairing and then securely stored by each of the devices and kept secret.
  • Authentication: Every time the paired devices reconnect, they use the link key to authenticate each other. This verifies that each device is who it claims to be and is authorized to communicate.
  • Encryption Key Derivation: Beyond authentication, the link key is also used to derive the encryption key. This derived key is then used to encrypt the actual data being transmitted, protecting the content of communications between the two devices.

How Link Keys Are Used

Let's explore the practical aspects:

  1. Pairing Process: During the initial pairing (or bonding), devices exchange specific information which they then use to independently create the shared link key. This step ensures secure key distribution.
  2. Storage: Both devices store the generated link key securely.
  3. Authentication: When the two paired devices try to connect again, they use the previously stored link key to authenticate each other. They do not send the actual link key; instead they prove they know it.
  4. Encryption: After authentication, they use the same link key to generate and then use an encryption key for the data they transmit.

Key Characteristics

Here's a table summarizing the important aspects:

Feature Description
Size 128-bit
Nature Random Number, Shared Secret
Transmission Never transmitted over the air
Purpose Authentication and derivation of the encryption key between devices
Storage Stored and kept secret on both paired devices

Example Scenario

Imagine pairing your phone with your wireless headphones. During the pairing process, they generate a link key that’s unique to your phone and headphones combination. From then on, whenever you turn on your headphones, they can securely connect to your phone by authenticating and using an encryption key derived from this shared link key.

Related Articles