Security News > 2020 > May > Apple “MagicPairing” for AirPods – the magic isn’t perfect yet

Apple “MagicPairing” for AirPods – the magic isn’t perfect yet
2020-05-19 18:54

Bluetooth has had its fair share of security scares, too, not least because one end of a Bluetooth connection is often a low-cost, low-power, low-budget device that doesn't have a lot of budget or processing power available for cryptography and security.

The one-time LTK then generates a session key for that connection, as usual - this makes it compatible with existing Bluetooth devices - so that the cryptographic security of each connection stands on its own.

The researchers haven't yet figured out how to exploit any of the Bluetooth crashes they were able to provoke, or even if exploitation is technically feasible.

It does mean that even MagicPairing hasn't yet turned Bluetooth into a love-or-hate proposition - it's still love-and-hate until further notice.

Presumably, when Apple does complete its patches for these bugs they will quietly appear in an update for macOS, iOS and RTKit, which is the mini-operating system that Apple Bluetooth devices such as AirPods use.


News URL

https://nakedsecurity.sophos.com/2020/05/19/apple-magicpairing-for-airpods-the-magic-isnt-perfect-yet/

Related vendor

VENDOR LAST 12M #/PRODUCTS LOW MEDIUM HIGH CRITICAL TOTAL VULNS
Apple 68 212 1433 2208 257 4110