eddy
23562352f6
fix: update build paths m5stack-atoms3r → s3lite-server
2026-08-01 22:55:30 +02:00
eddy
a371e29058
chore: branch setup — version.txt, platformio.ini envs, qio_qspi
2026-08-01 00:19:42 +02:00
eddy
81abf2d824
Replace BLE encryption with HMAC-only auth, add buildnr, fix post-flash flow
...
BLE bonding/encryption removed — HMAC-SHA256 on application level provides
authentication + replay protection. Eliminates bonding state bugs, write
queue issues, and GATT_INSUFFICIENT_AUTHENTICATION complexity.
Firmware:
- Remove BLESecurity, setRespEncryptionKey, ESP_GATT_PERM_WRITE_ENCRYPTED
- Characteristic permission: ESP_GATT_PERM_WRITE (no encryption required)
- Characteristic property: PROPERTY_WRITE_NR (Write Without Response)
Enables direct ON/OFF sequences without ACK wait time
Android:
- Remove bondReceiver, createBond, bonding state handling
- Remove write queue / pendingRelayState / writeInProgress
- Use WRITE_TYPE_NO_RESPONSE for minimal latency
- Post-flash dialog auto-dismisses on USB detach (currentAction = NONE)
- Separate progressDialog (flash progress) from dialog (post-flash info)
- Detach during active action now calls cleanupAction()
Build number:
- BuildConfig.BUILD_NUMBER in build.gradle as yyyyMMddHHmmss timestamp
- buildFeatures.buildConfig enabled
- Displayed in SettingsActivity bottom (12sp, secondary color)
Gradle:
- Wrapper upgraded 8.5 → 8.14
- minSdk 24 → 26 (Android 8+)
README updated to reflect HMAC-only security model.
2026-07-26 15:46:28 +02:00
eddy
9a84b05b8a
Replace compile-time HMAC key with USB provisioning
...
ESP firmware:
- Store HMAC key in NVS via Preferences library instead of compile-time
hmac_key.h
- KEY? responds with HMAC_KEY:<hex> (if provisioned) or NO_KEY
- New SET_KEY:<64-hex> command stores key in NVS and responds OK
- Boot messages updated to reflect provisioning state
Android app:
- UsbKeyReceiver detects NO_KEY response and auto-provisions:
generates random 32-byte key via SecureRandom, sends SET_KEY,
waits for OK, saves key to SharedPreferences
- Read loop now breaks on both HMAC_KEY: and NO_KEY responses
Cleanup:
- Removed tools/generate_hmac_key.py and src/hmac_key.h
- Removed hmac_key.h from .gitignore
- README updated for new provisioning flow
2026-07-26 09:30:21 +02:00
eddy
7f68e9ad70
Add BLE security: Just Works pairing + HMAC-SHA256 authentication
...
Two-layer security for the BLE relay:
1. BLE Just Works pairing (link-layer encryption)
- ESP32 requires bonding before accepting writes
- Characteristic permissions set to ESP_GATT_PERM_WRITE_ENCRYPTED
- IO capability NO_INPUT_NO_OUTPUT (no passkey needed)
- LE Secure Connections with bonding (ESP_LE_AUTH_REQ_SC_BOND)
2. HMAC-SHA256 authentication (application-level)
- 32-byte shared secret in src/hmac_key.h (generated, gitignored)
- Each command signed: HMAC-SHA256(key, command || sequence)
- 37-byte packet format: [cmd:1][seq:4][hmac:32]
- Sequence counter prevents replay (strictly increasing, starts at 1)
- mbedtls on ESP, javax.crypto.Mac on Android
Key management:
- tools/generate_hmac_key.py generates random key + writes src/hmac_key.h
- ESP prints hex key to serial 5 seconds after boot
- Android app: SettingsActivity with eye-toggle password field
- Key stored in SharedPreferences, supports multiple ESP modules
Other changes:
- Android app: bonding flow (createBond -> BOND_BONDED -> discover)
- Android app: MTU negotiation (request 256)
- Android app: settings button (gear icon) in main screen
- Fix: sequence counter starts at 1 to prevent first-packet rejection
- Updated README with full security documentation
2026-07-26 08:18:52 +02:00
