[Cryptography] Simple IoT sensor encryption ?

[Andrew Donoho]

> On Apr 15, 2016, at 12:05 , Henry Baker <hbaker1 at pipeline.com> wrote:
> 
> Let's take a totally trivial wireless application: a sports heart rate transmitter strap.  (There are lots of other applications, including audio & video, but let's focus on a much simpler, much less resource intensive application to start with.)




Henry,



	If this is a gedanken experiment on how minimal you can make your IoT sensor, then this is a great discussion to have.

	That said, the sports scenario you described is currently being pragmatically solved by Bluetooth LE. For some folks, Bluetooth LE does not provide enough security. Hence, they run secure protocols over both Bluetooth and Wi-Fi. To see this in action, try snooping both an Apple Watch and an Android powered Watch. I’m told that one uses more security on the airwaves than the other.




	Returning to your gedanken experiment, the only thing I think you need to add is a device identifier of some sort. I would imagine a permanent in device random number encrypted along with the sensor data would be sufficient.



Anon,
Andrew
____________________________________
Andrew W. Donoho
Donoho Design Group, L.L.C.
awd at DDG.com, +1 (512) 750-7596, twitter.com/adonoho

New: Spot marks the taX™ App, <http://SpotMarksTheTaX.com>
Retweever Family: <http://Image.Retweever.com>, <http://Retweever.com>

Essentially, all models are wrong, but some are useful.
	— George E.P. Box