Hi Vinicius,
On 3/21/2011 3:28 PM, Vinicius Costa Gomes wrote:
Hi Brian,
Sorry for the delay,
On 15:09 Thu 17 Mar, Brian Gix wrote:
Hi Vinicius,
As you probably know, I am working on adding mgmt.c plumbing into
SMP, to enable user level input (Confirmation, passkeys, perhaps
OOB).
I didn't know. Cool.
One issue I am running into is matching up the return of user
confirmation with the (struct l2cap_conn *). There is nothing
within the user confirmation aside from the bdaddr that identifies
who it is intended for, and there is no one-to-one relationship
between bdaddrs and L2CAP channels.
Yeah, I can see why this is a problem.
What would you think about enforcing a "one at a time" SMP process?
Short answer: seems easier to get right, but a little ugly. Long answer
below, opinions welcome.
The SMP pairing data within the l2cap_conn structure is certainly a
handy place for it, however it is bulky for the times (most of the
time) where SMP is *not* taking place, and as in the obvious case I
mention above, there is not a handy way to track the L2CAP
connection back to the user input.
I agree that this information needs to be grouped and moved somewhere
else. Something similar to l2cap_pinfo? smp_pinfo perhaps?
Maybe. I will look at that mechanism. Is this a way to attach a block
of data to a socket?
I would like to suggest that all of the SMP data be pulled out of
the l2cap_conn structure, and put into a private structure within
smp.c. It can be malloc'd when the pairing process starts, free'd
when it completes, and any traffic (from either the User or the
Baseband) that takes place when another device is in the midst of
pairing gets rejected.
This sounds very tempting, but I don't think that imposing this
restriction from kernel side is the right aproach, the only hard
limitation that I can imagine is user interaction. And if we use
Just Works even that limitation is droped.
The JUST_WORKS case becomes a race condition. In my experience, because
there is no user interaction (aside from the initial action the caused
the request), this all happens in well under a second. The
"inconvenience factor" is therefore mitigated by it being very short.
Also, for the foreseeable future, the RF links do not have the ability
to be connected to more than one LE peer at a time, making concurrent LE
SMP sessions a technical impossibility at this point regardless (except
in the case of multiple adapters).
One question: what were your plans for dealing with multiple adapters?
I didn't have any. I still sort of think that concurrent pairing is
unlikely to ever be a critical use case. Even though user input is a
user space responsibility and not kernel, I think accounting for the
fact that the User can only respond to a single pairing request at a
time should not be ignored if it can make the code simpler.
Btw, it would be great if we could maintain a similar behaviour to
Basic Rate.
There will necessarily need to be some minor changes due to the fact
that passkey handling is different between BR and LE. In BR, if both
devices have Displays and Y/N capabilities, the same passkey is
presented to both, and other than visual comparison, nobody has to
actually enter the digits. In LE, for MITM protection without oob, one
of the two devices MUST be able to enter a 6 digit number.
I think both BR interfaces will be maintained as is, and I am adding a
"one off" of the standard JUST WORKS, plus a couple explicit requests:
1. If Local Device has Input capabilities, it will be asked to
Accept/Reject any *BONDING* requests, even if the pairing method is
JUST_WORKS. This isn't really necessary if not bonding. This aligns with
standard BR functionality, which requests confirmation even without MITM
authentication.
2. I am writing a new MGMT function which explicitely requests a
passkey. The existing one for BR always supplies the baseband generated
passkey (which doesn't exist in LE), and passes that to user space,
which can be used either to visually compare, or to request user entry
of matching value.
3. I am adding a placeholder for OOB input which I intend to leave as an
unused shell for now, until I see a little more about how it is done for
BR. I see patches being submitted by Szymon Janc for BR OOB, so I don't
imagine we'll be waiting for too long for that.
This structure local to smp.c would store both the bdaddr (to match
up with user input) and the l2cap_conn * to match up with BB
traffic, and provide the outbound path for the user confirmation
which would otherwise be difficult to track down.
It would be a little harder but we could do something similar to l2cap
when it's needed to find a socket associated with a connection.
Your Thoughts?
--
Brian Gix
bgix@xxxxxxxxxxxxxx
Employee of Qualcomm Innovation Center, Inc.
Qualcomm Innovation Center, Inc. is a member of Code Aurora Forum
Cheers,
--
Brian Gix
bgix@xxxxxxxxxxxxxx
Employee of Qualcomm Innovation Center, Inc.
Qualcomm Innovation Center, Inc. is a member of Code Aurora Forum
--
To unsubscribe from this list: send the line "unsubscribe linux-bluetooth" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
