METHODS, DEVICES AND SYSTEMS FOR SECURE WIRELESS EXCHANGE OF FEATURE DATA DURING HANDSHAKE PROTOCOL
A method can include, by operation of a first wireless device, generating an internal nonce value having S-bits, generating a code of C-bits by executing at least a first arithmetic-logic (ALU) operation on at least a capability identification value (ID). Substituting bits of the internal nonce value with the code to create a modified nonce value. Wirelessly transmitting the modified nonce in a modified nonce message to a second wireless device. In response to a response message not including capability data corresponding to the code, executing wireless operations according to a first set of capabilities. In response to the response message including capability data, executing wireless operations with capabilities in addition to those of the first set. Corresponding devices and systems are also disclosed.
1 . A method, comprising:
by operation of a first wireless device,
generating an internal nonce value having S-bits,
generating a code of C-bits by executing at least a first arithmetic-logic (ALU) operation on at least a capability identification value (ID), where C<S,
substituting C-bits of the internal nonce value with the code to create a modified nonce value,
wirelessly transmitting the modified nonce in a modified nonce message addressed to a second wireless device,
in response to a received wireless response message not including capability data corresponding to the code, executing wireless operations according to a first set of capabilities, and
in response to the wireless response message including capability data, executing wireless operations with capabilities in addition to those of the first set.
2 . The method of claim 1 , wherein:
the modified nonce is transmitted in unencrypted form.
3 . The method of claim 1 , wherein:
the code comprises
a first portion configured to provide a matching value for verifying the code, and
a second portion configured to provide the capability ID.
4 . The method of claim 1 , further including:
by operation of the first wireless device,
prior to generating the code, receiving an external nonce in a wireless first nonce message, and
the at least first ALU operation includes using at least a portion of the external nonce.
5 . The method of claim 1 , wherein:
the modified nonce message is a second message according to four-way handshake protocol; and
that wireless response message is a third message in the four-way handshake protocol.
6 . The method of claim 5 , wherein:
the four-way handshake protocol is compatible with at least one IEEE 802.11 wireless standard.
7 . The method of claim 1 , further including:
by operation of the second wireless device,
executing at least a second ALU operation on at least a portion of the modified nonce to generate at least the capability ID,
determining the capability data from the capability ID, and
transmitting the wireless response message.
8 . The method of claim 1 , further including:
by operation of the second wireless device,
generating a second nonce, and
transmitting the second nonce in a first nonce message to the first wireless device; and
by operation of the first wireless device, generating the code with the at least first ALU operation and at least a portion of the second nonce.
9 . The method of claim 1 , further including:
by operation of the first wireless device,
executing an authentication protocol with the second wireless device to derive a first encryption key,
receiving an external nonce in a wireless first nonce message from the second wireless device, and
deriving a second encryption key with at least the first encryption key, the modified nonce and the external nonce.
10 . A device, comprising:
controller circuits comprising arithmetic-logic circuits configured to
generate an internal nonce of S-bits,
generate a code of C-bits by executing at least a first arithmetic-logic (ALU) operation on at least a capability identification value (ID) and substituting C-bits of the initial nonce value with the code to create a modified nonce, where C<S,
execute wireless operations according to a first set of capabilities in response to a response wireless message not including additional capability data corresponding to the code, and executing wireless operations with capabilities in addition to the first set in response to the response wireless including capability data; and
wireless circuits that operate according to at least one wireless standard and are configured to
transmit at least a wireless modified nonce message addressed to a second wireless device that includes the modified nonce, and
receive at least the response wireless message.
11 . The device of claim 10 , wherein:
the wireless circuits are configured to transmit the modified nonce in unencrypted form.
12 . The device of claim 10 , wherein:
the code comprises
a first portion configured to provide a matching value for verifying the code, and
a second portion configured to provide the capability ID.
13 . The device of claim 10 , wherein:
the wireless circuits are configured to receive a wireless first nonce message from the second wireless device that includes an external nonce; and
the at least first ALU operation is executed on at least a portion of the external nonce.
14 . The device of claim 9 , wherein:
the at least one wireless standard is an IEEE 802.11 wireless standard that includes a four-way handshake;
the wireless modified nonce message is a second message according to the four-way handshake; and
the response message is a third message according to the four-way handshake.
15 . A system, comprising:
a first wireless device configured to
generate an internal nonce value having S-bits,
generate a code of C-bits by executing at least a first arithmetic-logic (ALU) operation on at least a capability identification value (ID), where C<S,
substitute C-bits of the internal nonce value with the code to create a modified nonce value,
wirelessly transmit the modified nonce in a modified nonce message addressed to a second wireless device,
in response to a wireless response message not including capability data corresponding to the code, executing wireless operations according to a first set of capabilities, and
in response to the wireless response message including capability data, executing wireless operations with capabilities in addition to those of the first set.
16 . The system of claim 15 , wherein:
the first wireless device is further configured to
receive a wireless first nonce message that includes an external nonce; and
the at least first ALU operation is executed on at least a portion of the external nonce.
17 . The system of claim 16 , wherein:
the first wireless is further configured to
derive a first encryption key in an authentication operation, and
derive a second encryption key with at least the first encryption key, the external nonce, and the modified nonce.
18 . The system of claim 15 , wherein:
the code comprises
a first portion configured to provide a matching value for verifying the code, and
a second portion configured to provide the capability ID.
19 . The system of claim 15 , further including:
a second wireless device configured to
generate a second nonce,
wirelessly transmit the second nonce to the first wireless device in a first nonce message,
receive the modified nonce message,
execute at least a second ALU operation at least C-bits of the modified nonce to determine at least the capability ID, and
transmit the response message.
20 . The system of claim 19 , wherein:
the first wireless device is further configured to, following receipt of the response message, transmit a confirmation message to the second wireless device;
the first nonce message is the first message in a four-way handshake protocol;
the modified nonce message is the second message in the four-way handshake protocol;
the response message is the third message in the four-way handshake protocol;
the confirmation message is the fourth message in the four-way handshake protocol; and
the four-way handshake protocol is compatible with at least one IEEE 802.11 wireless standard.