USER MANUAL
ESRPB / EDRPB - EASYFIT BLUETOOTH® SINGLE / DOUBLE ROCKER PAD
© 2018 EnOcean | www.enocean.com
F-710-017, V1.0
ESRPB / EDRPB User Manual | v1.3 | Jan 2018 | Page 19/68
4.8
ExRPB telegram authentication
ExRPB implements telegram authentication to ensure that only telegrams from senders
using a previously exchanged security key will be accepted. Authentication relies on a 32
bit telegram signature which is calculated as shown in Figure 15 below and exchanged as
part of the radio telegram.
Figure 15 – Telegram authentication flow
Sequence counter, source address and the remaining telegram data together form the in-
put data for the signature algorithm. This algorithm uses AES128 encryption based on the
device-unique random security key to generate a 32 bit signature which will be transmitted
as part of the radio telegram.
The signature is therefore dependent both on the current value of the sequence counter,
the device source address and the telegram payload. Changing any of these three parame-
ters will therefore result in a different signature.
The receiver performs the same signature calculation based on sequence counter, source
address and the remaining telegram data of the received telegram using the security key it
received from ExRPB during commissioning.
The receiver then compares the signature reported as part of the telegram with the signa-
ture it has calculated. If these two signatures match then the following statements are
true:
Sender (ExRPB) and receiver use the same security key
The message content (address, sequence counter, data) has not been modified
At this point, the receiver has validated that the message originates from a trusted sender
(as identified by its security key) and that its content is valid.
In order to avoid message replay (capture and retransmission of a valid message), it is
required that the receiver tracks the value of the sequence counter used by ExRPB and only
accepts messages with higher sequence counter values (i.e. not accepts equal or lower se-
quence counter values for subsequent telegrams).