---
id: 2028
title: "You could have invented that Bluetooth attack"
source_domain: blog.trailofbits.com
source_url: "https://blog.trailofbits.com/2018/08/01/bluetooth-invalid-curve-points/"
published_at: "2018-08-01T11:05:38Z"
tags: ["cryptography", "iot", "ble", "bluetooth", "elliptic-curve", "invalid-curve-attack", "ecdh"]
phying_url: "https://phying.com/item/2028"
lang: en
---

# You could have invented that Bluetooth attack

## Summary

Trail of Bits explains the invalid curve point attack behind Biham and Newman's BLE bug, showing how unsanitized curve parameters let attackers recover ECDH keys on patch-averse IoT devices.

## Intelligence Metadata

- **Sources:** blog.trailofbits.com
- **Published:** 2018-08-01T11:05:38Z
- **Original:** https://blog.trailofbits.com/2018/08/01/bluetooth-invalid-curve-points/
- **Phying News:** https://phying.com/item/2028