Editing Bluetooth (section)

==== 2019 ====

In August 2019, security researchers at the [[Singapore University of Technology and Design]], Helmholtz Center for Information Security, and [[University of Oxford]] discovered a vulnerability, called KNOB (Key Negotiation of Bluetooth) in the key negotiation that would "brute force the negotiated encryption keys, decrypt the eavesdropped ciphertext, and inject valid encrypted messages (in real-time)".
<ref>{{cite web|url=https://www.forbes.com/sites/zakdoffman/2019/08/15/critical-new-bluetooth-security-issue-leaves-your-devices-and-data-open-to-attack|title=New Critical Bluetooth Security Issue Exposes Millions of Devices To Attack|website=Forbes|date=15 August 2019|access-date=20 August 2019|archive-date=20 August 2019|archive-url=https://web.archive.org/web/20190820200938/https://www.forbes.com/sites/zakdoffman/2019/08/15/critical-new-bluetooth-security-issue-leaves-your-devices-and-data-open-to-attack|url-status=live}}</ref>
<ref>{{cite book|url=https://www.usenix.org/system/files/sec19-antonioli.pdf|title=The KNOB is Broken: Exploiting Low Entropy in the Encryption Key Negotiation of Bluetooth BR/EDR|first1=Daniele|last1=Antonioli|first2=Nils Ole|last2=Tippenhauer|first3=Kasper B.|last3=Rasmussen|publisher=University of Oxford|location=Santa Clara|date=15 August 2019|isbn=9781939133069|access-date=14 June 2021|archive-date=16 April 2021|archive-url=https://web.archive.org/web/20210416163953/https://www.usenix.org/system/files/sec19-antonioli.pdf|url-status=live}}</ref> Google released an [[Android (operating system)|Android]] security patch on 5 August 2019, which removed this vulnerability.<ref>{{cite web|url=https://source.android.com/security/bulletin/2019-08-01.html|title=Android Security Bulletin—August 2019|access-date=5 June 2022}}</ref>