{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,19]],"date-time":"2026-03-19T14:36:27Z","timestamp":1773930987684,"version":"3.50.1"},"publisher-location":"New York, NY, USA","reference-count":40,"publisher":"ACM","license":[{"start":{"date-parts":[[2022,11,7]],"date-time":"2022-11-07T00:00:00Z","timestamp":1667779200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["No. 61972371 and No. U19B2023"],"award-info":[{"award-number":["No. 61972371 and No. U19B2023"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100004739","name":"Youth Innovation Promotion Association of the Chinese Academy of Sciences","doi-asserted-by":"publisher","award":["No. Y202093"],"award-info":[{"award-number":["No. Y202093"]}],"id":[{"id":"10.13039\/501100004739","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2022,11,7]]},"DOI":"10.1145\/3548606.3560668","type":"proceedings-article","created":{"date-parts":[[2022,11,7]],"date-time":"2022-11-07T11:41:28Z","timestamp":1667821288000},"page":"55-68","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":10,"title":["Blacktooth"],"prefix":"10.1145","author":[{"given":"Mingrui","family":"Ai","sequence":"first","affiliation":[{"name":"University of Science and Technology of China, Hefei, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Kaiping","family":"Xue","sequence":"additional","affiliation":[{"name":"University of Science and Technology of China, Hefei, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Bo","family":"Luo","sequence":"additional","affiliation":[{"name":"University of Kansas, Lawrence, KS, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Lutong","family":"Chen","sequence":"additional","affiliation":[{"name":"University of Science and Technology of China, Hefei, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Nenghai","family":"Yu","sequence":"additional","affiliation":[{"name":"University of Science and Technology of China, Hefei, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Qibin","family":"Sun","sequence":"additional","affiliation":[{"name":"University of Science and Technology of China, Hefei, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Feng","family":"Wu","sequence":"additional","affiliation":[{"name":"University of Science and Technology of China, Hefei, China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2022,11,7]]},"reference":[{"key":"e_1_3_2_1_1_1","volume-title":"AOSP Bluetooth Services. https:\/\/source.android.com\/devices\/bluetooth\/ services. (2021). accessed","year":"2021","unstructured":"2021. AOSP Bluetooth Services. https:\/\/source.android.com\/devices\/bluetooth\/ services. (2021). accessed : Oct. , 2021 . 2021. AOSP Bluetooth Services. https:\/\/source.android.com\/devices\/bluetooth\/ services. (2021). accessed: Oct., 2021."},{"key":"e_1_3_2_1_2_1","unstructured":"2021. Bluez - Official Linux Bluetooth Protocol Stack. http:\/\/www.bluez.org. (2021). accessed: Oct 2021.  2021. Bluez - Official Linux Bluetooth Protocol Stack. http:\/\/www.bluez.org. (2021). accessed: Oct 2021."},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1145\/2906388.2906403"},{"key":"e_1_3_2_1_4_1","volume-title":"Kasper.","author":"Antonioli Daniele","year":"2019","unstructured":"Antonioli , Daniele and Tippenhauer , Nils Ole and Rasmussen , Kasper. 2019 . The KNOB is Broken : Exploiting Low Entropy in the Encryption Key Negotiation Of Bluetooth BR\/EDR. In USENIX Security. USENIX Association , 1047--1061. Antonioli, Daniele and Tippenhauer, Nils Ole and Rasmussen, Kasper. 2019. The KNOB is Broken: Exploiting Low Entropy in the Encryption Key Negotiation Of Bluetooth BR\/EDR. In USENIX Security. USENIX Association, 1047--1061."},{"key":"e_1_3_2_1_5_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP40000.2020.00093"},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1145\/3394497"},{"key":"e_1_3_2_1_7_1","volume-title":"The Attack Vector BlueBorne Exposes Almost Every Connected Device. https:\/\/armis.com\/research\/blueborne\/. (2017). accessed","author":"Armis","year":"2021","unstructured":"Armis . 2017. The Attack Vector BlueBorne Exposes Almost Every Connected Device. https:\/\/armis.com\/research\/blueborne\/. (2017). accessed : Oct. , 2021 . Armis. 2017. The Attack Vector BlueBorne Exposes Almost Every Connected Device. https:\/\/armis.com\/research\/blueborne\/. (2017). accessed: Oct., 2021."},{"key":"e_1_3_2_1_8_1","volume-title":"Proceedings of International Conference on Selected Areas in Cryptography (SAC). Springer, 250--273","author":"Biham Eli","year":"2019","unstructured":"Biham , Eli and Neumann , Lior . 2019 . Breaking the bluetooth pairing--the fixed coordinate invalid curve attack . In Proceedings of International Conference on Selected Areas in Cryptography (SAC). Springer, 250--273 . Biham, Eli and Neumann, Lior. 2019. Breaking the bluetooth pairing--the fixed coordinate invalid curve attack. In Proceedings of International Conference on Selected Areas in Cryptography (SAC). Springer, 250--273."},{"key":"e_1_3_2_1_9_1","volume-title":"Human Interface Device Profile 1.1.1. https:\/\/www.bluetooth. org\/docman\/handlers\/downloaddoc.ashx?doc_id=309012. (2015). accessed","year":"2021","unstructured":"Bluetooth SIG. 2015. Human Interface Device Profile 1.1.1. https:\/\/www.bluetooth. org\/docman\/handlers\/downloaddoc.ashx?doc_id=309012. (2015). accessed : Oct. , 2021 . Bluetooth SIG. 2015. Human Interface Device Profile 1.1.1. https:\/\/www.bluetooth. org\/docman\/handlers\/downloaddoc.ashx?doc_id=309012. (2015). accessed: Oct., 2021."},{"key":"e_1_3_2_1_10_1","volume-title":"Bluetooth Core Specification v5.2. https:\/\/www.bluetooth. org\/docman\/handlers\/downloaddoc.ashx?doc_id=478726. (2019). accessed","year":"2021","unstructured":"Bluetooth SIG. 2019. Bluetooth Core Specification v5.2. https:\/\/www.bluetooth. org\/docman\/handlers\/downloaddoc.ashx?doc_id=478726. (2019). accessed : Oct. , 2021 . Bluetooth SIG. 2019. Bluetooth Core Specification v5.2. https:\/\/www.bluetooth. org\/docman\/handlers\/downloaddoc.ashx?doc_id=478726. (2019). accessed: Oct., 2021."},{"key":"e_1_3_2_1_11_1","volume-title":"2021 Bluetooth Market Update. https:\/\/www.bluetooth. com\/wp-content\/uploads\/2021\/01\/2021-Bluetooth_Market_Update.pdf. (2021). accessed","year":"2021","unstructured":"Bluetooth SIG. 2021. 2021 Bluetooth Market Update. https:\/\/www.bluetooth. com\/wp-content\/uploads\/2021\/01\/2021-Bluetooth_Market_Update.pdf. (2021). accessed : Oct. , 2021 . Bluetooth SIG. 2021. 2021 Bluetooth Market Update. https:\/\/www.bluetooth. com\/wp-content\/uploads\/2021\/01\/2021-Bluetooth_Market_Update.pdf. (2021). accessed: Oct., 2021."},{"key":"e_1_3_2_1_12_1","volume-title":"Proceedings of 2021 IEEE Security and Privacy Workshops (SPW","author":"Jos\u00e9 Lopes Esteves","year":"2021","unstructured":"Tristan Claverie and Jos\u00e9 Lopes Esteves . 2021 . Bluemirror: reflections on bluetooth pairing and provisioning protocols . In Proceedings of 2021 IEEE Security and Privacy Workshops (SPW 2021). IEEE, 339--351. Tristan Claverie and Jos\u00e9 Lopes Esteves. 2021. Bluemirror: reflections on bluetooth pairing and provisioning protocols. In Proceedings of 2021 IEEE Security and Privacy Workshops (SPW 2021). IEEE, 339--351."},{"key":"e_1_3_2_1_13_1","volume-title":"CYW920819EVB-02 Evaluation Kit. https:\/\/www.cypress.com\/ documentation\/development-kitsboards\/cyw920819evb-02-evaluation-kit. (2021). accessed","author":"Cypress","year":"2021","unstructured":"Cypress . 2021. CYW920819EVB-02 Evaluation Kit. https:\/\/www.cypress.com\/ documentation\/development-kitsboards\/cyw920819evb-02-evaluation-kit. (2021). accessed : Oct. , 2021 . Cypress. 2021. CYW920819EVB-02 Evaluation Kit. https:\/\/www.cypress.com\/ documentation\/development-kitsboards\/cyw920819evb-02-evaluation-kit. (2021). accessed: Oct., 2021."},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2010.3"},{"key":"e_1_3_2_1_15_1","volume-title":"Proceedings of the 8th Annual International Workshop on Selected Areas in Cryptography (SAC","author":"Stefan Lucks","year":"2001","unstructured":"Scott Fluhrer and Stefan Lucks . 2001 . Analysis of the E0 encryption system . In Proceedings of the 8th Annual International Workshop on Selected Areas in Cryptography (SAC 2001). Springer, 38--48. Scott Fluhrer and Stefan Lucks. 2001. Analysis of the E0 encryption system. In Proceedings of the 8th Annual International Workshop on Selected Areas in Cryptography (SAC 2001). Springer, 38--48."},{"key":"e_1_3_2_1_16_1","volume-title":"Proceedings of the 21st Annual International Conference on the Theory and Applications of Cryptographic Techniques (EUROCRYPT","author":"Vittorio Bagini Guglielmo Morgari","year":"2002","unstructured":"Jovan Dj Goli?, Vittorio Bagini , and Guglielmo Morgari . 2002 . Linear cryptanalysis of Bluetooth stream cipher . In Proceedings of the 21st Annual International Conference on the Theory and Applications of Cryptographic Techniques (EUROCRYPT 2002). Springer, 238--255. Jovan Dj Goli?, Vittorio Bagini, and Guglielmo Morgari. 2002. Linear cryptanalysis of Bluetooth stream cipher. In Proceedings of the 21st Annual International Conference on the Theory and Applications of Cryptographic Techniques (EUROCRYPT 2002). Springer, 238--255."},{"key":"e_1_3_2_1_17_1","doi-asserted-by":"publisher","DOI":"10.1109\/WiCom.2008.1153"},{"key":"e_1_3_2_1_18_1","volume-title":"https:\/\/trifinite.org\/trifinite_stuff_bluebug. html. (2004). accessed","author":"Herfurt Martin","year":"2021","unstructured":"Herfurt , Martin . 2004. Bluebugging . https:\/\/trifinite.org\/trifinite_stuff_bluebug. html. (2004). accessed : Oct. , 2021 . Herfurt, Martin. 2004. Bluebugging. https:\/\/trifinite.org\/trifinite_stuff_bluebug. html. (2004). accessed: Oct., 2021."},{"key":"e_1_3_2_1_19_1","doi-asserted-by":"publisher","DOI":"10.1007\/3-540-45353-9_14"},{"key":"e_1_3_2_1_20_1","volume-title":"Proceedings of the Black Hat USA Conference.","author":"Jasek Sawomir","year":"2016","unstructured":"Jasek , Sawomir . 2016 . Gattacking Bluetooth smart devices . In Proceedings of the Black Hat USA Conference. Jasek, Sawomir. 2016. Gattacking Bluetooth smart devices. In Proceedings of the Black Hat USA Conference."},{"key":"e_1_3_2_1_21_1","volume-title":"Relay Attacks on Bluetooth Authentication and Solutions. In Proceedings of the 19th International Symposium on Computer and Information Sciences (ISCIS)","volume":"19","author":"Levi","unstructured":"Levi , Albert and \u00c7etinta\u00fa, Erhan and Aydos, Murat. 2004 . Relay Attacks on Bluetooth Authentication and Solutions. In Proceedings of the 19th International Symposium on Computer and Information Sciences (ISCIS) , Vol. 19 . Springer, 278-- 288. Levi, Albert and \u00c7etinta\u00fa, Erhan and Aydos, Murat. 2004. Relay Attacks on Bluetooth Authentication and Solutions. In Proceedings of the 19th International Symposium on Computer and Information Sciences (ISCIS), Vol. 19. Springer, 278-- 288."},{"key":"e_1_3_2_1_22_1","volume-title":"Las Vegas, Nevada","author":"Lindell Andrew Y","year":"2008","unstructured":"Lindell , Andrew Y . 2008. Attacks on the pairing protocol of bluetooth v2. 1. Black Hat USA , Las Vegas, Nevada ( 2008 ). Lindell, Andrew Y. 2008. Attacks on the pairing protocol of bluetooth v2. 1. Black Hat USA, Las Vegas, Nevada (2008)."},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"publisher","DOI":"10.3390\/jsan7030028"},{"key":"e_1_3_2_1_24_1","volume-title":"BLUETOOTH HACKING TOOLS COMPARISON. https: \/\/trifinite.org\/trifinite_stuff_bluebug.html. (2017). accessed","author":"Loveless Mark","year":"2021","unstructured":"Loveless , Mark . 2017. BLUETOOTH HACKING TOOLS COMPARISON. https: \/\/trifinite.org\/trifinite_stuff_bluebug.html. (2017). accessed : Oct. , 2021 . Loveless, Mark. 2017. BLUETOOTH HACKING TOOLS COMPARISON. https: \/\/trifinite.org\/trifinite_stuff_bluebug.html. (2017). accessed: Oct., 2021."},{"key":"e_1_3_2_1_25_1","volume-title":"Proceedings of the 25th Annual International Cryptology Conference (CRYPTO","author":"Yi Lu Willi Meier","year":"2005","unstructured":"Yi Lu , Willi Meier , and Serge Vaudenay . 2005 . The conditional correlation attack: A practical attack on bluetooth encryption . In Proceedings of the 25th Annual International Cryptology Conference (CRYPTO 2005). Springer, 97--117. Yi Lu, Willi Meier, and Serge Vaudenay. 2005. The conditional correlation attack: A practical attack on bluetooth encryption. In Proceedings of the 25th Annual International Cryptology Conference (CRYPTO 2005). Springer, 97--117."},{"key":"e_1_3_2_1_26_1","volume-title":"Proceedings of the 10th International Conference on the Theory and Application of Cryptology and Information Security (ASIACRYPT","author":"Serge Vaudenay","year":"2004","unstructured":"Yi Lu and Serge Vaudenay . 2004 . Cryptanalysis of Bluetooth keystream generator two-level E0 . In Proceedings of the 10th International Conference on the Theory and Application of Cryptology and Information Security (ASIACRYPT 2004). Springer, 483--499. Yi Lu and Serge Vaudenay. 2004. Cryptanalysis of Bluetooth keystream generator two-level E0. In Proceedings of the 10th International Conference on the Theory and Application of Cryptology and Information Security (ASIACRYPT 2004). Springer, 483--499."},{"key":"e_1_3_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.1145\/3307334.3326089"},{"key":"e_1_3_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.6028\/NIST.SP.800-121r2"},{"key":"e_1_3_2_1_29_1","volume-title":"Frankenstein: Advanced wireless fuzzing to exploit new bluetooth escalation targets. In USENIX Security. 19--36.","author":"Ruge Jan","year":"2020","unstructured":"Ruge , Jan and Classen , Jiska and Gringoli , Francesco and Hollick , Matthias . 2020 . Frankenstein: Advanced wireless fuzzing to exploit new bluetooth escalation targets. In USENIX Security. 19--36. Ruge, Jan and Classen, Jiska and Gringoli, Francesco and Hollick, Matthias. 2020. Frankenstein: Advanced wireless fuzzing to exploit new bluetooth escalation targets. In USENIX Security. 19--36."},{"key":"e_1_3_2_1_30_1","doi-asserted-by":"publisher","DOI":"10.1145\/1067170.1067176"},{"key":"e_1_3_2_1_31_1","volume-title":"BlueSniff: Eve Meets Alice and Bluetooth. USENIX Workshop on Offensive Technologies 7","author":"Spill Dominic","year":"2007","unstructured":"Spill , Dominic and Bittau , Andrea . 2007 . BlueSniff: Eve Meets Alice and Bluetooth. USENIX Workshop on Offensive Technologies 7 (2007), 1--10. Spill, Dominic and Bittau, Andrea. 2007. BlueSniff: Eve Meets Alice and Bluetooth. USENIX Workshop on Offensive Technologies 7 (2007), 1--10."},{"key":"e_1_3_2_1_32_1","doi-asserted-by":"publisher","DOI":"10.1007\/s00779-017-1081-6"},{"key":"e_1_3_2_1_33_1","doi-asserted-by":"publisher","DOI":"10.1109\/SP40001.2021.00013"},{"key":"e_1_3_2_1_34_1","doi-asserted-by":"publisher","DOI":"10.5555\/1802438.1802442"},{"key":"e_1_3_2_1_35_1","first-page":"339","article-title":"LIGHTBLUE","volume":"21","author":"Wu Jianliang","year":"2021","unstructured":"Wu , Jianliang and Wu , Ruoyu and Antonioli , Daniele and Payer , Mathias and Tippenhauer , Nils Ole and Xu , Dongyan and Tian , Dave Jing and Bianchi , Antonio . 2021 . LIGHTBLUE : Automatic Profile-Aware Debloating of Bluetooth Stacks. In USENIX Security 21. 339 -- 356 . Wu, Jianliang and Wu, Ruoyu and Antonioli, Daniele and Payer, Mathias and Tippenhauer, Nils Ole and Xu, Dongyan and Tian, Dave Jing and Bianchi, Antonio. 2021. LIGHTBLUE: Automatic Profile-Aware Debloating of Bluetooth Stacks. In USENIX Security 21. 339--356.","journal-title":"Automatic Profile-Aware Debloating of Bluetooth Stacks. In USENIX Security"},{"key":"e_1_3_2_1_36_1","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2019.23482"},{"key":"e_1_3_2_1_37_1","volume-title":"Proceedings of the 33rd Annual Cryptology Conference (CRYPTO","author":"Bin Zhang Chao Xu","year":"2013","unstructured":"Bin Zhang , Chao Xu , and Dengguo Feng . 2013 . Real time cryptanalysis of Bluetooth encryption with condition masking . In Proceedings of the 33rd Annual Cryptology Conference (CRYPTO 2013). Springer, 165--182. Bin Zhang, Chao Xu, and Dengguo Feng. 2013. Real time cryptanalysis of Bluetooth encryption with condition masking. In Proceedings of the 33rd Annual Cryptology Conference (CRYPTO 2013). Springer, 165--182."},{"key":"e_1_3_2_1_38_1","doi-asserted-by":"publisher","DOI":"10.1007\/s00145-017-9260-1"},{"key":"e_1_3_2_1_39_1","volume-title":"Proceedings of the 29th USENIX Security Symposium (USENIX Security). USENIX Association, 37--54","author":"Zhang Yue","year":"2020","unstructured":"Zhang , Yue and Weng , Jian and Dey , Rajib and Jin , Yier and Lin , Zhiqiang and Fu , Xinwen . 2020 . Breaking secure pairing of bluetooth low energy using downgrade attacks . In Proceedings of the 29th USENIX Security Symposium (USENIX Security). USENIX Association, 37--54 . Zhang, Yue andWeng, Jian and Dey, Rajib and Jin, Yier and Lin, Zhiqiang and Fu, Xinwen. 2020. Breaking secure pairing of bluetooth low energy using downgrade attacks. In Proceedings of the 29th USENIX Security Symposium (USENIX Security). USENIX Association, 37--54."},{"key":"e_1_3_2_1_40_1","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3354240"}],"event":{"name":"CCS '22: 2022 ACM SIGSAC Conference on Computer and Communications Security","location":"Los Angeles CA USA","acronym":"CCS '22","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the 2022 ACM SIGSAC Conference on Computer and Communications Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3548606.3560668","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3548606.3560668","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,17]],"date-time":"2025-06-17T17:48:59Z","timestamp":1750182539000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3548606.3560668"}},"subtitle":["Breaking through the Defense of Bluetooth in Silence"],"short-title":[],"issued":{"date-parts":[[2022,11,7]]},"references-count":40,"alternative-id":["10.1145\/3548606.3560668","10.1145\/3548606"],"URL":"https:\/\/doi.org\/10.1145\/3548606.3560668","relation":{},"subject":[],"published":{"date-parts":[[2022,11,7]]},"assertion":[{"value":"2022-11-07","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}