I'm baffled by the *intended* authentication path not using the entire 4 bytes o... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

Dylan16807 on Jan 30, 2015 | parent | context | favorite | on: Nike+ FuelBand SE BLE Protocol Reversed

I'm baffled by the intended authentication path not using the entire 4 bytes of the CRC after bothering with such a big random number.

zaroth on Jan 30, 2015 [–]

I'm baffled by everything about the intended authentication path?! TFA has like 6 paragraphs which reduce to;

  CRC32(MD5(Pin)||Nonce)[0:1]

My eyes! Is something wrong with HMAC?

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact