Analysing ZigBee Key Establishment Protocols

Abstract

This report provides a detailed documentation on the application of static program analysis to the key establishment protocols of the ZigBee wireless sensor network standard. The approach presented in this report is within the scope of the SENSORIA (Software Engineering for Service-Oriented Overlay Computers) project, and will form a preliminary version of one of the chapters in my PhD dissertation. The discovered flaw and the proposed secure protocols were recently published in a conference paper (see references [17]) and also accepted for journal publication.Acknowledgement This work has been partially supported by EU-FETPI Global Computing Project IST-2005-16004 SENSORIA.I would like to thank Hanne Riis Nielson and Flemming Nielson for the supervision and invaluable contribution in this work, and also for providing me with this opportunity to work on an international research project. I would also like to thank Gavin Lowe for kind discussions and feedback on fixing the flaw in the key establishment protocol.