I'm considering buying a Logitec M570 wireless trackball. This device uses Logitec's "Unifying" wireless technology: a single tiny USB insert supports multiple logitec devices.
This thread mentions the fact that the Unifying system uses AES128, and points to Logitec's whitepaper on this topic: see here. This document has the following very scary statement in it:
Note that the encryption keys are never transmitted over the air. By spying the packets exchanged during the pairing process, a hacker would not be able to f ind the encryption keys without knowing the secret algorithm implemented to construct them.
Secret algorithm? Is Logitec really so stupid as to use a secret proprietary algorithm for key exchange, when there are perfectly functional publicly known and tested algorithm (I'm thinking of Diffie-Hellman)? Does anyone know of:
- Known vulnerabilities in the pairing of Logitec devices (better known than this vague statement)?
- Any research/audit of these devices?