Enable RF24 Encryption with mysensors V2.x

[Nicklas Starkel]

@Anticimex

ahh, so basically the gateway will always accept everything, but nodes will not if signing is enabled.

Maybe it's a longshot, but I was worried that if someone knows my MQTT pathways they would be able to
1: Use a node and send information (ex MQTT/MyActuator/TurnON)
2: The gateway picks it up and converts to MQTT information and publish to MQTT broker
3: My actuator subscribes to this special channel and gets the "TurnON"
And then for example turns on my lights or whatever.

While I was writing this I realize more and more that the above is pretty far fetched :)
Also, I have separated MySensors channel from other channels so they should be safe.

But to be on the safe side and there seems not to be any apparent drawbacks, I will use Whitelisting as well.
Thank you for the help @Anticimex !

[Anticimex]

@Nicklas-Starkel you're welcome. This behaviour is because we did not want to turn a gw that require signatures useless to nodes that for any reason cannot use signing. It could be that this is changed at some point on the future so that a gw that require signatures does it for all nodes. But for now it doesn't for backwards compatibility. And it is considered that signing first of all is used for data going out to a node. Typically an actuator. And yes, whitelisting can also be added to further strengthen security if you fear nodes could be hijacked.
I'm glad the features are being used :)

[Sharath B Krishna]

Have one query... by just enabling the RF24 Encryption with the MY ENCRYPTION SIMPLE PASSWORD, is it required that all nodes have it set along with the gateway?

can a non encryption enabled node communicate with the gateway(encryption enabled) ? like we have with the signing ?

[mfalkvidd]

Welcome to the MySensors community @sharath-b-krishna. Great to have you here.

from the documentation:

#define MY_RF24_ENABLE_ENCRYPTION
Define this to enable software based AES encryption.

All nodes and gateway must have this enabled, and all must be personalized with the same AES key.

[Sharath B Krishna]

@mfalkvidd thanks , I understand its necessary since nodes with encryption need to communicate... but what is not clear is .....is it possible for nodes without encryption enabled also to communicate to gateway ?

like how nodes without signing enabled can still communicate with the gateway ..

[Anticimex]

@sharath-b-krishna no, as encryption is done in the physical layer while signing is done in the routing layer.
Encryption applies to ALL messages at ALL times so a gw has now way of distinguishing a node that encrypts messages from a node that doesn't.
Signing is done conditionally depending on requirements exchanged between gw and node and also on certain types of messages.
Security is guaranteed by persistent storage on the GW side of nodes that communicate certain signing requirements so rogue nodes cannot just tell the GW to reset the requirements for a node if signing has been enabled at any point in history without physical access to the gw.
Encryption does not do any of this logic as it implies that certain messages has to be exchanged between gw and node which both need to "understand".

[alowhum]

@Sharath-B-Krishna In other words: it's all or nothing :-)

[Anticimex]

@alowhum @Sharath-B-Krishna yes, at least if we are talking a single gw setup. It is possible to use two gw:s to have two separate networks. One can be encrypted and the other plain.

[Sharath B Krishna]

@anticimex said in Enable RF24 Encryption with mysensors V2.x:

could

thanks @Anticimex ... also is the Encryption simple password stored in the eeprom? would be easily readable with a eeprom read program ?

[Anticimex]

@sharath-b-krishna no, the simple options have all secrets stored in the sketch, so don't put your production code on github if you plan to use that :)

[Sharath B Krishna]

thanks @Anticimex