Part I: Bluetooth Auracast from a Security Researcher’s Perspective

Summary

Analyses Auracast discovery, authenticated encryption, shared-code trust and availability, distinguishing strong audio encryption from sender identity and resistance to disruption.

Key findings

• The discovery discussion says that the advertisements and synchronization information are public for both open and encrypted streams; the authors identify an absence of authentication in that discovery chain.
• The authenticity discussion explains that encrypted audio and control packets use authenticated encryption, but anyone knowing the shared Broadcast_Code can create packets that pass those checks.
• The availability discussion distinguishes frequency hopping's protection against collisions from security against a deliberate adversary. Public timing and hopping information permits selective jamming even when the audio payload is encrypted.
• The authors describe a possible low-packet-count denial-of-service attack against encrypted broadcasts, leaving fuller attack details to later work. This article does not report a venue trial or product-wide success rate.
• Recommends strong random default codes and, where users can set them, random 16-character codes. The authors also propose changes to code derivation and hopping information; these are proposals rather than features established as present in products.

Limits

Full written article read through the Wayback Machine because the original domain failed DNS resolution. Embedded videos were not watched. Protocol analysis and examples of early phone and earbud implementations; no representative device sample, venue incident count or measured jamming coverage. Some recommendations concern future specification changes.

Read the original

insinuator.net/2025/01/auracast-part1

Link checked 13 October 2026. We link to the original and do not host copies.

Cited in

• Can venue broadcasts be spoofed, hijacked or jammed, and what protects them?Partly answered

Cite this source

The accessed date is when this library last checked the link; use the date you read it. To point readers to this summary instead, link to https://assistivelisteningknowledgebase.org/evidence/heinze-steinmetz-2025-auracast-security/

Every finding here cites its source, and who funded each source is labelled. This site does not recommend products. Found an error or a missing study? Suggest a correction.