I have started a project which will implement CBC-MAC for WiFi security (using Espressif’s implementation). I am fine using fixed length messages.

This is not going to trivial for me. I am wondering if anyone has some opinions on the value of this encryption, in general.

@nsaspook I am tagging you in hopes of tapping into your knowledgeable skeptic properties

 

Unless this is a commercial project with some widely viewed data value I wouldn't worry about implementation flaws. What actual block cipher are you using? As CBC(-MAC) are operational modes of a secure block cipher like AES.

https://csrc.nist.gov/projects/block-cipher-techniques/bcm

 

https://esp-idf.readthedocs.io/en/latest/api-reference/wifi/esp_now.html see under security.

Do you mean their AES-128?

 

Yes. AES-128 is not a top tier method like AES-256 but for a low resources platform it's plenty secure with good key management.

https://www.eetimes.com/document.asp?doc_id=1279619

 

k thx