Resolvable Private Address (RPA)
Definition
A BLE address type that rotates on a timer (typically every 15 minutes) but can be resolved back to the device's true Identity Address by any device holding the matching Identity Resolving Key (IRK). An examiner who has the IRK from a paired device can link multiple observed RPAs to one physical device.
Related terms
- BD_ADDR (Bluetooth Device Address)
- The 48-bit hardware address assigned to each classic Bluetooth device by its manufacturer. Analogous to a MAC address on Ethernet. Unlike BLE...
- GATT (Generic Attribute Profile)
- The protocol framework used by BLE for data exchange. A GATT server exposes data as Services and Characteristics; a GATT client reads...
- Link Key / Long-Term Key (LTK)
- The cryptographic secret negotiated during Bluetooth pairing that is stored on both devices and used to authenticate and encrypt subsequent connections. In...
- RFCOMM
- Radio Frequency Communication, the Bluetooth protocol that emulates a serial RS-232 connection over an L2CAP channel. Used by profiles including Serial Port...
- Ubertooth One
- An open-source USB Bluetooth sniffing platform developed by Michael Ossmann that can capture raw Bluetooth BR/EDR and BLE frames from the air....
Explained in
- Bluetooth ForensicsA BLE address type that rotates on a timer (typically every 15 minutes) but can be resolved back to the device's true Identity Address by any device holding th...