Editing Bluetooth (section)

===Traffic===
Traffic encryption of classic Bluetooth below version 4.1 is considered to be using a weak encryption algorithm.
BLE and newer classic Bluetooth use AES-CCM for traffic encryption, which is considered secure <ref name="pomcor"/>

Many devices are vulnerable to the "KNOB" attack which exploits a weakness in the Bluetooth standard itself: the devices could be coerced when connecting (after already pairing) to use a traffic encryption key length of only one byte — which is very easy to crack. However, for the attack to work, both the host and the peripheral need to be vulnerable. All major operating systems should have received updates. <ref name="ars190817">Ars Technica—[https://arstechnica.com/information-technology/2019/08/new-attack-exploiting-serious-bluetooth-weakness-can-intercept-sensitive-data/ New Attack exploiting serious Bluetooth weakness can intercept sensitive data]. By Dan Goodin. Published 2019-08-17. Retrieved 2019-08-18.</ref>