Skip to content

One Key, Two Key, I Just Stole Your goTenna Key

Erwin KarincicWoody

Discloses cryptographic and firmware vulnerabilities in goTenna Pro mesh networking devices, allowing off-grid key extraction and message decryption.

Summary

Off-Grid Tactical Mesh Networking with goTenna

goTenna Pro devices provide encrypted, off-grid mesh communications for defense, law enforcement, and emergency response teams operating in denied communications environments.

Reverse Engineering Firmware and Cryptographic Keystores

Erwin Karincic and Woody analyze the device firmware and hardware interfaces, uncovering critical implementation flaws in how cryptographic keys are derived, stored, and verified in memory.

Extracting Group Keys and Decrypting Mesh Telemetry

Exploiting improper key isolation and weak nonce generation enables attackers to extract pre-shared encryption keys over the air, decrypting situational awareness data and forging tactical messages.

Securing Tactical Communications Hardware

Mitigating mesh key extraction requires deploying tamper-resistant secure elements, enforcing hardware-backed key derivation, and patching over-the-air protocol handshakes.

Related talks