SWRA615A June   2019 CC1352P , CC1352R , CC2530 , CC2531 , CC2538 , CC2652P , CC2652R , CC2652R7 , CC2652RB , CC2652RSIP

 

  1.   What's New in Zigbee 3.0
    1. 1 Overview
    2. 2 Zigbee PRO Specification
      1. 2.1 Child Device Management
      2. 2.2 Parent Announce Command
      3. 2.3 Trust Center (TC) Link Key Updates
      4. 2.4 Install Codes
      5. 2.5 Outgoing NWK Frame Counter
      6. 2.6 Changes to Network Joining
      7. 2.7 New Mandatory Command Support
      8. 2.8 Optional Distributed Networks
    3. 3 Base Device Behavior (BDB)
      1. 3.1 BDB Commissioning Modes
      2. 3.2 BDB Security
      3. 3.3 Reset Methods Available with BDB
    4. 4 Green Power Basic Proxy
    5. 5 Zigbee Cluster Library
    6. 6 Zigbee Application Architecture
      1. 6.1 Zigbee Node
      2. 6.2 Zigbee Cluster
      3. 6.3 Zigbee Device
    7. 7 Zigbee Lighting & Occupancy (ZLO) Device Specification
    8. 8 Zigbee 3.0 Certification
    9. 9 References
      1.      Trademarks

2.4 Install Codes

By default, the initial network key is transported to joining devices using the well-known TC Link Key. However, there is now an option of using pre-configured keys and install codes to enhance security even further. Install codes are 128 bits of random data and a 16 bit CRC which are passed through an MMO hash function to generate a TC Link Key. This derived key would be used instead of the well-known TC Link key such that no well-known key is ever used to encrypt data over-the-air. Generally, install code-derived TC link keys are hard-coded into joining devices during the manufacturing process. The corresponding install code is then included with the device and programmed into the network leader through an out-of-band method such as a user interface. High Security mode from R20 has been removed from the R21 specification due to the TC Link Key update and install code enhancements.