# knob_attack_sim.py - Simulates negotiation of encryption key size to 1 byte
import random, hashlib

class BluetoothDevice:
    def negotiate_key_size(self, proposed_size):
        # Vulnerable: accepts any key size down to 1 byte
        return max(1, proposed_size)  # should enforce minimum 7

def attack():
    bob = BluetoothDevice()
    # Attacker proposes 1 byte key size
    agreed = bob.negotiate_key_size(1)
    print(f"Key size negotiated: {agreed} byte")
    # Now brute-force 1-byte key (256 possibilities) in seconds
    for k in range(256):
        # Simulate successful decryption
        print(f"Key {k} decrypted traffic.")

attack()

python knob_attack_sim.py