Adrian Roman

Despite that, I think it should be fixed, they might exist in the future. Here is a very similar bug being confirmed for open zwave: https://github.com/OpenZWave/open-zwave/issues/1500

Did you manage to decrypt the first S2 encrypted packet (the 'echo')? I'm implementing the same thing for some closed source project and I'm having troubles with it... ECDH, PRNG...

In the meantime, I managed to decrypt it. It's quite cumbersome to implement it, one needs to patiently check each referred RFC for test vectors and check against those. Apparently...

By the way, I've seen this: "My plan is to add S2 support but no support for S0." FYI, S0 is much simpler than S2 to implement, plus you have...

S0 is working nicely in the software I implemented. Indeed there is the overhead of requesting the nonce and getting it each time, but it's not that bad. The reliability...

There are various RFCs, pointed out in the documentation. The starting point for S2 implementation is 'Z-Wave-Transport-Encapsulation-Command-Class-Specification' pdf. For DiffieHellman I did what is said in this page http://cr.yp.to/ecdh.html and...

Not really, I'm very sick of my own code about this :( Checking my own code to find where the problems were was nightmare enough, trying to figure that out...

CCSD(T) is implemented for the restricted method. It could be done for the unrestricted one as well.

The simplest variant https://github.com/aromanro/QCSim/issues/22 is implemented, this might be next.

Probably I'm not going to add one... I implemented one in a closed source project. It's not a big deal (except the part that chooses the order of contractions), once...