RF Wireless World

Browse articles, tutorials, tools, and vendors.

Bluetooth IRK vs LTK: Differences & Uses Explained

By RF Wireless Expert Team

Based on the Bluetooth Core Specification and supplemented by general industry knowledge, IRK (Identity Resolving Key) and LTK (Long Term Key) are fundamental cryptographic keys used in Bluetooth Low Energy (BLE) security. They are generated and exchanged during the pairing and bonding process, but they serve two entirely different purposes: Privacy and Encryption.

1. IRK (Identity Resolving Key)

Every Bluetooth device has a unique, fixed identifier called a MAC address (or Bluetooth Device Address). If a device (like your smartphone or smartwatch) constantly broadcasts this fixed address, third parties (like retail stores or malicious actors) could easily track your location and movements over time.

What the IRK is:

To prevent tracking, Bluetooth LE introduced a Privacy feature. This feature allows a device to hide its true identity by constantly generating and broadcasting randomized, temporary MAC addresses called Resolvable Private Addresses (RPAs). The IRK is the cryptographic key that makes this system work.

How it Works:

  1. Exchange: When two devices pair and bond (e.g., your phone and your wireless earbuds), they exchange their respective IRKs and true “Identity Addresses” and store them in a “resolving list.”
  2. Randomization: As you walk around, your phone broadcasts random addresses. To a third party tracker, your phone looks like a constantly changing, unrecognizable device.
  3. Resolution: When your earbuds want to connect to your phone, they receive the random broadcast. Because they have your phone’s IRK, they can perform a cryptographic mathematical operation to “resolve” the random address back to your phone’s true Identity Address.
  4. Result: Trusted, bonded devices can always recognize each other, while untrusted devices just see random noise.

2. LTK (Long Term Key)

When devices exchange data over the air (like a smart lock receiving an “unlock” command, or a health monitor sending heart rate data), that data can be intercepted by a passive eavesdropper. The data must be encrypted to ensure confidentiality.

What the LTK is:

The Long Term Key (LTK) is the primary symmetric encryption key used in Bluetooth Low Energy. It is the BLE equivalent of the “Link Key” used in Classic Bluetooth (BR/EDR).

How it Works:

  1. Generation: During the initial pairing process, the two devices use cryptographic algorithms (like Elliptic Curve Diffie Hellman in “LE Secure Connections” ) to safely generate a shared LTK.
  2. Storage (Bonding): If the devices agree to “bond” (remember each other for future use), the LTK is saved securely in the memory of both devices.
  3. Future Connections: The next time the devices connect, they do not need to go through the lengthy pairing process again. Instead, they use the stored LTK to quickly generate a temporary Session Key. This Session Key is then used with the AES-CCM algorithm to encrypt all the data passed between them for that specific session.
  4. Cross-Transport Derivation: According to the Core Specification (Section 5.6), modern Bluetooth devices support “Cross transport key derivation.” This means if you pair a device over Classic Bluetooth (generating a BR/EDR Link Key), the device can mathematically convert that key into an LE LTK, meaning you only have to pair the device once to use it across both Bluetooth Classic and Low Energy transports.

Summary Comparison

FeatureIRK (Identity Resolving Key)LTK (Long Term Key)
Primary PurposePrivacy (Anti-tracking).Security (Encryption & Authentication).
Function”Resolves” a randomized, temporary MAC address back to a known device.Encrypts the data connection to prevent eavesdropping and data manipulation.
When is it used?Before a connection is made (during Scanning and Advertising).After a connection is made (during data transfer).
Real-World AnalogyA decoder ring that lets a bouncer read your fake ID and realize it’s actually you on the VIP list.A safe combination that ensures only you and the recipient can read the documents inside.

References & Further Reading

  1. Bluetooth SIG : Bluetooth Core Specification Version 6.3, May 5, 2026.
  2. Bluetooth SIG : Bluetooth Technology Overview

Continue Learning Bluetooth Basic Concepts

Continue Learning Bluetooth Technology

Compare Bluetooth With Other Technologies

Keep Reading

Related Posts