Practical Internet of Things Security - Second Edition

Establishing good key management practices for WSNs. 

Each short-range communications protocol used within a WSN uses key material to establish encrypted and authenticated communications. However, some of the default configurations should be changed upon initial deployment of the WSN. 

ZigBee networks, for example, support a default Trust Center (TC) key. This key is used for key transport and should be disabled upon initial configuration of the network. Instead, generate and use a non-default key for confidentiality and protection of keys being transported across the WSN. System administrators should also make it a practice never to distribute ZigBee master keys in-band. Instead, prepare an out-of-band process for provisioning master keys ...