Establishing a secure connection between wireless devices has become significantly important with the increasing number of Wi-Fi products coming to the market. In order to provide an easy and secure pairing standard, the Wi-Fi Alliance has designed the Wi-Fi Protected Setup. Push-Button Configuration (PBC) is part of this standard and is especially useful for pairing devices with physical limitations. However, PBC is proven to be vulnerable to man-in-the-middle (MITM) attacks. Tamper-Evident Pairing (TEP) is an improvement of the PBC standard, which aims to fix the MITM vulnerability without interfering the useful properties of PBC. It relies on the Tamper-Evident Announcement (TEA), which guarantees that an adversary can neither tamper a transmitted message without being detected, nor hide the fact that the message has been sent. The security properties of TEP were proven manually by its authors and tested with the Uppaal and Spin model checkers. During the Uppaal model checking, no vulnerabilities were found. However, the Spin model revealed a case, in which the TEP's security is not guaranteed. In this paper, we first provide a comprehensive overview of the TEP protocol, including all information needed to understand how it works. Furthermore, we summarize the security checks performed on it, give the circumstances, under which it is no longer resistant to MITM attacks and explain the reasons why they could not be revealed with the first model. Nevertheless, future work is required to gain full certainty of the TEP's security before applying it in the industry.

翻译：随着市场上Wi-Fi产品数量的增加，在无线设备之间建立安全连接变得尤为重要。为了提供简便且安全的配对标准，Wi-Fi联盟设计了Wi-Fi保护设置。按键配置（PBC）是该标准的一部分，特别适用于配对具有物理限制的设备。然而，PBC已被证明容易受到中间人（MITM）攻击。防篡改配对（TEP）是对PBC标准的改进，旨在解决MITM漏洞，同时不干扰PBC的有用特性。它依赖于防篡改宣告（TEA），保证攻击者无法在未被检测到的情况下篡改传输的消息，也无法隐藏消息已被发送的事实。TEP的安全特性由其作者手动证明，并利用Uppaal和Spin模型检查器进行测试。在Uppaal模型检查期间未发现漏洞。然而，Spin模型揭示了一种情况，其中TEP的安全性无法得到保证。在本文中，我们首先提供TEP协议的全面概述，包括理解其工作原理所需的所有信息。此外，我们总结了对其执行的安全性检查，给出了其不再抵御MITM攻击的条件，并解释了为何第一个模型无法揭示这些原因。尽管如此，在将TEP应用于工业之前，仍需进一步研究以确保其安全性完全可靠。