LoRa PHY Range Tests and Software Decoding - Physical Layer Security

LoRa (Long Range) is a recently created patented physical layer protocol for small, low power devices. Networks are being deployed worldwide as LoRa WAN (link layer). The attack surface is growing. This research paper begins by performing range tests of a consumer module physical (PHY) layer. Depending on the settings, up to 5 Km was achieved to transmit a frame - at the expense of speed. 1 Km was achieved at a more reasonable rate. Along the way, how inexpensive RTL-SDR (software defined radio) was used to record raw transmissions from the official PHY module. These transmissions were then attempted (and successfully) demodulated and decoded using GNU Radio and the experimental gr-lora out-of-tree module from Bastille Research. Some common radio vulnerabilities are also discussed in relationship with LoRa.