KDE connect: wrong association key with BT during authorization with app

--nextPart2594224.XAFRqVoOGU
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain; charset="utf-8"; protected-headers="v1"
From: Stakanov <[email protected]>
To: [email protected]
Date: Sun, 04 Jan 2026 11:21:24 +0100
MIME-Version: 1.0

Hello,=20
I have a Xiaomi PocoX7pro with latest kde connect from fdroid and the KDE=20
connect from the repos of opensuse Tumbleweed.=20

Whenever I try to pair the two, they see each other, but the security key=20
indicated at the PC screen (expected) is totally different with the one in=
=20
reception.=20
Any suggestion what could happen to compromise / destroy the key exchange?=
=20
If one uses the non corresponding key it pairs, but of course security is=20
compromised like this. So I did take of then the pairing, did it just for=20
reporting purposes.=20
This happens under Bluetooth and no difference if I am using the phone or t=
he=20
plasma BT stack via Konnect to pair.=20
The phone itself is correctly paired via BT without issues.=20

Operating System: openSUSE Tumbleweed 20260102
KDE Plasma Version: 6.5.4
KDE Frameworks Version: 6.21.0
Qt Version: 6.10.1
Kernel Version: 6.18.2-1-default (64-bit)
Graphics Platform: X11
Processors: 12 =C3=97 AMD Ryzen 5 5600G with Radeon Graphics
Memory: 128 GiB of RAM (125.2 GiB usable)
Graphics Processor: AMD Radeon Pro W5500
Product Name: X570 Phantom Gaming 4

Android version is: 1.34.4

Linux version: 25.12.0

--nextPart2594224.XAFRqVoOGU
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: This is a digitally signed message part.
Content-Transfer-Encoding: 7Bit

-----BEGIN PGP SIGNATURE-----

iQFPBAABCAA5FiEEq7egIaWjj/Ppns8x8mOB1qZR8N8FAmlaPyUbFIAAAAAABAAO
bWFudTIsMi41KzEuMTEsMiwyAAoJEPJjgdamUfDf5HIIAKQc5o9c/q7L3yl0BtOs
CcoE95ihB4IAA/yGoQIR0GYTfxGebTIKkgOLUIJopIDwUxFKH0QOQPuYux14Rka0
dpcrpLSOeSIea2Ys/P2UOcnIXmXAHW/BmfgsactSwa1uy3Nrj+5RnPVH5b9YMw56
gvs9whwtB4q/nuUCabx0XqMDV0u4C2lCfG92QhmoV7amqtOCsXfrIWrtTdm/CCDy
jFs5u0EXkUBb/+LXSfXFdjGf36O5tIuahAAHhEJOYMqCdaKcaE1CS0xCrKPwZL4+
s/NV8VXg1UBhLkDSdupAinbL/pvAgvzv39HTEJhK8UXr4zVudHHWcWfNQeciuOes
/hg=
=BYB8
-----END PGP SIGNATURE-----

--nextPart2594224.XAFRqVoOGU--