Case study

Cindy Band: a client for the Xiaomi Smart Band 8 BLE protocol

Cindy Band implements PC and Android clients for Xiaomi Smart Band 8 NFC using a documented BLE protocol. The project records FE95 GATT framing, cmd26/27 authentication, HKDF session keys and AES-CCM business frames, alongside a local server and MCP access to band functions.

Targets: Protocol
Category: Independent reconstruction cases
Relationship: Independent reconstruction project
Sources reviewed: 2026-11-06
Evidence class: C1 partial scope or analysis entry

Stars: 0
Last commit: 2026-10-25
Language: Kotlin
License (GitHub): MIT

GitHub data as of 2026-11-10

Copy as Markdown View JSON Cite

Evidence

Demo screenshot from the project's public documentation

Observed: Download and demo observed; the case covers part of the target software.
Scope: Partial
Checked: 2026-11-08

How evidence classes are assigned

Requirements & limits

Prerequisites: A Xiaomi Smart Band 8 NFC and its binding key or an unbound device for experimental local binding.
Prerequisites: Python 3.10 or newer for the PC client, or Android 8.0 or newer for the Android client.
Limits: Local binding field order remains unconfirmed on an unbound device; custom watch faces are still under study.
License: MIT license.

Cite

BibTeX

@misc{cindy-band-case,
  title = {{Cindy Band: a client for the Xiaomi Smart Band 8 BLE protocol}},
  howpublished = {\url{https://github.com/Shunamxiao/xiaomi-band8}},
  url = {https://github.com/Shunamxiao/xiaomi-band8},
  urldate = {2026-11-06},
  note = {Awesome REA entry: \url{https://awesomerea.org/resources/cindy-band-case/}}
}

Plain text

Cindy Band: a client for the Xiaomi Smart Band 8 BLE protocol. https://github.com/Shunamxiao/xiaomi-band8 (accessed 2026-11-06). Awesome REA entry: https://awesomerea.org/resources/cindy-band-case/

Useful? Star Awesome REA on GitHub2.4k

About this entry

The description was reviewed against primary sources.

Report an outdated entry Suggest a translation fix

Primary sources

README.md GitHub · Shunamxiao/xiaomi-band8 · Revision e9f8474
docs/auth-protocol-verified.md GitHub · Shunamxiao/xiaomi-band8 · Revision e9f8474