Where and how bluetooth stacks storing linkkeys?

If you want to add some info - please mail bluetooth-pentest@narod.ru !

BlueZ (2.x, 3.x)
/var/lib/bluetooth/%bdaddr%/linkkeys
Unencrypted.
The linkkeys file format is %remoteaddr% %128 bit link key% %key type%.
00:04:3E:65:A1:C8 AA0F3125267C236E10B145F1DF5BA7D7 2

IVT BlueSoleil (5.x, 6.02270)
%WINDIR%/system32/REMOTEDEVICE.INI
Unencrypted.
[11:22:33:44:55:66]
relation=0000
link_key=4DAC6F9E0C6700A5E9C44BF7529EF23C
dev_class=0U+00D70050020C
name=Joe

Mac OS X 10.x
/private/var/root/Library/Preferences/blued.plist
Unencrypted.

Widcomm (6.0.1.5300)
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Keys
There are keys under there that correspond with Mac addresses.
Unencrypted.

Widcomm on Windows Mobile 203 PDAs
HKLM\Software\WIDCOMM\BtConfig\Devices\BD_ADDR\LinkKey
Unencrypted.
* reported by Alberto / seguridadmobile.blogspot.com