Secure provisioning of wireless channels includes discovery and provisioning, discovery comprising: first device: receiving first presence signal; second device: receiving second presence signal; generating asymmetric public-private key pair; scanning channels by transmitting request to be provisioned signal including generated public key to receive ready to provision signal; if ready to provision signal was received over exactly one of scanned channels, identifying that channel as the channel; first device: receiving request to be provisioned signal at least once; if request to be provisioned signal was received with exactly one public key, proceeding to provisioning; provisioning comprising: one of second device or first device: allocating secure link with other of second device or first device based on public key; other of second device or first device: allocating secure link from one of second device or first device based on public key; and provisioning one of second device or first device.