mirror of
https://github.com/espressif/esp-idf.git
synced 2026-09-27 06:03:39 +03:00
88ea45be73
Add smp_repairing_is_allowed() behind BT_BLE_SMP_HARDENED_REPAIRING so a peer cannot replace an existing bond with one that has less MITM protection, no Secure Connections, or a shorter key. Compare a preceding Security Request against the pairing command AuthReq, not the association-model result, and always allow first pairing. A refusal keeps the stored bond. Pairing-failure erase is split by link role: default is erase as Central and keep as Peripheral. Closes BLERP (NDSS 2026) V3, V4 and V6.