b7b35b89ed
This commit deprecates: - the `CONFIG_BT_SIGNING` Kconfig option - `BT_GATT_CHRC_AUTH` property IOW, this commit deprecates the LE Security mode 2 support. Explanation: Erratum ES-26047 introduced in Bluetooth Core Specification v6.2 requires SingCounter to be persistently stored to prevent replay attacks. Currently, the Host doesn't store SignCounter, therefore the device is vulnerable to replay attacks after reboot. Additionally, the current implementation doesn't assume that SignCounter of a received message can be incremented by more than one and thus may not validate correct message. The Bluetooth Security and Privacy Best Practices Guide recommends to not using Data signing and recommends to use LE Security mode 1 levels 2, 3 or 4 instead. The Signed Write Without Response sub-procedure, which is the only user of Data signing, is optional (see Vol 3, Part G, Table 4.1). See also ES-18901. The aforementioned reasons make no sense to keep this feature. Signed-off-by: Pavel Vasilyev <pavel.vasilyev@nordicsemi.no>
37 lines
962 B
Plaintext
37 lines
962 B
Plaintext
CONFIG_BT=y
|
|
CONFIG_BT_CTLR_DUP_FILTER_LEN=16
|
|
CONFIG_BT_CTLR_CONN_PARAM_REQ=n
|
|
CONFIG_BT_CTLR_LE_PING=n
|
|
CONFIG_BT_CTLR_PRIVACY=n
|
|
CONFIG_BT_CTLR_EXT_SCAN_FP=n
|
|
CONFIG_BT_DATA_LEN_UPDATE=n
|
|
CONFIG_BT_PHY_UPDATE=n
|
|
CONFIG_BT_CTLR_CHAN_SEL_2=n
|
|
CONFIG_BT_CTLR_MIN_USED_CHAN=n
|
|
CONFIG_BT_CTLR_ADV_EXT=n
|
|
CONFIG_BT_CTLR_DTM_HCI=y
|
|
CONFIG_BT_CTLR_ADVANCED_FEATURES=y
|
|
CONFIG_BT_CTLR_LLL_PRIO=0
|
|
CONFIG_BT_CTLR_ULL_HIGH_PRIO=0
|
|
CONFIG_BT_CTLR_XTAL_ADVANCED=y
|
|
CONFIG_BT_CTLR_SCHED_ADVANCED=y
|
|
CONFIG_BT_CTLR_RADIO_ENABLE_FAST=n
|
|
CONFIG_BT_CTLR_TIFS_HW=y
|
|
CONFIG_BT_CTLR_CONN_RSSI=n
|
|
CONFIG_BT_CTLR_ADV_INDICATION=n
|
|
CONFIG_BT_CTLR_SCAN_REQ_NOTIFY=n
|
|
CONFIG_BT_CTLR_SCAN_REQ_RSSI=n
|
|
CONFIG_BT_CTLR_PROFILE_ISR=n
|
|
CONFIG_BT_CTLR_DEBUG_PINS=n
|
|
CONFIG_BT_HCI_VS=n
|
|
CONFIG_BT_PERIPHERAL=y
|
|
CONFIG_BT_CENTRAL=y
|
|
CONFIG_BT_SMP=y
|
|
CONFIG_BT_SMP_SC_ONLY=y
|
|
CONFIG_BT_L2CAP_DYNAMIC_CHANNEL=y
|
|
CONFIG_BT_GATT_CLIENT=y
|
|
CONFIG_BT_CLASSIC=n
|
|
CONFIG_FLASH=y
|
|
CONFIG_SOC_FLASH_NRF_RADIO_SYNC_TICKER=y
|
|
CONFIG_ZTEST=y
|