Hi yangyh12138 ,

in the blog post it says:

We can help with:
+ Technical guidance on security implementation
+ Pre-filled compliance documentation templates from the platform perspective


Is the pre-filled compliance documentation template already available and if yes can you tell us where to ...

Thank you, adding "hal" to required components in the component's CMakeLists.txt worked.

Hi,

I'm porting a project from IDF 4.x to 5.x and need to call

esp_rom_gpio_pad_select_gpio(PIN_LED);
gpio_ll_input_disable(&GPIO, PIN_LED);
gpio_ll_output_enable(&GPIO, PIN_LED);
gpio_ll_set_level(&GPIO, PIN_LED, 0);

in call_start_cpu0() in
bootloader_components/main/bootloader_start.c

My ...

The problem with this approach is, that some devices for example an iPhone are changing their bluetooth device address every 30 minutes. So whitlisting specific device addresses will not work with iPhones and other client devices.

>You can opt for limited discovery , where advertising is done only for limited period of time. After that advertising stops, so remote devices cannot find your device or initiate connection.

The problem when opting in for limited discovery the ESP32 will only be visible for 30 seconds and after ...

Ok, i found a way to restrict access to characteristics only for paired devices:

You have to set the characteristics flags to:
BLE_GATT_CHR_F_WRITE | BLE_GATT_CHR_F_WRITE_ENC
(you have to use BOTH to make it work)

One Question still remains:
You said that you allow every device to connect to you ...

I've configured ble_hs_cfg with your settings, and now I'm asked to enter a PIN when I'm training to bond with the ESP32-S3.

BUT the strange thing is, I'm still able to connect to the ESP32-S3 (without bonding) and I can use the Service-Characteristics (read/write values) of the ESP32-S3 through ...

Thanks I've tried bonding with the ESP32-S3 using the
https://www.nordicsemi.com/Products/Development-tools/nRF-Connect-for-mobile
app.

The app shows that the ESP32-S3 was bonded, but the output of ESP32-S3 sill shows bonded=0:
I (173106) NimBLE: connection established; status=0
I (173106) NimBLE ...

Good to hear that storing bonding in NVS is already working.

I don't want to disable bluetooth completely as it should be available for an already bonded device at any time.

It should not be possible for any other device to connect to the ESP32-S3 without pressing the pairing-button first.

An ...

Thank you, eriksl, that makes a lot of sense!

So wouldn't it be possible to allow pairing only for 30 seconds when pressing a button? So that a 5 digit pin would be secure enough if you only have 30 seconds to pair?

An once a device is paired, you disable pairing except when you press the button ...