applications: nrf_desktop: Add a note about disabling BLE legacy pairing

Change introduces a release note to inform that BLE legacy pairing was disabled by default in application configurations. Jira: NCSDK-31809 Signed-off-by: Marek Pieta <[email protected]>
nrfconnect · Feb 26, 2025 · 13ec0fb · 13ec0fb
1 parent b88c141
commit 13ec0fb
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/doc/nrf/releases_and_maturity/releases/release-notes-changelog.rst b/doc/nrf/releases_and_maturity/releases/release-notes-changelog.rst
@@ -254,6 +254,12 @@ nRF Desktop
     This change results from the Bluetooth subsystem transition to the PSA cryptographic API.
     The GATT database hash calculation now requires larger stack size.
 
+  * Support for Bluetooth LE legacy pairing is no longer enabled by default, because it's not secure.
+    Using Bluetooth LE legacy pairing introduces risk of eavesdropping.
+    Supporting Bluetooth LE legacy pairing makes device vulnerable for downgrade attack.
+    The :kconfig:option:`CONFIG_BT_SMP_SC_PAIR_ONLY` is enabled by default in Zephyr.
+    If you still need to support the Bluetooth LE legacy pairing you need to disable the option in configuration.
+
 * Added:
 
   * System Power Management for the :ref:`zephyr:nrf54h20dk_nrf54h20` board target on the application and radio cores.