applications: nrf_desktop: Add a note about disabling BLE legacy pairing

Change introduces a release note to inform that BLE legacy pairing was disabled by default in application configurations. Jira: NCSDK-31809 Signed-off-by: Marek Pieta <[email protected]> Signed-off-by: Pekka Niskanen <[email protected]>
nrfconnect · Feb 26, 2025 · 3950a1e · 3950a1e
1 parent 34e99f3
commit 3950a1e
Showing 1 changed file with 6 additions and 0 deletions.
diff --git a/doc/nrf/releases_and_maturity/releases/release-notes-changelog.rst b/doc/nrf/releases_and_maturity/releases/release-notes-changelog.rst
@@ -254,6 +254,12 @@ nRF Desktop
     This change results from the Bluetooth subsystem transition to the PSA cryptographic API.
     The GATT database hash calculation now requires larger stack size.
 
+  * Support for Bluetooth LE legacy pairing is no longer enabled by default, because it is not secure.
+    Using Bluetooth LE legacy pairing introduces, among others, a risk of passive eavesdropping.
+    Supporting Bluetooth LE legacy pairing makes devices vulnerable for a downgrade attack.
+    The :kconfig:option:`CONFIG_BT_SMP_SC_PAIR_ONLY` Kconfig option is enabled by default in Zephyr.
+    If you still need to support the Bluetooth LE legacy pairing, you need to disable the option in the configuration.
+
 * Added:
 
   * System Power Management for the :ref:`zephyr:nrf54h20dk_nrf54h20` board target on the application and radio cores.