Where and how to store application security keys on the BlueNRG-2 SoC?

[rds-tmeyer]

I need to add application level security in my application using BLE. Where should the keys be stored so that they can be individually programmed in production and protected from readout ?

Additionally, where can I find if hci_le_encrypt is hardware accelerated or not?

Best regards

tm

[Winfred LU]

They keys are automatically saved when bonding is made, in some specific flash area reserved by the stack.

User may enable flash readout protection to protect them being read.

Yes, hci_le_encrypt is hardware accelerated.

[rds-tmeyer]

Hi Winfried, thanks for your reply. I understand how the BLE stack keys are stored. My question is if I want to add application level encryption (encrypt data before writing them to a characteristics). Is it possible to store my own keys in the same reserved area? How can I program them individually in production without rebuilding the firmware each time?