<?xml version="1.0" encoding="UTF-8" ?>
<?xml-stylesheet type="text/xsl" href="https://devzone.nordicsemi.com/cfs-file/__key/system/syndication/rss.xsl" media="screen"?><rss version="2.0" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:slash="http://purl.org/rss/1.0/modules/slash/" xmlns:wfw="http://wellformedweb.org/CommentAPI/" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>BLE Security Mode 2, Level 1: Unauthenticated pairing with data signing</title><link>https://devzone.nordicsemi.com/f/nordic-q-a/75894/ble-security-mode-2-level-1-unauthenticated-pairing-with-data-signing</link><description>Hello, 
 we are developing a verry small sensor node. Since we like to know if the sensor we are connected to, is one of our sensors instead of an attacker fake sensor we need a method to check this. Because the sensor node is so small (3mm x 27mm) we</description><dc:language>en-US</dc:language><generator>Telligent Community 13</generator><lastBuildDate>Wed, 02 Jun 2021 12:46:05 GMT</lastBuildDate><atom:link rel="self" type="application/rss+xml" href="https://devzone.nordicsemi.com/f/nordic-q-a/75894/ble-security-mode-2-level-1-unauthenticated-pairing-with-data-signing" /><item><title>RE: BLE Security Mode 2, Level 1: Unauthenticated pairing with data signing</title><link>https://devzone.nordicsemi.com/thread/313113?ContentTypeID=1</link><pubDate>Wed, 02 Jun 2021 12:46:05 GMT</pubDate><guid isPermaLink="false">137ad170-7792-4731-bb38-c0d22fbe4515:5b8aadd2-f068-41b7-9777-0a2cf3a5b6f4</guid><dc:creator>Hung Bui</dc:creator><description>&lt;p&gt;Hi Dominik,&amp;nbsp;&lt;/p&gt;
&lt;p&gt;&lt;/p&gt;
&lt;p&gt;Data signing is not supported by the softdevice. I don&amp;#39;t think many phones on the market support this feature also.&amp;nbsp;&lt;/p&gt;
&lt;p&gt;What you can do is either encrypt your data using your own key on application level. There is a discussion about that &lt;a href="https://devzone.nordicsemi.com/f/nordic-q-a/2965/ble-preshared-pin-key-auth"&gt;here&lt;/a&gt;, it&amp;#39;s pretty old but should give you some idea.&amp;nbsp;&lt;/p&gt;
&lt;p&gt;Another option is to use some challenge response authentication:&amp;nbsp;&lt;a href="https://en.wikipedia.org/wiki/Challenge%E2%80%93response_authentication"&gt;https://en.wikipedia.org/wiki/Challenge%E2%80%93response_authentication&lt;/a&gt;&lt;/p&gt;
&lt;p&gt;You can disable the functionality on the central side and disconnect if you don&amp;#39;t receive a correct response to your random generated challenge.&amp;nbsp;&lt;/p&gt;&lt;div style="clear:both;"&gt;&lt;/div&gt;</description></item></channel></rss>