Questions about BLE security levels

[John Lee]

We made the product by adopting BLE security mode 1, level 4.
According to the analysis of our products by the wireless communication certification authority,
We received feedback that "SMP Pairing Request" should be encrypted.

Does "SMP Pairing Feature Exchange" need to be encrypted to satisfy BLE security mode 1 and level 4?
The picture below is our packet analyzed by "ellisys bluetooth analyzer".

Please respond to relevant information.
Thank you.

[Einar Thorsrud]

Hi,

According to the analysis of our products by the wireless communication certification authority,
We received feedback that "SMP Pairing Request" should be encrypted.

That is not possible. The SMP Pairing Request marks the beginning of the pairing procedure (after exchanging the pairing features). The primary purpose of the pairing procedure is to exchange encryption keys. It is not possible to encrypt the link before exchanging the keys.

Does "SMP Pairing Feature Exchange" need to be encrypted to satisfy BLE security mode 1 and level 4?

No. It is not needed, and not even possible.