Is there a way to add encryption to the enhanced shockburst protocol?
There is no security module that can easily be added to ESB. If you want security, I would recommend you to use the Nordic proprietary protocol Gazell.
The Gazell pairing (encryption) user guide can be found here.
