diff --git a/src/hci.h b/src/hci.h
index 2d91bbb64..e7b96eaf6 100644
--- a/src/hci.h
+++ b/src/hci.h
@@ -201,28 +201,29 @@ typedef enum {
     AUTH_FLAG_NONE                                = 0x0000,
     AUTH_FLAG_HANDLE_LINK_KEY_REQUEST             = 0x0001,
     AUTH_FLAG_DENY_PIN_CODE_REQUEST               = 0x0002,
-    AUTH_FLAG_RECV_IO_CAPABILITIES_RESPONSE       = 0x0004,
-    AUTH_FLAG_SEND_IO_CAPABILITIES_REPLY          = 0x0008,
-    AUTH_FLAG_SEND_IO_CAPABILITIES_NEGATIVE_REPLY = 0x0010,
-    AUTH_FLAG_SEND_USER_CONFIRM_REPLY             = 0x0020,
-    AUTH_FLAG_SEND_USER_CONFIRM_NEGATIVE_REPLY    = 0x0040,
-    AUTH_FLAG_SEND_USER_PASSKEY_REPLY             = 0x0080,
+    AUTH_FLAG_RECV_IO_CAPABILITIES_REQUEST        = 0x0004,
+    AUTH_FLAG_RECV_IO_CAPABILITIES_RESPONSE       = 0x0008,
+    AUTH_FLAG_SEND_IO_CAPABILITIES_REPLY          = 0x0010,
+    AUTH_FLAG_SEND_IO_CAPABILITIES_NEGATIVE_REPLY = 0x0020,
+    AUTH_FLAG_SEND_USER_CONFIRM_REPLY             = 0x0040,
+    AUTH_FLAG_SEND_USER_CONFIRM_NEGATIVE_REPLY    = 0x0080,
+    AUTH_FLAG_SEND_USER_PASSKEY_REPLY             = 0x0100,
 
     // Classic OOB
-    AUTH_FLAG_SEND_REMOTE_OOB_DATA_REPLY          = 0x0100,
+    AUTH_FLAG_SEND_REMOTE_OOB_DATA_REPLY          = 0x0200,
 
     // pairing status
-    AUTH_FLAG_LEGACY_PAIRING_ACTIVE               = 0x0200,
-    AUTH_FLAG_SSP_PAIRING_ACTIVE                  = 0x0400,
+    AUTH_FLAG_LEGACY_PAIRING_ACTIVE               = 0x0400,
+    AUTH_FLAG_SSP_PAIRING_ACTIVE                  = 0x0800,
     AUTH_FLAG_PAIRING_ACTIVE_MASK                 = (AUTH_FLAG_LEGACY_PAIRING_ACTIVE | AUTH_FLAG_SSP_PAIRING_ACTIVE),
 
     // connection status
-    AUTH_FLAG_CONNECTION_AUTHENTICATED            = 0x0800,
-    AUTH_FLAG_CONNECTION_ENCRYPTED                = 0x1000,
+    AUTH_FLAG_CONNECTION_AUTHENTICATED            = 0x1000,
+    AUTH_FLAG_CONNECTION_ENCRYPTED                = 0x2000,
 
     // errands
-    AUTH_FLAG_READ_RSSI                           = 0x2000,
-    AUTH_FLAG_WRITE_SUPERVISION_TIMEOUT           = 0x4000,
+    AUTH_FLAG_READ_RSSI                           = 0x4000,
+    AUTH_FLAG_WRITE_SUPERVISION_TIMEOUT           = 0x8000,
 
 } hci_authentication_flags_t;