diff --git a/doc/manual/docs/picts/le_security_flow_control.txt b/doc/manual/docs/picts/le_security_flow_control.txt
index 505db6753..6f7e2b2e4 100644
--- a/doc/manual/docs/picts/le_security_flow_control.txt
+++ b/doc/manual/docs/picts/le_security_flow_control.txt
@@ -1,30 +1,181 @@
 @startuml
-title Mandatory Authentication
+title Reactive Authentication in Central Role
+start
+: App on A connects to B;
+: App on A triggers GATT Client request;
+: GATT Client request sent;
+if (GATT Server returns an ATT_ERROR_INSUFFICIENT_X error?) then (yes)
+  if (ENABLE_GATT_CLIENT_PAIRING defined?) then (yes)
+    if (LTK available?) then (yes)
+      : SM_EVENT_REENCRYPTION_STARTED;
+      : start encryption;
+      if (re-encrypted) then (yes)
+        : SM_EVENT_REENCRYPTION_COMPLETE(ERROR_CODE_SUCCESS);
+        : GATT Client request re-sent;
+        #23DB2B : App receives GATT Response;
+        stop
+      else (no)
+        : SM_EVENT_REENCRYPTION_COMPLETE(error);
+        : delete bonding information;
+      endif
+    endif
+    : SM_EVENT_PAIRING_STARTED;
+    : start pairing;
+    if (pairing success?) then (yes)
+        : SM_EVENT_PAIRING_COMPLETE(ERROR_CODE_SUCCESS);
+        : GATT Client request re-sent;
+        #23DB2B : App receives GATT Response;
+        stop
+    else (no)
+        : SM_EVENT_PAIRING_COMPLETE(error);
+        #FD5B41 : App receives a GATT Client error;
+        stop
+    endif
+  else (no)
+    #FD5B41: ATT_QUERY_COMPLETE(ATT_ERROR_INSUFFICIENT_X);
+    stop
+    note left
+      App can trigger pairing and 
+      repeat the GATT Client request
+    end note
+  endif
+else (no)
+  #23DB2B : App receives GATT Response;
+  stop
+endif
+@enduml
+
+
+
+@startuml
+title Reactive Authentication in Peripheral Role
+start
+: App on B connects to A;
+: App on A triggers GATT Client request;
+: GATT Client request sent;
+if (GATT Server returns an ATT_ERROR_INSUFFICIENT_X error?) then (yes)
+  if (ENABLE_GATT_CLIENT_PAIRING define?) then (yes)
+    if (LTK available?) then (yes)
+      : SM_EVENT_REENCRYPTION_STARTED;
+      : SM on A sends SECURITY REQUEST;
+      : SM on B should encrypt connection if LTK available;
+      if (re-encrypted) then (yes)
+        : SM_EVENT_REENCRYPTION_COMPLETE(ERROR_CODE_SUCCESS);
+        : GATT Client request re-sent;
+        #23DB2B : App receives GATT Response;
+        stop
+      else (no)
+        : SM_EVENT_REENCRYPTION_COMPLETE(error);
+        : delete bonding information;
+      endif
+    endif
+    : SM_EVENT_PAIRING_STARTED;
+    : SM on A sends SECURITY REQUEST;
+    : SM on B should perform pairing sequence;
+    if (pairing success?) then (yes)
+        : SM_EVENT_PAIRING_COMPLETE(ERROR_CODE_SUCCESS);
+        : GATT Client request re-sent;
+        #23DB2B : App receives GATT Response;
+        stop
+    else (no)
+        : SM_EVENT_PAIRING_COMPLETE(error);
+        #FD5B41 : App receives a GATT Client error;
+        stop
+    endif
+  else (no)
+    #FD5B41: ATT_QUERY_COMPLETE(ATT_ERROR_INSUFFICIENT_X);
+    stop
+    note left
+      App can trigger pairing and 
+      repeat the GATT Client request
+    end note
+  endif
+else (no)
+  #23DB2B : App receives GATT Response;
+  stop
+endif
+@enduml
+
+
+
+@startuml
+title Mandatory Authentication in Central Role
 start
 : App calls gatt_client_set_required_security_level (level > 0);
-: A connects to B;
-: App triggers GATT Client request on A;
-
-if (LTK available) then (yes)
+: App on A connects to B;
+: App on A triggers GATT Client request;
+: GATT Client request sent;
+if (LTK available?) then (yes)
+   : SM_EVENT_REENCRYPTION_STARTED;
    : start encryption;
    if (re-encrypted) then (yes)
+     : SM_EVENT_REENCRYPTION_COMPLETE(ERROR_CODE_SUCCESS);
      : GATT Client request sent;
      #23DB2B : App receives GATT Response;
      stop
   else (no)
+     : SM_EVENT_REENCRYPTION_COMPLETE(error);
      #FD5B41: App receives GATT_QUERY_COMPLETE event 
           with ATT_ERROR_BONDING_INFORMATION_MISSING;
      stop
   endif 
-
 else (no)
-   : start pairing;
-
-  if (paired) then (yes)
+  : SM_EVENT_PAIRING_STARTED;
+  : start pairing;
+  if (pairing success?) then (yes)
+     : SM_EVENT_PAIRING_COMPLETE(ERROR_CODE_SUCCESS);
      : GATT Client request sent;
      #23DB2B : App receives GATT Response;
      stop
   else (no)
+    : SM_EVENT_PAIRING_COMPLETE(error);
+    if (level >= 3) then (yes)
+      #FD5B41: App receives GATT_QUERY_COMPLETE event
+          with ATT_ERROR_INSUFFICIENT_AUTHENTICATION;
+      stop
+    else (no)
+      #FD5B41: App receives GATT_QUERY_COMPLETE event 
+          with ATT_ERROR_INSUFFICIENT_ENCRYPTION;  
+      stop
+    endif     
+  endif
+@enduml
+
+
+
+@startuml
+title Mandatory Authentication in Peripheral Role
+start
+: App calls gatt_client_set_required_security_level (level > 0);
+: App on B connects to A;
+: App on A triggers GATT Client request;
+: GATT Client request sent;
+if (LTK available?) then (yes)
+   : SM_EVENT_REENCRYPTION_STARTED;
+   : SM on A sends SECURITY REQUEST;
+   : SM on B should encrypt connection if LTK available;
+   if (re-encrypted) then (yes)
+     : SM_EVENT_REENCRYPTION_COMPLETE(ERROR_CODE_SUCCESS);
+     : GATT Client request sent;
+     #23DB2B : App receives GATT Response;
+     stop
+  else (no)
+     : SM_EVENT_REENCRYPTION_COMPLETE(error);
+     #FD5B41: App receives GATT_QUERY_COMPLETE event 
+          with ATT_ERROR_BONDING_INFORMATION_MISSING;
+     stop
+  endif 
+else (no)
+  : SM_EVENT_PAIRING_STARTED;
+  : SM on A sends SECURITY REQUEST;
+  : SM on B should perform pairing sequence;
+  if (pairing success?) then (yes)
+     : SM_EVENT_PAIRING_COMPLETE(ERROR_CODE_SUCCESS);
+     : GATT Client request sent;
+     #23DB2B : App receives GATT Response;
+     stop
+  else (no)
+    : SM_EVENT_PAIRING_COMPLETE(error);
     if (level >= 3) then (yes)
       #FD5B41: App receives GATT_QUERY_COMPLETE event
           with ATT_ERROR_INSUFFICIENT_AUTHENTICATION;
@@ -39,72 +190,107 @@ else (no)
 
 
 @startuml
-title Proactive Authentication with LTK
+title Proactive Authentication in Central Role
 start
 : A connects to B;
 : App triggers GATT Client request on A;
-if (role) then (Central)
-: start encryption;
-else (Peripheral)
-: send security request;
-endif
-if (re-encrypted) then (yes)
-   : GATT Client request sent;
-   #23DB2B : App receives GATT Response;
-   stop
-else (no) 
-   #FD5B41: App receives GATT_QUERY_COMPLETE event 
+if (LTK available?) then (no)
+  : GATT Client request sent;
+  if (GATT Server returns an ATT_ERROR_INSUFFICIENT_X error?) then (no)
+    #23DB2B : App receives GATT Response;
+    stop
+  else (yes)
+    if (ENABLE_GATT_CLIENT_PAIRING defined?) then (no)
+      #FD5B41: App receives GATT_QUERY_COMPLETE event
+          with ATT_ERROR_INSUFFICIENT_X;
+      stop
+    else (yes)
+      : SM_EVENT_PAIRING_STARTED;
+      : start pairing;
+      if (pairing success?) then (yes)
+          : SM_EVENT_PAIRING_COMPLETE(ERROR_CODE_SUCCESS);
+          : GATT Client request re-sent;
+          #23DB2B : App receives GATT Response;
+          stop
+      else (no)
+          : SM_EVENT_PAIRING_COMPLETE(error);
+         #FD5B41: App receives GATT_QUERY_COMPLETE event 
+              with ATT_ERROR_INSUFFICIENT_X;
+          stop
+      endif
+    endif
+  endif
+else (yes)
+   : SM_EVENT_REENCRYPTION_STARTED;
+   : start encryption;
+   if (re-encrypted) then (yes)
+     : SM_EVENT_REENCRYPTION_COMPLETE(ERROR_CODE_SUCCESS);
+     : GATT Client request sent;
+     #23DB2B : App receives GATT Response;
+     stop
+   else (no)
+     : SM_EVENT_REENCRYPTION_COMPLETE(error);
+     #FD5B41: App receives GATT_QUERY_COMPLETE event 
           with ATT_ERROR_BONDING_INFORMATION_MISSING;
-   stop
-   note right
-      App can delete bonding 
-      information and repeat 
-      the GATT Client request
-   end note
+     stop
+     note right
+       App can delete bonding 
+       information and repeat 
+       the GATT Client request
+    end note
+  endif
 endif
 @enduml
 
 @startuml
-title Reactive Authentication
+title Proactive Authentication in Peripheral Role
 start
 : A connects to B;
 : App triggers GATT Client request on A;
-: GATT Client request sent;
-
-if (GATT Server returns an ATT_ERROR_INSUFFICIENT_X error) then (yes)
-  if (ENABLE_GATT_CLIENT_PAIRING) then (yes)
-    if (LTK available) then (yes)
-      : start encryption;
-      if (re-encrypted) then (yes)
-        : GATT Client request sent;
-        #23DB2B : App receives GATT Response;
-        stop
-      else (no)
-        : delete bonding information;
-      endif
-      
-   endif
-    
-    : start pairing;
-      if (paired) then (yes)
-        : GATT Client request sent;
-        #23DB2B : App receives GATT Response;
-        stop
-      else (no)
-        #FD5B41 : App receives a GATT Client error;
-        stop
-      endif
-  else (no)
-    #FD5B41: App receives GATT_QUERY_COMPLETE event 
-          with ATT_ERROR_INSUFFICIENT_X;
+if (LTK available?) then (no)
+  : GATT Client request sent;
+  if (GATT Server returns an ATT_ERROR_INSUFFICIENT_X error?) then (no)
+    #23DB2B : App receives GATT Response;
     stop
-    note left
-      App can trigger pairing and 
-      repeat the GATT Client request
+  else (yes)
+    if (ENABLE_GATT_CLIENT_PAIRING defined?) then (no)
+      #FD5B41: App receives GATT_QUERY_COMPLETE event
+          with ATT_ERROR_INSUFFICIENT_X;
+      stop
+    else (yes)
+      : SM_EVENT_PAIRING_STARTED;
+      : start pairing;
+      if (pairing success?) then (yes)
+          : SM_EVENT_PAIRING_COMPLETE(ERROR_CODE_SUCCESS);
+          : GATT Client request re-sent;
+          #23DB2B : App receives GATT Response;
+          stop
+      else (no)
+          : SM_EVENT_PAIRING_COMPLETE(error);
+         #FD5B41: App receives GATT_QUERY_COMPLETE event 
+              with ATT_ERROR_INSUFFICIENT_X;
+          stop
+      endif
+    endif
+  endif
+else (yes)
+   : SM_EVENT_REENCRYPTION_STARTED;
+   : start encryption;
+   if (re-encrypted) then (yes)
+     : SM_EVENT_REENCRYPTION_COMPLETE(ERROR_CODE_SUCCESS);
+     : GATT Client request sent;
+     #23DB2B : App receives GATT Response;
+     stop
+   else (no)
+     : SM_EVENT_REENCRYPTION_COMPLETE(error);
+     #FD5B41: App receives GATT_QUERY_COMPLETE event 
+          with ATT_ERROR_BONDING_INFORMATION_MISSING;
+     stop
+     note right
+       App can delete bonding 
+       information and repeat 
+       the GATT Client request
     end note
   endif
-else (no)
-  #23DB2B : App receives GATT Response;
-  stop
 endif
 @enduml
diff --git a/doc/manual/docs/picts/le_security_flow_control_mandatory_authentication.svg b/doc/manual/docs/picts/le_security_flow_control_mandatory_authentication.svg
deleted file mode 100644
index 0aadddae3..000000000
--- a/doc/manual/docs/picts/le_security_flow_control_mandatory_authentication.svg
+++ /dev/null
@@ -1,48 +0,0 @@
-<?xml version="1.0" encoding="UTF-8" standalone="no"?><svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" contentScriptType="application/ecmascript" contentStyleType="text/css" height="531px" preserveAspectRatio="none" style="width:1484px;height:531px;" version="1.1" viewBox="0 0 1484 531" width="1484px" zoomAndPan="magnify"><defs><filter height="300%" id="f18j8gjiqjx3qy" width="300%" x="-1" y="-1"><feGaussianBlur result="blurOut" stdDeviation="2.0"/><feColorMatrix in="blurOut" result="blurOut2" type="matrix" values="0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 .4 0"/><feOffset dx="4.0" dy="4.0" in="blurOut2" result="blurOut3"/><feBlend in="SourceGraphic" in2="blurOut3" mode="normal"/></filter></defs><g><text fill="#000000" font-family="sans-serif" font-size="18" lengthAdjust="spacingAndGlyphs" textLength="243" x="619.5" y="26.708">Mandatory Authentication</text><ellipse cx="600.6875" cy="40.9531" fill="#000000" filter="url(#f18j8gjiqjx3qy)" rx="10" ry="10" style="stroke: none; stroke-width: 1.0;"/><rect fill="#FEFECE" filter="url(#f18j8gjiqjx3qy)" height="33.9688" rx="12.5" ry="12.5" style="stroke: #A80036; stroke-width: 1.5;" width="385" x="408.1875" y="70.9531"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="361" x="422.1875" y="92.0918">App calls gatt_client_set_required_security_level (level &gt; 0)</text><rect fill="#FEFECE" filter="url(#f18j8gjiqjx3qy)" height="33.9688" rx="12.5" ry="12.5" style="stroke: #A80036; stroke-width: 1.5;" width="119" x="541.1875" y="124.9219"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="95" x="555.1875" y="146.0605">A connects to B</text><rect fill="#FEFECE" filter="url(#f18j8gjiqjx3qy)" height="33.9688" rx="12.5" ry="12.5" style="stroke: #A80036; stroke-width: 1.5;" width="254" x="473.6875" y="178.8906"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="230" x="487.6875" y="200.0293">App triggers GATT Client request on A</text><polygon fill="#FEFECE" filter="url(#f18j8gjiqjx3qy)" points="562.6875,232.8594,638.6875,232.8594,650.6875,244.8594,638.6875,256.8594,562.6875,256.8594,550.6875,244.8594,562.6875,232.8594" style="stroke: #A80036; stroke-width: 1.5;"/><text fill="#000000" font-family="sans-serif" font-size="11" lengthAdjust="spacingAndGlyphs" textLength="76" x="562.6875" y="248.6675">LTK available</text><text fill="#000000" font-family="sans-serif" font-size="11" lengthAdjust="spacingAndGlyphs" textLength="21" x="529.6875" y="242.2651">yes</text><text fill="#000000" font-family="sans-serif" font-size="11" lengthAdjust="spacingAndGlyphs" textLength="14" x="650.6875" y="242.2651">no</text><rect fill="#FEFECE" filter="url(#f18j8gjiqjx3qy)" height="33.9688" rx="12.5" ry="12.5" style="stroke: #A80036; stroke-width: 1.5;" width="119" x="198.75" y="266.8594"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="95" x="212.75" y="287.998">start encryption</text><polygon fill="#FEFECE" filter="url(#f18j8gjiqjx3qy)" points="221.25,320.8281,295.25,320.8281,307.25,332.8281,295.25,344.8281,221.25,344.8281,209.25,332.8281,221.25,320.8281" style="stroke: #A80036; stroke-width: 1.5;"/><text fill="#000000" font-family="sans-serif" font-size="11" lengthAdjust="spacingAndGlyphs" textLength="74" x="221.25" y="336.6362">re-encrypted</text><text fill="#000000" font-family="sans-serif" font-size="11" lengthAdjust="spacingAndGlyphs" textLength="21" x="188.25" y="330.2339">yes</text><text fill="#000000" font-family="sans-serif" font-size="11" lengthAdjust="spacingAndGlyphs" textLength="14" x="307.25" y="330.2339">no</text><rect fill="#FEFECE" filter="url(#f18j8gjiqjx3qy)" height="33.9688" rx="12.5" ry="12.5" style="stroke: #A80036; stroke-width: 1.5;" width="173" x="26.5" y="354.8281"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="149" x="40.5" y="375.9668">GATT Client request sent</text><rect fill="#23DB2B" filter="url(#f18j8gjiqjx3qy)" height="33.9688" rx="12.5" ry="12.5" style="stroke: #A80036; stroke-width: 1.5;" width="204" x="11" y="423.7969"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="180" x="25" y="444.9355">App receives GATT Response</text><ellipse cx="113" cy="503.7656" fill="#FFFFFF" filter="url(#f18j8gjiqjx3qy)" rx="11" ry="11" style="stroke: #000000; stroke-width: 1.0;"/><ellipse cx="113" cy="503.7656" fill="#000000" rx="6" ry="6" style="stroke: #7F7F7F; stroke-width: 1.0;"/><rect fill="#FD5B41" filter="url(#f18j8gjiqjx3qy)" height="47.9375" rx="12.5" ry="12.5" style="stroke: #A80036; stroke-width: 1.5;" width="337" x="235" y="354.8281"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="267" x="249" y="375.9668">App receives GATT_QUERY_COMPLETE event</text><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="297" x="265" y="389.9355">with ATT_ERROR_BONDING_INFORMATION_MISSING</text><ellipse cx="403.5" cy="448.7656" fill="#FFFFFF" filter="url(#f18j8gjiqjx3qy)" rx="11" ry="11" style="stroke: #000000; stroke-width: 1.0;"/><ellipse cx="403.5" cy="448.7656" fill="#000000" rx="6" ry="6" style="stroke: #7F7F7F; stroke-width: 1.0;"/><rect fill="#FEFECE" filter="url(#f18j8gjiqjx3qy)" height="33.9688" rx="12.5" ry="12.5" style="stroke: #A80036; stroke-width: 1.5;" width="96" x="875.125" y="266.8594"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="72" x="889.125" y="287.998">start pairing</text><polygon fill="#FEFECE" filter="url(#f18j8gjiqjx3qy)" points="905.125,320.8281,941.125,320.8281,953.125,332.8281,941.125,344.8281,905.125,344.8281,893.125,332.8281,905.125,320.8281" style="stroke: #A80036; stroke-width: 1.5;"/><text fill="#000000" font-family="sans-serif" font-size="11" lengthAdjust="spacingAndGlyphs" textLength="36" x="905.125" y="336.6362">paired</text><text fill="#000000" font-family="sans-serif" font-size="11" lengthAdjust="spacingAndGlyphs" textLength="21" x="872.125" y="330.2339">yes</text><text fill="#000000" font-family="sans-serif" font-size="11" lengthAdjust="spacingAndGlyphs" textLength="14" x="953.125" y="330.2339">no</text><rect fill="#FEFECE" filter="url(#f18j8gjiqjx3qy)" height="33.9688" rx="12.5" ry="12.5" style="stroke: #A80036; stroke-width: 1.5;" width="173" x="627.5" y="354.8281"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="149" x="641.5" y="375.9668">GATT Client request sent</text><rect fill="#23DB2B" filter="url(#f18j8gjiqjx3qy)" height="33.9688" rx="12.5" ry="12.5" style="stroke: #A80036; stroke-width: 1.5;" width="204" x="612" y="423.7969"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="180" x="626" y="444.9355">App receives GATT Response</text><ellipse cx="714" cy="503.7656" fill="#FFFFFF" filter="url(#f18j8gjiqjx3qy)" rx="11" ry="11" style="stroke: #000000; stroke-width: 1.0;"/><ellipse cx="714" cy="503.7656" fill="#000000" rx="6" ry="6" style="stroke: #7F7F7F; stroke-width: 1.0;"/><polygon fill="#FEFECE" filter="url(#f18j8gjiqjx3qy)" points="1121.25,354.8281,1183.25,354.8281,1195.25,366.8281,1183.25,378.8281,1121.25,378.8281,1109.25,366.8281,1121.25,354.8281" style="stroke: #A80036; stroke-width: 1.5;"/><text fill="#000000" font-family="sans-serif" font-size="11" lengthAdjust="spacingAndGlyphs" textLength="62" x="1121.25" y="370.6362">level &gt;= 3</text><text fill="#000000" font-family="sans-serif" font-size="11" lengthAdjust="spacingAndGlyphs" textLength="21" x="1088.25" y="364.2339">yes</text><text fill="#000000" font-family="sans-serif" font-size="11" lengthAdjust="spacingAndGlyphs" textLength="14" x="1195.25" y="364.2339">no</text><rect fill="#FD5B41" filter="url(#f18j8gjiqjx3qy)" height="47.9375" rx="12.5" ry="12.5" style="stroke: #A80036; stroke-width: 1.5;" width="322" x="826" y="388.8281"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="267" x="840" y="409.9668">App receives GATT_QUERY_COMPLETE event</text><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="286" x="852" y="423.9355">with ATT_ERROR_INSUFFICIENT_AUTHENTICATION</text><ellipse cx="987" cy="482.7656" fill="#FFFFFF" filter="url(#f18j8gjiqjx3qy)" rx="11" ry="11" style="stroke: #000000; stroke-width: 1.0;"/><ellipse cx="987" cy="482.7656" fill="#000000" rx="6" ry="6" style="stroke: #7F7F7F; stroke-width: 1.0;"/><rect fill="#FD5B41" filter="url(#f18j8gjiqjx3qy)" height="47.9375" rx="12.5" ry="12.5" style="stroke: #A80036; stroke-width: 1.5;" width="299" x="1168" y="388.8281"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="267" x="1182" y="409.9668">App receives GATT_QUERY_COMPLETE event</text><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="259" x="1194" y="423.9355">with ATT_ERROR_INSUFFICIENT_ENCRYPTION;</text><ellipse cx="1317.5" cy="482.7656" fill="#FFFFFF" filter="url(#f18j8gjiqjx3qy)" rx="11" ry="11" style="stroke: #000000; stroke-width: 1.0;"/><ellipse cx="1317.5" cy="482.7656" fill="#000000" rx="6" ry="6" style="stroke: #7F7F7F; stroke-width: 1.0;"/><line style="stroke: #A80036; stroke-width: 1.5;" x1="600.6875" x2="600.6875" y1="50.9531" y2="70.9531"/><polygon fill="#A80036" points="596.6875,60.9531,600.6875,70.9531,604.6875,60.9531,600.6875,64.9531" style="stroke: #A80036; stroke-width: 1.0;"/><line style="stroke: #A80036; stroke-width: 1.5;" x1="600.6875" x2="600.6875" y1="104.9219" y2="124.9219"/><polygon fill="#A80036" points="596.6875,114.9219,600.6875,124.9219,604.6875,114.9219,600.6875,118.9219" style="stroke: #A80036; stroke-width: 1.0;"/><line style="stroke: #A80036; stroke-width: 1.5;" x1="600.6875" x2="600.6875" y1="158.8906" y2="178.8906"/><polygon fill="#A80036" points="596.6875,168.8906,600.6875,178.8906,604.6875,168.8906,600.6875,172.8906" style="stroke: #A80036; stroke-width: 1.0;"/><line style="stroke: #A80036; stroke-width: 1.5;" x1="113" x2="113" y1="388.7969" y2="423.7969"/><polygon fill="#A80036" points="109,413.7969,113,423.7969,117,413.7969,113,417.7969" style="stroke: #A80036; stroke-width: 1.0;"/><line style="stroke: #A80036; stroke-width: 1.5;" x1="113" x2="113" y1="457.7656" y2="492.7656"/><polygon fill="#A80036" points="109,482.7656,113,492.7656,117,482.7656,113,486.7656" style="stroke: #A80036; stroke-width: 1.0;"/><line style="stroke: #A80036; stroke-width: 1.5;" x1="403.5" x2="403.5" y1="402.7656" y2="437.7656"/><polygon fill="#A80036" points="399.5,427.7656,403.5,437.7656,407.5,427.7656,403.5,431.7656" style="stroke: #A80036; stroke-width: 1.0;"/><line style="stroke: #A80036; stroke-width: 1.5;" x1="209.25" x2="113" y1="332.8281" y2="332.8281"/><line style="stroke: #A80036; stroke-width: 1.5;" x1="113" x2="113" y1="332.8281" y2="354.8281"/><polygon fill="#A80036" points="109,344.8281,113,354.8281,117,344.8281,113,348.8281" style="stroke: #A80036; stroke-width: 1.0;"/><line style="stroke: #A80036; stroke-width: 1.5;" x1="307.25" x2="403.5" y1="332.8281" y2="332.8281"/><line style="stroke: #A80036; stroke-width: 1.5;" x1="403.5" x2="403.5" y1="332.8281" y2="354.8281"/><polygon fill="#A80036" points="399.5,344.8281,403.5,354.8281,407.5,344.8281,403.5,348.8281" style="stroke: #A80036; stroke-width: 1.0;"/><line style="stroke: #A80036; stroke-width: 1.5;" x1="258.25" x2="258.25" y1="300.8281" y2="320.8281"/><polygon fill="#A80036" points="254.25,310.8281,258.25,320.8281,262.25,310.8281,258.25,314.8281" style="stroke: #A80036; stroke-width: 1.0;"/><line style="stroke: #A80036; stroke-width: 1.5;" x1="714" x2="714" y1="388.7969" y2="423.7969"/><polygon fill="#A80036" points="710,413.7969,714,423.7969,718,413.7969,714,417.7969" style="stroke: #A80036; stroke-width: 1.0;"/><line style="stroke: #A80036; stroke-width: 1.5;" x1="714" x2="714" y1="457.7656" y2="492.7656"/><polygon fill="#A80036" points="710,482.7656,714,492.7656,718,482.7656,714,486.7656" style="stroke: #A80036; stroke-width: 1.0;"/><line style="stroke: #A80036; stroke-width: 1.5;" x1="987" x2="987" y1="436.7656" y2="471.7656"/><polygon fill="#A80036" points="983,461.7656,987,471.7656,991,461.7656,987,465.7656" style="stroke: #A80036; stroke-width: 1.0;"/><line style="stroke: #A80036; stroke-width: 1.5;" x1="1317.5" x2="1317.5" y1="436.7656" y2="471.7656"/><polygon fill="#A80036" points="1313.5,461.7656,1317.5,471.7656,1321.5,461.7656,1317.5,465.7656" style="stroke: #A80036; stroke-width: 1.0;"/><line style="stroke: #A80036; stroke-width: 1.5;" x1="1109.25" x2="987" y1="366.8281" y2="366.8281"/><line style="stroke: #A80036; stroke-width: 1.5;" x1="987" x2="987" y1="366.8281" y2="388.8281"/><polygon fill="#A80036" points="983,378.8281,987,388.8281,991,378.8281,987,382.8281" style="stroke: #A80036; stroke-width: 1.0;"/><line style="stroke: #A80036; stroke-width: 1.5;" x1="1195.25" x2="1317.5" y1="366.8281" y2="366.8281"/><line style="stroke: #A80036; stroke-width: 1.5;" x1="1317.5" x2="1317.5" y1="366.8281" y2="388.8281"/><polygon fill="#A80036" points="1313.5,378.8281,1317.5,388.8281,1321.5,378.8281,1317.5,382.8281" style="stroke: #A80036; stroke-width: 1.0;"/><line style="stroke: #A80036; stroke-width: 1.5;" x1="893.125" x2="714" y1="332.8281" y2="332.8281"/><line style="stroke: #A80036; stroke-width: 1.5;" x1="714" x2="714" y1="332.8281" y2="354.8281"/><polygon fill="#A80036" points="710,344.8281,714,354.8281,718,344.8281,714,348.8281" style="stroke: #A80036; stroke-width: 1.0;"/><line style="stroke: #A80036; stroke-width: 1.5;" x1="953.125" x2="1152.25" y1="332.8281" y2="332.8281"/><line style="stroke: #A80036; stroke-width: 1.5;" x1="1152.25" x2="1152.25" y1="332.8281" y2="354.8281"/><polygon fill="#A80036" points="1148.25,344.8281,1152.25,354.8281,1156.25,344.8281,1152.25,348.8281" style="stroke: #A80036; stroke-width: 1.0;"/><line style="stroke: #A80036; stroke-width: 1.5;" x1="923.125" x2="923.125" y1="300.8281" y2="320.8281"/><polygon fill="#A80036" points="919.125,310.8281,923.125,320.8281,927.125,310.8281,923.125,314.8281" style="stroke: #A80036; stroke-width: 1.0;"/><line style="stroke: #A80036; stroke-width: 1.5;" x1="550.6875" x2="258.25" y1="244.8594" y2="244.8594"/><line style="stroke: #A80036; stroke-width: 1.5;" x1="258.25" x2="258.25" y1="244.8594" y2="266.8594"/><polygon fill="#A80036" points="254.25,256.8594,258.25,266.8594,262.25,256.8594,258.25,260.8594" style="stroke: #A80036; stroke-width: 1.0;"/><line style="stroke: #A80036; stroke-width: 1.5;" x1="650.6875" x2="923.125" y1="244.8594" y2="244.8594"/><line style="stroke: #A80036; stroke-width: 1.5;" x1="923.125" x2="923.125" y1="244.8594" y2="266.8594"/><polygon fill="#A80036" points="919.125,256.8594,923.125,266.8594,927.125,256.8594,923.125,260.8594" style="stroke: #A80036; stroke-width: 1.0;"/><line style="stroke: #A80036; stroke-width: 1.5;" x1="600.6875" x2="600.6875" y1="212.8594" y2="232.8594"/><polygon fill="#A80036" points="596.6875,222.8594,600.6875,232.8594,604.6875,222.8594,600.6875,226.8594" style="stroke: #A80036; stroke-width: 1.0;"/><!--MD5=[8855ab523bc20e0091180bd769a52ee2]
-@startuml
-title Mandatory Authentication
-start
-: App calls gatt_client_set_required_security_level (level > 0);
-: A connects to B;
-: App triggers GATT Client request on A;
-
-if (LTK available) then (yes)
-   : start encryption;
-   if (re-encrypted) then (yes)
-     : GATT Client request sent;
-     #23DB2B : App receives GATT Response;
-     stop
-  else (no)
-     #FD5B41: App receives GATT_QUERY_COMPLETE event 
-          with ATT_ERROR_BONDING_INFORMATION_MISSING;
-     stop
-  endif 
-
-else (no)
-   : start pairing;
-
-  if (paired) then (yes)
-     : GATT Client request sent;
-     #23DB2B : App receives GATT Response;
-     stop
-  else (no)
-    if (level >= 3) then (yes)
-      #FD5B41: App receives GATT_QUERY_COMPLETE event
-          with ATT_ERROR_INSUFFICIENT_AUTHENTICATION;
-      stop
-    else (no)
-      #FD5B41: App receives GATT_QUERY_COMPLETE event 
-          with ATT_ERROR_INSUFFICIENT_ENCRYPTION;  
-      stop
-    endif     
-  endif
-@enduml
-
-PlantUML version 1.2020.20(Sat Nov 21 10:02:45 UTC 2020)
-(GPL source distribution)
-Java Runtime: Java(TM) SE Runtime Environment
-JVM: Java HotSpot(TM) 64-Bit Server VM
-Default Encoding: UTF-8
-Language: en
-Country: US
---></g></svg>
\ No newline at end of file
diff --git a/doc/manual/docs/picts/le_security_flow_control_mandatory_authentication_central.svg b/doc/manual/docs/picts/le_security_flow_control_mandatory_authentication_central.svg
new file mode 100644
index 000000000..e6600d0b0
--- /dev/null
+++ b/doc/manual/docs/picts/le_security_flow_control_mandatory_authentication_central.svg
@@ -0,0 +1,52 @@
+<?xml version="1.0" encoding="UTF-8" standalone="no"?><svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" contentScriptType="application/ecmascript" contentStyleType="text/css" height="693px" preserveAspectRatio="none" style="width:1841px;height:693px;" version="1.1" viewBox="0 0 1841 693" width="1841px" zoomAndPan="magnify"><defs><filter height="300%" id="f14als4nudxgwt" width="300%" x="-1" y="-1"><feGaussianBlur result="blurOut" stdDeviation="2.0"/><feColorMatrix in="blurOut" result="blurOut2" type="matrix" values="0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 .4 0"/><feOffset dx="4.0" dy="4.0" in="blurOut2" result="blurOut3"/><feBlend in="SourceGraphic" in2="blurOut3" mode="normal"/></filter></defs><g><text fill="#000000" font-family="sans-serif" font-size="18" lengthAdjust="spacingAndGlyphs" textLength="386" x="726.5" y="26.708">Mandatory Authentication in Central Role</text><ellipse cx="821.5625" cy="40.9531" fill="#000000" filter="url(#f14als4nudxgwt)" rx="10" ry="10" style="stroke:none;stroke-width:1.0;"/><rect fill="#FEFECE" filter="url(#f14als4nudxgwt)" height="33.9688" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="385" x="629.0625" y="70.9531"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="361" x="643.0625" y="92.0918">App calls gatt_client_set_required_security_level (level &gt; 0)</text><rect fill="#FEFECE" filter="url(#f14als4nudxgwt)" height="33.9688" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="166" x="738.5625" y="124.9219"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="142" x="752.5625" y="146.0605">App on A connects to B</text><rect fill="#FEFECE" filter="url(#f14als4nudxgwt)" height="33.9688" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="254" x="694.5625" y="178.8906"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="230" x="708.5625" y="200.0293">App on A triggers GATT Client request</text><rect fill="#FEFECE" filter="url(#f14als4nudxgwt)" height="33.9688" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="173" x="735.0625" y="232.8594"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="149" x="749.0625" y="253.998">GATT Client request sent</text><polygon fill="#FEFECE" filter="url(#f14als4nudxgwt)" points="780.5625,286.8281,862.5625,286.8281,874.5625,298.8281,862.5625,310.8281,780.5625,310.8281,768.5625,298.8281,780.5625,286.8281" style="stroke:#A80036;stroke-width:1.5;"/><text fill="#000000" font-family="sans-serif" font-size="11" lengthAdjust="spacingAndGlyphs" textLength="82" x="780.5625" y="302.6362">LTK available?</text><text fill="#000000" font-family="sans-serif" font-size="11" lengthAdjust="spacingAndGlyphs" textLength="21" x="747.5625" y="296.2339">yes</text><text fill="#000000" font-family="sans-serif" font-size="11" lengthAdjust="spacingAndGlyphs" textLength="14" x="874.5625" y="296.2339">no</text><rect fill="#FEFECE" filter="url(#f14als4nudxgwt)" height="33.9688" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="235" x="282.5" y="320.8281"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="211" x="296.5" y="341.9668">SM_EVENT_REENCRYPTION_STARTED</text><rect fill="#FEFECE" filter="url(#f14als4nudxgwt)" height="33.9688" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="119" x="340.5" y="374.7969"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="95" x="354.5" y="395.9355">start encryption</text><polygon fill="#FEFECE" filter="url(#f14als4nudxgwt)" points="363,428.7656,437,428.7656,449,440.7656,437,452.7656,363,452.7656,351,440.7656,363,428.7656" style="stroke:#A80036;stroke-width:1.5;"/><text fill="#000000" font-family="sans-serif" font-size="11" lengthAdjust="spacingAndGlyphs" textLength="74" x="363" y="444.5737">re-encrypted</text><text fill="#000000" font-family="sans-serif" font-size="11" lengthAdjust="spacingAndGlyphs" textLength="21" x="330" y="438.1714">yes</text><text fill="#000000" font-family="sans-serif" font-size="11" lengthAdjust="spacingAndGlyphs" textLength="14" x="449" y="438.1714">no</text><rect fill="#FEFECE" filter="url(#f14als4nudxgwt)" height="33.9688" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="393" x="11" y="462.7656"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="369" x="25" y="483.9043">SM_EVENT_REENCRYPTION_COMPLETE(ERROR_CODE_SUCCESS)</text><rect fill="#FEFECE" filter="url(#f14als4nudxgwt)" height="33.9688" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="173" x="121" y="516.7344"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="149" x="135" y="537.873">GATT Client request sent</text><rect fill="#23DB2B" filter="url(#f14als4nudxgwt)" height="33.9688" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="204" x="105.5" y="585.7031"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="180" x="119.5" y="606.8418">App receives GATT Response</text><ellipse cx="207.5" cy="665.6719" fill="#FFFFFF" filter="url(#f14als4nudxgwt)" rx="11" ry="11" style="stroke:#000000;stroke-width:1.0;"/><ellipse cx="207.5" cy="665.6719" fill="#000000" rx="6" ry="6" style="stroke:#7F7F7F;stroke-width:1.0;"/><rect fill="#FEFECE" filter="url(#f14als4nudxgwt)" height="33.9688" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="284" x="450.5" y="462.7656"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="260" x="464.5" y="483.9043">SM_EVENT_REENCRYPTION_COMPLETE(error)</text><rect fill="#FD5B41" filter="url(#f14als4nudxgwt)" height="47.9375" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="337" x="424" y="516.7344"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="267" x="438" y="537.873">App receives GATT_QUERY_COMPLETE event</text><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="297" x="454" y="551.8418">with ATT_ERROR_BONDING_INFORMATION_MISSING</text><ellipse cx="592.5" cy="610.6719" fill="#FFFFFF" filter="url(#f14als4nudxgwt)" rx="11" ry="11" style="stroke:#000000;stroke-width:1.0;"/><ellipse cx="592.5" cy="610.6719" fill="#000000" rx="6" ry="6" style="stroke:#7F7F7F;stroke-width:1.0;"/><rect fill="#FEFECE" filter="url(#f14als4nudxgwt)" height="33.9688" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="194" x="1146.125" y="320.8281"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="170" x="1160.125" y="341.9668">SM_EVENT_PAIRING_STARTED</text><rect fill="#FEFECE" filter="url(#f14als4nudxgwt)" height="33.9688" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="96" x="1195.125" y="374.7969"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="72" x="1209.125" y="395.9355">start pairing</text><polygon fill="#FEFECE" filter="url(#f14als4nudxgwt)" points="1196.625,428.7656,1289.625,428.7656,1301.625,440.7656,1289.625,452.7656,1196.625,452.7656,1184.625,440.7656,1196.625,428.7656" style="stroke:#A80036;stroke-width:1.5;"/><text fill="#000000" font-family="sans-serif" font-size="11" lengthAdjust="spacingAndGlyphs" textLength="93" x="1196.625" y="444.5737">pairing success?</text><text fill="#000000" font-family="sans-serif" font-size="11" lengthAdjust="spacingAndGlyphs" textLength="21" x="1163.625" y="438.1714">yes</text><text fill="#000000" font-family="sans-serif" font-size="11" lengthAdjust="spacingAndGlyphs" textLength="14" x="1301.625" y="438.1714">no</text><rect fill="#FEFECE" filter="url(#f14als4nudxgwt)" height="33.9688" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="352" x="801" y="462.7656"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="328" x="815" y="483.9043">SM_EVENT_PAIRING_COMPLETE(ERROR_CODE_SUCCESS)</text><rect fill="#FEFECE" filter="url(#f14als4nudxgwt)" height="33.9688" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="173" x="890.5" y="516.7344"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="149" x="904.5" y="537.873">GATT Client request sent</text><rect fill="#23DB2B" filter="url(#f14als4nudxgwt)" height="33.9688" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="204" x="875" y="585.7031"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="180" x="889" y="606.8418">App receives GATT Response</text><ellipse cx="977" cy="665.6719" fill="#FFFFFF" filter="url(#f14als4nudxgwt)" rx="11" ry="11" style="stroke:#000000;stroke-width:1.0;"/><ellipse cx="977" cy="665.6719" fill="#000000" rx="6" ry="6" style="stroke:#7F7F7F;stroke-width:1.0;"/><rect fill="#FEFECE" filter="url(#f14als4nudxgwt)" height="33.9688" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="243" x="1387.75" y="462.7656"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="219" x="1401.75" y="483.9043">SM_EVENT_PAIRING_COMPLETE(error)</text><polygon fill="#FEFECE" filter="url(#f14als4nudxgwt)" points="1478.25,516.7344,1540.25,516.7344,1552.25,528.7344,1540.25,540.7344,1478.25,540.7344,1466.25,528.7344,1478.25,516.7344" style="stroke:#A80036;stroke-width:1.5;"/><text fill="#000000" font-family="sans-serif" font-size="11" lengthAdjust="spacingAndGlyphs" textLength="62" x="1478.25" y="532.5425">level &gt;= 3</text><text fill="#000000" font-family="sans-serif" font-size="11" lengthAdjust="spacingAndGlyphs" textLength="21" x="1445.25" y="526.1401">yes</text><text fill="#000000" font-family="sans-serif" font-size="11" lengthAdjust="spacingAndGlyphs" textLength="14" x="1552.25" y="526.1401">no</text><rect fill="#FD5B41" filter="url(#f14als4nudxgwt)" height="47.9375" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="322" x="1183" y="550.7344"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="267" x="1197" y="571.873">App receives GATT_QUERY_COMPLETE event</text><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="286" x="1209" y="585.8418">with ATT_ERROR_INSUFFICIENT_AUTHENTICATION</text><ellipse cx="1344" cy="644.6719" fill="#FFFFFF" filter="url(#f14als4nudxgwt)" rx="11" ry="11" style="stroke:#000000;stroke-width:1.0;"/><ellipse cx="1344" cy="644.6719" fill="#000000" rx="6" ry="6" style="stroke:#7F7F7F;stroke-width:1.0;"/><rect fill="#FD5B41" filter="url(#f14als4nudxgwt)" height="47.9375" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="299" x="1525" y="550.7344"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="267" x="1539" y="571.873">App receives GATT_QUERY_COMPLETE event</text><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="259" x="1551" y="585.8418">with ATT_ERROR_INSUFFICIENT_ENCRYPTION;</text><ellipse cx="1674.5" cy="644.6719" fill="#FFFFFF" filter="url(#f14als4nudxgwt)" rx="11" ry="11" style="stroke:#000000;stroke-width:1.0;"/><ellipse cx="1674.5" cy="644.6719" fill="#000000" rx="6" ry="6" style="stroke:#7F7F7F;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="821.5625" x2="821.5625" y1="50.9531" y2="70.9531"/><polygon fill="#A80036" points="817.5625,60.9531,821.5625,70.9531,825.5625,60.9531,821.5625,64.9531" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="821.5625" x2="821.5625" y1="104.9219" y2="124.9219"/><polygon fill="#A80036" points="817.5625,114.9219,821.5625,124.9219,825.5625,114.9219,821.5625,118.9219" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="821.5625" x2="821.5625" y1="158.8906" y2="178.8906"/><polygon fill="#A80036" points="817.5625,168.8906,821.5625,178.8906,825.5625,168.8906,821.5625,172.8906" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="821.5625" x2="821.5625" y1="212.8594" y2="232.8594"/><polygon fill="#A80036" points="817.5625,222.8594,821.5625,232.8594,825.5625,222.8594,821.5625,226.8594" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="400" x2="400" y1="354.7969" y2="374.7969"/><polygon fill="#A80036" points="396,364.7969,400,374.7969,404,364.7969,400,368.7969" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="207.5" x2="207.5" y1="496.7344" y2="516.7344"/><polygon fill="#A80036" points="203.5,506.7344,207.5,516.7344,211.5,506.7344,207.5,510.7344" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="207.5" x2="207.5" y1="550.7031" y2="585.7031"/><polygon fill="#A80036" points="203.5,575.7031,207.5,585.7031,211.5,575.7031,207.5,579.7031" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="207.5" x2="207.5" y1="619.6719" y2="654.6719"/><polygon fill="#A80036" points="203.5,644.6719,207.5,654.6719,211.5,644.6719,207.5,648.6719" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="592.5" x2="592.5" y1="496.7344" y2="516.7344"/><polygon fill="#A80036" points="588.5,506.7344,592.5,516.7344,596.5,506.7344,592.5,510.7344" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="592.5" x2="592.5" y1="564.6719" y2="599.6719"/><polygon fill="#A80036" points="588.5,589.6719,592.5,599.6719,596.5,589.6719,592.5,593.6719" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="351" x2="207.5" y1="440.7656" y2="440.7656"/><line style="stroke:#A80036;stroke-width:1.5;" x1="207.5" x2="207.5" y1="440.7656" y2="462.7656"/><polygon fill="#A80036" points="203.5,452.7656,207.5,462.7656,211.5,452.7656,207.5,456.7656" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="449" x2="592.5" y1="440.7656" y2="440.7656"/><line style="stroke:#A80036;stroke-width:1.5;" x1="592.5" x2="592.5" y1="440.7656" y2="462.7656"/><polygon fill="#A80036" points="588.5,452.7656,592.5,462.7656,596.5,452.7656,592.5,456.7656" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="400" x2="400" y1="408.7656" y2="428.7656"/><polygon fill="#A80036" points="396,418.7656,400,428.7656,404,418.7656,400,422.7656" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="1243.125" x2="1243.125" y1="354.7969" y2="374.7969"/><polygon fill="#A80036" points="1239.125,364.7969,1243.125,374.7969,1247.125,364.7969,1243.125,368.7969" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="977" x2="977" y1="496.7344" y2="516.7344"/><polygon fill="#A80036" points="973,506.7344,977,516.7344,981,506.7344,977,510.7344" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="977" x2="977" y1="550.7031" y2="585.7031"/><polygon fill="#A80036" points="973,575.7031,977,585.7031,981,575.7031,977,579.7031" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="977" x2="977" y1="619.6719" y2="654.6719"/><polygon fill="#A80036" points="973,644.6719,977,654.6719,981,644.6719,977,648.6719" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="1344" x2="1344" y1="598.6719" y2="633.6719"/><polygon fill="#A80036" points="1340,623.6719,1344,633.6719,1348,623.6719,1344,627.6719" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="1674.5" x2="1674.5" y1="598.6719" y2="633.6719"/><polygon fill="#A80036" points="1670.5,623.6719,1674.5,633.6719,1678.5,623.6719,1674.5,627.6719" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="1466.25" x2="1344" y1="528.7344" y2="528.7344"/><line style="stroke:#A80036;stroke-width:1.5;" x1="1344" x2="1344" y1="528.7344" y2="550.7344"/><polygon fill="#A80036" points="1340,540.7344,1344,550.7344,1348,540.7344,1344,544.7344" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="1552.25" x2="1674.5" y1="528.7344" y2="528.7344"/><line style="stroke:#A80036;stroke-width:1.5;" x1="1674.5" x2="1674.5" y1="528.7344" y2="550.7344"/><polygon fill="#A80036" points="1670.5,540.7344,1674.5,550.7344,1678.5,540.7344,1674.5,544.7344" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="1509.25" x2="1509.25" y1="496.7344" y2="516.7344"/><polygon fill="#A80036" points="1505.25,506.7344,1509.25,516.7344,1513.25,506.7344,1509.25,510.7344" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="1184.625" x2="977" y1="440.7656" y2="440.7656"/><line style="stroke:#A80036;stroke-width:1.5;" x1="977" x2="977" y1="440.7656" y2="462.7656"/><polygon fill="#A80036" points="973,452.7656,977,462.7656,981,452.7656,977,456.7656" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="1301.625" x2="1509.25" y1="440.7656" y2="440.7656"/><line style="stroke:#A80036;stroke-width:1.5;" x1="1509.25" x2="1509.25" y1="440.7656" y2="462.7656"/><polygon fill="#A80036" points="1505.25,452.7656,1509.25,462.7656,1513.25,452.7656,1509.25,456.7656" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="1243.125" x2="1243.125" y1="408.7656" y2="428.7656"/><polygon fill="#A80036" points="1239.125,418.7656,1243.125,428.7656,1247.125,418.7656,1243.125,422.7656" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="768.5625" x2="400" y1="298.8281" y2="298.8281"/><line style="stroke:#A80036;stroke-width:1.5;" x1="400" x2="400" y1="298.8281" y2="320.8281"/><polygon fill="#A80036" points="396,310.8281,400,320.8281,404,310.8281,400,314.8281" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="874.5625" x2="1243.125" y1="298.8281" y2="298.8281"/><line style="stroke:#A80036;stroke-width:1.5;" x1="1243.125" x2="1243.125" y1="298.8281" y2="320.8281"/><polygon fill="#A80036" points="1239.125,310.8281,1243.125,320.8281,1247.125,310.8281,1243.125,314.8281" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="821.5625" x2="821.5625" y1="266.8281" y2="286.8281"/><polygon fill="#A80036" points="817.5625,276.8281,821.5625,286.8281,825.5625,276.8281,821.5625,280.8281" style="stroke:#A80036;stroke-width:1.0;"/><!--MD5=[a6b8d5a73938eed40047714615eda317]
+@startuml
+title Mandatory Authentication in Central Role
+start
+: App calls gatt_client_set_required_security_level (level > 0);
+: App on A connects to B;
+: App on A triggers GATT Client request;
+: GATT Client request sent;
+if (LTK available?) then (yes)
+   : SM_EVENT_REENCRYPTION_STARTED;
+   : start encryption;
+   if (re-encrypted) then (yes)
+     : SM_EVENT_REENCRYPTION_COMPLETE(ERROR_CODE_SUCCESS);
+     : GATT Client request sent;
+     #23DB2B : App receives GATT Response;
+     stop
+  else (no)
+     : SM_EVENT_REENCRYPTION_COMPLETE(error);
+     #FD5B41: App receives GATT_QUERY_COMPLETE event 
+          with ATT_ERROR_BONDING_INFORMATION_MISSING;
+     stop
+  endif 
+else (no)
+  : SM_EVENT_PAIRING_STARTED;
+  : start pairing;
+  if (pairing success?) then (yes)
+     : SM_EVENT_PAIRING_COMPLETE(ERROR_CODE_SUCCESS);
+     : GATT Client request sent;
+     #23DB2B : App receives GATT Response;
+     stop
+  else (no)
+    : SM_EVENT_PAIRING_COMPLETE(error);
+    if (level >= 3) then (yes)
+      #FD5B41: App receives GATT_QUERY_COMPLETE event
+          with ATT_ERROR_INSUFFICIENT_AUTHENTICATION;
+      stop
+    else (no)
+      #FD5B41: App receives GATT_QUERY_COMPLETE event 
+          with ATT_ERROR_INSUFFICIENT_ENCRYPTION;  
+      stop
+    endif     
+  endif
+@enduml
+
+PlantUML version 1.2020.22beta2(Unknown compile time)
+(GPL source distribution)
+Java Runtime: Java(TM) SE Runtime Environment
+JVM: Java HotSpot(TM) 64-Bit Server VM
+Default Encoding: UTF-8
+Language: en
+Country: US
+--></g></svg>
\ No newline at end of file
diff --git a/doc/manual/docs/picts/le_security_flow_control_mandatory_authentication_peripheral.svg b/doc/manual/docs/picts/le_security_flow_control_mandatory_authentication_peripheral.svg
new file mode 100644
index 000000000..12425b92a
--- /dev/null
+++ b/doc/manual/docs/picts/le_security_flow_control_mandatory_authentication_peripheral.svg
@@ -0,0 +1,54 @@
+<?xml version="1.0" encoding="UTF-8" standalone="no"?><svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" contentScriptType="application/ecmascript" contentStyleType="text/css" height="747px" preserveAspectRatio="none" style="width:1841px;height:747px;" version="1.1" viewBox="0 0 1841 747" width="1841px" zoomAndPan="magnify"><defs><filter height="300%" id="ficsatr1k5q0d" width="300%" x="-1" y="-1"><feGaussianBlur result="blurOut" stdDeviation="2.0"/><feColorMatrix in="blurOut" result="blurOut2" type="matrix" values="0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 .4 0"/><feOffset dx="4.0" dy="4.0" in="blurOut2" result="blurOut3"/><feBlend in="SourceGraphic" in2="blurOut3" mode="normal"/></filter></defs><g><text fill="#000000" font-family="sans-serif" font-size="18" lengthAdjust="spacingAndGlyphs" textLength="414" x="712.5" y="26.708">Mandatory Authentication in Peripheral Role</text><ellipse cx="821.5625" cy="40.9531" fill="#000000" filter="url(#ficsatr1k5q0d)" rx="10" ry="10" style="stroke:none;stroke-width:1.0;"/><rect fill="#FEFECE" filter="url(#ficsatr1k5q0d)" height="33.9688" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="385" x="629.0625" y="70.9531"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="361" x="643.0625" y="92.0918">App calls gatt_client_set_required_security_level (level &gt; 0)</text><rect fill="#FEFECE" filter="url(#ficsatr1k5q0d)" height="33.9688" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="166" x="738.5625" y="124.9219"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="142" x="752.5625" y="146.0605">App on B connects to A</text><rect fill="#FEFECE" filter="url(#ficsatr1k5q0d)" height="33.9688" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="254" x="694.5625" y="178.8906"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="230" x="708.5625" y="200.0293">App on A triggers GATT Client request</text><rect fill="#FEFECE" filter="url(#ficsatr1k5q0d)" height="33.9688" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="173" x="735.0625" y="232.8594"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="149" x="749.0625" y="253.998">GATT Client request sent</text><polygon fill="#FEFECE" filter="url(#ficsatr1k5q0d)" points="780.5625,286.8281,862.5625,286.8281,874.5625,298.8281,862.5625,310.8281,780.5625,310.8281,768.5625,298.8281,780.5625,286.8281" style="stroke:#A80036;stroke-width:1.5;"/><text fill="#000000" font-family="sans-serif" font-size="11" lengthAdjust="spacingAndGlyphs" textLength="82" x="780.5625" y="302.6362">LTK available?</text><text fill="#000000" font-family="sans-serif" font-size="11" lengthAdjust="spacingAndGlyphs" textLength="21" x="747.5625" y="296.2339">yes</text><text fill="#000000" font-family="sans-serif" font-size="11" lengthAdjust="spacingAndGlyphs" textLength="14" x="874.5625" y="296.2339">no</text><rect fill="#FEFECE" filter="url(#ficsatr1k5q0d)" height="33.9688" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="235" x="282.5" y="320.8281"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="211" x="296.5" y="341.9668">SM_EVENT_REENCRYPTION_STARTED</text><rect fill="#FEFECE" filter="url(#ficsatr1k5q0d)" height="33.9688" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="233" x="283.5" y="374.7969"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="209" x="297.5" y="395.9355">SM on A sends SECURITY REQUEST</text><rect fill="#FEFECE" filter="url(#ficsatr1k5q0d)" height="33.9688" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="330" x="235" y="428.7656"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="306" x="249" y="449.9043">SM on B should encrypt connection if LTK available</text><polygon fill="#FEFECE" filter="url(#ficsatr1k5q0d)" points="363,482.7344,437,482.7344,449,494.7344,437,506.7344,363,506.7344,351,494.7344,363,482.7344" style="stroke:#A80036;stroke-width:1.5;"/><text fill="#000000" font-family="sans-serif" font-size="11" lengthAdjust="spacingAndGlyphs" textLength="74" x="363" y="498.5425">re-encrypted</text><text fill="#000000" font-family="sans-serif" font-size="11" lengthAdjust="spacingAndGlyphs" textLength="21" x="330" y="492.1401">yes</text><text fill="#000000" font-family="sans-serif" font-size="11" lengthAdjust="spacingAndGlyphs" textLength="14" x="449" y="492.1401">no</text><rect fill="#FEFECE" filter="url(#ficsatr1k5q0d)" height="33.9688" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="393" x="11" y="516.7344"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="369" x="25" y="537.873">SM_EVENT_REENCRYPTION_COMPLETE(ERROR_CODE_SUCCESS)</text><rect fill="#FEFECE" filter="url(#ficsatr1k5q0d)" height="33.9688" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="173" x="121" y="570.7031"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="149" x="135" y="591.8418">GATT Client request sent</text><rect fill="#23DB2B" filter="url(#ficsatr1k5q0d)" height="33.9688" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="204" x="105.5" y="639.6719"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="180" x="119.5" y="660.8105">App receives GATT Response</text><ellipse cx="207.5" cy="719.6406" fill="#FFFFFF" filter="url(#ficsatr1k5q0d)" rx="11" ry="11" style="stroke:#000000;stroke-width:1.0;"/><ellipse cx="207.5" cy="719.6406" fill="#000000" rx="6" ry="6" style="stroke:#7F7F7F;stroke-width:1.0;"/><rect fill="#FEFECE" filter="url(#ficsatr1k5q0d)" height="33.9688" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="284" x="450.5" y="516.7344"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="260" x="464.5" y="537.873">SM_EVENT_REENCRYPTION_COMPLETE(error)</text><rect fill="#FD5B41" filter="url(#ficsatr1k5q0d)" height="47.9375" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="337" x="424" y="570.7031"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="267" x="438" y="591.8418">App receives GATT_QUERY_COMPLETE event</text><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="297" x="454" y="605.8105">with ATT_ERROR_BONDING_INFORMATION_MISSING</text><ellipse cx="592.5" cy="664.6406" fill="#FFFFFF" filter="url(#ficsatr1k5q0d)" rx="11" ry="11" style="stroke:#000000;stroke-width:1.0;"/><ellipse cx="592.5" cy="664.6406" fill="#000000" rx="6" ry="6" style="stroke:#7F7F7F;stroke-width:1.0;"/><rect fill="#FEFECE" filter="url(#ficsatr1k5q0d)" height="33.9688" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="194" x="1146.125" y="320.8281"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="170" x="1160.125" y="341.9668">SM_EVENT_PAIRING_STARTED</text><rect fill="#FEFECE" filter="url(#ficsatr1k5q0d)" height="33.9688" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="233" x="1126.625" y="374.7969"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="209" x="1140.625" y="395.9355">SM on A sends SECURITY REQUEST</text><rect fill="#FEFECE" filter="url(#ficsatr1k5q0d)" height="33.9688" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="279" x="1103.625" y="428.7656"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="255" x="1117.625" y="449.9043">SM on B should perform pairing sequence</text><polygon fill="#FEFECE" filter="url(#ficsatr1k5q0d)" points="1196.625,482.7344,1289.625,482.7344,1301.625,494.7344,1289.625,506.7344,1196.625,506.7344,1184.625,494.7344,1196.625,482.7344" style="stroke:#A80036;stroke-width:1.5;"/><text fill="#000000" font-family="sans-serif" font-size="11" lengthAdjust="spacingAndGlyphs" textLength="93" x="1196.625" y="498.5425">pairing success?</text><text fill="#000000" font-family="sans-serif" font-size="11" lengthAdjust="spacingAndGlyphs" textLength="21" x="1163.625" y="492.1401">yes</text><text fill="#000000" font-family="sans-serif" font-size="11" lengthAdjust="spacingAndGlyphs" textLength="14" x="1301.625" y="492.1401">no</text><rect fill="#FEFECE" filter="url(#ficsatr1k5q0d)" height="33.9688" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="352" x="801" y="516.7344"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="328" x="815" y="537.873">SM_EVENT_PAIRING_COMPLETE(ERROR_CODE_SUCCESS)</text><rect fill="#FEFECE" filter="url(#ficsatr1k5q0d)" height="33.9688" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="173" x="890.5" y="570.7031"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="149" x="904.5" y="591.8418">GATT Client request sent</text><rect fill="#23DB2B" filter="url(#ficsatr1k5q0d)" height="33.9688" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="204" x="875" y="639.6719"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="180" x="889" y="660.8105">App receives GATT Response</text><ellipse cx="977" cy="719.6406" fill="#FFFFFF" filter="url(#ficsatr1k5q0d)" rx="11" ry="11" style="stroke:#000000;stroke-width:1.0;"/><ellipse cx="977" cy="719.6406" fill="#000000" rx="6" ry="6" style="stroke:#7F7F7F;stroke-width:1.0;"/><rect fill="#FEFECE" filter="url(#ficsatr1k5q0d)" height="33.9688" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="243" x="1387.75" y="516.7344"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="219" x="1401.75" y="537.873">SM_EVENT_PAIRING_COMPLETE(error)</text><polygon fill="#FEFECE" filter="url(#ficsatr1k5q0d)" points="1478.25,570.7031,1540.25,570.7031,1552.25,582.7031,1540.25,594.7031,1478.25,594.7031,1466.25,582.7031,1478.25,570.7031" style="stroke:#A80036;stroke-width:1.5;"/><text fill="#000000" font-family="sans-serif" font-size="11" lengthAdjust="spacingAndGlyphs" textLength="62" x="1478.25" y="586.5112">level &gt;= 3</text><text fill="#000000" font-family="sans-serif" font-size="11" lengthAdjust="spacingAndGlyphs" textLength="21" x="1445.25" y="580.1089">yes</text><text fill="#000000" font-family="sans-serif" font-size="11" lengthAdjust="spacingAndGlyphs" textLength="14" x="1552.25" y="580.1089">no</text><rect fill="#FD5B41" filter="url(#ficsatr1k5q0d)" height="47.9375" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="322" x="1183" y="604.7031"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="267" x="1197" y="625.8418">App receives GATT_QUERY_COMPLETE event</text><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="286" x="1209" y="639.8105">with ATT_ERROR_INSUFFICIENT_AUTHENTICATION</text><ellipse cx="1344" cy="698.6406" fill="#FFFFFF" filter="url(#ficsatr1k5q0d)" rx="11" ry="11" style="stroke:#000000;stroke-width:1.0;"/><ellipse cx="1344" cy="698.6406" fill="#000000" rx="6" ry="6" style="stroke:#7F7F7F;stroke-width:1.0;"/><rect fill="#FD5B41" filter="url(#ficsatr1k5q0d)" height="47.9375" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="299" x="1525" y="604.7031"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="267" x="1539" y="625.8418">App receives GATT_QUERY_COMPLETE event</text><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="259" x="1551" y="639.8105">with ATT_ERROR_INSUFFICIENT_ENCRYPTION;</text><ellipse cx="1674.5" cy="698.6406" fill="#FFFFFF" filter="url(#ficsatr1k5q0d)" rx="11" ry="11" style="stroke:#000000;stroke-width:1.0;"/><ellipse cx="1674.5" cy="698.6406" fill="#000000" rx="6" ry="6" style="stroke:#7F7F7F;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="821.5625" x2="821.5625" y1="50.9531" y2="70.9531"/><polygon fill="#A80036" points="817.5625,60.9531,821.5625,70.9531,825.5625,60.9531,821.5625,64.9531" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="821.5625" x2="821.5625" y1="104.9219" y2="124.9219"/><polygon fill="#A80036" points="817.5625,114.9219,821.5625,124.9219,825.5625,114.9219,821.5625,118.9219" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="821.5625" x2="821.5625" y1="158.8906" y2="178.8906"/><polygon fill="#A80036" points="817.5625,168.8906,821.5625,178.8906,825.5625,168.8906,821.5625,172.8906" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="821.5625" x2="821.5625" y1="212.8594" y2="232.8594"/><polygon fill="#A80036" points="817.5625,222.8594,821.5625,232.8594,825.5625,222.8594,821.5625,226.8594" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="400" x2="400" y1="354.7969" y2="374.7969"/><polygon fill="#A80036" points="396,364.7969,400,374.7969,404,364.7969,400,368.7969" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="400" x2="400" y1="408.7656" y2="428.7656"/><polygon fill="#A80036" points="396,418.7656,400,428.7656,404,418.7656,400,422.7656" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="207.5" x2="207.5" y1="550.7031" y2="570.7031"/><polygon fill="#A80036" points="203.5,560.7031,207.5,570.7031,211.5,560.7031,207.5,564.7031" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="207.5" x2="207.5" y1="604.6719" y2="639.6719"/><polygon fill="#A80036" points="203.5,629.6719,207.5,639.6719,211.5,629.6719,207.5,633.6719" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="207.5" x2="207.5" y1="673.6406" y2="708.6406"/><polygon fill="#A80036" points="203.5,698.6406,207.5,708.6406,211.5,698.6406,207.5,702.6406" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="592.5" x2="592.5" y1="550.7031" y2="570.7031"/><polygon fill="#A80036" points="588.5,560.7031,592.5,570.7031,596.5,560.7031,592.5,564.7031" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="592.5" x2="592.5" y1="618.6406" y2="653.6406"/><polygon fill="#A80036" points="588.5,643.6406,592.5,653.6406,596.5,643.6406,592.5,647.6406" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="351" x2="207.5" y1="494.7344" y2="494.7344"/><line style="stroke:#A80036;stroke-width:1.5;" x1="207.5" x2="207.5" y1="494.7344" y2="516.7344"/><polygon fill="#A80036" points="203.5,506.7344,207.5,516.7344,211.5,506.7344,207.5,510.7344" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="449" x2="592.5" y1="494.7344" y2="494.7344"/><line style="stroke:#A80036;stroke-width:1.5;" x1="592.5" x2="592.5" y1="494.7344" y2="516.7344"/><polygon fill="#A80036" points="588.5,506.7344,592.5,516.7344,596.5,506.7344,592.5,510.7344" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="400" x2="400" y1="462.7344" y2="482.7344"/><polygon fill="#A80036" points="396,472.7344,400,482.7344,404,472.7344,400,476.7344" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="1243.125" x2="1243.125" y1="354.7969" y2="374.7969"/><polygon fill="#A80036" points="1239.125,364.7969,1243.125,374.7969,1247.125,364.7969,1243.125,368.7969" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="1243.125" x2="1243.125" y1="408.7656" y2="428.7656"/><polygon fill="#A80036" points="1239.125,418.7656,1243.125,428.7656,1247.125,418.7656,1243.125,422.7656" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="977" x2="977" y1="550.7031" y2="570.7031"/><polygon fill="#A80036" points="973,560.7031,977,570.7031,981,560.7031,977,564.7031" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="977" x2="977" y1="604.6719" y2="639.6719"/><polygon fill="#A80036" points="973,629.6719,977,639.6719,981,629.6719,977,633.6719" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="977" x2="977" y1="673.6406" y2="708.6406"/><polygon fill="#A80036" points="973,698.6406,977,708.6406,981,698.6406,977,702.6406" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="1344" x2="1344" y1="652.6406" y2="687.6406"/><polygon fill="#A80036" points="1340,677.6406,1344,687.6406,1348,677.6406,1344,681.6406" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="1674.5" x2="1674.5" y1="652.6406" y2="687.6406"/><polygon fill="#A80036" points="1670.5,677.6406,1674.5,687.6406,1678.5,677.6406,1674.5,681.6406" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="1466.25" x2="1344" y1="582.7031" y2="582.7031"/><line style="stroke:#A80036;stroke-width:1.5;" x1="1344" x2="1344" y1="582.7031" y2="604.7031"/><polygon fill="#A80036" points="1340,594.7031,1344,604.7031,1348,594.7031,1344,598.7031" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="1552.25" x2="1674.5" y1="582.7031" y2="582.7031"/><line style="stroke:#A80036;stroke-width:1.5;" x1="1674.5" x2="1674.5" y1="582.7031" y2="604.7031"/><polygon fill="#A80036" points="1670.5,594.7031,1674.5,604.7031,1678.5,594.7031,1674.5,598.7031" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="1509.25" x2="1509.25" y1="550.7031" y2="570.7031"/><polygon fill="#A80036" points="1505.25,560.7031,1509.25,570.7031,1513.25,560.7031,1509.25,564.7031" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="1184.625" x2="977" y1="494.7344" y2="494.7344"/><line style="stroke:#A80036;stroke-width:1.5;" x1="977" x2="977" y1="494.7344" y2="516.7344"/><polygon fill="#A80036" points="973,506.7344,977,516.7344,981,506.7344,977,510.7344" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="1301.625" x2="1509.25" y1="494.7344" y2="494.7344"/><line style="stroke:#A80036;stroke-width:1.5;" x1="1509.25" x2="1509.25" y1="494.7344" y2="516.7344"/><polygon fill="#A80036" points="1505.25,506.7344,1509.25,516.7344,1513.25,506.7344,1509.25,510.7344" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="1243.125" x2="1243.125" y1="462.7344" y2="482.7344"/><polygon fill="#A80036" points="1239.125,472.7344,1243.125,482.7344,1247.125,472.7344,1243.125,476.7344" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="768.5625" x2="400" y1="298.8281" y2="298.8281"/><line style="stroke:#A80036;stroke-width:1.5;" x1="400" x2="400" y1="298.8281" y2="320.8281"/><polygon fill="#A80036" points="396,310.8281,400,320.8281,404,310.8281,400,314.8281" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="874.5625" x2="1243.125" y1="298.8281" y2="298.8281"/><line style="stroke:#A80036;stroke-width:1.5;" x1="1243.125" x2="1243.125" y1="298.8281" y2="320.8281"/><polygon fill="#A80036" points="1239.125,310.8281,1243.125,320.8281,1247.125,310.8281,1243.125,314.8281" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="821.5625" x2="821.5625" y1="266.8281" y2="286.8281"/><polygon fill="#A80036" points="817.5625,276.8281,821.5625,286.8281,825.5625,276.8281,821.5625,280.8281" style="stroke:#A80036;stroke-width:1.0;"/><!--MD5=[552fa1f141c8705399591c18484ec6d1]
+@startuml
+title Mandatory Authentication in Peripheral Role
+start
+: App calls gatt_client_set_required_security_level (level > 0);
+: App on B connects to A;
+: App on A triggers GATT Client request;
+: GATT Client request sent;
+if (LTK available?) then (yes)
+   : SM_EVENT_REENCRYPTION_STARTED;
+   : SM on A sends SECURITY REQUEST;
+   : SM on B should encrypt connection if LTK available;
+   if (re-encrypted) then (yes)
+     : SM_EVENT_REENCRYPTION_COMPLETE(ERROR_CODE_SUCCESS);
+     : GATT Client request sent;
+     #23DB2B : App receives GATT Response;
+     stop
+  else (no)
+     : SM_EVENT_REENCRYPTION_COMPLETE(error);
+     #FD5B41: App receives GATT_QUERY_COMPLETE event 
+          with ATT_ERROR_BONDING_INFORMATION_MISSING;
+     stop
+  endif 
+else (no)
+  : SM_EVENT_PAIRING_STARTED;
+  : SM on A sends SECURITY REQUEST;
+  : SM on B should perform pairing sequence;
+  if (pairing success?) then (yes)
+     : SM_EVENT_PAIRING_COMPLETE(ERROR_CODE_SUCCESS);
+     : GATT Client request sent;
+     #23DB2B : App receives GATT Response;
+     stop
+  else (no)
+    : SM_EVENT_PAIRING_COMPLETE(error);
+    if (level >= 3) then (yes)
+      #FD5B41: App receives GATT_QUERY_COMPLETE event
+          with ATT_ERROR_INSUFFICIENT_AUTHENTICATION;
+      stop
+    else (no)
+      #FD5B41: App receives GATT_QUERY_COMPLETE event 
+          with ATT_ERROR_INSUFFICIENT_ENCRYPTION;  
+      stop
+    endif     
+  endif
+@enduml
+
+PlantUML version 1.2020.22beta2(Unknown compile time)
+(GPL source distribution)
+Java Runtime: Java(TM) SE Runtime Environment
+JVM: Java HotSpot(TM) 64-Bit Server VM
+Default Encoding: UTF-8
+Language: en
+Country: US
+--></g></svg>
\ No newline at end of file
diff --git a/doc/manual/docs/picts/le_security_flow_control_proactive_authentication.svg b/doc/manual/docs/picts/le_security_flow_control_proactive_authentication.svg
deleted file mode 100644
index 9c120e008..000000000
--- a/doc/manual/docs/picts/le_security_flow_control_proactive_authentication.svg
+++ /dev/null
@@ -1,35 +0,0 @@
-<?xml version="1.0" encoding="UTF-8" standalone="no"?><svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" contentScriptType="application/ecmascript" contentStyleType="text/css" height="506px" preserveAspectRatio="none" style="width:626px;height:506px;" version="1.1" viewBox="0 0 626 506" width="626px" zoomAndPan="magnify"><defs><filter height="300%" id="f1a1jpegzt8428" width="300%" x="-1" y="-1"><feGaussianBlur result="blurOut" stdDeviation="2.0"/><feColorMatrix in="blurOut" result="blurOut2" type="matrix" values="0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 .4 0"/><feOffset dx="4.0" dy="4.0" in="blurOut2" result="blurOut3"/><feBlend in="SourceGraphic" in2="blurOut3" mode="normal"/></filter></defs><g><text fill="#000000" font-family="sans-serif" font-size="18" lengthAdjust="spacingAndGlyphs" textLength="315" x="154.75" y="26.708">Proactive Authentication with LTK</text><ellipse cx="260.25" cy="40.9531" fill="#000000" filter="url(#f1a1jpegzt8428)" rx="10" ry="10" style="stroke: none; stroke-width: 1.0;"/><rect fill="#FEFECE" filter="url(#f1a1jpegzt8428)" height="33.9688" rx="12.5" ry="12.5" style="stroke: #A80036; stroke-width: 1.5;" width="119" x="200.75" y="70.9531"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="95" x="214.75" y="92.0918">A connects to B</text><rect fill="#FEFECE" filter="url(#f1a1jpegzt8428)" height="33.9688" rx="12.5" ry="12.5" style="stroke: #A80036; stroke-width: 1.5;" width="254" x="133.25" y="124.9219"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="230" x="147.25" y="146.0605">App triggers GATT Client request on A</text><polygon fill="#FEFECE" filter="url(#f1a1jpegzt8428)" points="248.25,178.8906,272.25,178.8906,284.25,190.8906,272.25,202.8906,248.25,202.8906,236.25,190.8906,248.25,178.8906" style="stroke: #A80036; stroke-width: 1.5;"/><text fill="#000000" font-family="sans-serif" font-size="11" lengthAdjust="spacingAndGlyphs" textLength="22" x="249.25" y="194.6987">role</text><text fill="#000000" font-family="sans-serif" font-size="11" lengthAdjust="spacingAndGlyphs" textLength="41" x="195.25" y="188.2964">Central</text><text fill="#000000" font-family="sans-serif" font-size="11" lengthAdjust="spacingAndGlyphs" textLength="57" x="284.25" y="188.2964">Peripheral</text><rect fill="#FEFECE" filter="url(#f1a1jpegzt8428)" height="33.9688" rx="12.5" ry="12.5" style="stroke: #A80036; stroke-width: 1.5;" width="119" x="121.75" y="212.8906"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="95" x="135.75" y="234.0293">start encryption</text><rect fill="#FEFECE" filter="url(#f1a1jpegzt8428)" height="33.9688" rx="12.5" ry="12.5" style="stroke: #A80036; stroke-width: 1.5;" width="157" x="260.75" y="212.8906"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="133" x="274.75" y="234.0293">send security request</text><polygon fill="#FEFECE" filter="url(#f1a1jpegzt8428)" points="260.25,252.8594,272.25,264.8594,260.25,276.8594,248.25,264.8594,260.25,252.8594" style="stroke: #A80036; stroke-width: 1.5;"/><polygon fill="#FEFECE" filter="url(#f1a1jpegzt8428)" points="223.25,296.8594,297.25,296.8594,309.25,308.8594,297.25,320.8594,223.25,320.8594,211.25,308.8594,223.25,296.8594" style="stroke: #A80036; stroke-width: 1.5;"/><text fill="#000000" font-family="sans-serif" font-size="11" lengthAdjust="spacingAndGlyphs" textLength="74" x="223.25" y="312.6675">re-encrypted</text><text fill="#000000" font-family="sans-serif" font-size="11" lengthAdjust="spacingAndGlyphs" textLength="21" x="190.25" y="306.2651">yes</text><text fill="#000000" font-family="sans-serif" font-size="11" lengthAdjust="spacingAndGlyphs" textLength="14" x="309.25" y="306.2651">no</text><rect fill="#FEFECE" filter="url(#f1a1jpegzt8428)" height="33.9688" rx="12.5" ry="12.5" style="stroke: #A80036; stroke-width: 1.5;" width="173" x="26.5" y="330.8594"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="149" x="40.5" y="351.998">GATT Client request sent</text><rect fill="#23DB2B" filter="url(#f1a1jpegzt8428)" height="33.9688" rx="12.5" ry="12.5" style="stroke: #A80036; stroke-width: 1.5;" width="204" x="11" y="398.7969"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="180" x="25" y="419.9355">App receives GATT Response</text><ellipse cx="113" cy="478.7656" fill="#FFFFFF" filter="url(#f1a1jpegzt8428)" rx="11" ry="11" style="stroke: #000000; stroke-width: 1.0;"/><ellipse cx="113" cy="478.7656" fill="#000000" rx="6" ry="6" style="stroke: #7F7F7F; stroke-width: 1.0;"/><rect fill="#FD5B41" filter="url(#f1a1jpegzt8428)" height="47.9375" rx="12.5" ry="12.5" style="stroke: #A80036; stroke-width: 1.5;" width="345" x="235" y="330.8594"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="267" x="249" y="351.998">App receives GATT_QUERY_COMPLETE event</text><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="297" x="273" y="365.9668">with ATT_ERROR_BONDING_INFORMATION_MISSING</text><path d="M438.5,412.7656 L438.5,436.4648 L418.5,440.4648 L438.5,444.4648 L438.5,468.1641 A0,0 0 0 0 438.5,468.1641 L614.5,468.1641 A0,0 0 0 0 614.5,468.1641 L614.5,422.7656 L604.5,412.7656 L438.5,412.7656 A0,0 0 0 0 438.5,412.7656 " fill="#FBFB77" filter="url(#f1a1jpegzt8428)" style="stroke: #A80036; stroke-width: 1.0;"/><path d="M604.5,412.7656 L604.5,422.7656 L614.5,422.7656 L604.5,412.7656 " fill="#FBFB77" style="stroke: #A80036; stroke-width: 1.0;"/><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacingAndGlyphs" textLength="151" x="444.5" y="429.8325">App can delete bonding</text><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacingAndGlyphs" textLength="148" x="444.5" y="444.9653">information and repeat</text><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacingAndGlyphs" textLength="153" x="444.5" y="460.0981">the GATT Client request</text><ellipse cx="407.5" cy="440.4648" fill="#FFFFFF" filter="url(#f1a1jpegzt8428)" rx="11" ry="11" style="stroke: #000000; stroke-width: 1.0;"/><ellipse cx="407.5" cy="440.4648" fill="#000000" rx="6" ry="6" style="stroke: #7F7F7F; stroke-width: 1.0;"/><line style="stroke: #A80036; stroke-width: 1.5;" x1="260.25" x2="260.25" y1="50.9531" y2="70.9531"/><polygon fill="#A80036" points="256.25,60.9531,260.25,70.9531,264.25,60.9531,260.25,64.9531" style="stroke: #A80036; stroke-width: 1.0;"/><line style="stroke: #A80036; stroke-width: 1.5;" x1="260.25" x2="260.25" y1="104.9219" y2="124.9219"/><polygon fill="#A80036" points="256.25,114.9219,260.25,124.9219,264.25,114.9219,260.25,118.9219" style="stroke: #A80036; stroke-width: 1.0;"/><line style="stroke: #A80036; stroke-width: 1.5;" x1="236.25" x2="181.25" y1="190.8906" y2="190.8906"/><line style="stroke: #A80036; stroke-width: 1.5;" x1="181.25" x2="181.25" y1="190.8906" y2="212.8906"/><polygon fill="#A80036" points="177.25,202.8906,181.25,212.8906,185.25,202.8906,181.25,206.8906" style="stroke: #A80036; stroke-width: 1.0;"/><line style="stroke: #A80036; stroke-width: 1.5;" x1="284.25" x2="339.25" y1="190.8906" y2="190.8906"/><line style="stroke: #A80036; stroke-width: 1.5;" x1="339.25" x2="339.25" y1="190.8906" y2="212.8906"/><polygon fill="#A80036" points="335.25,202.8906,339.25,212.8906,343.25,202.8906,339.25,206.8906" style="stroke: #A80036; stroke-width: 1.0;"/><line style="stroke: #A80036; stroke-width: 1.5;" x1="181.25" x2="181.25" y1="246.8594" y2="264.8594"/><line style="stroke: #A80036; stroke-width: 1.5;" x1="181.25" x2="248.25" y1="264.8594" y2="264.8594"/><polygon fill="#A80036" points="238.25,260.8594,248.25,264.8594,238.25,268.8594,242.25,264.8594" style="stroke: #A80036; stroke-width: 1.0;"/><line style="stroke: #A80036; stroke-width: 1.5;" x1="339.25" x2="339.25" y1="246.8594" y2="264.8594"/><line style="stroke: #A80036; stroke-width: 1.5;" x1="339.25" x2="272.25" y1="264.8594" y2="264.8594"/><polygon fill="#A80036" points="282.25,260.8594,272.25,264.8594,282.25,268.8594,278.25,264.8594" style="stroke: #A80036; stroke-width: 1.0;"/><line style="stroke: #A80036; stroke-width: 1.5;" x1="260.25" x2="260.25" y1="158.8906" y2="178.8906"/><polygon fill="#A80036" points="256.25,168.8906,260.25,178.8906,264.25,168.8906,260.25,172.8906" style="stroke: #A80036; stroke-width: 1.0;"/><line style="stroke: #A80036; stroke-width: 1.5;" x1="113" x2="113" y1="364.8281" y2="398.7969"/><polygon fill="#A80036" points="109,388.7969,113,398.7969,117,388.7969,113,392.7969" style="stroke: #A80036; stroke-width: 1.0;"/><line style="stroke: #A80036; stroke-width: 1.5;" x1="113" x2="113" y1="432.7656" y2="467.7656"/><polygon fill="#A80036" points="109,457.7656,113,467.7656,117,457.7656,113,461.7656" style="stroke: #A80036; stroke-width: 1.0;"/><line style="stroke: #A80036; stroke-width: 1.5;" x1="407.5" x2="407.5" y1="378.7969" y2="429.4648"/><polygon fill="#A80036" points="403.5,419.4648,407.5,429.4648,411.5,419.4648,407.5,423.4648" style="stroke: #A80036; stroke-width: 1.0;"/><line style="stroke: #A80036; stroke-width: 1.5;" x1="211.25" x2="113" y1="308.8594" y2="308.8594"/><line style="stroke: #A80036; stroke-width: 1.5;" x1="113" x2="113" y1="308.8594" y2="330.8594"/><polygon fill="#A80036" points="109,320.8594,113,330.8594,117,320.8594,113,324.8594" style="stroke: #A80036; stroke-width: 1.0;"/><line style="stroke: #A80036; stroke-width: 1.5;" x1="309.25" x2="407.5" y1="308.8594" y2="308.8594"/><line style="stroke: #A80036; stroke-width: 1.5;" x1="407.5" x2="407.5" y1="308.8594" y2="330.8594"/><polygon fill="#A80036" points="403.5,320.8594,407.5,330.8594,411.5,320.8594,407.5,324.8594" style="stroke: #A80036; stroke-width: 1.0;"/><line style="stroke: #A80036; stroke-width: 1.5;" x1="260.25" x2="260.25" y1="276.8594" y2="296.8594"/><polygon fill="#A80036" points="256.25,286.8594,260.25,296.8594,264.25,286.8594,260.25,290.8594" style="stroke: #A80036; stroke-width: 1.0;"/><!--MD5=[44788bdd32f7dd64cafb8bcb39bd5e6b]
-@startuml
-title Proactive Authentication with LTK
-start
-: A connects to B;
-: App triggers GATT Client request on A;
-if (role) then (Central)
-: start encryption;
-else (Peripheral)
-: send security request;
-endif
-if (re-encrypted) then (yes)
-   : GATT Client request sent;
-   #23DB2B : App receives GATT Response;
-   stop
-else (no) 
-   #FD5B41: App receives GATT_QUERY_COMPLETE event 
-          with ATT_ERROR_BONDING_INFORMATION_MISSING;
-   stop
-   note right
-      App can delete bonding 
-      information and repeat 
-      the GATT Client request
-   end note
-endif
-@enduml
-
-PlantUML version 1.2020.20(Sat Nov 21 10:02:45 UTC 2020)
-(GPL source distribution)
-Java Runtime: Java(TM) SE Runtime Environment
-JVM: Java HotSpot(TM) 64-Bit Server VM
-Default Encoding: UTF-8
-Language: en
-Country: US
---></g></svg>
\ No newline at end of file
diff --git a/doc/manual/docs/picts/le_security_flow_control_proactive_authentication_central.svg b/doc/manual/docs/picts/le_security_flow_control_proactive_authentication_central.svg
new file mode 100644
index 000000000..1abd21eba
--- /dev/null
+++ b/doc/manual/docs/picts/le_security_flow_control_proactive_authentication_central.svg
@@ -0,0 +1,62 @@
+<?xml version="1.0" encoding="UTF-8" standalone="no"?><svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" contentScriptType="application/ecmascript" contentStyleType="text/css" height="738px" preserveAspectRatio="none" style="width:2039px;height:738px;" version="1.1" viewBox="0 0 2039 738" width="2039px" zoomAndPan="magnify"><defs><filter height="300%" id="f1xgs8alhcll3x" width="300%" x="-1" y="-1"><feGaussianBlur result="blurOut" stdDeviation="2.0"/><feColorMatrix in="blurOut" result="blurOut2" type="matrix" values="0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 .4 0"/><feOffset dx="4.0" dy="4.0" in="blurOut2" result="blurOut3"/><feBlend in="SourceGraphic" in2="blurOut3" mode="normal"/></filter></defs><g><text fill="#000000" font-family="sans-serif" font-size="18" lengthAdjust="spacingAndGlyphs" textLength="373" x="832.25" y="26.708">Proactive Authentication in Central Role</text><ellipse cx="1030.1563" cy="40.9531" fill="#000000" filter="url(#f1xgs8alhcll3x)" rx="10" ry="10" style="stroke:none;stroke-width:1.0;"/><rect fill="#FEFECE" filter="url(#f1xgs8alhcll3x)" height="33.9688" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="119" x="970.6563" y="70.9531"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="95" x="984.6563" y="92.0918">A connects to B</text><rect fill="#FEFECE" filter="url(#f1xgs8alhcll3x)" height="33.9688" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="254" x="903.1563" y="124.9219"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="230" x="917.1563" y="146.0605">App on A triggers GATT Client request</text><polygon fill="#FEFECE" filter="url(#f1xgs8alhcll3x)" points="989.1563,178.8906,1071.1563,178.8906,1083.1563,190.8906,1071.1563,202.8906,989.1563,202.8906,977.1563,190.8906,989.1563,178.8906" style="stroke:#A80036;stroke-width:1.5;"/><text fill="#000000" font-family="sans-serif" font-size="11" lengthAdjust="spacingAndGlyphs" textLength="82" x="989.1563" y="194.6987">LTK available?</text><text fill="#000000" font-family="sans-serif" font-size="11" lengthAdjust="spacingAndGlyphs" textLength="14" x="963.1563" y="188.2964">no</text><text fill="#000000" font-family="sans-serif" font-size="11" lengthAdjust="spacingAndGlyphs" textLength="21" x="1083.1563" y="188.2964">yes</text><rect fill="#FEFECE" filter="url(#f1xgs8alhcll3x)" height="33.9688" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="173" x="295.8125" y="212.8906"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="149" x="309.8125" y="234.0293">GATT Client request sent</text><polygon fill="#FEFECE" filter="url(#f1xgs8alhcll3x)" points="213.8125,266.8594,550.8125,266.8594,562.8125,278.8594,550.8125,290.8594,213.8125,290.8594,201.8125,278.8594,213.8125,266.8594" style="stroke:#A80036;stroke-width:1.5;"/><text fill="#000000" font-family="sans-serif" font-size="11" lengthAdjust="spacingAndGlyphs" textLength="337" x="213.8125" y="282.6675">GATT Server returns an ATT_ERROR_INSUFFICIENT_X error?</text><text fill="#000000" font-family="sans-serif" font-size="11" lengthAdjust="spacingAndGlyphs" textLength="14" x="187.8125" y="276.2651">no</text><text fill="#000000" font-family="sans-serif" font-size="11" lengthAdjust="spacingAndGlyphs" textLength="21" x="562.8125" y="276.2651">yes</text><rect fill="#23DB2B" filter="url(#f1xgs8alhcll3x)" height="33.9688" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="204" x="11" y="300.8594"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="180" x="25" y="321.998">App receives GATT Response</text><ellipse cx="113" cy="380.8281" fill="#FFFFFF" filter="url(#f1xgs8alhcll3x)" rx="11" ry="11" style="stroke:#000000;stroke-width:1.0;"/><ellipse cx="113" cy="380.8281" fill="#000000" rx="6" ry="6" style="stroke:#7F7F7F;stroke-width:1.0;"/><polygon fill="#FEFECE" filter="url(#f1xgs8alhcll3x)" points="536.625,300.8594,766.625,300.8594,778.625,312.8594,766.625,324.8594,536.625,324.8594,524.625,312.8594,536.625,300.8594" style="stroke:#A80036;stroke-width:1.5;"/><text fill="#000000" font-family="sans-serif" font-size="11" lengthAdjust="spacingAndGlyphs" textLength="230" x="536.625" y="316.6675">ENABLE_GATT_CLIENT_PAIRING defined?</text><text fill="#000000" font-family="sans-serif" font-size="11" lengthAdjust="spacingAndGlyphs" textLength="14" x="510.625" y="310.2651">no</text><text fill="#000000" font-family="sans-serif" font-size="11" lengthAdjust="spacingAndGlyphs" textLength="21" x="778.625" y="310.2651">yes</text><rect fill="#FD5B41" filter="url(#f1xgs8alhcll3x)" height="47.9375" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="291" x="245" y="334.8594"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="267" x="259" y="355.998">App receives GATT_QUERY_COMPLETE event</text><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="192" x="271" y="369.9668">with ATT_ERROR_INSUFFICIENT_X</text><ellipse cx="390.5" cy="428.7969" fill="#FFFFFF" filter="url(#f1xgs8alhcll3x)" rx="11" ry="11" style="stroke:#000000;stroke-width:1.0;"/><ellipse cx="390.5" cy="428.7969" fill="#000000" rx="6" ry="6" style="stroke:#7F7F7F;stroke-width:1.0;"/><rect fill="#FEFECE" filter="url(#f1xgs8alhcll3x)" height="33.9688" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="194" x="815.75" y="334.8594"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="170" x="829.75" y="355.998">SM_EVENT_PAIRING_STARTED</text><rect fill="#FEFECE" filter="url(#f1xgs8alhcll3x)" height="33.9688" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="96" x="864.75" y="403.8281"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="72" x="878.75" y="424.9668">start pairing</text><polygon fill="#FEFECE" filter="url(#f1xgs8alhcll3x)" points="866.25,472.7969,959.25,472.7969,971.25,484.7969,959.25,496.7969,866.25,496.7969,854.25,484.7969,866.25,472.7969" style="stroke:#A80036;stroke-width:1.5;"/><text fill="#000000" font-family="sans-serif" font-size="11" lengthAdjust="spacingAndGlyphs" textLength="93" x="866.25" y="488.605">pairing success?</text><text fill="#000000" font-family="sans-serif" font-size="11" lengthAdjust="spacingAndGlyphs" textLength="21" x="833.25" y="482.2026">yes</text><text fill="#000000" font-family="sans-serif" font-size="11" lengthAdjust="spacingAndGlyphs" textLength="14" x="971.25" y="482.2026">no</text><rect fill="#FEFECE" filter="url(#f1xgs8alhcll3x)" height="33.9688" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="352" x="566" y="506.7969"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="328" x="580" y="527.9355">SM_EVENT_PAIRING_COMPLETE(ERROR_CODE_SUCCESS)</text><rect fill="#FEFECE" filter="url(#f1xgs8alhcll3x)" height="33.9688" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="191" x="646.5" y="575.7656"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="167" x="660.5" y="596.9043">GATT Client request re-sent</text><rect fill="#23DB2B" filter="url(#f1xgs8alhcll3x)" height="33.9688" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="204" x="640" y="643.7031"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="180" x="654" y="664.8418">App receives GATT Response</text><ellipse cx="742" cy="710.6719" fill="#FFFFFF" filter="url(#f1xgs8alhcll3x)" rx="11" ry="11" style="stroke:#000000;stroke-width:1.0;"/><ellipse cx="742" cy="710.6719" fill="#000000" rx="6" ry="6" style="stroke:#7F7F7F;stroke-width:1.0;"/><rect fill="#FEFECE" filter="url(#f1xgs8alhcll3x)" height="33.9688" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="243" x="962" y="506.7969"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="219" x="976" y="527.9355">SM_EVENT_PAIRING_COMPLETE(error)</text><rect fill="#FD5B41" filter="url(#f1xgs8alhcll3x)" height="47.9375" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="291" x="938" y="575.7656"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="267" x="952" y="596.9043">App receives GATT_QUERY_COMPLETE event</text><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="192" x="968" y="610.873">with ATT_ERROR_INSUFFICIENT_X</text><ellipse cx="1083.5" cy="668.6719" fill="#FFFFFF" filter="url(#f1xgs8alhcll3x)" rx="11" ry="11" style="stroke:#000000;stroke-width:1.0;"/><ellipse cx="1083.5" cy="668.6719" fill="#000000" rx="6" ry="6" style="stroke:#7F7F7F;stroke-width:1.0;"/><rect fill="#FEFECE" filter="url(#f1xgs8alhcll3x)" height="33.9688" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="235" x="1510.5" y="212.8906"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="211" x="1524.5" y="234.0293">SM_EVENT_REENCRYPTION_STARTED</text><rect fill="#FEFECE" filter="url(#f1xgs8alhcll3x)" height="33.9688" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="119" x="1568.5" y="266.8594"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="95" x="1582.5" y="287.998">start encryption</text><polygon fill="#FEFECE" filter="url(#f1xgs8alhcll3x)" points="1591,335.8281,1665,335.8281,1677,347.8281,1665,359.8281,1591,359.8281,1579,347.8281,1591,335.8281" style="stroke:#A80036;stroke-width:1.5;"/><text fill="#000000" font-family="sans-serif" font-size="11" lengthAdjust="spacingAndGlyphs" textLength="74" x="1591" y="351.6362">re-encrypted</text><text fill="#000000" font-family="sans-serif" font-size="11" lengthAdjust="spacingAndGlyphs" textLength="21" x="1558" y="345.2339">yes</text><text fill="#000000" font-family="sans-serif" font-size="11" lengthAdjust="spacingAndGlyphs" textLength="14" x="1677" y="345.2339">no</text><rect fill="#FEFECE" filter="url(#f1xgs8alhcll3x)" height="33.9688" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="393" x="1239" y="369.8281"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="369" x="1253" y="390.9668">SM_EVENT_REENCRYPTION_COMPLETE(ERROR_CODE_SUCCESS)</text><rect fill="#FEFECE" filter="url(#f1xgs8alhcll3x)" height="33.9688" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="173" x="1349" y="438.7969"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="149" x="1363" y="459.9355">GATT Client request sent</text><rect fill="#23DB2B" filter="url(#f1xgs8alhcll3x)" height="33.9688" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="204" x="1333.5" y="507.7656"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="180" x="1347.5" y="528.9043">App receives GATT Response</text><ellipse cx="1435.5" cy="587.7344" fill="#FFFFFF" filter="url(#f1xgs8alhcll3x)" rx="11" ry="11" style="stroke:#000000;stroke-width:1.0;"/><ellipse cx="1435.5" cy="587.7344" fill="#000000" rx="6" ry="6" style="stroke:#7F7F7F;stroke-width:1.0;"/><rect fill="#FEFECE" filter="url(#f1xgs8alhcll3x)" height="33.9688" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="284" x="1678.5" y="369.8281"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="260" x="1692.5" y="390.9668">SM_EVENT_REENCRYPTION_COMPLETE(error)</text><rect fill="#FD5B41" filter="url(#f1xgs8alhcll3x)" height="47.9375" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="337" x="1652" y="438.7969"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="267" x="1666" y="459.9355">App receives GATT_QUERY_COMPLETE event</text><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="297" x="1682" y="473.9043">with ATT_ERROR_BONDING_INFORMATION_MISSING</text><path d="M1851.5,521.7344 L1851.5,545.4336 L1831.5,549.4336 L1851.5,553.4336 L1851.5,577.1328 A0,0 0 0 0 1851.5,577.1328 L2027.5,577.1328 A0,0 0 0 0 2027.5,577.1328 L2027.5,531.7344 L2017.5,521.7344 L1851.5,521.7344 A0,0 0 0 0 1851.5,521.7344 " fill="#FBFB77" filter="url(#f1xgs8alhcll3x)" style="stroke:#A80036;stroke-width:1.0;"/><path d="M2017.5,521.7344 L2017.5,531.7344 L2027.5,531.7344 L2017.5,521.7344 " fill="#FBFB77" style="stroke:#A80036;stroke-width:1.0;"/><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacingAndGlyphs" textLength="151" x="1857.5" y="538.8013">App can delete bonding</text><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacingAndGlyphs" textLength="148" x="1857.5" y="553.9341">information and repeat</text><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacingAndGlyphs" textLength="153" x="1857.5" y="569.0669">the GATT Client request</text><ellipse cx="1820.5" cy="549.4336" fill="#FFFFFF" filter="url(#f1xgs8alhcll3x)" rx="11" ry="11" style="stroke:#000000;stroke-width:1.0;"/><ellipse cx="1820.5" cy="549.4336" fill="#000000" rx="6" ry="6" style="stroke:#7F7F7F;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="1030.1563" x2="1030.1563" y1="50.9531" y2="70.9531"/><polygon fill="#A80036" points="1026.1563,60.9531,1030.1563,70.9531,1034.1563,60.9531,1030.1563,64.9531" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="1030.1563" x2="1030.1563" y1="104.9219" y2="124.9219"/><polygon fill="#A80036" points="1026.1563,114.9219,1030.1563,124.9219,1034.1563,114.9219,1030.1563,118.9219" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="113" x2="113" y1="334.8281" y2="369.8281"/><polygon fill="#A80036" points="109,359.8281,113,369.8281,117,359.8281,113,363.8281" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="390.5" x2="390.5" y1="382.7969" y2="417.7969"/><polygon fill="#A80036" points="386.5,407.7969,390.5,417.7969,394.5,407.7969,390.5,411.7969" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="912.75" x2="912.75" y1="368.8281" y2="403.8281"/><polygon fill="#A80036" points="908.75,393.8281,912.75,403.8281,916.75,393.8281,912.75,397.8281" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="742" x2="742" y1="540.7656" y2="575.7656"/><polygon fill="#A80036" points="738,565.7656,742,575.7656,746,565.7656,742,569.7656" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="742" x2="742" y1="609.7344" y2="643.7031"/><polygon fill="#A80036" points="738,633.7031,742,643.7031,746,633.7031,742,637.7031" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="742" x2="742" y1="677.6719" y2="699.6719"/><polygon fill="#A80036" points="738,689.6719,742,699.6719,746,689.6719,742,693.6719" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="1083.5" x2="1083.5" y1="540.7656" y2="575.7656"/><polygon fill="#A80036" points="1079.5,565.7656,1083.5,575.7656,1087.5,565.7656,1083.5,569.7656" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="1083.5" x2="1083.5" y1="623.7031" y2="657.6719"/><polygon fill="#A80036" points="1079.5,647.6719,1083.5,657.6719,1087.5,647.6719,1083.5,651.6719" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="854.25" x2="742" y1="484.7969" y2="484.7969"/><line style="stroke:#A80036;stroke-width:1.5;" x1="742" x2="742" y1="484.7969" y2="506.7969"/><polygon fill="#A80036" points="738,496.7969,742,506.7969,746,496.7969,742,500.7969" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="971.25" x2="1083.5" y1="484.7969" y2="484.7969"/><line style="stroke:#A80036;stroke-width:1.5;" x1="1083.5" x2="1083.5" y1="484.7969" y2="506.7969"/><polygon fill="#A80036" points="1079.5,496.7969,1083.5,506.7969,1087.5,496.7969,1083.5,500.7969" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="912.75" x2="912.75" y1="437.7969" y2="472.7969"/><polygon fill="#A80036" points="908.75,462.7969,912.75,472.7969,916.75,462.7969,912.75,466.7969" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="524.625" x2="390.5" y1="312.8594" y2="312.8594"/><line style="stroke:#A80036;stroke-width:1.5;" x1="390.5" x2="390.5" y1="312.8594" y2="334.8594"/><polygon fill="#A80036" points="386.5,324.8594,390.5,334.8594,394.5,324.8594,390.5,328.8594" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="778.625" x2="912.75" y1="312.8594" y2="312.8594"/><line style="stroke:#A80036;stroke-width:1.5;" x1="912.75" x2="912.75" y1="312.8594" y2="334.8594"/><polygon fill="#A80036" points="908.75,324.8594,912.75,334.8594,916.75,324.8594,912.75,328.8594" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="201.8125" x2="113" y1="278.8594" y2="278.8594"/><line style="stroke:#A80036;stroke-width:1.5;" x1="113" x2="113" y1="278.8594" y2="300.8594"/><polygon fill="#A80036" points="109,290.8594,113,300.8594,117,290.8594,113,294.8594" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="562.8125" x2="651.625" y1="278.8594" y2="278.8594"/><line style="stroke:#A80036;stroke-width:1.5;" x1="651.625" x2="651.625" y1="278.8594" y2="300.8594"/><polygon fill="#A80036" points="647.625,290.8594,651.625,300.8594,655.625,290.8594,651.625,294.8594" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="382.3125" x2="382.3125" y1="246.8594" y2="266.8594"/><polygon fill="#A80036" points="378.3125,256.8594,382.3125,266.8594,386.3125,256.8594,382.3125,260.8594" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="1628" x2="1628" y1="246.8594" y2="266.8594"/><polygon fill="#A80036" points="1624,256.8594,1628,266.8594,1632,256.8594,1628,260.8594" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="1435.5" x2="1435.5" y1="403.7969" y2="438.7969"/><polygon fill="#A80036" points="1431.5,428.7969,1435.5,438.7969,1439.5,428.7969,1435.5,432.7969" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="1435.5" x2="1435.5" y1="472.7656" y2="507.7656"/><polygon fill="#A80036" points="1431.5,497.7656,1435.5,507.7656,1439.5,497.7656,1435.5,501.7656" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="1435.5" x2="1435.5" y1="541.7344" y2="576.7344"/><polygon fill="#A80036" points="1431.5,566.7344,1435.5,576.7344,1439.5,566.7344,1435.5,570.7344" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="1820.5" x2="1820.5" y1="403.7969" y2="438.7969"/><polygon fill="#A80036" points="1816.5,428.7969,1820.5,438.7969,1824.5,428.7969,1820.5,432.7969" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="1820.5" x2="1820.5" y1="486.7344" y2="538.4336"/><polygon fill="#A80036" points="1816.5,528.4336,1820.5,538.4336,1824.5,528.4336,1820.5,532.4336" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="1579" x2="1435.5" y1="347.8281" y2="347.8281"/><line style="stroke:#A80036;stroke-width:1.5;" x1="1435.5" x2="1435.5" y1="347.8281" y2="369.8281"/><polygon fill="#A80036" points="1431.5,359.8281,1435.5,369.8281,1439.5,359.8281,1435.5,363.8281" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="1677" x2="1820.5" y1="347.8281" y2="347.8281"/><line style="stroke:#A80036;stroke-width:1.5;" x1="1820.5" x2="1820.5" y1="347.8281" y2="369.8281"/><polygon fill="#A80036" points="1816.5,359.8281,1820.5,369.8281,1824.5,359.8281,1820.5,363.8281" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="1628" x2="1628" y1="300.8281" y2="335.8281"/><polygon fill="#A80036" points="1624,325.8281,1628,335.8281,1632,325.8281,1628,329.8281" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="977.1563" x2="382.3125" y1="190.8906" y2="190.8906"/><line style="stroke:#A80036;stroke-width:1.5;" x1="382.3125" x2="382.3125" y1="190.8906" y2="212.8906"/><polygon fill="#A80036" points="378.3125,202.8906,382.3125,212.8906,386.3125,202.8906,382.3125,206.8906" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="1083.1563" x2="1628" y1="190.8906" y2="190.8906"/><line style="stroke:#A80036;stroke-width:1.5;" x1="1628" x2="1628" y1="190.8906" y2="212.8906"/><polygon fill="#A80036" points="1624,202.8906,1628,212.8906,1632,202.8906,1628,206.8906" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="1030.1563" x2="1030.1563" y1="158.8906" y2="178.8906"/><polygon fill="#A80036" points="1026.1563,168.8906,1030.1563,178.8906,1034.1563,168.8906,1030.1563,172.8906" style="stroke:#A80036;stroke-width:1.0;"/><!--MD5=[fd6c687ac097c9f5a12bb303fff11c43]
+@startuml
+title Proactive Authentication in Central Role
+start
+: A connects to B;
+: App on A triggers GATT Client request;
+if (LTK available?) then (no)
+  : GATT Client request sent;
+  if (GATT Server returns an ATT_ERROR_INSUFFICIENT_X error?) then (no)
+    #23DB2B : App receives GATT Response;
+    stop
+  else (yes)
+    if (ENABLE_GATT_CLIENT_PAIRING defined?) then (no)
+      #FD5B41: App receives GATT_QUERY_COMPLETE event
+          with ATT_ERROR_INSUFFICIENT_X;
+      stop
+    else (yes)
+      : SM_EVENT_PAIRING_STARTED;
+      : start pairing;
+      if (pairing success?) then (yes)
+          : SM_EVENT_PAIRING_COMPLETE(ERROR_CODE_SUCCESS);
+          : GATT Client request re-sent;
+          #23DB2B : App receives GATT Response;
+          stop
+      else (no)
+          : SM_EVENT_PAIRING_COMPLETE(error);
+         #FD5B41: App receives GATT_QUERY_COMPLETE event 
+              with ATT_ERROR_INSUFFICIENT_X;
+          stop
+      endif
+    endif
+  endif
+else (yes)
+   : SM_EVENT_REENCRYPTION_STARTED;
+   : start encryption;
+   if (re-encrypted) then (yes)
+     : SM_EVENT_REENCRYPTION_COMPLETE(ERROR_CODE_SUCCESS);
+     : GATT Client request sent;
+     #23DB2B : App receives GATT Response;
+     stop
+   else (no)
+     : SM_EVENT_REENCRYPTION_COMPLETE(error);
+     #FD5B41: App receives GATT_QUERY_COMPLETE event 
+          with ATT_ERROR_BONDING_INFORMATION_MISSING;
+     stop
+     note right
+       App can delete bonding 
+       information and repeat 
+       the GATT Client request
+    end note
+  endif
+endif
+@enduml
+
+PlantUML version 1.2020.22beta2(Unknown compile time)
+(GPL source distribution)
+Java Runtime: Java(TM) SE Runtime Environment
+JVM: Java HotSpot(TM) 64-Bit Server VM
+Default Encoding: UTF-8
+Language: en
+Country: US
+--></g></svg>
\ No newline at end of file
diff --git a/doc/manual/docs/picts/le_security_flow_control_proactive_authentication_peripheral.svg b/doc/manual/docs/picts/le_security_flow_control_proactive_authentication_peripheral.svg
new file mode 100644
index 000000000..735221143
--- /dev/null
+++ b/doc/manual/docs/picts/le_security_flow_control_proactive_authentication_peripheral.svg
@@ -0,0 +1,64 @@
+<?xml version="1.0" encoding="UTF-8" standalone="no"?><svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" contentScriptType="application/ecmascript" contentStyleType="text/css" height="807px" preserveAspectRatio="none" style="width:2039px;height:807px;" version="1.1" viewBox="0 0 2039 807" width="2039px" zoomAndPan="magnify"><defs><filter height="300%" id="f1ityx9v430wbn" width="300%" x="-1" y="-1"><feGaussianBlur result="blurOut" stdDeviation="2.0"/><feColorMatrix in="blurOut" result="blurOut2" type="matrix" values="0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 .4 0"/><feOffset dx="4.0" dy="4.0" in="blurOut2" result="blurOut3"/><feBlend in="SourceGraphic" in2="blurOut3" mode="normal"/></filter></defs><g><text fill="#000000" font-family="sans-serif" font-size="18" lengthAdjust="spacingAndGlyphs" textLength="401" x="818.25" y="26.708">Proactive Authentication in Peripheral Role</text><ellipse cx="1030.1563" cy="40.9531" fill="#000000" filter="url(#f1ityx9v430wbn)" rx="10" ry="10" style="stroke:none;stroke-width:1.0;"/><rect fill="#FEFECE" filter="url(#f1ityx9v430wbn)" height="33.9688" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="166" x="947.1563" y="70.9531"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="142" x="961.1563" y="92.0918">App on B connects to A</text><rect fill="#FEFECE" filter="url(#f1ityx9v430wbn)" height="33.9688" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="254" x="903.1563" y="124.9219"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="230" x="917.1563" y="146.0605">App on A triggers GATT Client request</text><polygon fill="#FEFECE" filter="url(#f1ityx9v430wbn)" points="989.1563,178.8906,1071.1563,178.8906,1083.1563,190.8906,1071.1563,202.8906,989.1563,202.8906,977.1563,190.8906,989.1563,178.8906" style="stroke:#A80036;stroke-width:1.5;"/><text fill="#000000" font-family="sans-serif" font-size="11" lengthAdjust="spacingAndGlyphs" textLength="82" x="989.1563" y="194.6987">LTK available?</text><text fill="#000000" font-family="sans-serif" font-size="11" lengthAdjust="spacingAndGlyphs" textLength="14" x="963.1563" y="188.2964">no</text><text fill="#000000" font-family="sans-serif" font-size="11" lengthAdjust="spacingAndGlyphs" textLength="21" x="1083.1563" y="188.2964">yes</text><rect fill="#FEFECE" filter="url(#f1ityx9v430wbn)" height="33.9688" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="173" x="295.8125" y="212.8906"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="149" x="309.8125" y="234.0293">GATT Client request sent</text><polygon fill="#FEFECE" filter="url(#f1ityx9v430wbn)" points="213.8125,266.8594,550.8125,266.8594,562.8125,278.8594,550.8125,290.8594,213.8125,290.8594,201.8125,278.8594,213.8125,266.8594" style="stroke:#A80036;stroke-width:1.5;"/><text fill="#000000" font-family="sans-serif" font-size="11" lengthAdjust="spacingAndGlyphs" textLength="337" x="213.8125" y="282.6675">GATT Server returns an ATT_ERROR_INSUFFICIENT_X error?</text><text fill="#000000" font-family="sans-serif" font-size="11" lengthAdjust="spacingAndGlyphs" textLength="14" x="187.8125" y="276.2651">no</text><text fill="#000000" font-family="sans-serif" font-size="11" lengthAdjust="spacingAndGlyphs" textLength="21" x="562.8125" y="276.2651">yes</text><rect fill="#23DB2B" filter="url(#f1ityx9v430wbn)" height="33.9688" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="204" x="11" y="300.8594"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="180" x="25" y="321.998">App receives GATT Response</text><ellipse cx="113" cy="380.8281" fill="#FFFFFF" filter="url(#f1ityx9v430wbn)" rx="11" ry="11" style="stroke:#000000;stroke-width:1.0;"/><ellipse cx="113" cy="380.8281" fill="#000000" rx="6" ry="6" style="stroke:#7F7F7F;stroke-width:1.0;"/><polygon fill="#FEFECE" filter="url(#f1ityx9v430wbn)" points="536.625,300.8594,766.625,300.8594,778.625,312.8594,766.625,324.8594,536.625,324.8594,524.625,312.8594,536.625,300.8594" style="stroke:#A80036;stroke-width:1.5;"/><text fill="#000000" font-family="sans-serif" font-size="11" lengthAdjust="spacingAndGlyphs" textLength="230" x="536.625" y="316.6675">ENABLE_GATT_CLIENT_PAIRING defined?</text><text fill="#000000" font-family="sans-serif" font-size="11" lengthAdjust="spacingAndGlyphs" textLength="14" x="510.625" y="310.2651">no</text><text fill="#000000" font-family="sans-serif" font-size="11" lengthAdjust="spacingAndGlyphs" textLength="21" x="778.625" y="310.2651">yes</text><rect fill="#FD5B41" filter="url(#f1ityx9v430wbn)" height="47.9375" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="291" x="245" y="334.8594"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="267" x="259" y="355.998">App receives GATT_QUERY_COMPLETE event</text><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="192" x="271" y="369.9668">with ATT_ERROR_INSUFFICIENT_X</text><ellipse cx="390.5" cy="428.7969" fill="#FFFFFF" filter="url(#f1ityx9v430wbn)" rx="11" ry="11" style="stroke:#000000;stroke-width:1.0;"/><ellipse cx="390.5" cy="428.7969" fill="#000000" rx="6" ry="6" style="stroke:#7F7F7F;stroke-width:1.0;"/><rect fill="#FEFECE" filter="url(#f1ityx9v430wbn)" height="33.9688" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="194" x="815.75" y="334.8594"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="170" x="829.75" y="355.998">SM_EVENT_PAIRING_STARTED</text><rect fill="#FEFECE" filter="url(#f1ityx9v430wbn)" height="33.9688" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="233" x="796.25" y="403.8281"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="209" x="810.25" y="424.9668">SM on A sends SECURITY REQUEST</text><rect fill="#FEFECE" filter="url(#f1ityx9v430wbn)" height="33.9688" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="279" x="773.25" y="472.7969"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="255" x="787.25" y="493.9355">SM on B should perform pairing sequence</text><polygon fill="#FEFECE" filter="url(#f1ityx9v430wbn)" points="866.25,541.7656,959.25,541.7656,971.25,553.7656,959.25,565.7656,866.25,565.7656,854.25,553.7656,866.25,541.7656" style="stroke:#A80036;stroke-width:1.5;"/><text fill="#000000" font-family="sans-serif" font-size="11" lengthAdjust="spacingAndGlyphs" textLength="93" x="866.25" y="557.5737">pairing success?</text><text fill="#000000" font-family="sans-serif" font-size="11" lengthAdjust="spacingAndGlyphs" textLength="21" x="833.25" y="551.1714">yes</text><text fill="#000000" font-family="sans-serif" font-size="11" lengthAdjust="spacingAndGlyphs" textLength="14" x="971.25" y="551.1714">no</text><rect fill="#FEFECE" filter="url(#f1ityx9v430wbn)" height="33.9688" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="352" x="566" y="575.7656"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="328" x="580" y="596.9043">SM_EVENT_PAIRING_COMPLETE(ERROR_CODE_SUCCESS)</text><rect fill="#FEFECE" filter="url(#f1ityx9v430wbn)" height="33.9688" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="191" x="646.5" y="644.7344"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="167" x="660.5" y="665.873">GATT Client request re-sent</text><rect fill="#23DB2B" filter="url(#f1ityx9v430wbn)" height="33.9688" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="204" x="640" y="712.6719"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="180" x="654" y="733.8105">App receives GATT Response</text><ellipse cx="742" cy="779.6406" fill="#FFFFFF" filter="url(#f1ityx9v430wbn)" rx="11" ry="11" style="stroke:#000000;stroke-width:1.0;"/><ellipse cx="742" cy="779.6406" fill="#000000" rx="6" ry="6" style="stroke:#7F7F7F;stroke-width:1.0;"/><rect fill="#FEFECE" filter="url(#f1ityx9v430wbn)" height="33.9688" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="243" x="962" y="575.7656"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="219" x="976" y="596.9043">SM_EVENT_PAIRING_COMPLETE(error)</text><rect fill="#FD5B41" filter="url(#f1ityx9v430wbn)" height="47.9375" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="291" x="938" y="644.7344"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="267" x="952" y="665.873">App receives GATT_QUERY_COMPLETE event</text><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="192" x="968" y="679.8418">with ATT_ERROR_INSUFFICIENT_X</text><ellipse cx="1083.5" cy="737.6406" fill="#FFFFFF" filter="url(#f1ityx9v430wbn)" rx="11" ry="11" style="stroke:#000000;stroke-width:1.0;"/><ellipse cx="1083.5" cy="737.6406" fill="#000000" rx="6" ry="6" style="stroke:#7F7F7F;stroke-width:1.0;"/><rect fill="#FEFECE" filter="url(#f1ityx9v430wbn)" height="33.9688" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="235" x="1510.5" y="212.8906"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="211" x="1524.5" y="234.0293">SM_EVENT_REENCRYPTION_STARTED</text><rect fill="#FEFECE" filter="url(#f1ityx9v430wbn)" height="33.9688" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="233" x="1511.5" y="266.8594"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="209" x="1525.5" y="287.998">SM on A sends SECURITY REQUEST</text><rect fill="#FEFECE" filter="url(#f1ityx9v430wbn)" height="33.9688" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="330" x="1463" y="335.8281"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="306" x="1477" y="356.9668">SM on B should encrypt connection if LTK available</text><polygon fill="#FEFECE" filter="url(#f1ityx9v430wbn)" points="1591,404.7969,1665,404.7969,1677,416.7969,1665,428.7969,1591,428.7969,1579,416.7969,1591,404.7969" style="stroke:#A80036;stroke-width:1.5;"/><text fill="#000000" font-family="sans-serif" font-size="11" lengthAdjust="spacingAndGlyphs" textLength="74" x="1591" y="420.605">re-encrypted</text><text fill="#000000" font-family="sans-serif" font-size="11" lengthAdjust="spacingAndGlyphs" textLength="21" x="1558" y="414.2026">yes</text><text fill="#000000" font-family="sans-serif" font-size="11" lengthAdjust="spacingAndGlyphs" textLength="14" x="1677" y="414.2026">no</text><rect fill="#FEFECE" filter="url(#f1ityx9v430wbn)" height="33.9688" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="393" x="1239" y="438.7969"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="369" x="1253" y="459.9355">SM_EVENT_REENCRYPTION_COMPLETE(ERROR_CODE_SUCCESS)</text><rect fill="#FEFECE" filter="url(#f1ityx9v430wbn)" height="33.9688" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="173" x="1349" y="507.7656"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="149" x="1363" y="528.9043">GATT Client request sent</text><rect fill="#23DB2B" filter="url(#f1ityx9v430wbn)" height="33.9688" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="204" x="1333.5" y="576.7344"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="180" x="1347.5" y="597.873">App receives GATT Response</text><ellipse cx="1435.5" cy="656.7031" fill="#FFFFFF" filter="url(#f1ityx9v430wbn)" rx="11" ry="11" style="stroke:#000000;stroke-width:1.0;"/><ellipse cx="1435.5" cy="656.7031" fill="#000000" rx="6" ry="6" style="stroke:#7F7F7F;stroke-width:1.0;"/><rect fill="#FEFECE" filter="url(#f1ityx9v430wbn)" height="33.9688" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="284" x="1678.5" y="438.7969"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="260" x="1692.5" y="459.9355">SM_EVENT_REENCRYPTION_COMPLETE(error)</text><rect fill="#FD5B41" filter="url(#f1ityx9v430wbn)" height="47.9375" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="337" x="1652" y="507.7656"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="267" x="1666" y="528.9043">App receives GATT_QUERY_COMPLETE event</text><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="297" x="1682" y="542.873">with ATT_ERROR_BONDING_INFORMATION_MISSING</text><path d="M1851.5,590.7031 L1851.5,614.4023 L1831.5,618.4023 L1851.5,622.4023 L1851.5,646.1016 A0,0 0 0 0 1851.5,646.1016 L2027.5,646.1016 A0,0 0 0 0 2027.5,646.1016 L2027.5,600.7031 L2017.5,590.7031 L1851.5,590.7031 A0,0 0 0 0 1851.5,590.7031 " fill="#FBFB77" filter="url(#f1ityx9v430wbn)" style="stroke:#A80036;stroke-width:1.0;"/><path d="M2017.5,590.7031 L2017.5,600.7031 L2027.5,600.7031 L2017.5,590.7031 " fill="#FBFB77" style="stroke:#A80036;stroke-width:1.0;"/><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacingAndGlyphs" textLength="151" x="1857.5" y="607.77">App can delete bonding</text><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacingAndGlyphs" textLength="148" x="1857.5" y="622.9028">information and repeat</text><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacingAndGlyphs" textLength="153" x="1857.5" y="638.0356">the GATT Client request</text><ellipse cx="1820.5" cy="618.4023" fill="#FFFFFF" filter="url(#f1ityx9v430wbn)" rx="11" ry="11" style="stroke:#000000;stroke-width:1.0;"/><ellipse cx="1820.5" cy="618.4023" fill="#000000" rx="6" ry="6" style="stroke:#7F7F7F;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="1030.1563" x2="1030.1563" y1="50.9531" y2="70.9531"/><polygon fill="#A80036" points="1026.1563,60.9531,1030.1563,70.9531,1034.1563,60.9531,1030.1563,64.9531" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="1030.1563" x2="1030.1563" y1="104.9219" y2="124.9219"/><polygon fill="#A80036" points="1026.1563,114.9219,1030.1563,124.9219,1034.1563,114.9219,1030.1563,118.9219" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="113" x2="113" y1="334.8281" y2="369.8281"/><polygon fill="#A80036" points="109,359.8281,113,369.8281,117,359.8281,113,363.8281" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="390.5" x2="390.5" y1="382.7969" y2="417.7969"/><polygon fill="#A80036" points="386.5,407.7969,390.5,417.7969,394.5,407.7969,390.5,411.7969" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="912.75" x2="912.75" y1="368.8281" y2="403.8281"/><polygon fill="#A80036" points="908.75,393.8281,912.75,403.8281,916.75,393.8281,912.75,397.8281" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="912.75" x2="912.75" y1="437.7969" y2="472.7969"/><polygon fill="#A80036" points="908.75,462.7969,912.75,472.7969,916.75,462.7969,912.75,466.7969" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="742" x2="742" y1="609.7344" y2="644.7344"/><polygon fill="#A80036" points="738,634.7344,742,644.7344,746,634.7344,742,638.7344" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="742" x2="742" y1="678.7031" y2="712.6719"/><polygon fill="#A80036" points="738,702.6719,742,712.6719,746,702.6719,742,706.6719" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="742" x2="742" y1="746.6406" y2="768.6406"/><polygon fill="#A80036" points="738,758.6406,742,768.6406,746,758.6406,742,762.6406" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="1083.5" x2="1083.5" y1="609.7344" y2="644.7344"/><polygon fill="#A80036" points="1079.5,634.7344,1083.5,644.7344,1087.5,634.7344,1083.5,638.7344" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="1083.5" x2="1083.5" y1="692.6719" y2="726.6406"/><polygon fill="#A80036" points="1079.5,716.6406,1083.5,726.6406,1087.5,716.6406,1083.5,720.6406" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="854.25" x2="742" y1="553.7656" y2="553.7656"/><line style="stroke:#A80036;stroke-width:1.5;" x1="742" x2="742" y1="553.7656" y2="575.7656"/><polygon fill="#A80036" points="738,565.7656,742,575.7656,746,565.7656,742,569.7656" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="971.25" x2="1083.5" y1="553.7656" y2="553.7656"/><line style="stroke:#A80036;stroke-width:1.5;" x1="1083.5" x2="1083.5" y1="553.7656" y2="575.7656"/><polygon fill="#A80036" points="1079.5,565.7656,1083.5,575.7656,1087.5,565.7656,1083.5,569.7656" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="912.75" x2="912.75" y1="506.7656" y2="541.7656"/><polygon fill="#A80036" points="908.75,531.7656,912.75,541.7656,916.75,531.7656,912.75,535.7656" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="524.625" x2="390.5" y1="312.8594" y2="312.8594"/><line style="stroke:#A80036;stroke-width:1.5;" x1="390.5" x2="390.5" y1="312.8594" y2="334.8594"/><polygon fill="#A80036" points="386.5,324.8594,390.5,334.8594,394.5,324.8594,390.5,328.8594" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="778.625" x2="912.75" y1="312.8594" y2="312.8594"/><line style="stroke:#A80036;stroke-width:1.5;" x1="912.75" x2="912.75" y1="312.8594" y2="334.8594"/><polygon fill="#A80036" points="908.75,324.8594,912.75,334.8594,916.75,324.8594,912.75,328.8594" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="201.8125" x2="113" y1="278.8594" y2="278.8594"/><line style="stroke:#A80036;stroke-width:1.5;" x1="113" x2="113" y1="278.8594" y2="300.8594"/><polygon fill="#A80036" points="109,290.8594,113,300.8594,117,290.8594,113,294.8594" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="562.8125" x2="651.625" y1="278.8594" y2="278.8594"/><line style="stroke:#A80036;stroke-width:1.5;" x1="651.625" x2="651.625" y1="278.8594" y2="300.8594"/><polygon fill="#A80036" points="647.625,290.8594,651.625,300.8594,655.625,290.8594,651.625,294.8594" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="382.3125" x2="382.3125" y1="246.8594" y2="266.8594"/><polygon fill="#A80036" points="378.3125,256.8594,382.3125,266.8594,386.3125,256.8594,382.3125,260.8594" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="1628" x2="1628" y1="246.8594" y2="266.8594"/><polygon fill="#A80036" points="1624,256.8594,1628,266.8594,1632,256.8594,1628,260.8594" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="1628" x2="1628" y1="300.8281" y2="335.8281"/><polygon fill="#A80036" points="1624,325.8281,1628,335.8281,1632,325.8281,1628,329.8281" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="1435.5" x2="1435.5" y1="472.7656" y2="507.7656"/><polygon fill="#A80036" points="1431.5,497.7656,1435.5,507.7656,1439.5,497.7656,1435.5,501.7656" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="1435.5" x2="1435.5" y1="541.7344" y2="576.7344"/><polygon fill="#A80036" points="1431.5,566.7344,1435.5,576.7344,1439.5,566.7344,1435.5,570.7344" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="1435.5" x2="1435.5" y1="610.7031" y2="645.7031"/><polygon fill="#A80036" points="1431.5,635.7031,1435.5,645.7031,1439.5,635.7031,1435.5,639.7031" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="1820.5" x2="1820.5" y1="472.7656" y2="507.7656"/><polygon fill="#A80036" points="1816.5,497.7656,1820.5,507.7656,1824.5,497.7656,1820.5,501.7656" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="1820.5" x2="1820.5" y1="555.7031" y2="607.4023"/><polygon fill="#A80036" points="1816.5,597.4023,1820.5,607.4023,1824.5,597.4023,1820.5,601.4023" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="1579" x2="1435.5" y1="416.7969" y2="416.7969"/><line style="stroke:#A80036;stroke-width:1.5;" x1="1435.5" x2="1435.5" y1="416.7969" y2="438.7969"/><polygon fill="#A80036" points="1431.5,428.7969,1435.5,438.7969,1439.5,428.7969,1435.5,432.7969" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="1677" x2="1820.5" y1="416.7969" y2="416.7969"/><line style="stroke:#A80036;stroke-width:1.5;" x1="1820.5" x2="1820.5" y1="416.7969" y2="438.7969"/><polygon fill="#A80036" points="1816.5,428.7969,1820.5,438.7969,1824.5,428.7969,1820.5,432.7969" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="1628" x2="1628" y1="369.7969" y2="404.7969"/><polygon fill="#A80036" points="1624,394.7969,1628,404.7969,1632,394.7969,1628,398.7969" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="977.1563" x2="382.3125" y1="190.8906" y2="190.8906"/><line style="stroke:#A80036;stroke-width:1.5;" x1="382.3125" x2="382.3125" y1="190.8906" y2="212.8906"/><polygon fill="#A80036" points="378.3125,202.8906,382.3125,212.8906,386.3125,202.8906,382.3125,206.8906" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="1083.1563" x2="1628" y1="190.8906" y2="190.8906"/><line style="stroke:#A80036;stroke-width:1.5;" x1="1628" x2="1628" y1="190.8906" y2="212.8906"/><polygon fill="#A80036" points="1624,202.8906,1628,212.8906,1632,202.8906,1628,206.8906" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="1030.1563" x2="1030.1563" y1="158.8906" y2="178.8906"/><polygon fill="#A80036" points="1026.1563,168.8906,1030.1563,178.8906,1034.1563,168.8906,1030.1563,172.8906" style="stroke:#A80036;stroke-width:1.0;"/><!--MD5=[b14d4dadaec62ab880e685d98454de5a]
+@startuml
+title Proactive Authentication in Peripheral Role
+start
+: App on B connects to A;
+: App on A triggers GATT Client request;
+if (LTK available?) then (no)
+  : GATT Client request sent;
+  if (GATT Server returns an ATT_ERROR_INSUFFICIENT_X error?) then (no)
+    #23DB2B : App receives GATT Response;
+    stop
+  else (yes)
+    if (ENABLE_GATT_CLIENT_PAIRING defined?) then (no)
+      #FD5B41: App receives GATT_QUERY_COMPLETE event
+          with ATT_ERROR_INSUFFICIENT_X;
+      stop
+    else (yes)
+      : SM_EVENT_PAIRING_STARTED;
+      : SM on A sends SECURITY REQUEST;
+      : SM on B should perform pairing sequence;
+      if (pairing success?) then (yes)
+          : SM_EVENT_PAIRING_COMPLETE(ERROR_CODE_SUCCESS);
+          : GATT Client request re-sent;
+          #23DB2B : App receives GATT Response;
+          stop
+      else (no)
+          : SM_EVENT_PAIRING_COMPLETE(error);
+         #FD5B41: App receives GATT_QUERY_COMPLETE event 
+              with ATT_ERROR_INSUFFICIENT_X;
+          stop
+      endif
+    endif
+  endif
+else (yes)
+   : SM_EVENT_REENCRYPTION_STARTED;
+   : SM on A sends SECURITY REQUEST;
+   : SM on B should encrypt connection if LTK available;
+   if (re-encrypted) then (yes)
+     : SM_EVENT_REENCRYPTION_COMPLETE(ERROR_CODE_SUCCESS);
+     : GATT Client request sent;
+     #23DB2B : App receives GATT Response;
+     stop
+   else (no)
+     : SM_EVENT_REENCRYPTION_COMPLETE(error);
+     #FD5B41: App receives GATT_QUERY_COMPLETE event 
+          with ATT_ERROR_BONDING_INFORMATION_MISSING;
+     stop
+     note right
+       App can delete bonding 
+       information and repeat 
+       the GATT Client request
+    end note
+  endif
+endif
+@enduml
+
+PlantUML version 1.2020.22beta2(Unknown compile time)
+(GPL source distribution)
+Java Runtime: Java(TM) SE Runtime Environment
+JVM: Java HotSpot(TM) 64-Bit Server VM
+Default Encoding: UTF-8
+Language: en
+Country: US
+--></g></svg>
\ No newline at end of file
diff --git a/doc/manual/docs/picts/le_security_flow_control_reactive_authentication.svg b/doc/manual/docs/picts/le_security_flow_control_reactive_authentication.svg
deleted file mode 100644
index 7713379ef..000000000
--- a/doc/manual/docs/picts/le_security_flow_control_reactive_authentication.svg
+++ /dev/null
@@ -1,55 +0,0 @@
-<?xml version="1.0" encoding="UTF-8" standalone="no"?><svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" contentScriptType="application/ecmascript" contentStyleType="text/css" height="897px" preserveAspectRatio="none" style="width:1203px;height:897px;" version="1.1" viewBox="0 0 1203 897" width="1203px" zoomAndPan="magnify"><defs><filter height="300%" id="fmhpxcdlu5ogc" width="300%" x="-1" y="-1"><feGaussianBlur result="blurOut" stdDeviation="2.0"/><feColorMatrix in="blurOut" result="blurOut2" type="matrix" values="0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 .4 0"/><feOffset dx="4.0" dy="4.0" in="blurOut2" result="blurOut3"/><feBlend in="SourceGraphic" in2="blurOut3" mode="normal"/></filter></defs><g><text fill="#000000" font-family="sans-serif" font-size="18" lengthAdjust="spacingAndGlyphs" textLength="223" x="489.25" y="26.708">Reactive Authentication</text><ellipse cx="805.6875" cy="40.9531" fill="#000000" filter="url(#fmhpxcdlu5ogc)" rx="10" ry="10" style="stroke: none; stroke-width: 1.0;"/><rect fill="#FEFECE" filter="url(#fmhpxcdlu5ogc)" height="33.9688" rx="12.5" ry="12.5" style="stroke: #A80036; stroke-width: 1.5;" width="119" x="746.1875" y="70.9531"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="95" x="760.1875" y="92.0918">A connects to B</text><rect fill="#FEFECE" filter="url(#fmhpxcdlu5ogc)" height="33.9688" rx="12.5" ry="12.5" style="stroke: #A80036; stroke-width: 1.5;" width="254" x="678.6875" y="124.9219"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="230" x="692.6875" y="146.0605">App triggers GATT Client request on A</text><rect fill="#FEFECE" filter="url(#fmhpxcdlu5ogc)" height="33.9688" rx="12.5" ry="12.5" style="stroke: #A80036; stroke-width: 1.5;" width="173" x="719.1875" y="178.8906"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="149" x="733.1875" y="200.0293">GATT Client request sent</text><polygon fill="#FEFECE" filter="url(#fmhpxcdlu5ogc)" points="640.1875,232.8594,971.1875,232.8594,983.1875,244.8594,971.1875,256.8594,640.1875,256.8594,628.1875,244.8594,640.1875,232.8594" style="stroke: #A80036; stroke-width: 1.5;"/><text fill="#000000" font-family="sans-serif" font-size="11" lengthAdjust="spacingAndGlyphs" textLength="331" x="640.1875" y="248.6675">GATT Server returns an ATT_ERROR_INSUFFICIENT_X error</text><text fill="#000000" font-family="sans-serif" font-size="11" lengthAdjust="spacingAndGlyphs" textLength="21" x="607.1875" y="242.2651">yes</text><text fill="#000000" font-family="sans-serif" font-size="11" lengthAdjust="spacingAndGlyphs" textLength="14" x="983.1875" y="242.2651">no</text><polygon fill="#FEFECE" filter="url(#fmhpxcdlu5ogc)" points="438.875,266.8594,614.875,266.8594,626.875,278.8594,614.875,290.8594,438.875,290.8594,426.875,278.8594,438.875,266.8594" style="stroke: #A80036; stroke-width: 1.5;"/><text fill="#000000" font-family="sans-serif" font-size="11" lengthAdjust="spacingAndGlyphs" textLength="176" x="438.875" y="282.6675">ENABLE_GATT_CLIENT_PAIRING</text><text fill="#000000" font-family="sans-serif" font-size="11" lengthAdjust="spacingAndGlyphs" textLength="21" x="405.875" y="276.2651">yes</text><text fill="#000000" font-family="sans-serif" font-size="11" lengthAdjust="spacingAndGlyphs" textLength="14" x="626.875" y="276.2651">no</text><rect fill="#FEFECE" filter="url(#fmhpxcdlu5ogc)" height="33.9688" rx="12.5" ry="12.5" style="stroke: #A80036; stroke-width: 1.5;" width="119" x="187.25" y="349.2617"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="95" x="201.25" y="370.4004">start encryption</text><polygon fill="#FEFECE" filter="url(#fmhpxcdlu5ogc)" points="209.75,418.2305,283.75,418.2305,295.75,430.2305,283.75,442.2305,209.75,442.2305,197.75,430.2305,209.75,418.2305" style="stroke: #A80036; stroke-width: 1.5;"/><text fill="#000000" font-family="sans-serif" font-size="11" lengthAdjust="spacingAndGlyphs" textLength="74" x="209.75" y="434.0386">re-encrypted</text><text fill="#000000" font-family="sans-serif" font-size="11" lengthAdjust="spacingAndGlyphs" textLength="21" x="176.75" y="427.6362">yes</text><text fill="#000000" font-family="sans-serif" font-size="11" lengthAdjust="spacingAndGlyphs" textLength="14" x="295.75" y="427.6362">no</text><rect fill="#FEFECE" filter="url(#fmhpxcdlu5ogc)" height="33.9688" rx="12.5" ry="12.5" style="stroke: #A80036; stroke-width: 1.5;" width="173" x="52.5" y="452.2305"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="149" x="66.5" y="473.3691">GATT Client request sent</text><rect fill="#23DB2B" filter="url(#fmhpxcdlu5ogc)" height="33.9688" rx="12.5" ry="12.5" style="stroke: #A80036; stroke-width: 1.5;" width="204" x="37" y="506.1992"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="180" x="51" y="527.3379">App receives GATT Response</text><ellipse cx="139" cy="571.168" fill="#FFFFFF" filter="url(#fmhpxcdlu5ogc)" rx="11" ry="11" style="stroke: #000000; stroke-width: 1.0;"/><ellipse cx="139" cy="571.168" fill="#000000" rx="6" ry="6" style="stroke: #7F7F7F; stroke-width: 1.0;"/><rect fill="#FEFECE" filter="url(#fmhpxcdlu5ogc)" height="33.9688" rx="12.5" ry="12.5" style="stroke: #A80036; stroke-width: 1.5;" width="187" x="261" y="452.2305"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="163" x="275" y="473.3691">delete bonding information</text><polygon fill="#FEFECE" filter="url(#fmhpxcdlu5ogc)" points="208.75,300.8594,284.75,300.8594,296.75,312.8594,284.75,324.8594,208.75,324.8594,196.75,312.8594,208.75,300.8594" style="stroke: #A80036; stroke-width: 1.5;"/><text fill="#000000" font-family="sans-serif" font-size="11" lengthAdjust="spacingAndGlyphs" textLength="21" x="250.75" y="335.0698">yes</text><text fill="#000000" font-family="sans-serif" font-size="11" lengthAdjust="spacingAndGlyphs" textLength="76" x="208.75" y="316.6675">LTK available</text><polygon fill="#FEFECE" filter="url(#fmhpxcdlu5ogc)" points="246.75,602.168,258.75,614.168,246.75,626.168,234.75,614.168,246.75,602.168" style="stroke: #A80036; stroke-width: 1.5;"/><rect fill="#FEFECE" filter="url(#fmhpxcdlu5ogc)" height="33.9688" rx="12.5" ry="12.5" style="stroke: #A80036; stroke-width: 1.5;" width="96" x="198.75" y="646.168"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="72" x="212.75" y="667.3066">start pairing</text><polygon fill="#FEFECE" filter="url(#fmhpxcdlu5ogc)" points="228.75,700.1367,264.75,700.1367,276.75,712.1367,264.75,724.1367,228.75,724.1367,216.75,712.1367,228.75,700.1367" style="stroke: #A80036; stroke-width: 1.5;"/><text fill="#000000" font-family="sans-serif" font-size="11" lengthAdjust="spacingAndGlyphs" textLength="36" x="228.75" y="715.9448">paired</text><text fill="#000000" font-family="sans-serif" font-size="11" lengthAdjust="spacingAndGlyphs" textLength="21" x="195.75" y="709.5425">yes</text><text fill="#000000" font-family="sans-serif" font-size="11" lengthAdjust="spacingAndGlyphs" textLength="14" x="276.75" y="709.5425">no</text><rect fill="#FEFECE" filter="url(#fmhpxcdlu5ogc)" height="33.9688" rx="12.5" ry="12.5" style="stroke: #A80036; stroke-width: 1.5;" width="173" x="26.5" y="734.1367"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="149" x="40.5" y="755.2754">GATT Client request sent</text><rect fill="#23DB2B" filter="url(#fmhpxcdlu5ogc)" height="33.9688" rx="12.5" ry="12.5" style="stroke: #A80036; stroke-width: 1.5;" width="204" x="11" y="802.0742"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="180" x="25" y="823.2129">App receives GATT Response</text><ellipse cx="113" cy="869.043" fill="#FFFFFF" filter="url(#fmhpxcdlu5ogc)" rx="11" ry="11" style="stroke: #000000; stroke-width: 1.0;"/><ellipse cx="113" cy="869.043" fill="#000000" rx="6" ry="6" style="stroke: #7F7F7F; stroke-width: 1.0;"/><rect fill="#FD5B41" filter="url(#fmhpxcdlu5ogc)" height="47.9375" rx="12.5" ry="12.5" style="stroke: #A80036; stroke-width: 1.5;" width="291" x="235" y="734.1367"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="267" x="249" y="755.2754">App receives GATT_QUERY_COMPLETE event</text><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="192" x="253" y="769.2441">with ATT_ERROR_INSUFFICIENT_X</text><ellipse cx="380.5" cy="827.043" fill="#FFFFFF" filter="url(#fmhpxcdlu5ogc)" rx="11" ry="11" style="stroke: #000000; stroke-width: 1.0;"/><ellipse cx="380.5" cy="827.043" fill="#000000" rx="6" ry="6" style="stroke: #7F7F7F; stroke-width: 1.0;"/><rect fill="#FD5B41" filter="url(#fmhpxcdlu5ogc)" height="47.9375" rx="12.5" ry="12.5" style="stroke: #A80036; stroke-width: 1.5;" width="291" x="661.5" y="300.8594"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="267" x="675.5" y="321.998">App receives GATT_QUERY_COMPLETE event</text><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="192" x="695.5" y="335.9668">with ATT_ERROR_INSUFFICIENT_X</text><path d="M556,383.7969 L556,424.0625 A0,0 0 0 0 556,424.0625 L776,424.0625 A0,0 0 0 0 776,424.0625 L776,407.9297 L796,403.9297 L776,399.9297 L776,393.7969 L766,383.7969 L556,383.7969 A0,0 0 0 0 556,383.7969 " fill="#FBFB77" filter="url(#fmhpxcdlu5ogc)" style="stroke: #A80036; stroke-width: 1.0;"/><path d="M766,383.7969 L766,393.7969 L776,393.7969 L766,383.7969 " fill="#FBFB77" style="stroke: #A80036; stroke-width: 1.0;"/><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacingAndGlyphs" textLength="173" x="562" y="400.8638">App can trigger pairing and</text><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacingAndGlyphs" textLength="199" x="562" y="415.9966">repeat the GATT Client request</text><ellipse cx="807" cy="403.9297" fill="#FFFFFF" filter="url(#fmhpxcdlu5ogc)" rx="11" ry="11" style="stroke: #000000; stroke-width: 1.0;"/><ellipse cx="807" cy="403.9297" fill="#000000" rx="6" ry="6" style="stroke: #7F7F7F; stroke-width: 1.0;"/><rect fill="#23DB2B" filter="url(#fmhpxcdlu5ogc)" height="33.9688" rx="12.5" ry="12.5" style="stroke: #A80036; stroke-width: 1.5;" width="204" x="982.5" y="266.8594"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="180" x="996.5" y="287.998">App receives GATT Response</text><ellipse cx="1084.5" cy="346.8281" fill="#FFFFFF" filter="url(#fmhpxcdlu5ogc)" rx="11" ry="11" style="stroke: #000000; stroke-width: 1.0;"/><ellipse cx="1084.5" cy="346.8281" fill="#000000" rx="6" ry="6" style="stroke: #7F7F7F; stroke-width: 1.0;"/><line style="stroke: #A80036; stroke-width: 1.5;" x1="805.6875" x2="805.6875" y1="50.9531" y2="70.9531"/><polygon fill="#A80036" points="801.6875,60.9531,805.6875,70.9531,809.6875,60.9531,805.6875,64.9531" style="stroke: #A80036; stroke-width: 1.0;"/><line style="stroke: #A80036; stroke-width: 1.5;" x1="805.6875" x2="805.6875" y1="104.9219" y2="124.9219"/><polygon fill="#A80036" points="801.6875,114.9219,805.6875,124.9219,809.6875,114.9219,805.6875,118.9219" style="stroke: #A80036; stroke-width: 1.0;"/><line style="stroke: #A80036; stroke-width: 1.5;" x1="805.6875" x2="805.6875" y1="158.8906" y2="178.8906"/><polygon fill="#A80036" points="801.6875,168.8906,805.6875,178.8906,809.6875,168.8906,805.6875,172.8906" style="stroke: #A80036; stroke-width: 1.0;"/><line style="stroke: #A80036; stroke-width: 1.5;" x1="139" x2="139" y1="486.1992" y2="506.1992"/><polygon fill="#A80036" points="135,496.1992,139,506.1992,143,496.1992,139,500.1992" style="stroke: #A80036; stroke-width: 1.0;"/><line style="stroke: #A80036; stroke-width: 1.5;" x1="139" x2="139" y1="540.168" y2="560.168"/><polygon fill="#A80036" points="135,550.168,139,560.168,143,550.168,139,554.168" style="stroke: #A80036; stroke-width: 1.0;"/><line style="stroke: #A80036; stroke-width: 1.5;" x1="197.75" x2="139" y1="430.2305" y2="430.2305"/><line style="stroke: #A80036; stroke-width: 1.5;" x1="139" x2="139" y1="430.2305" y2="452.2305"/><polygon fill="#A80036" points="135,442.2305,139,452.2305,143,442.2305,139,446.2305" style="stroke: #A80036; stroke-width: 1.0;"/><line style="stroke: #A80036; stroke-width: 1.5;" x1="295.75" x2="354.5" y1="430.2305" y2="430.2305"/><line style="stroke: #A80036; stroke-width: 1.5;" x1="354.5" x2="354.5" y1="430.2305" y2="452.2305"/><polygon fill="#A80036" points="350.5,442.2305,354.5,452.2305,358.5,442.2305,354.5,446.2305" style="stroke: #A80036; stroke-width: 1.0;"/><line style="stroke: #A80036; stroke-width: 1.5;" x1="354.5" x2="354.5" y1="486.1992" y2="587.168"/><line style="stroke: #A80036; stroke-width: 1.5;" x1="354.5" x2="246.75" y1="587.168" y2="587.168"/><line style="stroke: #A80036; stroke-width: 1.5;" x1="246.75" x2="246.75" y1="587.168" y2="602.168"/><polygon fill="#A80036" points="242.75,592.168,246.75,602.168,250.75,592.168,246.75,596.168" style="stroke: #A80036; stroke-width: 1.0;"/><line style="stroke: #A80036; stroke-width: 1.5;" x1="246.75" x2="246.75" y1="383.2305" y2="418.2305"/><polygon fill="#A80036" points="242.75,408.2305,246.75,418.2305,250.75,408.2305,246.75,412.2305" style="stroke: #A80036; stroke-width: 1.0;"/><line style="stroke: #A80036; stroke-width: 1.5;" x1="246.75" x2="246.75" y1="324.8594" y2="349.2617"/><polygon fill="#A80036" points="242.75,339.2617,246.75,349.2617,250.75,339.2617,246.75,343.2617" style="stroke: #A80036; stroke-width: 1.0;"/><line style="stroke: #A80036; stroke-width: 1.5;" x1="296.75" x2="468" y1="312.8594" y2="312.8594"/><polygon fill="#A80036" points="464,473.7148,468,483.7148,472,473.7148,468,477.7148" style="stroke: #A80036; stroke-width: 1.5;"/><line style="stroke: #A80036; stroke-width: 1.5;" x1="468" x2="468" y1="312.8594" y2="614.168"/><line style="stroke: #A80036; stroke-width: 1.5;" x1="468" x2="258.75" y1="614.168" y2="614.168"/><polygon fill="#A80036" points="268.75,610.168,258.75,614.168,268.75,618.168,264.75,614.168" style="stroke: #A80036; stroke-width: 1.0;"/><line style="stroke: #A80036; stroke-width: 1.5;" x1="246.75" x2="246.75" y1="626.168" y2="646.168"/><polygon fill="#A80036" points="242.75,636.168,246.75,646.168,250.75,636.168,246.75,640.168" style="stroke: #A80036; stroke-width: 1.0;"/><line style="stroke: #A80036; stroke-width: 1.5;" x1="113" x2="113" y1="768.1055" y2="802.0742"/><polygon fill="#A80036" points="109,792.0742,113,802.0742,117,792.0742,113,796.0742" style="stroke: #A80036; stroke-width: 1.0;"/><line style="stroke: #A80036; stroke-width: 1.5;" x1="113" x2="113" y1="836.043" y2="858.043"/><polygon fill="#A80036" points="109,848.043,113,858.043,117,848.043,113,852.043" style="stroke: #A80036; stroke-width: 1.0;"/><line style="stroke: #A80036; stroke-width: 1.5;" x1="380.5" x2="380.5" y1="782.0742" y2="816.043"/><polygon fill="#A80036" points="376.5,806.043,380.5,816.043,384.5,806.043,380.5,810.043" style="stroke: #A80036; stroke-width: 1.0;"/><line style="stroke: #A80036; stroke-width: 1.5;" x1="216.75" x2="113" y1="712.1367" y2="712.1367"/><line style="stroke: #A80036; stroke-width: 1.5;" x1="113" x2="113" y1="712.1367" y2="734.1367"/><polygon fill="#A80036" points="109,724.1367,113,734.1367,117,724.1367,113,728.1367" style="stroke: #A80036; stroke-width: 1.0;"/><line style="stroke: #A80036; stroke-width: 1.5;" x1="276.75" x2="380.5" y1="712.1367" y2="712.1367"/><line style="stroke: #A80036; stroke-width: 1.5;" x1="380.5" x2="380.5" y1="712.1367" y2="734.1367"/><polygon fill="#A80036" points="376.5,724.1367,380.5,734.1367,384.5,724.1367,380.5,728.1367" style="stroke: #A80036; stroke-width: 1.0;"/><line style="stroke: #A80036; stroke-width: 1.5;" x1="246.75" x2="246.75" y1="680.1367" y2="700.1367"/><polygon fill="#A80036" points="242.75,690.1367,246.75,700.1367,250.75,690.1367,246.75,694.1367" style="stroke: #A80036; stroke-width: 1.0;"/><line style="stroke: #A80036; stroke-width: 1.5;" x1="807" x2="807" y1="348.7969" y2="392.9297"/><polygon fill="#A80036" points="803,382.9297,807,392.9297,811,382.9297,807,386.9297" style="stroke: #A80036; stroke-width: 1.0;"/><line style="stroke: #A80036; stroke-width: 1.5;" x1="426.875" x2="246.75" y1="278.8594" y2="278.8594"/><line style="stroke: #A80036; stroke-width: 1.5;" x1="246.75" x2="246.75" y1="278.8594" y2="300.8594"/><polygon fill="#A80036" points="242.75,290.8594,246.75,300.8594,250.75,290.8594,246.75,294.8594" style="stroke: #A80036; stroke-width: 1.0;"/><line style="stroke: #A80036; stroke-width: 1.5;" x1="626.875" x2="807" y1="278.8594" y2="278.8594"/><line style="stroke: #A80036; stroke-width: 1.5;" x1="807" x2="807" y1="278.8594" y2="300.8594"/><polygon fill="#A80036" points="803,290.8594,807,300.8594,811,290.8594,807,294.8594" style="stroke: #A80036; stroke-width: 1.0;"/><line style="stroke: #A80036; stroke-width: 1.5;" x1="1084.5" x2="1084.5" y1="300.8281" y2="335.8281"/><polygon fill="#A80036" points="1080.5,325.8281,1084.5,335.8281,1088.5,325.8281,1084.5,329.8281" style="stroke: #A80036; stroke-width: 1.0;"/><line style="stroke: #A80036; stroke-width: 1.5;" x1="628.1875" x2="526.875" y1="244.8594" y2="244.8594"/><line style="stroke: #A80036; stroke-width: 1.5;" x1="526.875" x2="526.875" y1="244.8594" y2="266.8594"/><polygon fill="#A80036" points="522.875,256.8594,526.875,266.8594,530.875,256.8594,526.875,260.8594" style="stroke: #A80036; stroke-width: 1.0;"/><line style="stroke: #A80036; stroke-width: 1.5;" x1="983.1875" x2="1084.5" y1="244.8594" y2="244.8594"/><line style="stroke: #A80036; stroke-width: 1.5;" x1="1084.5" x2="1084.5" y1="244.8594" y2="266.8594"/><polygon fill="#A80036" points="1080.5,256.8594,1084.5,266.8594,1088.5,256.8594,1084.5,260.8594" style="stroke: #A80036; stroke-width: 1.0;"/><line style="stroke: #A80036; stroke-width: 1.5;" x1="805.6875" x2="805.6875" y1="212.8594" y2="232.8594"/><polygon fill="#A80036" points="801.6875,222.8594,805.6875,232.8594,809.6875,222.8594,805.6875,226.8594" style="stroke: #A80036; stroke-width: 1.0;"/><!--MD5=[28a75a865dbb626f248bcecf3eb0f821]
-@startuml
-title Reactive Authentication
-start
-: A connects to B;
-: App triggers GATT Client request on A;
-: GATT Client request sent;
-
-if (GATT Server returns an ATT_ERROR_INSUFFICIENT_X error) then (yes)
-  if (ENABLE_GATT_CLIENT_PAIRING) then (yes)
-    if (LTK available) then (yes)
-      : start encryption;
-      if (re-encrypted) then (yes)
-        : GATT Client request sent;
-        #23DB2B : App receives GATT Response;
-        stop
-      else (no)
-        : delete bonding information;
-      endif
-      
-   endif
-    
-    : start pairing;
-      if (paired) then (yes)
-        : GATT Client request sent;
-        #23DB2B : App receives GATT Response;
-        stop
-      else (no)
-        #FD5B41: App receives GATT_QUERY_COMPLETE event 
-          with ATT_ERROR_INSUFFICIENT_X;
-        stop
-      endif
-  else (no)
-    #FD5B41: App receives GATT_QUERY_COMPLETE event 
-          with ATT_ERROR_INSUFFICIENT_X;
-    stop
-    note left
-      App can trigger pairing and 
-      repeat the GATT Client request
-    end note
-  endif
-else (no)
-  #23DB2B : App receives GATT Response;
-  stop
-endif
-@enduml
-
-PlantUML version 1.2020.20(Sat Nov 21 10:02:45 UTC 2020)
-(GPL source distribution)
-Java Runtime: Java(TM) SE Runtime Environment
-JVM: Java HotSpot(TM) 64-Bit Server VM
-Default Encoding: UTF-8
-Language: en
-Country: US
---></g></svg>
\ No newline at end of file
diff --git a/doc/manual/docs/picts/le_security_flow_control_reactive_authentication_central.svg b/doc/manual/docs/picts/le_security_flow_control_reactive_authentication_central.svg
new file mode 100644
index 000000000..e70ea6cad
--- /dev/null
+++ b/doc/manual/docs/picts/le_security_flow_control_reactive_authentication_central.svg
@@ -0,0 +1,57 @@
+<?xml version="1.0" encoding="UTF-8" standalone="no"?><svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" contentScriptType="application/ecmascript" contentStyleType="text/css" height="1096px" preserveAspectRatio="none" style="width:1428px;height:1096px;" version="1.1" viewBox="0 0 1428 1096" width="1428px" zoomAndPan="magnify"><defs><filter height="300%" id="fr2kl6r8w9m30" width="300%" x="-1" y="-1"><feGaussianBlur result="blurOut" stdDeviation="2.0"/><feColorMatrix in="blurOut" result="blurOut2" type="matrix" values="0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 .4 0"/><feOffset dx="4.0" dy="4.0" in="blurOut2" result="blurOut3"/><feBlend in="SourceGraphic" in2="blurOut3" mode="normal"/></filter></defs><g><text fill="#000000" font-family="sans-serif" font-size="18" lengthAdjust="spacingAndGlyphs" textLength="366" x="530.25" y="26.708">Reactive Authentication in Central Role</text><ellipse cx="1004.1875" cy="40.9531" fill="#000000" filter="url(#fr2kl6r8w9m30)" rx="10" ry="10" style="stroke:none;stroke-width:1.0;"/><rect fill="#FEFECE" filter="url(#fr2kl6r8w9m30)" height="33.9688" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="166" x="921.1875" y="70.9531"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="142" x="935.1875" y="92.0918">App on A connects to B</text><rect fill="#FEFECE" filter="url(#fr2kl6r8w9m30)" height="33.9688" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="254" x="877.1875" y="124.9219"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="230" x="891.1875" y="146.0605">App on A triggers GATT Client request</text><rect fill="#FEFECE" filter="url(#fr2kl6r8w9m30)" height="33.9688" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="173" x="917.6875" y="178.8906"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="149" x="931.6875" y="200.0293">GATT Client request sent</text><polygon fill="#FEFECE" filter="url(#fr2kl6r8w9m30)" points="835.6875,232.8594,1172.6875,232.8594,1184.6875,244.8594,1172.6875,256.8594,835.6875,256.8594,823.6875,244.8594,835.6875,232.8594" style="stroke:#A80036;stroke-width:1.5;"/><text fill="#000000" font-family="sans-serif" font-size="11" lengthAdjust="spacingAndGlyphs" textLength="337" x="835.6875" y="248.6675">GATT Server returns an ATT_ERROR_INSUFFICIENT_X error?</text><text fill="#000000" font-family="sans-serif" font-size="11" lengthAdjust="spacingAndGlyphs" textLength="21" x="802.6875" y="242.2651">yes</text><text fill="#000000" font-family="sans-serif" font-size="11" lengthAdjust="spacingAndGlyphs" textLength="14" x="1184.6875" y="242.2651">no</text><polygon fill="#FEFECE" filter="url(#fr2kl6r8w9m30)" points="583.875,266.8594,813.875,266.8594,825.875,278.8594,813.875,290.8594,583.875,290.8594,571.875,278.8594,583.875,266.8594" style="stroke:#A80036;stroke-width:1.5;"/><text fill="#000000" font-family="sans-serif" font-size="11" lengthAdjust="spacingAndGlyphs" textLength="230" x="583.875" y="282.6675">ENABLE_GATT_CLIENT_PAIRING defined?</text><text fill="#000000" font-family="sans-serif" font-size="11" lengthAdjust="spacingAndGlyphs" textLength="21" x="550.875" y="276.2651">yes</text><text fill="#000000" font-family="sans-serif" font-size="11" lengthAdjust="spacingAndGlyphs" textLength="14" x="825.875" y="276.2651">no</text><rect fill="#FEFECE" filter="url(#fr2kl6r8w9m30)" height="33.9688" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="235" x="269.25" y="349.2617"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="211" x="283.25" y="370.4004">SM_EVENT_REENCRYPTION_STARTED</text><rect fill="#FEFECE" filter="url(#fr2kl6r8w9m30)" height="33.9688" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="119" x="327.25" y="418.2305"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="95" x="341.25" y="439.3691">start encryption</text><polygon fill="#FEFECE" filter="url(#fr2kl6r8w9m30)" points="349.75,472.1992,423.75,472.1992,435.75,484.1992,423.75,496.1992,349.75,496.1992,337.75,484.1992,349.75,472.1992" style="stroke:#A80036;stroke-width:1.5;"/><text fill="#000000" font-family="sans-serif" font-size="11" lengthAdjust="spacingAndGlyphs" textLength="74" x="349.75" y="488.0073">re-encrypted</text><text fill="#000000" font-family="sans-serif" font-size="11" lengthAdjust="spacingAndGlyphs" textLength="21" x="316.75" y="481.605">yes</text><text fill="#000000" font-family="sans-serif" font-size="11" lengthAdjust="spacingAndGlyphs" textLength="14" x="435.75" y="481.605">no</text><rect fill="#FEFECE" filter="url(#fr2kl6r8w9m30)" height="33.9688" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="393" x="11" y="506.1992"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="369" x="25" y="527.3379">SM_EVENT_REENCRYPTION_COMPLETE(ERROR_CODE_SUCCESS)</text><rect fill="#FEFECE" filter="url(#fr2kl6r8w9m30)" height="33.9688" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="191" x="112" y="560.168"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="167" x="126" y="581.3066">GATT Client request re-sent</text><rect fill="#23DB2B" filter="url(#fr2kl6r8w9m30)" height="33.9688" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="204" x="105.5" y="614.1367"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="180" x="119.5" y="635.2754">App receives GATT Response</text><ellipse cx="207.5" cy="679.1055" fill="#FFFFFF" filter="url(#fr2kl6r8w9m30)" rx="11" ry="11" style="stroke:#000000;stroke-width:1.0;"/><ellipse cx="207.5" cy="679.1055" fill="#000000" rx="6" ry="6" style="stroke:#7F7F7F;stroke-width:1.0;"/><rect fill="#FEFECE" filter="url(#fr2kl6r8w9m30)" height="33.9688" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="284" x="424" y="506.1992"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="260" x="438" y="527.3379">SM_EVENT_REENCRYPTION_COMPLETE(error)</text><rect fill="#FEFECE" filter="url(#fr2kl6r8w9m30)" height="33.9688" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="187" x="472.5" y="560.168"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="163" x="486.5" y="581.3066">delete bonding information</text><polygon fill="#FEFECE" filter="url(#fr2kl6r8w9m30)" points="345.75,300.8594,427.75,300.8594,439.75,312.8594,427.75,324.8594,345.75,324.8594,333.75,312.8594,345.75,300.8594" style="stroke:#A80036;stroke-width:1.5;"/><text fill="#000000" font-family="sans-serif" font-size="11" lengthAdjust="spacingAndGlyphs" textLength="21" x="390.75" y="335.0698">yes</text><text fill="#000000" font-family="sans-serif" font-size="11" lengthAdjust="spacingAndGlyphs" textLength="82" x="345.75" y="316.6675">LTK available?</text><polygon fill="#FEFECE" filter="url(#fr2kl6r8w9m30)" points="386.75,710.1055,398.75,722.1055,386.75,734.1055,374.75,722.1055,386.75,710.1055" style="stroke:#A80036;stroke-width:1.5;"/><rect fill="#FEFECE" filter="url(#fr2kl6r8w9m30)" height="33.9688" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="194" x="289.75" y="754.1055"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="170" x="303.75" y="775.2441">SM_EVENT_PAIRING_STARTED</text><rect fill="#FEFECE" filter="url(#fr2kl6r8w9m30)" height="33.9688" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="96" x="338.75" y="808.0742"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="72" x="352.75" y="829.2129">start pairing</text><polygon fill="#FEFECE" filter="url(#fr2kl6r8w9m30)" points="340.25,862.043,433.25,862.043,445.25,874.043,433.25,886.043,340.25,886.043,328.25,874.043,340.25,862.043" style="stroke:#A80036;stroke-width:1.5;"/><text fill="#000000" font-family="sans-serif" font-size="11" lengthAdjust="spacingAndGlyphs" textLength="93" x="340.25" y="877.8511">pairing success?</text><text fill="#000000" font-family="sans-serif" font-size="11" lengthAdjust="spacingAndGlyphs" textLength="21" x="307.25" y="871.4487">yes</text><text fill="#000000" font-family="sans-serif" font-size="11" lengthAdjust="spacingAndGlyphs" textLength="14" x="445.25" y="871.4487">no</text><rect fill="#FEFECE" filter="url(#fr2kl6r8w9m30)" height="33.9688" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="352" x="52" y="896.043"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="328" x="66" y="917.1816">SM_EVENT_PAIRING_COMPLETE(ERROR_CODE_SUCCESS)</text><rect fill="#FEFECE" filter="url(#fr2kl6r8w9m30)" height="33.9688" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="191" x="132.5" y="950.0117"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="167" x="146.5" y="971.1504">GATT Client request re-sent</text><rect fill="#23DB2B" filter="url(#fr2kl6r8w9m30)" height="33.9688" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="204" x="126" y="1003.9805"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="180" x="140" y="1025.1191">App receives GATT Response</text><ellipse cx="228" cy="1068.9492" fill="#FFFFFF" filter="url(#fr2kl6r8w9m30)" rx="11" ry="11" style="stroke:#000000;stroke-width:1.0;"/><ellipse cx="228" cy="1068.9492" fill="#000000" rx="6" ry="6" style="stroke:#7F7F7F;stroke-width:1.0;"/><rect fill="#FEFECE" filter="url(#fr2kl6r8w9m30)" height="33.9688" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="243" x="424" y="896.043"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="219" x="438" y="917.1816">SM_EVENT_PAIRING_COMPLETE(error)</text><rect fill="#FD5B41" filter="url(#fr2kl6r8w9m30)" height="33.9688" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="223" x="434" y="950.0117"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="199" x="448" y="971.1504">App receives a GATT Client error</text><ellipse cx="545.5" cy="1014.9805" fill="#FFFFFF" filter="url(#fr2kl6r8w9m30)" rx="11" ry="11" style="stroke:#000000;stroke-width:1.0;"/><ellipse cx="545.5" cy="1014.9805" fill="#000000" rx="6" ry="6" style="stroke:#7F7F7F;stroke-width:1.0;"/><rect fill="#FD5B41" filter="url(#fr2kl6r8w9m30)" height="33.9688" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="333" x="844.5" y="300.8594"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="309" x="858.5" y="321.998">ATT_QUERY_COMPLETE(ATT_ERROR_INSUFFICIENT_X)</text><path d="M760,369.8281 L760,410.0938 A0,0 0 0 0 760,410.0938 L980,410.0938 A0,0 0 0 0 980,410.0938 L980,393.9609 L1000,389.9609 L980,385.9609 L980,379.8281 L970,369.8281 L760,369.8281 A0,0 0 0 0 760,369.8281 " fill="#FBFB77" filter="url(#fr2kl6r8w9m30)" style="stroke:#A80036;stroke-width:1.0;"/><path d="M970,369.8281 L970,379.8281 L980,379.8281 L970,369.8281 " fill="#FBFB77" style="stroke:#A80036;stroke-width:1.0;"/><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacingAndGlyphs" textLength="173" x="766" y="386.895">App can trigger pairing and</text><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacingAndGlyphs" textLength="199" x="766" y="402.0278">repeat the GATT Client request</text><ellipse cx="1011" cy="389.9609" fill="#FFFFFF" filter="url(#fr2kl6r8w9m30)" rx="11" ry="11" style="stroke:#000000;stroke-width:1.0;"/><ellipse cx="1011" cy="389.9609" fill="#000000" rx="6" ry="6" style="stroke:#7F7F7F;stroke-width:1.0;"/><rect fill="#23DB2B" filter="url(#fr2kl6r8w9m30)" height="33.9688" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="204" x="1207.5" y="266.8594"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="180" x="1221.5" y="287.998">App receives GATT Response</text><ellipse cx="1309.5" cy="346.8281" fill="#FFFFFF" filter="url(#fr2kl6r8w9m30)" rx="11" ry="11" style="stroke:#000000;stroke-width:1.0;"/><ellipse cx="1309.5" cy="346.8281" fill="#000000" rx="6" ry="6" style="stroke:#7F7F7F;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="1004.1875" x2="1004.1875" y1="50.9531" y2="70.9531"/><polygon fill="#A80036" points="1000.1875,60.9531,1004.1875,70.9531,1008.1875,60.9531,1004.1875,64.9531" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="1004.1875" x2="1004.1875" y1="104.9219" y2="124.9219"/><polygon fill="#A80036" points="1000.1875,114.9219,1004.1875,124.9219,1008.1875,114.9219,1004.1875,118.9219" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="1004.1875" x2="1004.1875" y1="158.8906" y2="178.8906"/><polygon fill="#A80036" points="1000.1875,168.8906,1004.1875,178.8906,1008.1875,168.8906,1004.1875,172.8906" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="386.75" x2="386.75" y1="383.2305" y2="418.2305"/><polygon fill="#A80036" points="382.75,408.2305,386.75,418.2305,390.75,408.2305,386.75,412.2305" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="207.5" x2="207.5" y1="540.168" y2="560.168"/><polygon fill="#A80036" points="203.5,550.168,207.5,560.168,211.5,550.168,207.5,554.168" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="207.5" x2="207.5" y1="594.1367" y2="614.1367"/><polygon fill="#A80036" points="203.5,604.1367,207.5,614.1367,211.5,604.1367,207.5,608.1367" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="207.5" x2="207.5" y1="648.1055" y2="668.1055"/><polygon fill="#A80036" points="203.5,658.1055,207.5,668.1055,211.5,658.1055,207.5,662.1055" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="566" x2="566" y1="540.168" y2="560.168"/><polygon fill="#A80036" points="562,550.168,566,560.168,570,550.168,566,554.168" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="337.75" x2="207.5" y1="484.1992" y2="484.1992"/><line style="stroke:#A80036;stroke-width:1.5;" x1="207.5" x2="207.5" y1="484.1992" y2="506.1992"/><polygon fill="#A80036" points="203.5,496.1992,207.5,506.1992,211.5,496.1992,207.5,500.1992" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="435.75" x2="566" y1="484.1992" y2="484.1992"/><line style="stroke:#A80036;stroke-width:1.5;" x1="566" x2="566" y1="484.1992" y2="506.1992"/><polygon fill="#A80036" points="562,496.1992,566,506.1992,570,496.1992,566,500.1992" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="566" x2="566" y1="594.1367" y2="695.1055"/><line style="stroke:#A80036;stroke-width:1.5;" x1="566" x2="386.75" y1="695.1055" y2="695.1055"/><line style="stroke:#A80036;stroke-width:1.5;" x1="386.75" x2="386.75" y1="695.1055" y2="710.1055"/><polygon fill="#A80036" points="382.75,700.1055,386.75,710.1055,390.75,700.1055,386.75,704.1055" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="386.75" x2="386.75" y1="452.1992" y2="472.1992"/><polygon fill="#A80036" points="382.75,462.1992,386.75,472.1992,390.75,462.1992,386.75,466.1992" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="386.75" x2="386.75" y1="324.8594" y2="349.2617"/><polygon fill="#A80036" points="382.75,339.2617,386.75,349.2617,390.75,339.2617,386.75,343.2617" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="439.75" x2="728" y1="312.8594" y2="312.8594"/><polygon fill="#A80036" points="724,527.6836,728,537.6836,732,527.6836,728,531.6836" style="stroke:#A80036;stroke-width:1.5;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="728" x2="728" y1="312.8594" y2="722.1055"/><line style="stroke:#A80036;stroke-width:1.5;" x1="728" x2="398.75" y1="722.1055" y2="722.1055"/><polygon fill="#A80036" points="408.75,718.1055,398.75,722.1055,408.75,726.1055,404.75,722.1055" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="386.75" x2="386.75" y1="734.1055" y2="754.1055"/><polygon fill="#A80036" points="382.75,744.1055,386.75,754.1055,390.75,744.1055,386.75,748.1055" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="386.75" x2="386.75" y1="788.0742" y2="808.0742"/><polygon fill="#A80036" points="382.75,798.0742,386.75,808.0742,390.75,798.0742,386.75,802.0742" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="228" x2="228" y1="930.0117" y2="950.0117"/><polygon fill="#A80036" points="224,940.0117,228,950.0117,232,940.0117,228,944.0117" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="228" x2="228" y1="983.9805" y2="1003.9805"/><polygon fill="#A80036" points="224,993.9805,228,1003.9805,232,993.9805,228,997.9805" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="228" x2="228" y1="1037.9492" y2="1057.9492"/><polygon fill="#A80036" points="224,1047.9492,228,1057.9492,232,1047.9492,228,1051.9492" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="545.5" x2="545.5" y1="930.0117" y2="950.0117"/><polygon fill="#A80036" points="541.5,940.0117,545.5,950.0117,549.5,940.0117,545.5,944.0117" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="545.5" x2="545.5" y1="983.9805" y2="1003.9805"/><polygon fill="#A80036" points="541.5,993.9805,545.5,1003.9805,549.5,993.9805,545.5,997.9805" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="328.25" x2="228" y1="874.043" y2="874.043"/><line style="stroke:#A80036;stroke-width:1.5;" x1="228" x2="228" y1="874.043" y2="896.043"/><polygon fill="#A80036" points="224,886.043,228,896.043,232,886.043,228,890.043" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="445.25" x2="545.5" y1="874.043" y2="874.043"/><line style="stroke:#A80036;stroke-width:1.5;" x1="545.5" x2="545.5" y1="874.043" y2="896.043"/><polygon fill="#A80036" points="541.5,886.043,545.5,896.043,549.5,886.043,545.5,890.043" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="386.75" x2="386.75" y1="842.043" y2="862.043"/><polygon fill="#A80036" points="382.75,852.043,386.75,862.043,390.75,852.043,386.75,856.043" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="1011" x2="1011" y1="334.8281" y2="378.9609"/><polygon fill="#A80036" points="1007,368.9609,1011,378.9609,1015,368.9609,1011,372.9609" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="571.875" x2="386.75" y1="278.8594" y2="278.8594"/><line style="stroke:#A80036;stroke-width:1.5;" x1="386.75" x2="386.75" y1="278.8594" y2="300.8594"/><polygon fill="#A80036" points="382.75,290.8594,386.75,300.8594,390.75,290.8594,386.75,294.8594" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="825.875" x2="1011" y1="278.8594" y2="278.8594"/><line style="stroke:#A80036;stroke-width:1.5;" x1="1011" x2="1011" y1="278.8594" y2="300.8594"/><polygon fill="#A80036" points="1007,290.8594,1011,300.8594,1015,290.8594,1011,294.8594" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="1309.5" x2="1309.5" y1="300.8281" y2="335.8281"/><polygon fill="#A80036" points="1305.5,325.8281,1309.5,335.8281,1313.5,325.8281,1309.5,329.8281" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="823.6875" x2="698.875" y1="244.8594" y2="244.8594"/><line style="stroke:#A80036;stroke-width:1.5;" x1="698.875" x2="698.875" y1="244.8594" y2="266.8594"/><polygon fill="#A80036" points="694.875,256.8594,698.875,266.8594,702.875,256.8594,698.875,260.8594" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="1184.6875" x2="1309.5" y1="244.8594" y2="244.8594"/><line style="stroke:#A80036;stroke-width:1.5;" x1="1309.5" x2="1309.5" y1="244.8594" y2="266.8594"/><polygon fill="#A80036" points="1305.5,256.8594,1309.5,266.8594,1313.5,256.8594,1309.5,260.8594" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="1004.1875" x2="1004.1875" y1="212.8594" y2="232.8594"/><polygon fill="#A80036" points="1000.1875,222.8594,1004.1875,232.8594,1008.1875,222.8594,1004.1875,226.8594" style="stroke:#A80036;stroke-width:1.0;"/><!--MD5=[816ade61cc7c93607edea310a2513721]
+@startuml
+title Reactive Authentication in Central Role
+start
+: App on A connects to B;
+: App on A triggers GATT Client request;
+: GATT Client request sent;
+
+if (GATT Server returns an ATT_ERROR_INSUFFICIENT_X error?) then (yes)
+  if (ENABLE_GATT_CLIENT_PAIRING defined?) then (yes)
+    if (LTK available?) then (yes)
+      : SM_EVENT_REENCRYPTION_STARTED;
+      : start encryption;
+      if (re-encrypted) then (yes)
+        : SM_EVENT_REENCRYPTION_COMPLETE(ERROR_CODE_SUCCESS);
+        : GATT Client request re-sent;
+        #23DB2B : App receives GATT Response;
+        stop
+      else (no)
+        : SM_EVENT_REENCRYPTION_COMPLETE(error);
+        : delete bonding information;
+      endif
+    endif
+    : SM_EVENT_PAIRING_STARTED;
+    : start pairing;
+    if (pairing success?) then (yes)
+        : SM_EVENT_PAIRING_COMPLETE(ERROR_CODE_SUCCESS);
+        : GATT Client request re-sent;
+        #23DB2B : App receives GATT Response;
+        stop
+    else (no)
+        : SM_EVENT_PAIRING_COMPLETE(error);
+        #FD5B41 : App receives a GATT Client error;
+        stop
+    endif
+  else (no)
+    #FD5B41: ATT_QUERY_COMPLETE(ATT_ERROR_INSUFFICIENT_X);
+    stop
+    note left
+      App can trigger pairing and 
+      repeat the GATT Client request
+    end note
+  endif
+else (no)
+  #23DB2B : App receives GATT Response;
+  stop
+endif
+@enduml
+
+PlantUML version 1.2020.22beta2(Unknown compile time)
+(GPL source distribution)
+Java Runtime: Java(TM) SE Runtime Environment
+JVM: Java HotSpot(TM) 64-Bit Server VM
+Default Encoding: UTF-8
+Language: en
+Country: US
+--></g></svg>
\ No newline at end of file
diff --git a/doc/manual/docs/picts/le_security_flow_control_reactive_authentication_peripheral.svg b/doc/manual/docs/picts/le_security_flow_control_reactive_authentication_peripheral.svg
new file mode 100644
index 000000000..0e2ce1bc7
--- /dev/null
+++ b/doc/manual/docs/picts/le_security_flow_control_reactive_authentication_peripheral.svg
@@ -0,0 +1,58 @@
+<?xml version="1.0" encoding="UTF-8" standalone="no"?><svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" contentScriptType="application/ecmascript" contentStyleType="text/css" height="1204px" preserveAspectRatio="none" style="width:1428px;height:1204px;" version="1.1" viewBox="0 0 1428 1204" width="1428px" zoomAndPan="magnify"><defs><filter height="300%" id="fzswovshy8bz" width="300%" x="-1" y="-1"><feGaussianBlur result="blurOut" stdDeviation="2.0"/><feColorMatrix in="blurOut" result="blurOut2" type="matrix" values="0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 .4 0"/><feOffset dx="4.0" dy="4.0" in="blurOut2" result="blurOut3"/><feBlend in="SourceGraphic" in2="blurOut3" mode="normal"/></filter></defs><g><text fill="#000000" font-family="sans-serif" font-size="18" lengthAdjust="spacingAndGlyphs" textLength="394" x="516.25" y="26.708">Reactive Authentication in Peripheral Role</text><ellipse cx="1004.1875" cy="40.9531" fill="#000000" filter="url(#fzswovshy8bz)" rx="10" ry="10" style="stroke:none;stroke-width:1.0;"/><rect fill="#FEFECE" filter="url(#fzswovshy8bz)" height="33.9688" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="166" x="921.1875" y="70.9531"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="142" x="935.1875" y="92.0918">App on B connects to A</text><rect fill="#FEFECE" filter="url(#fzswovshy8bz)" height="33.9688" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="254" x="877.1875" y="124.9219"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="230" x="891.1875" y="146.0605">App on A triggers GATT Client request</text><rect fill="#FEFECE" filter="url(#fzswovshy8bz)" height="33.9688" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="173" x="917.6875" y="178.8906"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="149" x="931.6875" y="200.0293">GATT Client request sent</text><polygon fill="#FEFECE" filter="url(#fzswovshy8bz)" points="835.6875,232.8594,1172.6875,232.8594,1184.6875,244.8594,1172.6875,256.8594,835.6875,256.8594,823.6875,244.8594,835.6875,232.8594" style="stroke:#A80036;stroke-width:1.5;"/><text fill="#000000" font-family="sans-serif" font-size="11" lengthAdjust="spacingAndGlyphs" textLength="337" x="835.6875" y="248.6675">GATT Server returns an ATT_ERROR_INSUFFICIENT_X error?</text><text fill="#000000" font-family="sans-serif" font-size="11" lengthAdjust="spacingAndGlyphs" textLength="21" x="802.6875" y="242.2651">yes</text><text fill="#000000" font-family="sans-serif" font-size="11" lengthAdjust="spacingAndGlyphs" textLength="14" x="1184.6875" y="242.2651">no</text><polygon fill="#FEFECE" filter="url(#fzswovshy8bz)" points="587.375,266.8594,810.375,266.8594,822.375,278.8594,810.375,290.8594,587.375,290.8594,575.375,278.8594,587.375,266.8594" style="stroke:#A80036;stroke-width:1.5;"/><text fill="#000000" font-family="sans-serif" font-size="11" lengthAdjust="spacingAndGlyphs" textLength="223" x="587.375" y="282.6675">ENABLE_GATT_CLIENT_PAIRING define?</text><text fill="#000000" font-family="sans-serif" font-size="11" lengthAdjust="spacingAndGlyphs" textLength="21" x="554.375" y="276.2651">yes</text><text fill="#000000" font-family="sans-serif" font-size="11" lengthAdjust="spacingAndGlyphs" textLength="14" x="822.375" y="276.2651">no</text><rect fill="#FEFECE" filter="url(#fzswovshy8bz)" height="33.9688" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="235" x="269.25" y="349.2617"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="211" x="283.25" y="370.4004">SM_EVENT_REENCRYPTION_STARTED</text><rect fill="#FEFECE" filter="url(#fzswovshy8bz)" height="33.9688" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="233" x="270.25" y="418.2305"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="209" x="284.25" y="439.3691">SM on A sends SECURITY REQUEST</text><rect fill="#FEFECE" filter="url(#fzswovshy8bz)" height="33.9688" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="330" x="221.75" y="472.1992"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="306" x="235.75" y="493.3379">SM on B should encrypt connection if LTK available</text><polygon fill="#FEFECE" filter="url(#fzswovshy8bz)" points="349.75,526.168,423.75,526.168,435.75,538.168,423.75,550.168,349.75,550.168,337.75,538.168,349.75,526.168" style="stroke:#A80036;stroke-width:1.5;"/><text fill="#000000" font-family="sans-serif" font-size="11" lengthAdjust="spacingAndGlyphs" textLength="74" x="349.75" y="541.9761">re-encrypted</text><text fill="#000000" font-family="sans-serif" font-size="11" lengthAdjust="spacingAndGlyphs" textLength="21" x="316.75" y="535.5737">yes</text><text fill="#000000" font-family="sans-serif" font-size="11" lengthAdjust="spacingAndGlyphs" textLength="14" x="435.75" y="535.5737">no</text><rect fill="#FEFECE" filter="url(#fzswovshy8bz)" height="33.9688" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="393" x="11" y="560.168"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="369" x="25" y="581.3066">SM_EVENT_REENCRYPTION_COMPLETE(ERROR_CODE_SUCCESS)</text><rect fill="#FEFECE" filter="url(#fzswovshy8bz)" height="33.9688" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="191" x="112" y="614.1367"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="167" x="126" y="635.2754">GATT Client request re-sent</text><rect fill="#23DB2B" filter="url(#fzswovshy8bz)" height="33.9688" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="204" x="105.5" y="668.1055"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="180" x="119.5" y="689.2441">App receives GATT Response</text><ellipse cx="207.5" cy="733.0742" fill="#FFFFFF" filter="url(#fzswovshy8bz)" rx="11" ry="11" style="stroke:#000000;stroke-width:1.0;"/><ellipse cx="207.5" cy="733.0742" fill="#000000" rx="6" ry="6" style="stroke:#7F7F7F;stroke-width:1.0;"/><rect fill="#FEFECE" filter="url(#fzswovshy8bz)" height="33.9688" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="284" x="424" y="560.168"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="260" x="438" y="581.3066">SM_EVENT_REENCRYPTION_COMPLETE(error)</text><rect fill="#FEFECE" filter="url(#fzswovshy8bz)" height="33.9688" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="187" x="472.5" y="614.1367"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="163" x="486.5" y="635.2754">delete bonding information</text><polygon fill="#FEFECE" filter="url(#fzswovshy8bz)" points="345.75,300.8594,427.75,300.8594,439.75,312.8594,427.75,324.8594,345.75,324.8594,333.75,312.8594,345.75,300.8594" style="stroke:#A80036;stroke-width:1.5;"/><text fill="#000000" font-family="sans-serif" font-size="11" lengthAdjust="spacingAndGlyphs" textLength="21" x="390.75" y="335.0698">yes</text><text fill="#000000" font-family="sans-serif" font-size="11" lengthAdjust="spacingAndGlyphs" textLength="82" x="345.75" y="316.6675">LTK available?</text><polygon fill="#FEFECE" filter="url(#fzswovshy8bz)" points="386.75,764.0742,398.75,776.0742,386.75,788.0742,374.75,776.0742,386.75,764.0742" style="stroke:#A80036;stroke-width:1.5;"/><rect fill="#FEFECE" filter="url(#fzswovshy8bz)" height="33.9688" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="194" x="289.75" y="808.0742"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="170" x="303.75" y="829.2129">SM_EVENT_PAIRING_STARTED</text><rect fill="#FEFECE" filter="url(#fzswovshy8bz)" height="33.9688" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="233" x="270.25" y="862.043"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="209" x="284.25" y="883.1816">SM on A sends SECURITY REQUEST</text><rect fill="#FEFECE" filter="url(#fzswovshy8bz)" height="33.9688" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="279" x="247.25" y="916.0117"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="255" x="261.25" y="937.1504">SM on B should perform pairing sequence</text><polygon fill="#FEFECE" filter="url(#fzswovshy8bz)" points="340.25,969.9805,433.25,969.9805,445.25,981.9805,433.25,993.9805,340.25,993.9805,328.25,981.9805,340.25,969.9805" style="stroke:#A80036;stroke-width:1.5;"/><text fill="#000000" font-family="sans-serif" font-size="11" lengthAdjust="spacingAndGlyphs" textLength="93" x="340.25" y="985.7886">pairing success?</text><text fill="#000000" font-family="sans-serif" font-size="11" lengthAdjust="spacingAndGlyphs" textLength="21" x="307.25" y="979.3862">yes</text><text fill="#000000" font-family="sans-serif" font-size="11" lengthAdjust="spacingAndGlyphs" textLength="14" x="445.25" y="979.3862">no</text><rect fill="#FEFECE" filter="url(#fzswovshy8bz)" height="33.9688" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="352" x="52" y="1003.9805"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="328" x="66" y="1025.1191">SM_EVENT_PAIRING_COMPLETE(ERROR_CODE_SUCCESS)</text><rect fill="#FEFECE" filter="url(#fzswovshy8bz)" height="33.9688" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="191" x="132.5" y="1057.9492"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="167" x="146.5" y="1079.0879">GATT Client request re-sent</text><rect fill="#23DB2B" filter="url(#fzswovshy8bz)" height="33.9688" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="204" x="126" y="1111.918"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="180" x="140" y="1133.0566">App receives GATT Response</text><ellipse cx="228" cy="1176.8867" fill="#FFFFFF" filter="url(#fzswovshy8bz)" rx="11" ry="11" style="stroke:#000000;stroke-width:1.0;"/><ellipse cx="228" cy="1176.8867" fill="#000000" rx="6" ry="6" style="stroke:#7F7F7F;stroke-width:1.0;"/><rect fill="#FEFECE" filter="url(#fzswovshy8bz)" height="33.9688" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="243" x="424" y="1003.9805"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="219" x="438" y="1025.1191">SM_EVENT_PAIRING_COMPLETE(error)</text><rect fill="#FD5B41" filter="url(#fzswovshy8bz)" height="33.9688" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="223" x="434" y="1057.9492"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="199" x="448" y="1079.0879">App receives a GATT Client error</text><ellipse cx="545.5" cy="1122.918" fill="#FFFFFF" filter="url(#fzswovshy8bz)" rx="11" ry="11" style="stroke:#000000;stroke-width:1.0;"/><ellipse cx="545.5" cy="1122.918" fill="#000000" rx="6" ry="6" style="stroke:#7F7F7F;stroke-width:1.0;"/><rect fill="#FD5B41" filter="url(#fzswovshy8bz)" height="33.9688" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="333" x="844.5" y="300.8594"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="309" x="858.5" y="321.998">ATT_QUERY_COMPLETE(ATT_ERROR_INSUFFICIENT_X)</text><path d="M760,369.8281 L760,410.0938 A0,0 0 0 0 760,410.0938 L980,410.0938 A0,0 0 0 0 980,410.0938 L980,393.9609 L1000,389.9609 L980,385.9609 L980,379.8281 L970,369.8281 L760,369.8281 A0,0 0 0 0 760,369.8281 " fill="#FBFB77" filter="url(#fzswovshy8bz)" style="stroke:#A80036;stroke-width:1.0;"/><path d="M970,369.8281 L970,379.8281 L980,379.8281 L970,369.8281 " fill="#FBFB77" style="stroke:#A80036;stroke-width:1.0;"/><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacingAndGlyphs" textLength="173" x="766" y="386.895">App can trigger pairing and</text><text fill="#000000" font-family="sans-serif" font-size="13" lengthAdjust="spacingAndGlyphs" textLength="199" x="766" y="402.0278">repeat the GATT Client request</text><ellipse cx="1011" cy="389.9609" fill="#FFFFFF" filter="url(#fzswovshy8bz)" rx="11" ry="11" style="stroke:#000000;stroke-width:1.0;"/><ellipse cx="1011" cy="389.9609" fill="#000000" rx="6" ry="6" style="stroke:#7F7F7F;stroke-width:1.0;"/><rect fill="#23DB2B" filter="url(#fzswovshy8bz)" height="33.9688" rx="12.5" ry="12.5" style="stroke:#A80036;stroke-width:1.5;" width="204" x="1207.5" y="266.8594"/><text fill="#000000" font-family="sans-serif" font-size="12" lengthAdjust="spacingAndGlyphs" textLength="180" x="1221.5" y="287.998">App receives GATT Response</text><ellipse cx="1309.5" cy="346.8281" fill="#FFFFFF" filter="url(#fzswovshy8bz)" rx="11" ry="11" style="stroke:#000000;stroke-width:1.0;"/><ellipse cx="1309.5" cy="346.8281" fill="#000000" rx="6" ry="6" style="stroke:#7F7F7F;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="1004.1875" x2="1004.1875" y1="50.9531" y2="70.9531"/><polygon fill="#A80036" points="1000.1875,60.9531,1004.1875,70.9531,1008.1875,60.9531,1004.1875,64.9531" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="1004.1875" x2="1004.1875" y1="104.9219" y2="124.9219"/><polygon fill="#A80036" points="1000.1875,114.9219,1004.1875,124.9219,1008.1875,114.9219,1004.1875,118.9219" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="1004.1875" x2="1004.1875" y1="158.8906" y2="178.8906"/><polygon fill="#A80036" points="1000.1875,168.8906,1004.1875,178.8906,1008.1875,168.8906,1004.1875,172.8906" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="386.75" x2="386.75" y1="383.2305" y2="418.2305"/><polygon fill="#A80036" points="382.75,408.2305,386.75,418.2305,390.75,408.2305,386.75,412.2305" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="386.75" x2="386.75" y1="452.1992" y2="472.1992"/><polygon fill="#A80036" points="382.75,462.1992,386.75,472.1992,390.75,462.1992,386.75,466.1992" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="207.5" x2="207.5" y1="594.1367" y2="614.1367"/><polygon fill="#A80036" points="203.5,604.1367,207.5,614.1367,211.5,604.1367,207.5,608.1367" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="207.5" x2="207.5" y1="648.1055" y2="668.1055"/><polygon fill="#A80036" points="203.5,658.1055,207.5,668.1055,211.5,658.1055,207.5,662.1055" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="207.5" x2="207.5" y1="702.0742" y2="722.0742"/><polygon fill="#A80036" points="203.5,712.0742,207.5,722.0742,211.5,712.0742,207.5,716.0742" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="566" x2="566" y1="594.1367" y2="614.1367"/><polygon fill="#A80036" points="562,604.1367,566,614.1367,570,604.1367,566,608.1367" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="337.75" x2="207.5" y1="538.168" y2="538.168"/><line style="stroke:#A80036;stroke-width:1.5;" x1="207.5" x2="207.5" y1="538.168" y2="560.168"/><polygon fill="#A80036" points="203.5,550.168,207.5,560.168,211.5,550.168,207.5,554.168" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="435.75" x2="566" y1="538.168" y2="538.168"/><line style="stroke:#A80036;stroke-width:1.5;" x1="566" x2="566" y1="538.168" y2="560.168"/><polygon fill="#A80036" points="562,550.168,566,560.168,570,550.168,566,554.168" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="566" x2="566" y1="648.1055" y2="749.0742"/><line style="stroke:#A80036;stroke-width:1.5;" x1="566" x2="386.75" y1="749.0742" y2="749.0742"/><line style="stroke:#A80036;stroke-width:1.5;" x1="386.75" x2="386.75" y1="749.0742" y2="764.0742"/><polygon fill="#A80036" points="382.75,754.0742,386.75,764.0742,390.75,754.0742,386.75,758.0742" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="386.75" x2="386.75" y1="506.168" y2="526.168"/><polygon fill="#A80036" points="382.75,516.168,386.75,526.168,390.75,516.168,386.75,520.168" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="386.75" x2="386.75" y1="324.8594" y2="349.2617"/><polygon fill="#A80036" points="382.75,339.2617,386.75,349.2617,390.75,339.2617,386.75,343.2617" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="439.75" x2="728" y1="312.8594" y2="312.8594"/><polygon fill="#A80036" points="724,547.168,728,557.168,732,547.168,728,551.168" style="stroke:#A80036;stroke-width:1.5;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="728" x2="728" y1="312.8594" y2="776.0742"/><line style="stroke:#A80036;stroke-width:1.5;" x1="728" x2="398.75" y1="776.0742" y2="776.0742"/><polygon fill="#A80036" points="408.75,772.0742,398.75,776.0742,408.75,780.0742,404.75,776.0742" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="386.75" x2="386.75" y1="788.0742" y2="808.0742"/><polygon fill="#A80036" points="382.75,798.0742,386.75,808.0742,390.75,798.0742,386.75,802.0742" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="386.75" x2="386.75" y1="842.043" y2="862.043"/><polygon fill="#A80036" points="382.75,852.043,386.75,862.043,390.75,852.043,386.75,856.043" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="386.75" x2="386.75" y1="896.0117" y2="916.0117"/><polygon fill="#A80036" points="382.75,906.0117,386.75,916.0117,390.75,906.0117,386.75,910.0117" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="228" x2="228" y1="1037.9492" y2="1057.9492"/><polygon fill="#A80036" points="224,1047.9492,228,1057.9492,232,1047.9492,228,1051.9492" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="228" x2="228" y1="1091.918" y2="1111.918"/><polygon fill="#A80036" points="224,1101.918,228,1111.918,232,1101.918,228,1105.918" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="228" x2="228" y1="1145.8867" y2="1165.8867"/><polygon fill="#A80036" points="224,1155.8867,228,1165.8867,232,1155.8867,228,1159.8867" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="545.5" x2="545.5" y1="1037.9492" y2="1057.9492"/><polygon fill="#A80036" points="541.5,1047.9492,545.5,1057.9492,549.5,1047.9492,545.5,1051.9492" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="545.5" x2="545.5" y1="1091.918" y2="1111.918"/><polygon fill="#A80036" points="541.5,1101.918,545.5,1111.918,549.5,1101.918,545.5,1105.918" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="328.25" x2="228" y1="981.9805" y2="981.9805"/><line style="stroke:#A80036;stroke-width:1.5;" x1="228" x2="228" y1="981.9805" y2="1003.9805"/><polygon fill="#A80036" points="224,993.9805,228,1003.9805,232,993.9805,228,997.9805" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="445.25" x2="545.5" y1="981.9805" y2="981.9805"/><line style="stroke:#A80036;stroke-width:1.5;" x1="545.5" x2="545.5" y1="981.9805" y2="1003.9805"/><polygon fill="#A80036" points="541.5,993.9805,545.5,1003.9805,549.5,993.9805,545.5,997.9805" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="386.75" x2="386.75" y1="949.9805" y2="969.9805"/><polygon fill="#A80036" points="382.75,959.9805,386.75,969.9805,390.75,959.9805,386.75,963.9805" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="1011" x2="1011" y1="334.8281" y2="378.9609"/><polygon fill="#A80036" points="1007,368.9609,1011,378.9609,1015,368.9609,1011,372.9609" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="575.375" x2="386.75" y1="278.8594" y2="278.8594"/><line style="stroke:#A80036;stroke-width:1.5;" x1="386.75" x2="386.75" y1="278.8594" y2="300.8594"/><polygon fill="#A80036" points="382.75,290.8594,386.75,300.8594,390.75,290.8594,386.75,294.8594" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="822.375" x2="1011" y1="278.8594" y2="278.8594"/><line style="stroke:#A80036;stroke-width:1.5;" x1="1011" x2="1011" y1="278.8594" y2="300.8594"/><polygon fill="#A80036" points="1007,290.8594,1011,300.8594,1015,290.8594,1011,294.8594" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="1309.5" x2="1309.5" y1="300.8281" y2="335.8281"/><polygon fill="#A80036" points="1305.5,325.8281,1309.5,335.8281,1313.5,325.8281,1309.5,329.8281" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="823.6875" x2="698.875" y1="244.8594" y2="244.8594"/><line style="stroke:#A80036;stroke-width:1.5;" x1="698.875" x2="698.875" y1="244.8594" y2="266.8594"/><polygon fill="#A80036" points="694.875,256.8594,698.875,266.8594,702.875,256.8594,698.875,260.8594" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="1184.6875" x2="1309.5" y1="244.8594" y2="244.8594"/><line style="stroke:#A80036;stroke-width:1.5;" x1="1309.5" x2="1309.5" y1="244.8594" y2="266.8594"/><polygon fill="#A80036" points="1305.5,256.8594,1309.5,266.8594,1313.5,256.8594,1309.5,260.8594" style="stroke:#A80036;stroke-width:1.0;"/><line style="stroke:#A80036;stroke-width:1.5;" x1="1004.1875" x2="1004.1875" y1="212.8594" y2="232.8594"/><polygon fill="#A80036" points="1000.1875,222.8594,1004.1875,232.8594,1008.1875,222.8594,1004.1875,226.8594" style="stroke:#A80036;stroke-width:1.0;"/><!--MD5=[489a52c0bd2e5ce4d5336c75ab6dfc24]
+@startuml
+title Reactive Authentication in Peripheral Role
+start
+: App on B connects to A;
+: App on A triggers GATT Client request;
+: GATT Client request sent;
+if (GATT Server returns an ATT_ERROR_INSUFFICIENT_X error?) then (yes)
+  if (ENABLE_GATT_CLIENT_PAIRING define?) then (yes)
+    if (LTK available?) then (yes)
+      : SM_EVENT_REENCRYPTION_STARTED;
+      : SM on A sends SECURITY REQUEST;
+      : SM on B should encrypt connection if LTK available;
+      if (re-encrypted) then (yes)
+        : SM_EVENT_REENCRYPTION_COMPLETE(ERROR_CODE_SUCCESS);
+        : GATT Client request re-sent;
+        #23DB2B : App receives GATT Response;
+        stop
+      else (no)
+        : SM_EVENT_REENCRYPTION_COMPLETE(error);
+        : delete bonding information;
+      endif
+    endif
+    : SM_EVENT_PAIRING_STARTED;
+    : SM on A sends SECURITY REQUEST;
+    : SM on B should perform pairing sequence;
+    if (pairing success?) then (yes)
+        : SM_EVENT_PAIRING_COMPLETE(ERROR_CODE_SUCCESS);
+        : GATT Client request re-sent;
+        #23DB2B : App receives GATT Response;
+        stop
+    else (no)
+        : SM_EVENT_PAIRING_COMPLETE(error);
+        #FD5B41 : App receives a GATT Client error;
+        stop
+    endif
+  else (no)
+    #FD5B41: ATT_QUERY_COMPLETE(ATT_ERROR_INSUFFICIENT_X);
+    stop
+    note left
+      App can trigger pairing and 
+      repeat the GATT Client request
+    end note
+  endif
+else (no)
+  #23DB2B : App receives GATT Response;
+  stop
+endif
+@enduml
+
+PlantUML version 1.2020.22beta2(Unknown compile time)
+(GPL source distribution)
+Java Runtime: Java(TM) SE Runtime Environment
+JVM: Java HotSpot(TM) 64-Bit Server VM
+Default Encoding: UTF-8
+Language: en
+Country: US
+--></g></svg>
\ No newline at end of file