invalid mic event

features/FEATURE_BLE/ble/generic/GenericSecurityManager.h

@@ -524,6 +524,12 @@ public:
         connection_handle_t connection
     );
 
+    /** @copydoc ble::pal::SecurityManager::on_invalid_mic
+     */
+    virtual void on_invalid_mic(
+        connection_handle_t connection
+    );
+
     /** @copydoc ble::pal::SecurityManager::on_slave_security_request
      */
     virtual void on_slave_security_request(

features/FEATURE_BLE/ble/pal/PalSecurityManager.h

@@ -280,6 +280,16 @@ public:
             connection_handle_t connection
         ) = 0;
 
+        /**
+         * Indicate that the MIC verification has failed. This could
+         * be due to an invalid CSRK key.
+         *
+         * @param[in] connection connection handle
+         */
+        virtual void on_invalid_mic(
+            connection_handle_t connection
+        ) = 0;
+
         /**
          * Ask the stack to evaluate the security request received from the slave.
          * This might result in the stack enabling encryption, or pairing/re-pairing.

features/FEATURE_BLE/source/generic/GenericSecurityManager.cpp

@@ -945,6 +945,11 @@ void GenericSecurityManager::on_valid_mic_timeout(connection_handle_t connection
     (void)connection;
 }
 
+void GenericSecurityManager::on_invalid_mic(connection_handle_t connection) {
+    (void)connection;
+    /* TODO: count and re-pair when threshold reached */
+}
+
 void GenericSecurityManager::on_slave_security_request(
     connection_handle_t connection,
     AuthenticationMask authentication