User Activity

I have a BlueNRG2 firmware that includes critical application level encryption keys. It is flashed using the bootloader. If I activate the flash readout protection using the bootloader commands (0x82), is the flash protected from readout through SWD ...
I need to add application level security in my application using BLE. Where should the keys be stored so that they can be individually programmed in production and protected from readout ?Additionally, where can I find if hci_le_encrypt is hardware a...