As I understand and make it work, with idf 5.1.2 you can setup the secureboot signature file in menuconfig, but not the encryption key. Hence, I manually encrypt bootloader, partition and firmware ( micropython in my case), then I sign bootloader and firmware, and eventually I upload everything into...

I did an idf.py fullclean ...but later I did not execute idf.py set-target esp32s3.

it was not on my dependencies neither, hence, the message.

Now all works. Hope this helps some newbie like me

Now it rocks !!!!


We may need AI to defend us from AI. Its call meta-AI. Hopefully it lands in infinite-loop land.

Thanks.

JCG

--no-stub fixed this

I have setup flash encryption succesfully. Followed the steps of security workflows. I signed and encrypted with my host key, the signed versions of bootloader and application. Before flashing I check idf.py and it complains bootloader fail secure boot signtaure Valid secure boot key blocks: 0 No si...

Hi, I am following the guide in https://docs.espressif.com/projects/esp-idf/en/latest/esp32s3/security/security-features-enablement-workflows.html#enable-secure-boot-v2-externally So implement secureBoot. using one the programs in the examples folders. In step 7 I do idf.py build and I get .espressi...

Hello, I would like to understand where my host generated key need to be stored so the process of reflashing (whether dev/release mode) uses my encryption key. It does not seem I can add as a parameter or if there is a default place/name. My goal is actually to have a bunch of encrypted/signed firmw...

Hi,

to the powers to be.

I am in Europe. The forum runs like I was on 64Kb/s modem. Painfully. I am on 1G fiber......

Any possibility to consider an upgrade, welcome.

Regards.

JCG

I forgot to mention that before moving to release mode, in developer mode, things were fine. chip posted as encrypted, with local key and I could upload/download files in clear text. Its only after lock down and external encryption that just the flash of the app will produce the mentioned error Than...

I am working in ubuntu platform and esp32s3 I am trying to build a custom micropython firmware. I have configured the system to use flash encryption, baked my host generated key into the efuses. I have encrypted bootloader/partition/app.bin--> micropython I run julian@portatilU:~/tmp/proyectos_pytho...