Search found 11 matches

by nikola
Sat Oct 24, 2020 11:48 pm
Forum: ESP-IDF
Topic: Flash encryption, missing something?
Replies: 9
Views: 8751

Re: Flash encryption, missing something?

Actually I have managed to recover it by doing as described here: https://docs.espressif.com/projects/esp ... encryption
So now it is back to the drawing board to try enabling flash encryption again.
by nikola
Fri Oct 23, 2020 10:06 pm
Forum: ESP-IDF
Topic: Flash encryption, missing something?
Replies: 9
Views: 8751

Re: Flash encryption, missing something?

Ok.. now I am confused.. How did it got all the way to flash_encrypt: Flash encryption completed ? If bootloader encrypts the partition shouldn't it have failed before? In any case, is it possible to flash it again somehow or it is bricked now? This is the second device I have bricked by trying to f...
by nikola
Fri Oct 23, 2020 2:22 pm
Forum: ESP-IDF
Topic: Flash encryption, missing something?
Replies: 9
Views: 8751

Re: Flash encryption, missing something?

I have disabled secure boot and after flashing (and waiting) the following happened: I (29) boot: ESP-IDF v4.1-dirty 2nd stage bootloader I (29) boot: compile time 16:07:55 I (29) boot: chip revision: 1 I (32) boot_comm: chip revision: 1, min. bootloader chip revision: 0 I (39) boot.esp32: SPI Speed...
by nikola
Fri Oct 23, 2020 1:55 pm
Forum: ESP-IDF
Topic: Flash encryption, missing something?
Replies: 9
Views: 8751

Re: Flash encryption, missing something?

Hi, I have flashed it without refreshing and left it in bootloader for 5 minutes (is there no way to know encryption process status?). After connecting the monitor I got the following: rst:0x3 (SW_RESET),boot:0x13 (SPI_FAST_FLASH_BOOT) configsip: 0, SPIWP:0xee clk_drv:0x00,q_drv:0x00,d_drv:0x00,cs0_...
by nikola
Tue Oct 20, 2020 4:49 pm
Forum: ESP-IDF
Topic: Flash encryption, missing something?
Replies: 9
Views: 8751

Flash encryption, missing something?

I am trying to follow the documentation and set up flash encryption on ESP32 (esp-idf v4.1) but it seems that I am missing something. With my current settings flash does not get encrypted on first boot. Do I have to burn eFuse manually and if so how? With espefuse.py burn_efuse? I have set up the fo...
by nikola
Wed Oct 07, 2020 10:55 am
Forum: ESP-IDF
Topic: Flash Encyption and Secure Boot through OTA
Replies: 2
Views: 2602

Re: Flash Encyption and Secure Boot through OTA

The reason that I am asking is I would like to buy some ESP32-MeshKit-Light bulbs and upload my custom firmware to them but also I need them to be encrypted since they will contain some web login details. So bricking them during OTA is an acceptable risk for me. It is far better then breaking the bu...
by nikola
Tue Oct 06, 2020 9:24 pm
Forum: ESP-IDF
Topic: Flash Encyption and Secure Boot through OTA
Replies: 2
Views: 2602

Flash Encyption and Secure Boot through OTA

Hi,

I am reading the docs regarding flash encryption and secure boot but can't seem to find if it can be enabled through OTA to previously unsecured system. So is this possible and if yes do I need to do something more than pushing OTA of the firmware with these settings enabled?

Thanks.
by nikola
Fri Oct 19, 2018 4:16 pm
Forum: ESP32 Arduino
Topic: Copy efuse to hardware key registers
Replies: 1
Views: 3271

Copy efuse to hardware key registers

Hi,

Is it possible to copy efuse to hardware key registers so that it can be used as AES encryption key?
I would like to use it with hardware accelerated encryption to encrypt some generic data but without having to use flash encryption.
by nikola
Thu Sep 06, 2018 1:36 pm
Forum: General Discussion
Topic: Flash encryption without menuconfig
Replies: 5
Views: 8957

Re: Flash encryption without menuconfig

Yes platform.io doas support Arduino as a component, I'll use that approach then.

Thanks!
by nikola
Wed Sep 05, 2018 5:12 pm
Forum: General Discussion
Topic: Flash encryption without menuconfig
Replies: 5
Views: 8957

Re: Flash encryption without menuconfig

Hi,

The thing is I want to be able to use Arduino framework (using Platformio) for development but to still enable flash encryption somehow.
Would adding something like

Code: Select all

#define CONFIG_FLASH_ENCRYPTION_ENABLED = "y"
do any good here?