Secure boot Arduino code or flash using ESP-IDF

[belbao]

Hi all, new here!

I’m working on an ESP32-WROOM-32E based device. The code is now ironed out and works.

I’d now like to implement physical tampering resistance security features, ie Secure Boot, Flash Encryption, Disable Debugging/JTAG, Burn eFuses.

As I understand these features/configs are only available and supported on ESP-IDF. Problem is the code base is developed on Arduino IDE, and I am not currently comfortable with porting over to ESP-IDF.

Is it possible to take the Arduino compiled .bin files (or some of) and encrypt + flash using the ESP-IDF tools espsecure.py, idf.py, esptool.py?

As you can I am new to this so feel free to point out my oversights.

Thanks for your help.

[ESP_Sprite]

You can add the Arduino libraries/functionality as a component to ESP-IDF. You'd still have to rework things like your build flow etc, but your code can mostly stay the same.

[belbao]

Thanks for getting back!
Any good guides / docs for porting Arduino->ESP?
The project has grown into multiple ino files, etc..
This will be my first full ESP-IDF experience so any pointers will be appreciated.