Enable Security Options (Flash_encryption & secure boot) in Arduino

BuffaloChill
Posts: 3
Joined: Fri May 18, 2018 6:34 am

Enable Security Options (Flash_encryption & secure boot) in Arduino

Postby BuffaloChill » Fri May 18, 2018 6:48 am

Hello,

I have been working for 2 years on my arduino-esp32 project.
I would like to take it to demonstartion and maker-fairs, but I need to enable security options, that no one can steal my code.
I can't rewrite the sketch into cpp and also it seems to be impossible to use arduino-esp32 as a IDF-Component, because too many librarys and stuff to include, i tried it allready.

I have installed the ESP-IDF and i can change the security options for the SDCconfig in the "make menuconfig". I simply tried to copy the SDKconfig file from ESP-IDF into "arduino-esp32/tools/sdk" but this didn't change anything.

Which Files exactly do i have to copy into my Arduino-ESP32 to get the "Flash encryption on boot" and "secure boot" SDKconfig into my Arduino-ESP32 ?

BuffaloChill
Posts: 3
Joined: Fri May 18, 2018 6:34 am

Re: Enable Security Options (Flash_encryption & secure boot) in Arduino

Postby BuffaloChill » Tue May 22, 2018 8:51 am

Well, no answer is an answer too.

Today i tried to use my Arduino sketch as an ESP-IDF component.
I used the "make menuconfig" to change the SDKconfig from the ESP-IDF projekt.
"Security Options" -> "Enable Flash Encryption on boot"
Then I compiled and flashed it to the ESP32 board.
But the flash encryption did not work.
The flash contents is still unencrypted.

BuffaloChill
Posts: 3
Joined: Fri May 18, 2018 6:34 am

Re: Enable Security Options (Flash_encryption & secure boot) in Arduino

Postby BuffaloChill » Tue May 22, 2018 7:49 pm

Hallo guys,

I am still struggeling with Flash Encryption On Boot and hope to get support here...

Next Try:
I used Arduino-esp32 as an ESP-IDF component.
"make menuconfig" to change the secutity options -> "enable flash encryption on boot"
Then it compiled with ESP-IDF with msys32.
But flash encryption didn't happen, the FLASH_CRYPT_CNT was still 0.

Can you help me please to get the "flash encryption on boot" running ?

Who is online

Users browsing this forum: No registered users and 89 guests