Page 1 of 1
ESP32 Flash Encryption "flash decryption block"
Posted: Wed May 18, 2022 5:00 pm
by eslamsnono
ESP32 Espressif Programming Guide says that after enable flash encryption Firmware bootloader, partitions and app are encrypted. When rebooted it says that the firmware is the one responsible for calling " flash decryption block".
My question, i am confused who is responsible for calling flash decryption block ? Rom bootloader or firmware bootloader as the firmware bootloader is already encrypted so how it will be decrypted and call the flash decryption block.
Thanks in advance
Re: ESP32 Flash Encryption "flash decryption block"
Posted: Thu May 19, 2022 1:28 pm
by ESP_Sprite
I see only one reference to "flash decryption block" and that seems to refer to the 2nd stage bootloader (the one in flash) doing the decryption.
Re: ESP32 Flash Encryption "flash decryption block"
Posted: Mon May 23, 2022 10:44 am
by eslamsnono
@ESP_Sprite
Yes, They say the 2nd stage bootloader but how this is done as this should be also encrypted. So how it is decrypted?
Re: ESP32 Flash Encryption "flash decryption block"
Posted: Tue May 24, 2022 2:06 am
by ESP_Sprite
Okay, I read through it again; you're referring to
this, right? I think that it's mostly written to indicate the flash encryption process; the actual 'normal' startup process is glossed over a bit. You can read about that
here.
Note that flash decryption is a hardware function: it gets set up partially in hardware, partially in the ROM bootloader, and afterwards code can 'decrypt' flash by simply reading it; the hardware does the decryption. As such there is no specific code anywhere to do decryption.
Re: ESP32 Flash Encryption "flash decryption block"
Posted: Wed May 25, 2022 3:15 am
by eslamsnono
@ESP_Sprite
Firstly thanks for your reply and concern
So that means that it is not the 2nd stage bootloader is the one who call the decryption block, it is the room bootloader.
and this is logic, it should call this hardware decryption block who decrypt the flash memory
thanks @ESP_Sprite