Merge branch 'feature/signature_verify_updates' into 'master'

secure boot: Support signed app verification without hardware secure boot See merge request idf/esp-idf!2814
2018-09-04 18:56:47 +08:00
parent b91cf5a33f 458b167f1a
commit 2ec0fd8fd6
8 changed files with 132 additions and 15 deletions
@@ -29,6 +29,11 @@ Application Example
            return ESP_OK;
        }

+Signature Verification
+----------------------
+
+For additional security, signature of OTA firmware images can be verified. For that, refer :ref:`secure-ota-updates`
+
 API Reference
 -------------

@@ -32,6 +32,13 @@ The OTA data partition is two flash sectors (0x2000 bytes) in size, to prevent p
 while it is being written. Sectors are independently erased and written with matching data, and if they disagree a
 counter field is used to determine which sector was written more recently.

+.. _secure-ota-updates:
+
+Secure OTA Updates Without Secure boot
+--------------------------------------
+
+The verification of signed OTA updates can be performed even without enabling hardware secure boot. For doing so, refer :ref:`signed-app-verify`
+
 See also
 --------