pioduino/esp-idf
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Flash encryption / secure boot: Temporarily disable on-device key generation

Browse Source 
Will be enabled after seeding of HWRNG in bootloader is fully tested/qualified.
This commit is contained in:
Angus Gratton
2016-12-01 23:16:34 -08:00
parent f62b83fb77
commit ceb8566970
4 changed files with 14 additions and 27 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/security/flash-encryption.rst
+3
View File
@@ -7,6 +7,9 @@ Flash Encryption is separate from the `Secure Boot` feature, and you can use fla
**IMPORTANT: Enabling flash encryption limits your options for further updates of your ESP32. Make sure to read this document (including `Limitations of Flash Encryption` and understand the implications of enabling flash encryption.**
**IMPORTANT: Flash Encryption feature is currently enabled for development use only, with a key generated on the host. The recommended production configuration, where the flash encryption key is generated by the device on first boot, is currently disabled while final testing is done. This documentation refers to flash encryption keys being generated on first boot, however for now it is necessary to follow the additional steps shown under `Precalculated Flash Encryption Key`.**
Background
----------