eaw/esp-idf
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

flash encryption: Add config option to disable any plaintext reflashes

Browse Source 
Enabled by default when Secure Boot is on, so Flash Encryption protection
is always available in case of a Secure Boot bypass.
This commit is contained in:
Angus Gratton
2019-06-12 11:03:42 +10:00
committed by Angus Gratton
parent 0449ba7f91
commit a4ce828d40
5 changed files with 70 additions and 17 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
components/bootloader_support/include/esp_flash_encrypt.h
View File

@@ -104,8 +104,9 @@ esp_err_t esp_flash_encrypt_region(uint32_t src_addr, size_t data_length);
/** @brief Write protect FLASH_CRYPT_CNT
*
* Intended to be called as a part of boot process if flash encryption
* is enabled but secure boot is not used. This should protect against
* serial re-flashing of an unauthorised code in absence of secure boot.
* should be permanently enabled. This should protect against serial
* re-flashing of an unauthorised code in absence of secure boot or if
* secure boot protection is bypassed.
*
* @return
*/