Page 1 of 1

[solved] Security -- Flash Encryption/Secure Boot together?? s3 V2

Posted: Thu May 25, 2023 7:44 pm
by KeithInAsia
I am able to create a device with Flash Encryption and a device with Secure Boot, but I have been unable to create them together.

I have read all the documents I can get my hands on a dozen times and I just don't see the clear way forward on this.

Any suggestions on how to get both working together?

Is there an order of operations that I need to know?

I'm working on an s3 with V2.

Thanks for the help out there.... Keith

Re: Security -- Flash Encryption/Secure Boot together?? s3 V2

Posted: Fri May 26, 2023 10:18 am
by KeithInAsia
I must be close to the solution, but the final details are pretty challenging. If someone knows the path and wants to consult with me on it -- contact me. I'll throw some resources at it. Thanks.

Re: Security -- Flash Encryption/Secure Boot together?? s3 V2

Posted: Tue May 30, 2023 10:34 am
by KeithInAsia
I found a big problem in my build.... I'm running an esp32s3 N16R8 on the 4.4.1 release. I'm also using Octal PSRAM. There is a bug that doesn't allow Flash Encryption to work. Installing patch now to correct for that bug. Here is a link to that report with a link to the patch at the bottom of that page:

https://github.com/espressif/esp-idf/issues/9244

Re: Security -- Flash Encryption/Secure Boot together?? s3 V2

Posted: Wed May 31, 2023 8:12 pm
by KeithInAsia
OK -- I figured it all out. I am successful at combining Flash Encryption with Secure Boot V2 on the Esp32s3 N16R8 in the IDF 4.4.1.

In all, I will have burned through 5 DevKitC clones.

This only took me two weeks....

Keith