Secure boot and encryption on esp32-wroom-32e

Libraries
1

Hi community… I am working with esp32-wroom-se under platformio and arduino framework…
I would like to ask if there is some libs or if it possible to execute the secure boot and flash encryption ?

Thanks @maxgerhardt

2

Not supported by the developers.

Plus if you have an older revision ESP32, this is broken anyways: Espressif ESP32: Bypassing Secure Boot using EMFI

3

Thanks @maxgerhardt … so what do you suggest to do?

4

If you want a signed + encrypted firmware, the only way I see that happening is when you use the native ESP-IDF toolchain and add Arduino as an ESP-IDF component, then use the ESP-IDF’s menuconfig etc. tooling to generate your signed binaries. I.e., don’t use PlatformIO for this.

https://docs.espressif.com/projects/esp-idf/en/latest/esp32/get-started/index.html#

https://docs.espressif.com/projects/esp-idf/en/latest/esp32/security/secure-boot-v2.html

https://docs.espressif.com/projects/arduino-esp32/en/latest/esp-idf_component.html

1 Like
5

what about this…

t seems he was able to do it…
What do you think @maxgerhardt

6

This is basically using ESP-IDF’s secure boot + flash encryption firmware, just all the steps manually executed.

7

And … he only enabled enctyption without secure boot. Getting both going is the tricky bit.