130         esp_err_t err = esp_flash_encrypt_init();  in esp_flash_encrypt_check_and_update()  local
131         if (err != ESP_OK) {  in esp_flash_encrypt_check_and_update()
132             ESP_LOGE(TAG, "Initialization of Flash encryption key failed (%d)", err);  in esp_flash_encrypt_check_and_update()
133             return err;  in esp_flash_encrypt_check_and_update()
136         err = esp_flash_encrypt_contents();  in esp_flash_encrypt_check_and_update()
137         if (err != ESP_OK) {  in esp_flash_encrypt_check_and_update()
138             ESP_LOGE(TAG, "Encryption flash contents failed (%d)", err);  in esp_flash_encrypt_check_and_update()
139             return err;  in esp_flash_encrypt_check_and_update()
142         err = esp_flash_encrypt_enable();  in esp_flash_encrypt_check_and_update()
143         if (err != ESP_OK) {  in esp_flash_encrypt_check_and_update()
144             ESP_LOGE(TAG, "Enabling of Flash encryption failed (%d)", err);  in esp_flash_encrypt_check_and_update()
145             return err;  in esp_flash_encrypt_check_and_update()
223         esp_err_t err = esp_efuse_write_keys(purposes, keys, BLOCKS_NEEDED);  in check_and_generate_encryption_keys()  local
224         if (err != ESP_OK) {  in check_and_generate_encryption_keys()
225             if (err == ESP_ERR_NOT_ENOUGH_UNUSED_KEY_BLOCKS) {  in check_and_generate_encryption_keys()
228 …        ESP_LOGE(TAG, "Failed to write efuse block with purpose (err=0x%x). Can't continue.", err);  in check_and_generate_encryption_keys()
230             return err;  in check_and_generate_encryption_keys()
257     esp_err_t err = check_and_generate_encryption_keys();  in esp_flash_encrypt_init()  local
258     if (err != ESP_OK) {  in esp_flash_encrypt_init()
260         return err;  in esp_flash_encrypt_init()
263     err = esp_flash_encryption_enable_secure_features();  in esp_flash_encrypt_init()
264     if (err != ESP_OK) {  in esp_flash_encrypt_init()
266         return err;  in esp_flash_encrypt_init()
269     err = esp_efuse_batch_write_commit();  in esp_flash_encrypt_init()
270     if (err != ESP_OK) {  in esp_flash_encrypt_init()
271         ESP_LOGE(TAG, "Error programming security eFuses (err=0x%x).", err);  in esp_flash_encrypt_init()
272         return err;  in esp_flash_encrypt_init()
281     esp_err_t err;  in esp_flash_encrypt_contents()  local
287     err = encrypt_bootloader();  in esp_flash_encrypt_contents()
288     if (err != ESP_OK) {  in esp_flash_encrypt_contents()
289         return err;  in esp_flash_encrypt_contents()
295     err = encrypt_primary_slot();  in esp_flash_encrypt_contents()
296     if (err != ESP_OK) {  in esp_flash_encrypt_contents()
297         return err;  in esp_flash_encrypt_contents()
306     err = esp_flash_encrypt_region(region_addr, region_size);  in esp_flash_encrypt_contents()
307     if (err != ESP_OK) {  in esp_flash_encrypt_contents()
308         return err;  in esp_flash_encrypt_contents()
314     err = esp_flash_encrypt_region(region_addr, region_size);  in esp_flash_encrypt_contents()
315     if (err != ESP_OK) {  in esp_flash_encrypt_contents()
316         return err;  in esp_flash_encrypt_contents()
323     err = esp_flash_encrypt_region(region_addr, region_size);  in esp_flash_encrypt_contents()
324     if (err != ESP_OK) {  in esp_flash_encrypt_contents()
325         return err;  in esp_flash_encrypt_contents()
329     err = esp_flash_encrypt_region(region_addr, region_size);  in esp_flash_encrypt_contents()
330     if (err != ESP_OK) {  in esp_flash_encrypt_contents()
331         return err;  in esp_flash_encrypt_contents()
342     esp_err_t err = ESP_OK;  in esp_flash_encrypt_enable()  local
360         err = esp_efuse_write_field_cnt(CRYPT_CNT, new_flash_crypt_cnt);  in esp_flash_encrypt_enable()
376     return err;  in esp_flash_encrypt_enable()
381     esp_err_t err;  in encrypt_bootloader()  local
387         err = esp_flash_encrypt_region(ESP_BOOTLOADER_OFFSET, CONFIG_ESP_BOOTLOADER_SIZE);  in encrypt_bootloader()
388         if (err != ESP_OK) {  in encrypt_bootloader()
389             ESP_LOGE(TAG, "Failed to encrypt bootloader in place: 0x%x", err);  in encrypt_bootloader()
390             return err;  in encrypt_bootloader()
403     esp_err_t err = ESP_OK;  in verify_img_header()  local
410         err = ESP_ERR_IMAGE_INVALID;  in verify_img_header()
413     return err;  in verify_img_header()
418     esp_err_t err;  in encrypt_primary_slot()  local
425     err = bootloader_flash_read(CONFIG_ESP_IMAGE0_PRIMARY_START_ADDRESS + 0x20,  in encrypt_primary_slot()
427     if (err != ESP_OK) {  in encrypt_primary_slot()
429         return err;  in encrypt_primary_slot()
431         err = verify_img_header(CONFIG_ESP_IMAGE0_PRIMARY_START_ADDRESS,  in encrypt_primary_slot()
435     if (err == ESP_OK) {  in encrypt_primary_slot()
438         err = esp_flash_encrypt_region(CONFIG_ESP_IMAGE0_PRIMARY_START_ADDRESS,  in encrypt_primary_slot()
440         if (err != ESP_OK) {  in encrypt_primary_slot()
441             ESP_LOGE(TAG, "Failed to encrypt slot in place: 0x%x", err);  in encrypt_primary_slot()
442             return err;  in encrypt_primary_slot()
453     esp_err_t err;  in esp_flash_encrypt_region()  local
467         err = bootloader_flash_read(sec_start, buf, FLASH_SECTOR_SIZE, true);  in esp_flash_encrypt_region()
468         if (err != ESP_OK) {  in esp_flash_encrypt_region()
471         err = bootloader_flash_erase_sector(sec_start / FLASH_SECTOR_SIZE);  in esp_flash_encrypt_region()
472         if (err != ESP_OK) {  in esp_flash_encrypt_region()
475         err = bootloader_flash_write(sec_start, buf, FLASH_SECTOR_SIZE, true);  in esp_flash_encrypt_region()
476         if (err != ESP_OK) {  in esp_flash_encrypt_region()
483     ESP_LOGE(TAG, "flash operation failed: 0x%x", err);  in esp_flash_encrypt_region()
484     return err;  in esp_flash_encrypt_region()