| /hal_espressif-3.6.0/components/esptool_py/ |
| D | project_include.cmake | 189 # Encryption is enabled, get partition type, subtype and encrypted flag
193 … partition_table_get_partition_info(encrypted "--partition-name ${partition_name}" "encrypted")
203 # be encrypted
209 set(encrypted TRUE) variable
212 # Return 'encrypted' value to the caller
213 set(${retencrypted} ${encrypted} PARENT_SCOPE)
230 esptool_py_partition_needs_encryption(encrypted ${partition_name})
232 # If the image should not be encrypted, we pass the option
234 if(NOT ${encrypted})
247 # (not encrypted) on the target. This parameter will be ignored if build macro
[all …]
|
| D | Makefile.projbuild | 91 encrypted-flash: all_binaries $(ESPTOOLPY_SRC) $(call prereq_if_explicit,erase_flash) partition_tab…
92 $(eval MONITOR_OPTS += --encrypted)
99 encrypted-flash:
116 encrypted-app-flash: $(APP_BIN) $(ESPTOOLPY_SRC) $(call prereq_if_explicit,erase_flash) partition_t…
117 $(eval MONITOR_OPTS += --encrypted)
121 encrypted-app-flash:
|
| /hal_espressif-3.6.0/examples/security/flash_encryption/ |
| D | partitions_example.csv | 3 # Extra partition to demonstrate reading/writing of encrypted flash
4 storage, data, 0xff, , 0x1000, encrypted
6 …ins the key that encrypts the NVS partition named nvs. The nvs_key partition needs to be encrypted.
7 nvs_key, data, nvs_keys, , 0x1000, encrypted,
|
| D | sdkconfig.defaults | 1 # This example uses an extra partition to demonstrate encrypted/non-encrypted reads/writes.
|
| D | README.md | 5 The example also demonstrates writing and reading encrypted partitions in flash.
61 When reprogramming the device subsequently use following command for encrypted write of new plainte…
64 idf.py -p PORT encrypted-app-flash monitor
67 …er to reprogram all partitions (bootloader, partition table and application) in encrypted form use:
70 idf.py -p PORT encrypted-flash monitor
113 …d the device will reset itself. At this stage the flash contents are in encrypted form. The output…
132 If the NVS encryption is enabled, then the output will show the status of the encrypted partition a…
135 I (667) example_nvs: NVS partition "nvs" is encrypted.
|
| /hal_espressif-3.6.0/docs/en/security/ |
| D | flash-encryption.rst | 18 …ture is enabled, firmware is flashed as plaintext, and then the data is encrypted in place on the …
20 With flash encryption enabled, the following types of data are encrypted by default:
26 Other types of data can be encrypted conditionally:
28 - Any partition marked with the ``encrypted`` flag in the partition table. For details, see :ref:`e…
139 …1. On the first power-on reset, all data in flash is un-encrypted (plaintext). The ROM bootloader …
145 …ents - the firmware bootloader, applications and partitions marked as ``encrypted``. Encrypting in…
147 …in ``{IDF_TARGET_CRYPT_CNT}`` (0b0000001) to mark the flash contents as encrypted. Odd number of b…
149 …YPT`` and ``DISABLE_DL_CACHE`` to allow the UART bootloader to re-flash encrypted binaries. Also, …
153 …8. The device is then rebooted to start executing the encrypted image. The firmware bootloader cal…
157 …1. On the first power-on reset, all data in flash is un-encrypted (plaintext). The ROM bootloader …
[all …]
|
| /hal_espressif-3.6.0/components/nvs_flash/ |
| D | Kconfig | 10 to be stored in an encrypted partition. This means enabling flash encryption is
14 bool "NVS partition encrypted flag compatible with ESP-IDF before v4.3"
17 Enabling this will ignore "encrypted" flag for NVS partitions. NVS encryption
19 to have "encrypted" flag for NVS partitions. This was not being checked in pre v4.3
|
| /hal_espressif-3.6.0/docs/en/api-reference/peripherals/ |
| D | ds.rst | 5 It uses pre-encrypted parameters to calculate a signature.
6 The parameters are encrypted using HMAC as a key-derivation function.
16 To prevent unauthorized access, they are AES-encrypted.
20 …se key to use, the corresponding eFuse key purpose, the location of the encrypted RSA parameters a…
38 #. the location of the encrypted private key parameters,
59 3) Calculate the encrypted private key paramters from the client private key (RSA) and the paramete…
67 The encrypted private key parameters obtained after the DS peripheral configuration are then to be …
68 :doc:`Non Volatile Storage<../storage/nvs_flash>` can be used to store the encrypted private key pa…
69 …rotocols/mqtt/ssl_ds/configure_ds.py>` creates an NVS partition for the encrypted private key para…
73 As mentioned in the `ESP-TLS` documentation, the application only needs to provide the encrypted pr…
|
| /hal_espressif-3.6.0/components/spi_flash/ |
| D | partition.c | 224 item->info.encrypted = entry.flags & PART_FLAG_ENCRYPTED; in load_partitions()
229 item->info.encrypted = false; in load_partitions()
235 item->info.encrypted = true; in load_partitions()
243 item->info.encrypted = false; in load_partitions()
338 item->info.encrypted = false; in esp_partition_register_external()
401 && partition->encrypted == p->encrypted) { in esp_partition_verify()
422 if (!partition->encrypted) { in esp_partition_read()
464 if (!partition->encrypted) { in esp_partition_write()
|
| /hal_espressif-3.6.0/tools/idf_monitor_base/ |
| D | serial_handler.py | 52 force_line_print, start_cmd_sent, serial_instance, encrypted): argument
64 self.encrypted = encrypted
173 run_make_func('encrypted-flash' if self.encrypted else 'flash')
175 run_make_func('encrypted-app-flash' if self.encrypted else 'app-flash')
|
| /hal_espressif-3.6.0/components/partition_table/ |
| D | Kconfig.projbuild | 56 bool "Single factory app, no OTA, encrypted NVS"
60 … that supports encrypted NVS when using flash encryption. See the Flash Encryption section
66 bool "Single factory app (large), no OTA, encrypted NVS"
70 … that supports encrypted NVS when using flash encryption. See the Flash Encryption section
76 bool "Factory app, two OTA definitions, encrypted NVS"
80 … that supports encrypted NVS when using flash encryption. See the Flash Encryption section
|
| D | partitions_singleapp_encr_nvs.csv | 6 nvs_key, data, nvs_keys,, 0x1000, encrypted
|
| D | partitions_singleapp_large_encr_nvs.csv | 6 nvs_key, data, nvs_keys,, 0x1000, encrypted
|
| D | partitions_two_ota_encr_nvs.csv | 9 nvs_key, data, nvs_keys,, 0x1000, encrypted
|
| /hal_espressif-3.6.0/examples/system/efuse/test/ |
| D | partitions_efuse_emul.csv | 4 storage, data, 0xff, , 0x1000, encrypted
5 nvs_key, data, nvs_keys, , 0x1000, encrypted,
|
| /hal_espressif-3.6.0/docs/zh_CN/security/ |
| D | flash-encryption.rst | 28 - 任何在分区表中标有“加密”标志的分区。详情请见 :ref:`encrypted-partition-flag`。
387 idf.py encrypted-app-flash monitor
393 idf.py encrypted-flash monitor
438 请使用 :ref:`OTA 方案 <updating-encrypted-flash-ota>` 对字段中的明文进行后续更新。
644 .. _updating-encrypted-flash:
649 .. _updating-encrypted-flash-ota:
661 .. _updating-encrypted-flash-serial:
747 - 如果新的应用程序已使用安全启动签名密钥正确签名，则 :ref:`updating-encrypted-flash-ota` 不受限制。
751 …参见 :ref:`安全启动 <secure-boot-reflashable>`），:ref:`明文串行 flash 更新 <updating-encrypted-flash-serial>` 才…
767 部分分区默认为已加密。通过在分区的标志字段中添加 “encrypted” 标志，可在分区表描述中将其他分区标记为需要加密。在这些标记分区中的数据会和应用程序分区一样视为加密数据。
[all …]
|
| /hal_espressif-3.6.0/components/nvs_flash/nvs_partition_generator/ |
| D | README.rst | 80 The NVS Partition Generator utility also allows you to create an encrypted binary file. The utility…
85 This utility allows you to decrypt an encrypted NVS binary file. The utility uses an NVS binary fil…
110 …| 3 | encrypt | Generate NVS encrypted partition | …
112 | 4 | decrypt | Decrypt NVS encrypted partition |
182 To generate encrypted NVS partition:
246 To decrypt encrypted NVS partition:
256 …| input | Path to encrypted NVS partition file to parse | …
275 You can run the utility to decrypt encrypted NVS partition using the command below::
|
| /hal_espressif-3.6.0/components/nvs_flash/src/ |
| D | nvs_partition_lookup.cpp | 21 if (esp_partition->encrypted) { in lookup_nvs_partition()
45 if (esp_partition->encrypted) { in lookup_nvs_encrypted_partition()
|
| /hal_espressif-3.6.0/components/espcoredump/src/ |
| D | core_dump_flash.c | 36 bool encrypted; member
69 if (esp_flash_encryption_enabled() && s_core_flash_config.partition.encrypted) { in esp_core_dump_flash_custom_write()
97 s_core_flash_config.partition.encrypted = core_part->encrypted; in esp_core_dump_flash_init()
|
| /hal_espressif-3.6.0/examples/bluetooth/nimble/bleprph/ |
| D | README.md | 70 …r=xx:xx:xx:xx:xx:xx conn_itvl=39 conn_latency=0 supervision_timeout=500 encrypted=0 authenticated=…
72 …dr=xx:xx:xx:xx:xx:xx conn_itvl=6 conn_latency=0 supervision_timeout=500 encrypted=0 authenticated=…
82 peer_id_addr=xx:xx:xx:xx:xx:xx conn_itvl=6 conn_latency=0 supervision_timeout=500 encrypted=1 authe…
85 …r=xx:xx:xx:xx:xx:xx conn_itvl=39 conn_latency=0 supervision_timeout=500 encrypted=1 authenticated=…
|
| /hal_espressif-3.6.0/docs/en/api-guides/ |
| D | blufi.rst | 154 * The control frame is not encrypted for the time being and supports to be verified;
156 * The data frame supports to be encrypted and verified.
373 - Indicates whether the frame is encrypted.
378 …The encrypted part of the frame includes the full clear data before the DATA field is encrypted (n…
422 …ssion of the Wi-Fi SSID and password is secure, the message needs to be encrypted using symmetric …
454 The data to be encrypted and decrypted must use the same length. The IV8 is a 8 bit sequence value …
460 The data to be encrypted and decrypted must use the same length. The IV8 is a 8 bit sequence value …
|
| /hal_espressif-3.6.0/tools/idf_py_actions/ |
| D | serial_ext.py | 86 …def monitor(action, ctx, args, print_filter, monitor_baud, encrypted, timestamps, timestamp_format… argument
128 if encrypted:
|
| /hal_espressif-3.6.0/tools/ |
| D | idf_monitor.py | 75 encrypted=False, # type: bool argument
120 False, False, self.serial, encrypted)
327 args.encrypted,
|
| /hal_espressif-3.6.0/tools/unit-test-app/configs/ |
| D | psram | 9 # Disable encrypted flash reads/writes to save IRAM in this build configuration
|
| /hal_espressif-3.6.0/components/esptool_py/esptool/esptool/ |
| D | cmds.py | 523 for address, argfile, encrypted in all_files:
527 if compress and encrypted:
535 argfile.read(), esp.FLASH_ENCRYPTED_WRITE_ALIGN if encrypted else 4
551 blocks = esp.flash_begin(uncsize, address, begin_rom_encrypted=encrypted)
588 if encrypted:
622 if not encrypted and not esp.secure_download_mode:
|
