mirror of
https://github.com/espressif/esp-idf.git
synced 2025-11-21 11:05:39 +00:00
1ea0fc261d
- When NVS encryption is enabled on SoCs with the HMAC peripheral that have flash encryption enabled, the HMAC-based NVS encryption scheme is now selected as default instead of the flash encryption-based scheme. - If your application previously used the flash encryption-based scheme, you need to manually configure the NVS encryption scheme to flash encryption from HMAC through ``menuconfig`` or your project's ``sdkconfig`` (i.e., setting ``CONFIG_NVS_SEC_KEY_PROTECT_USING_FLASH_ENC=y``).
25 lines
501 B
Plaintext
25 lines
501 B
Plaintext
#
|
|
# Security feature
|
|
#
|
|
# Start secure boot
|
|
#
|
|
CONFIG_SECURE_SIGNED_ON_BOOT=y
|
|
CONFIG_SECURE_SIGNED_ON_UPDATE=y
|
|
CONFIG_SECURE_SIGNED_APPS=y
|
|
CONFIG_SECURE_BOOT=y
|
|
CONFIG_SECURE_BOOT_V2_ENABLED=y
|
|
CONFIG_SECURE_BOOT_BUILD_SIGNED_BINARIES=n
|
|
|
|
#
|
|
# Start flash incryption
|
|
#
|
|
CONFIG_SECURE_FLASH_ENC_ENABLED=y
|
|
CONFIG_SECURE_FLASH_ENCRYPTION_MODE_DEVELOPMENT=y
|
|
CONFIG_NVS_SEC_KEY_PROTECT_USING_FLASH_ENC=y
|
|
|
|
#
|
|
# Increase partition table offset
|
|
#
|
|
CONFIG_PARTITION_TABLE_OFFSET=0xe000
|
|
CONFIG_ESPTOOLPY_FLASHSIZE_8MB=y
|