esp-idf/tools/test_apps/security/secure_boot/sdkconfig.ci.04 at 70da170f248ae617297b4e2835254f33bb0238ed - esp-idf - Gitea: Git with a cup of tea

espressif/esp-idf

mirror of https://github.com/espressif/esp-idf.git synced 2026-04-28 19:34:59 +00:00

Files

T

Laukik Hase 1ea0fc261d change(nvs_sec_provider): Make the HMAC-based NVS security scheme default for supported SoCs

- When NVS encryption is enabled on SoCs with the HMAC peripheral that have flash encryption
  enabled, the HMAC-based NVS encryption scheme is now selected as default instead of the
  flash encryption-based scheme.
- If your application previously used the flash encryption-based scheme, you need to manually
  configure the NVS encryption scheme to flash encryption from HMAC through ``menuconfig``
  or your project's ``sdkconfig`` (i.e., setting ``CONFIG_NVS_SEC_KEY_PROTECT_USING_FLASH_ENC=y``).

2025-09-19 10:38:38 +05:30

7 lines

249 B

Plaintext

Raw Blame History

 # Secure Boot & Flash Encryption (Release mode)
 CONFIG_SECURE_BOOT=y
 CONFIG_SECURE_BOOT_SIGNING_KEY="test_rsa_3072_key.pem"
 CONFIG_SECURE_FLASH_ENC_ENABLED=y
 CONFIG_SECURE_FLASH_ENCRYPTION_MODE_RELEASE=y
 CONFIG_NVS_SEC_KEY_PROTECT_USING_FLASH_ENC=y