michele/DigiRadio
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Enable NVS and flash encryption at rest (fw 0.8.3).

Browse Source 
Add initEncryptedStorage, development-mode Kconfig defaults, production overlay, and security HIL docs; wire NetBootstrap through encrypted NVS bring-up.

Co-authored-by: Cursor <cursoragent@cursor.com>
This commit is contained in:
michele
2026-07-07 07:46:59 +02:00
co-authored by Cursor
parent 9b46fe9465
commit a8f2fd1c6c
17 changed files with 259 additions and 48 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Software/docs/manual/ch-classes.tex
+3 -2
View File
@@ -99,8 +99,9 @@ RAII STA join helper with an explicit connect timeout. Assumes
\section{NvsSecureStore}\label{cls:NvsSecureStore}
\texttt{ISecureStore} implementation backed by an NVS namespace. Passwords
are stored as NVS strings and never logged. Production should enable NVS
encryption using the reserved \texttt{nvs\_keys} partition.
are stored as NVS strings and never logged. NVS encryption and flash
encryption are enabled in \texttt{sdkconfig.defaults}; initialisation runs in
\texttt{secure\_store::initEncryptedStorage()} before network bring-up.
% ------------------------------------------------------------------
% Hardware drivers (Slice 3)