michele/DigiRadio
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Enable NVS and flash encryption at rest (fw 0.8.3).

Browse Source 
Add initEncryptedStorage, development-mode Kconfig defaults, production overlay, and security HIL docs; wire NetBootstrap through encrypted NVS bring-up.

Co-authored-by: Cursor <cursoragent@cursor.com>
This commit is contained in:
michele
2026-07-07 07:46:59 +02:00
co-authored by Cursor
parent 9b46fe9465
commit a8f2fd1c6c
17 changed files with 259 additions and 48 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Software/sdkconfig.defaults.production
+11
View File
@@ -0,0 +1,11 @@
# DigiRadio — production security overlay (apply on top of sdkconfig.defaults)
#
# Build example:
# cp sdkconfig.defaults.production sdkconfig.defaults.release
# idf.py -DSDKCONFIG_DEFAULTS="sdkconfig.defaults;sdkconfig.defaults.release" build
#
# WARNING: RELEASE flash encryption is irreversible on the chip. Test on a
# dedicated unit after HIL validation in development mode (T8 checklist).
CONFIG_SECURE_FLASH_ENCRYPTION_MODE_RELEASE=y
CONFIG_SECURE_FLASH_ENCRYPTION_MODE_DEVELOPMENT=n