mirror of
https://github.com/espressif/esp-idf.git
synced 2025-07-30 10:47:19 +02:00
docs: Update CN version for MR19453
This commit is contained in:
committed by
Marius Vikhammer
parent
8acb8bbd76
commit
ba224e0fd9
@ -82,14 +82,14 @@ Data stored in NVS partitions can be encrypted using AES-XTS in the manner simil
|
|||||||
|
|
||||||
The NVS Encryption is enabled by default when :doc:`Flash Encryption <../../security/flash-encryption>` is enabled. This is done because Wi-Fi driver stores credentials (like SSID and passphrase) in the default NVS partition. It is important to encrypt them as default choice if platform level encryption is already enabled.
|
The NVS Encryption is enabled by default when :doc:`Flash Encryption <../../security/flash-encryption>` is enabled. This is done because Wi-Fi driver stores credentials (like SSID and passphrase) in the default NVS partition. It is important to encrypt them as default choice if platform level encryption is already enabled.
|
||||||
|
|
||||||
For using NVS encryption, the partition table must contain the :ref:`nvs_key_partition`. Two partition tables containing the :ref:`nvs_key_partition` are provided for NVS encryption under the partition table option (menuconfig->Partition Table). They can be selected with the project configuration menu (``idf.py menuconfig``). Please refer to the example :example:`security/flash_encryption` for how to configure and use NVS encryption feature.
|
For using NVS encryption, the partition table must contain the :ref:`nvs_key_partition`. Two partition tables containing the :ref:`nvs_key_partition` are provided for NVS encryption under the partition table option (``menuconfig`` > ``Partition Table``). They can be selected with the project configuration menu (``idf.py menuconfig``). Please refer to the example :example:`security/flash_encryption` for how to configure and use NVS encryption feature.
|
||||||
|
|
||||||
.. _nvs_key_partition:
|
.. _nvs_key_partition:
|
||||||
|
|
||||||
NVS Key Partition
|
NVS Key Partition
|
||||||
^^^^^^^^^^^^^^^^^
|
^^^^^^^^^^^^^^^^^
|
||||||
|
|
||||||
An application requiring NVS encryption support needs to be compiled with a key-partition of the type `data` and subtype `key`. This partition should be marked as `encrypted` and its size should be the minimum partition size (4KB). Refer to :doc:`Partition Tables <../../api-guides/partition-tables>` for more details. Two additional partition tables which contain the :ref:`nvs_key_partition` are provided under the partition table option (menuconfig->Partition Table). They can be directly used for :ref:`nvs_encryption`. The structure of these partitions is depicted below.
|
An application requiring NVS encryption support needs to be compiled with a key-partition of the type `data` and subtype `key`. This partition should be marked as `encrypted` and its size should be the minimum partition size (4KB). Refer to :doc:`Partition Tables <../../api-guides/partition-tables>` for more details. Two additional partition tables which contain the :ref:`nvs_key_partition` are provided under the partition table option (``menuconfig`` > ``Partition Table``). They can be directly used for :ref:`nvs_encryption`. The structure of these partitions is depicted below.
|
||||||
|
|
||||||
.. highlight:: none
|
.. highlight:: none
|
||||||
|
|
||||||
|
@ -286,4 +286,5 @@ API Reference - Partition Table
|
|||||||
API Reference - Flash Encrypt
|
API Reference - Flash Encrypt
|
||||||
-----------------------------
|
-----------------------------
|
||||||
|
|
||||||
.. include-build-file:: inc/esp_flash_encrypt.inc
|
.. include-build-file:: inc/esp_flash_encrypt.inc
|
||||||
|
|
@ -82,14 +82,14 @@ NVS 分区内存储的数据可使用 AES-XTS 进行加密,类似于 IEEE P161
|
|||||||
|
|
||||||
启用 :doc:`Flash 加密 <../../security/flash-encryption>` 时,默认启用 NVS 加密。这是因为 Wi-Fi 驱动在默认的 NVS 分区中存储了凭证(如 SSID 和密码)。如已启用平台级加密,那么同时默认启用 NVS 加密有其必要性。
|
启用 :doc:`Flash 加密 <../../security/flash-encryption>` 时,默认启用 NVS 加密。这是因为 Wi-Fi 驱动在默认的 NVS 分区中存储了凭证(如 SSID 和密码)。如已启用平台级加密,那么同时默认启用 NVS 加密有其必要性。
|
||||||
|
|
||||||
使用 NVS 加密,分区表必须包含 :ref:`nvs_key_partition`。在分区表选项 (menuconfig->Partition Table) 下,为 NVS 加密提供了两个包含 :ref:`nvs_key_partition` 的分区表,您可以通过工程配置菜单 (``idf.py menuconfig``) 进行选择。请参考 :example:`security/flash_encryption` 中的例子,了解如何配置和使用 NVS 加密功能。
|
使用 NVS 加密,分区表必须包含 :ref:`nvs_key_partition`。在分区表选项 (``menuconfig`` > ``Partition Table``) 下,为 NVS 加密提供了两个包含 :ref:`nvs_key_partition` 的分区表,您可以通过工程配置菜单 (``idf.py menuconfig``) 进行选择。请参考 :example:`security/flash_encryption` 中的例子,了解如何配置和使用 NVS 加密功能。
|
||||||
|
|
||||||
.. _nvs_key_partition:
|
.. _nvs_key_partition:
|
||||||
|
|
||||||
NVS 密钥分区
|
NVS 密钥分区
|
||||||
^^^^^^^^^^^^^^^^^
|
^^^^^^^^^^^^^^^^^
|
||||||
|
|
||||||
应用程序如果想使用 NVS 加密,则需要编译进一个类型为 `data`,子类型为 `key` 的密钥分区。该分区应标记为 `已加密` 且最小为 4096 字节。如需了解更多详细信息,请参考 :doc:`分区表 <../../api-guides/partition-tables>`。在分区表选项 (menuconfig->Partition Table) 下提供了两个包含 :ref:`nvs_key_partition` 的额外分区表,可以直接用于 :ref:`nvs_encryption`。这些分区的具体结构见下表:
|
应用程序如果想使用 NVS 加密,则需要编译进一个类型为 `data`,子类型为 `key` 的密钥分区。该分区应标记为 `已加密` 且最小为 4096 字节。如需了解更多详细信息,请参考 :doc:`分区表 <../../api-guides/partition-tables>`。在分区表选项 (``menuconfig`` > ``Partition Table``) 下提供了两个包含 :ref:`nvs_key_partition` 的额外分区表,可以直接用于 :ref:`nvs_encryption`。这些分区的具体结构见下表:
|
||||||
|
|
||||||
.. highlight:: none
|
.. highlight:: none
|
||||||
|
|
||||||
|
@ -153,7 +153,7 @@ SPI Flash 加密
|
|||||||
内存映射 API
|
内存映射 API
|
||||||
------------------
|
------------------
|
||||||
|
|
||||||
{IDF_TARGET_CACHE_SIZE:default="64 KB"}
|
{IDF_TARGET_CACHE_SIZE:default="64 KB",esp32c2=16~64 KB}
|
||||||
|
|
||||||
{IDF_TARGET_NAME} 的内存硬件可以将 flash 部分区域映射到指令地址空间和数据地址空间。此映射仅用于读操作,不能通过写入 flash 映射的存储区域来改变 flash 中的内容。
|
{IDF_TARGET_NAME} 的内存硬件可以将 flash 部分区域映射到指令地址空间和数据地址空间。此映射仅用于读操作,不能通过写入 flash 映射的存储区域来改变 flash 中的内容。
|
||||||
|
|
||||||
@ -286,4 +286,4 @@ SPI Flash API 参考
|
|||||||
Flash 加密 API 参考
|
Flash 加密 API 参考
|
||||||
-----------------------------
|
-----------------------------
|
||||||
|
|
||||||
.. include-build-file:: inc/esp_flash_encrypt.inc
|
.. include-build-file:: inc/esp_flash_encrypt.inc
|
||||||
|
@ -1,6 +1,5 @@
|
|||||||
{IDF_TARGET_APB_FREQ: default="80 Mhz", esp32c2="40 MHz"}
|
{IDF_TARGET_APB_FREQ: default="80 Mhz", esp32c2="40 MHz"}
|
||||||
|
|
||||||
|
|
||||||
+---------------+---------------------------------------+-------------------------------------+
|
+---------------+---------------------------------------+-------------------------------------+
|
||||||
| CPU 最高频率 | 电源管理锁获取情况 | APB 频率和 CPU 频率 |
|
| CPU 最高频率 | 电源管理锁获取情况 | APB 频率和 CPU 频率 |
|
||||||
| | | |
|
| | | |
|
||||||
|
@ -264,7 +264,7 @@ UART 输出处理
|
|||||||
|
|
||||||
- :example:`system/deep_sleep`:如何使用 Deep-sleep 唤醒触发器和 ULP 协处理器编程。
|
- :example:`system/deep_sleep`:如何使用 Deep-sleep 唤醒触发器和 ULP 协处理器编程。
|
||||||
|
|
||||||
.. only:: esp32c3
|
.. only:: esp32c3 or esp32c2
|
||||||
|
|
||||||
- :example:`system/deep_sleep`:如何通过定时器触发 Deep-sleep 唤醒。
|
- :example:`system/deep_sleep`:如何通过定时器触发 Deep-sleep 唤醒。
|
||||||
|
|
||||||
|
Reference in New Issue
Block a user