espressif/esp-idf
1
0
Fork 1
mirror of https://github.com/espressif/esp-idf.git synced 2025-11-03 08:31:44 +01:00
Code Issues Packages Projects Releases Wiki Activity

Merge branch 'feat/flash_enc_encrypt_app_image_of_size_image_length' into 'master'

Browse Source 
feat(bootloader_support): Encrypt only the app image instead of the whole partition

Closes IDFGH-11439

See merge request espressif/esp-idf!27295
This commit is contained in:
Mahavir Jain
2023-12-19 11:36:56 +08:00
parent fedb3d9f9d 42943845e4
commit e4aa5667f1
7 changed files with 49 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
docs/en/migration-guides/release-5.x/5.3/index.rst
View File

@@ -7,5 +7,6 @@ Migration from 5.2 to 5.3
:maxdepth: 1
peripherals
security
storage
system

14
docs/en/migration-guides/release-5.x/5.3/security.rst Normal file
View File

@@ -0,0 +1,14 @@
Security
========
:link_to_translation:`zh_CN:[中文]`
.. only:: SOC_FLASH_ENC_SUPPORTED
Platform security features
--------------------------
When flash encryption is enabled, encrypt only the app image that is present partition of type app, instead of encrypting the whole partition. This can help to optimize the encryption time required during the first boot.
This could be configured using the config ``CONFIG_SECURE_FLASH_ENCRYPT_ONLY_IMAGE_LEN_IN_APP_PART``, which is enabled by default from ESP-IDF v5.3
and is disabled for all earlier releases to avoid any breaking behaviour.