feedc0de/esp-idf
1
0
Fork 0
forked from espressif/esp-idf
Code Pull Requests Activity

[doc]: elaborated nvs encryption comments in nvs

Browse Source
This commit is contained in:
Jakob Hasse
2021-02-01 11:35:19 +08:00
committed by bot
parent 6ceee165b5
commit a697377871
1 changed files with 8 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
components/nvs_flash/src/nvs_api.cpp
View File

@@ -581,13 +581,17 @@ extern "C" esp_err_t nvs_flash_generate_keys(const esp_partition_t* partition, n
} }
} }
/* Write without encryption */ /**
* Write key configuration without encryption engine (using raw partition write APIs).
* But the read is decrypted through flash encryption engine. This allows unique NVS encryption configuration,
* as flash encryption key is randomly generated per device.
*/
err = esp_partition_write_raw(partition, 0, cfg->eky, NVS_KEY_SIZE); err = esp_partition_write_raw(partition, 0, cfg->eky, NVS_KEY_SIZE);
if(err != ESP_OK) { if(err != ESP_OK) {
return err; return err;
} }
/* Write without encryption */ /* Write without encryption, see note above */
err = esp_partition_write_raw(partition, NVS_KEY_SIZE, cfg->tky, NVS_KEY_SIZE); err = esp_partition_write_raw(partition, NVS_KEY_SIZE, cfg->tky, NVS_KEY_SIZE);
if(err != ESP_OK) { if(err != ESP_OK) {
return err; return err;