[solved] Security -- Flash Encryption/Secure Boot together?? s3 V2

[KeithInAsia]

I am able to create a device with Flash Encryption and a device with Secure Boot, but I have been unable to create them together.

I have read all the documents I can get my hands on a dozen times and I just don't see the clear way forward on this.

Any suggestions on how to get both working together?

Is there an order of operations that I need to know?

I'm working on an s3 with V2.

Thanks for the help out there.... Keith

[KeithInAsia]

I must be close to the solution, but the final details are pretty challenging. If someone knows the path and wants to consult with me on it -- contact me. I'll throw some resources at it. Thanks.

[KeithInAsia]

I found a big problem in my build.... I'm running an esp32s3 N16R8 on the 4.4.1 release. I'm also using Octal PSRAM. There is a bug that doesn't allow Flash Encryption to work. Installing patch now to correct for that bug. Here is a link to that report with a link to the patch at the bottom of that page:

https://github.com/espressif/esp-idf/issues/9244

[KeithInAsia]

OK -- I figured it all out. I am successful at combining Flash Encryption with Secure Boot V2 on the Esp32s3 N16R8 in the IDF 4.4.1.

In all, I will have burned through 5 DevKitC clones.

This only took me two weeks....

Keith

[DrMickeyLauer]

@KeythInAsia: Excellent, can we get you to do a writeup? I'm sure it would be interesting for many other people to read.