How secure is using Flash Encryption in Release mode without Secure Boot?

[__xwtk]

Hey there. After spending a while on reading the documentation about Flash Encryption + Secure Boot, I found a line which says that device firmware may still be modified even with Flash Encryption, and to use Secure Boot to prevent that.

The setup is the following:
> Flash Encryption with Release mode
> HTTPS OTA Update only with pre-set certificate validation

Short said, the device only can update using the firmware provided by the server.

Also can Secure Boot be enabled on such a device with Flash Encryption in Release mode? (I am sure it is not but asking just in case)

[ESP_Zombie]

Hi __xwtk

In this way, you can try OTA a new_app.bin with software secure boot. For details, please refer to this link https://docs.espressif.com/projects/esp ... ecure-boot

[__xwtk]

Hi __xwtk

In this way, you can try OTA a new_app.bin with software secure boot. For details, please refer to this link https://docs.espressif.com/projects/esp ... ecure-boot

Great thank you very much!