Tutorial #12: ESP32 flash encryption

in this video I'm going to show how long with is implements ESP 32 flash encryption TR have PSP 32 board it's defecates e connected to my computer I go to Mongoose icon website and click on docs go to the Security section e SP 32 flash encryption this section describes the procedure on how to enable it is politically to commands let me go through it first we flash mongoose via from you is a 32 without flash encryption and demonstrate that the contents of the flash is in plain text so I start the terminal type mrs brings the wizard go to the flashing page choose mo SEO SP 32 click next to flash mangas or ass okay now switch to prototyping mode and to the terminal so this screen allows us to enter commands and see the output switch to the documentation and answer this command to dump the beginning of the file system to the console so click enter we can see in the output initial two thousand bytes of the file system area on flash you can dump any area you want or the whole entire flash but just to demonstrate an initial area is enough so we can see that the files are kept in plain text this is a configuration file so all the sensitive files like private keys are also kept in plain text so let's enable flash encryption now and repeat the same commands to ensure that the after the flash encryption is enabled are the files are encrypted so switch back to documentation and run this command to enable flash encryption place it here and run okay so the flash encryption key is stored in file F key and this command is irreversible and this file F e dot key should be preserved if you want to reflash this board again so the encryption triggers on the next flash so let's flash this board again / USB 32 we enter the flash commands with the additional flag ESP 32 encryption key equals Fe key and we can see that the first flash triggers the encryption process it takes some time to complete now we can see that the encryption has finished and the film where boots normally prints tik-tok messages so now let's repeat the command which dumps a flash file system and let's see if it's encrypted or not paste it here click enter okay now we can see that the output is garbage so it's not readable it's not plain text the flash is now encrypted so if you liked this video please click like or if you have any comments please comment thank you and goodbye

Channel: Mongoose OS

Views: 19,928

Keywords: esp32, mongoose, iot, security, flash, encryption, esp8266, firmware

Id: 16jF0HUyedg

Length: 3min 56sec (236 seconds)

Published: Fri Apr 21 2017