esp-idf/docs/en/migration-guides/release-5.x/5.3/security.rst
harshal.patil 42943845e4
feat(bootloader_support): Encrypt only the app image instead of the whole partition
Currently, when flash encryption is enabled, the whole partition gets encrypted.
This can be optimised by encrypting only the app image instead of encrypting the whole partition.

Closes https://github.com/espressif/esp-idf/issues/12576
2023-12-18 17:10:17 +05:30

15 lines
612 B
ReStructuredText

Security
========
:link_to_translation:`zh_CN:[中文]`
.. only:: SOC_FLASH_ENC_SUPPORTED
Platform security features
--------------------------
When flash encryption is enabled, encrypt only the app image that is present partition of type app, instead of encrypting the whole partition. This can help to optimize the encryption time required during the first boot.
This could be configured using the config ``CONFIG_SECURE_FLASH_ENCRYPT_ONLY_IMAGE_LEN_IN_APP_PART``, which is enabled by default from ESP-IDF v5.3
and is disabled for all earlier releases to avoid any breaking behaviour.