In the first post we made the case for the two locks (secure boot for integrity, flash encryption for confidentiality) and introduced the one idea that governs everything else: these protections only move forward. You can turn them on, but never turn them off. Now let’s actually turn them on. We’ll use the ESP32 (specifically […]
Take a fresh microcontroller out of the box, flash your firmware, and it just runs. Flash a completely different firmware and it runs that one just as happily; it has no particular loyalty to the code you consider yours. Connect an inexpensive adapter and read the flash back, and the bytes come off unencrypted. The […]