aljaz/sphinx-key
1
1
Fork 0
mirror of https://github.com/stakwork/sphinx-key.git synced 2025-12-17 07:14:23 +01:00
Code Issues Packages Projects Releases Wiki Activity

build: remove integrated binary signatures

Browse Source 
our secure boot feature checks the signatures of hashes of ota binaries
This commit is contained in:
irriden
2023-12-04 19:07:47 +00:00
parent 7a1dca6f35
commit 61ef67ec8c
5 changed files with 0 additions and 12 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
deploy.sh
View File

@@ -32,11 +32,7 @@ fi
cargo espflash erase-flash cargo espflash erase-flash
cd factory cd factory
cargo espflash flash --release cargo espflash flash --release
cargo espflash save-image --release --chip esp32c3 factory.bin
espsecure.py sign_data factory.bin --version 2 --keyfile ../secure_boot_signing_key.pem
espflash write-bin 0x10000 factory.bin
cd ../sphinx-key cd ../sphinx-key
cargo espflash save-image --bin sphinx-key --release --chip esp32c3 sphinx-key.bin cargo espflash save-image --bin sphinx-key --release --chip esp32c3 sphinx-key.bin
espsecure.py sign_data sphinx-key.bin --version 2 --keyfile ../secure_boot_signing_key.pem
espflash write-bin 0x50000 sphinx-key.bin espflash write-bin 0x50000 sphinx-key.bin
cargo espflash monitor cargo espflash monitor

3
factory/sdkconfig.defaults
View File

@@ -11,6 +11,3 @@ CONFIG_FATFS_LFN_STACK=y
# Workaround for https://github.com/espressif/esp-idf/issues/7631 # Workaround for https://github.com/espressif/esp-idf/issues/7631
#CONFIG_MBEDTLS_CERTIFICATE_BUNDLE=n #CONFIG_MBEDTLS_CERTIFICATE_BUNDLE=n
#CONFIG_MBEDTLS_CERTIFICATE_BUNDLE_DEFAULT_FULL=n #CONFIG_MBEDTLS_CERTIFICATE_BUNDLE_DEFAULT_FULL=n
CONFIG_SECURE_SIGNED_APPS_NO_SECURE_BOOT=y
CONFIG_SECURE_BOOT_BUILD_SIGNED_BINARIES=n

1
sphinx-key/clear_sd.sh
View File

@@ -30,6 +30,5 @@ then
exit 1 exit 1
fi fi
cargo espflash save-image --bin clear --release --chip esp32c3 clear.bin cargo espflash save-image --bin clear --release --chip esp32c3 clear.bin
espsecure.py sign_data clear.bin --version 2 --keyfile ../secure_boot_signing_key.pem
espflash write-bin 0x50000 clear.bin espflash write-bin 0x50000 clear.bin
cargo espflash monitor cargo espflash monitor

3
sphinx-key/sdkconfig.defaults
View File

@@ -19,9 +19,6 @@ CONFIG_MBEDTLS_DYNAMIC_BUFFER=y
CONFIG_MBEDTLS_DYNAMIC_FREE_CONFIG_DATA=y CONFIG_MBEDTLS_DYNAMIC_FREE_CONFIG_DATA=y
CONFIG_MBEDTLS_DYNAMIC_FREE_CA_CERT=y CONFIG_MBEDTLS_DYNAMIC_FREE_CA_CERT=y
CONFIG_SECURE_SIGNED_APPS_NO_SECURE_BOOT=y
CONFIG_SECURE_BOOT_BUILD_SIGNED_BINARIES=n
CONFIG_MBEDTLS_HARDWARE_AES=n CONFIG_MBEDTLS_HARDWARE_AES=n
# All these settings below sum to a 60KB reduction in bin size # All these settings below sum to a 60KB reduction in bin size

1
sphinx-key/sphinx_key.sh
View File

@@ -30,6 +30,5 @@ then
exit 1 exit 1
fi fi
cargo espflash save-image --bin sphinx-key --release --chip esp32c3 sphinx-key.bin cargo espflash save-image --bin sphinx-key --release --chip esp32c3 sphinx-key.bin
espsecure.py sign_data sphinx-key.bin --version 2 --keyfile ../secure_boot_signing_key.pem
espflash write-bin 0x50000 sphinx-key.bin espflash write-bin 0x50000 sphinx-key.bin
cargo espflash monitor cargo espflash monitor