mirror of
https://github.com/stakwork/sphinx-key.git
synced 2025-12-18 15:54:31 +01:00
adds two layers of signature checks one done by sphinx-key in ota.rs via secp256k1 another done by esp-idf via espsecure.py see docs below: https://docs.espressif.com/projects/esptool/en/latest/esp32c3/espsecure/index.html#remote-signing-using-an-external-hsm https://docs.espressif.com/projects/esp-idf/en/latest/esp32c3/security/secure-boot-v2.html#signed-app-verification-without-hardware-secure-boot https://docs.rs/secp256k1/latest/secp256k1/