mirror of
https://github.com/stakwork/sphinx-key.git
synced 2025-12-18 15:54:31 +01:00
66e4a11759
adds two layers of signature checks one done by sphinx-key in ota.rs via secp256k1 another done by esp-idf via espsecure.py see docs below: https://docs.espressif.com/projects/esptool/en/latest/esp32c3/espsecure/index.html#remote-signing-using-an-external-hsm https://docs.espressif.com/projects/esp-idf/en/latest/esp32c3/security/secure-boot-v2.html#signed-app-verification-without-hardware-secure-boot https://docs.rs/secp256k1/latest/secp256k1/
17 lines
658 B
Plaintext
17 lines
658 B
Plaintext
# Rust often needs a bit of an extra main task stack size compared to C (the default is 3K)
|
|
CONFIG_ESP_MAIN_TASK_STACK_SIZE=64000
|
|
CONFIG_PTHREAD_TASK_STACK_SIZE_DEFAULT=10000
|
|
# CONFIG_LOG_DEFAULT_LEVEL_DEBUG=y
|
|
CONFIG_FATFS_LFN_STACK=y
|
|
|
|
# Use this to set FreeRTOS kernel tick frequency to 1000 Hz (100 Hz by default).
|
|
# This allows to use 1 ms granuality for thread sleeps (10 ms by default).
|
|
#CONFIG_FREERTOS_HZ=1000
|
|
|
|
# Workaround for https://github.com/espressif/esp-idf/issues/7631
|
|
#CONFIG_MBEDTLS_CERTIFICATE_BUNDLE=n
|
|
#CONFIG_MBEDTLS_CERTIFICATE_BUNDLE_DEFAULT_FULL=n
|
|
|
|
CONFIG_SECURE_SIGNED_APPS_NO_SECURE_BOOT=y
|
|
CONFIG_SECURE_BOOT_BUILD_SIGNED_BINARIES=n
|