Pwn the ESP32 Forever: Flash Encryption and SEC. Boot Keys Extraction

Re:Pwn the ESP32 Forever: Flash Encryption and SEC. Boot Key... by kbumsik on Thursday November 21, 2019 @04:49PM (#21600062)

I'm wondering, how many companies that use ESP32 actually use the firmware security feature?

[ Parent | on HN ]

Re:Pwn the ESP32 Forever: Flash Encryption and SEC. Boot Key... by viraptor on Thursday November 21, 2019 @06:29PM (#21600907)

Almost everyone who's selling a real device, in my experience. It's pretty standard to disable firmware reads in embedded cpu products.

[ Parent | on HN ]

Re:Pwn the ESP32 Forever: Flash Encryption and SEC. Boot Key... by baybal2 on Friday November 22, 2019 @02:53AM (#21603683)

And from my experience, it's virtually none.

Since I first started work in OEM electronics in 2007, I only saw that being requested 3 times.

[ Parent | on HN ]

Re:Pwn the ESP32 Forever: Flash Encryption and SEC. Boot Key... by jdnenej on Thursday November 21, 2019 @04:51PM (#21600085)

It's used on most consumer devices simply to slow down clone devices being created.

[ Parent | on HN ]

Re:Pwn the ESP32 Forever: Flash Encryption and SEC. Boot Key... by slumos on Thursday November 21, 2019 @05:42PM (#21600535)

Here's one that definitely did not:

> Vulnerability n*2: No security settings (at all)

[ Parent | on HN ]

Re:Pwn the ESP32 Forever: Flash Encryption and SEC. Boot Key... by kbumsik on Thursday November 21, 2019 @06:06PM (#21600750)

Yeah that's what I thought, like many of them don't really care about it...

[ Parent | on HN ]