QUERY · ISSUE

Secure boot functionality for esp32

openby Architk08opened 2019-06-17updated 2023-01-23

port-esp32

Has secure boot feature on ESP32 been implemented on micropython?. If not then what is the other method to secure the firmware?

CANDIDATE · PULL REQUEST

ports/esp32: Add `MICROPY_BOARD_FROZEN_BOOT_FILE`.

openby Carglglzopened 2024-01-06updated 2024-01-13

port-esp32

This adds the option to execute custom frozen boot module by defining the macro MICROPY_BOARD_FROZEN_BOOT_FILE. This feature is already available in stm32 and ~~mimxrt~~ renesas-ra ports.

I think this a useful feature and should be documented and added to other ports too. 👍🏼

Assessment

Q Qwen · medium

Issue #4854 asks about secure boot functionality and firmware security methods for ESP32. PR #13376 adds support for custom frozen boot modules via MICROPY_BOARD_FROZEN_BOOT_FILE. While frozen boot modules could potentially be used as part of a secure boot implementation (e.g., to run custom verification code), this PR does not implement secure boot itself. Secure boot typically involves cryptographic verification of firmware signatures by the bootloader, which is a different mechanism than executing custom frozen code at boot. The PR addresses a related capability (custom boot code) but does not resolve the original question about secure boot functionality.

Suggested action

Keep both items open. The PR provides a building block that could be used in secure boot implementations, but does not directly answer the secure boot question. Consider linking the PR to the issue as a related capability, or close the issue if the answer is that secure boot is not natively supported and users should use ESP-IDF's secure boot features instead.

Secure boot functionality for esp32

ports/esp32: Add `MICROPY_BOARD_FROZEN_BOOT_FILE`.

Keyboard