After Enabling Flash Encryption And Secure Boot For Esp32, How To Disable Them; Is There Any Security Strategy For Esp32 To Protect Its Firmware; When Esp32 Debugging Gdb After Enabling Flash Encryption, Why Does It Continuously Reset And Restart; How To Enable Flash Encryption For Esp32 - Espressif Systems ESP Faq

Chapter 4. Software framework

4.7.7 After enabling flash encryption and secure boot for ESP32, how to disable them?

• If you are using the one-time flash (Release) mode, both flash encryption and secure boot cannot be disabled.
• If you are using the reflashable (Development (NOT SECURE)) mode, the flash encryption can be disabled,
please refer to Disabling Flash

4.7.8 Is there any security strategy for ESP32 to protect its firmware?

• ESP32 supports flash encryption and secure boot.
• For flash encryption, please refer to
• For secure boot, please refer to
• For secure boot V2, please refer to
4.7.9 When ESP32 debugging GDB after enabling flash encryption, why does it continu-
ously reset and restart?
• After ESP32 enabling flash encryption or secure boot, it will restrict JTAG debugging by default, please refer
to Tips and Quirks.
• You can read the current JTAG status of your chip using the espefuse.py summary command from
esptool.

4.7.10 How to enable flash encryption for ESP32?

• It can be enabled via menuconfig or idf.py menuconfig by configuring Security features -> Enable
flash encryption on boot (READ DOCS FIRST).
• Please refer to Flash encryption
4.7.11 After GPIO0 is pulled down, the ESP32 cannot enter download mode and prints
"download mode is disable". What could be the reason?
• The log means the chip's UART Download mode has been disabled.
UART_DOWNLOAD_DIS bit in eFuse.
• Please note that after the Production mode of flash encryption is enabled, the UART Download mode will be
disabled by default. For more information, please refer to
4.7.12 Can the secure boot function be enabled for ESP32 in Arduino development envi-
ronment?
• No. If you want to use Arduino for development, the only way to enable the secure boot function is to use
Arduino as an IDF component.
Espressif Systems
Encryption; while the secure boot cannot be disabled.
flash encryption.
secure boot.
secure boot V2 for chip revision
instructions.
106
Submit Document Feedback
v3.0.
You can check this via the
UART ROM download mode.
Release master