|
|
@@ -190,7 +190,15 @@ Assuming that the eFuse values are in their default states and the firmware boot
|
|
|
|
|
|
5. Firmware bootloader sets the first available bit in ``{IDF_TARGET_CRYPT_CNT}`` (0b001) to mark the flash contents as encrypted. Odd number of bits is set.
|
|
|
|
|
|
- 6. For :ref:`flash-enc-development-mode`, the firmware bootloader allows the UART bootloader to re-flash encrypted binaries. Also, the ``{IDF_TARGET_CRYPT_CNT}`` eFuse bits are NOT write-protected. In addition, the firmware bootloader by default sets the eFuse bits ``DIS_BOOT_REMAP``, ``DIS_DOWNLOAD_ICACHE``, ``DIS_DOWNLOAD_DCACHE``, ``HARD_DIS_JTAG`` and ``DIS_LEGACY_SPI_BOOT``.
|
|
|
+ 6. For :ref:`flash-enc-development-mode`, the firmware bootloader allows the UART bootloader to re-flash encrypted binaries. Also, the ``{IDF_TARGET_CRYPT_CNT}`` eFuse bits are NOT write-protected. In addition, the firmware bootloader by default sets the following eFuse bits:
|
|
|
+
|
|
|
+ .. list::
|
|
|
+
|
|
|
+ :esp32s2: - ``DIS_BOOT_REMAP``
|
|
|
+ - ``DIS_DOWNLOAD_ICACHE``
|
|
|
+ - ``DIS_DOWNLOAD_DCACHE``
|
|
|
+ - ``HARD_DIS_JTAG``
|
|
|
+ - ``DIS_LEGACY_SPI_BOOT``
|
|
|
|
|
|
7. For :ref:`flash-enc-release-mode`, the firmware bootloader sets all the eFuse bits set under development mode as well as ``DIS_DOWNLOAD_MANUAL_ENCRYPT``. It also write-protects the ``{IDF_TARGET_CRYPT_CNT}`` eFuse bits. To modify this behavior, see :ref:`uart-bootloader-encryption`.
|
|
|
|