Thanks, both of these are really helpful — the hybrid attack (dump encrypted flash → reflash → restore the old encrypted NVS partition) is a flaw I hadn't accounted for, and it makes sense: the mandatory wipe erases the data, but the flash encryption key in eFuse stays the same, so an attacker can ...

Hello Sprite .

There will be times that the product can be on the outside or really close to the street on someone's property. Think of an electrical meter box or water meter box, for example. Here in Portugal it is very common to find meters like this on the outside where someone can access it ...

Good morning everyone.

I'm building a commercial ESP32-based product that is physically exposed — it's installed in a street-facing box, so an attacker can reach the USB/serial pins. This creates a specific pair of needs that, as far as I can tell, no current configuration satisfies together ...