secure boot and encryption for production programming

[bram128]

I am preparing to go to mass production on an esp23s3 based device. I am trying to sort out the programming process for creating binary images that support secure boot, flash encryption, and setting all of the efuse bits.

espressif provides 2 workflows for enabling flash encryption and secure boot here:

https://docs.espressif.com/projects/esp ... flows.html

however, you cannot just follow these instructions in sequence as listed. Does anyone have a concise description of the exact sequence that needs to be followed to create a single binary image that supports both secure boot and flash encryption along with the sequence for programming both the flash and the necessary efuse locations?