UART security for CRA

[Trevor]

To comply with CRA (Cyber resillience act) there cannot be cleartext data over the UART. How do we implement security on the UART since all info is clear text AT commands including the SSID and PASSWORD? For example GSM modem manufactures allow a data mode using CMUX then all stacks (TCP/TLS etC) can be located on the MCU so that all data is encrypted , but how to do this with ESP AT based devices? I dont really want to make custom firmware.

[esp-at]

you can follow this: https://github.com/espressif/esp-at/tre ... e_security