From 1dcce7733d581803e8990d49522470848e603f98 Mon Sep 17 00:00:00 2001 From: Patrick Hofmann Date: Mon, 3 Jun 2024 12:59:01 +0200 Subject: [PATCH] Support NVS encryption without flash encryption --- components/nvs_flash/Kconfig | 2 +- components/nvs_sec_provider/Kconfig | 1 - 2 files changed, 1 insertion(+), 2 deletions(-) diff --git a/components/nvs_flash/Kconfig b/components/nvs_flash/Kconfig index a432384ad9e..0acf1ba945c 100644 --- a/components/nvs_flash/Kconfig +++ b/components/nvs_flash/Kconfig @@ -2,8 +2,8 @@ menu "NVS" config NVS_ENCRYPTION bool "Enable NVS encryption" - depends on SECURE_FLASH_ENC_ENABLED || SOC_HMAC_SUPPORTED default y if SECURE_FLASH_ENC_ENABLED + default n if !SECURE_FLASH_ENC_ENABLED help This option enables encryption for NVS. When enabled, XTS-AES is used to encrypt the complete NVS data, except the page headers. It requires XTS encryption keys diff --git a/components/nvs_sec_provider/Kconfig b/components/nvs_sec_provider/Kconfig index e50839d3a8a..7c5de747aae 100644 --- a/components/nvs_sec_provider/Kconfig +++ b/components/nvs_sec_provider/Kconfig @@ -13,7 +13,6 @@ menu "NVS Security Provider" config NVS_SEC_KEY_PROTECT_USING_FLASH_ENC bool "Using Flash Encryption" - depends on SECURE_FLASH_ENC_ENABLED help Protect the NVS Encryption Keys using Flash Encryption Requires a separate 'nvs_keys' partition (which will be encrypted by flash encryption)