These are chat archives for SmingHub/Sming

19th
Aug 2016
Chris Marrin
@cmarrin
Aug 19 2016 02:25
What's the motivation for using esptool2 for Sming builds rather than just esptool.py? Is there something the former does that the latter can't?
hreintke
@hreintke
Aug 19 2016 07:12
@cmarrin
When using rBoot (OTA functionality within Sming) esptool2 has required functionality not in esptool.
We had some time go an issue with esptool & windows. Quick fix was also using esptool2 for non rBoot applications.
psychegr
@psychegr
Aug 19 2016 11:29

@harry-boe I am mostly interested using the builtin AES256 functions. For now i only want to encrypt and decrypt a file and i made it using the library that i mentioned earlier. But later i will try to use it to load encrypted firmware. I know that ESP8266 is a powerful processor but the fact that it uses an SPI flash means that someone can copy the whole code just by connecting the SPI flash to a reader. There is a guy that goes by the nickname "rudi" and i think that he has developed what i want.

@hreintke
I have sent you a private message regarding the udp stuff. I believe that i found a working solution and we can add it to Sming and SmingRTOS.

Harry Böttcher
@harry-boe
Aug 19 2016 16:09
@psychegr
I have seen the post in the esp8266 forum from rudi. (he has some youtube videos as well). However, the stope I’m working also includes firmware signig and verification together with authetication based on ECDSA. That’s why we have ported the micro ECDSA lib to Sming. Ther is another branch in my repository using the Atmel crypto chips. In that case the required keys are generated and stored on the crypto chip making them unreachaable for read outs etc. Status right now is that we have a key provisioning scenario based on the sw lib and the port and HAL layer to get the crypto chips working with SmingRTOS. Next step is to provide the use cases such as provisioning, Firmware signing, Firmware verification, Authetication and so on. Obvoisly application Layer encryption for Mqtt and other protocolls will folow closely. I’m working on that with a number of students as parts of the bachlor or master thesis. So progress is slower and not not as focused as i would like .. but we slowly get there. Im open to take your ideas here and maybe we can share some work.
psychegr
@psychegr
Aug 19 2016 17:13
@harry-boe The atmel chips are wonderful for that kind of job but for my application they are useless. I am using all the all the GPIOs of the ESP-12E in my application but maybe i could save a couple and fit an atmel crypto chip in there. Maybe i can share a couple stuff on crypto but i am total newbie to crypto! I just want to make sure that my application wont be easy to copy and i will try to use the built in AES stuff from esp8266 as it seems that it supports the AES CBC mode and this fits in my application.