<html><head><meta http-equiv="Content-Type" content="text/html charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">I’ve received both this suggestion, as well as one to offer two different versions of the module (one with flash encryption enabled and one without).<div class=""><br class=""></div><div class="">I am going to experiment with this, to see if we can run signed firmware on devices with no flash encryption enabled. If that is the case, we could probably reasonably easily provide the modules encryption-ready, with just a simple utility to actually enable it. Then, OTA updates wouldn’t care which version of device they would be run on.</div><div class=""><br class=""></div><div class="">Regards, Mark.</div><div class=""><br class=""><div><blockquote type="cite" class=""><div class="">On 4 Aug 2017, at 1:08 AM, Michael Balzer <<a href="mailto:dexter@expeedo.de" class="">dexter@expeedo.de</a>> wrote:</div><br class="Apple-interchange-newline"><div class="">
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" class="">
<div text="#000000" bgcolor="#FFFFFF" class="">
<br class="">
<div class="moz-cite-prefix">Am 03.08.2017 um 05:53 schrieb Mark
Webb-Johnson:<br class="">
</div>
<blockquote type="cite" cite="mid:924F9BD8-0B5A-4F91-8952-F6FC3E67FE6D@webb-johnson.net" class="">
<li class="">A public key is stored in a write-once eFuse.</li>
<li class="">A matching private key is used to sign programs to be
downloaded to the system.</li>
</blockquote>
<br class="">
How about shipping unprotected and adding a simple utility to create
and burn an individual key pair?<br class="">
<br class="">
Users who want to protect the module would then just do their own
code signing.<br class="">
<br class="">
Regards,<br class="">
Michael<br class="">
<br class="">
<pre class="moz-signature" cols="72">--
Michael Balzer * Helkenberger Weg 9 * D-58256 Ennepetal
Fon 02333 / 833 5735 * Handy 0176 / 206 989 26
</pre>
</div>
_______________________________________________<br class="">OvmsDev mailing list<br class=""><a href="mailto:OvmsDev@lists.teslaclub.hk" class="">OvmsDev@lists.teslaclub.hk</a><br class="">http://lists.teslaclub.hk/mailman/listinfo/ovmsdev<br class=""></div></blockquote></div><br class=""></div></body></html>