Aksal/nuttx-apps
1
0
Fork 1
mirror of https://github.com/apache/nuttx-apps.git synced 2026-08-01 20:29:00 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

!fsutils/passwd: remove insecure default TEA encryption keys

Browse source 
Use 0 as a Kconfig placeholder. The nuttx build rejects unset keys
and can generate random values when configured.

BREAKING CHANGE: CONFIG_FSUTILS_PASSWD_KEY1..4 no longer default to
0x12345678 / 0x9abcdef0. Configs that relied on those defaults must
set keys manually or enable BOARD_ETC_ROMFS_PASSWD_RANDOMIZE_KEYS in
nuttx. Fix: set keys in menuconfig or enable random key generation.

Signed-off-by: Abhishek Mishra <mishra.abhishek2808@gmail.com>
This commit is contained in:
Abhishek Mishra 2026-07-05 20:00:52 +00:00 • committed by Xiang Xiao
parent b6bbbf25b2
commit 4f861a4e21
1 changed files with 7 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

11
fsutils/passwd/Kconfig
View file

@ -25,18 +25,21 @@ config FSUTILS_PASSWD_IOBUFFER_SIZE
config FSUTILS_PASSWD_KEY1
hex "Encryption key value 1"
default 0x12345678
default 0
---help---
Leave at 0 if random key generation is enabled under Board
Selection. Otherwise set all four keys to unique non-zero values.
config FSUTILS_PASSWD_KEY2
hex "Encryption key value 2"
default 0x9abcdef0
default 0
config FSUTILS_PASSWD_KEY3
hex "Encryption key value 3"
default 0x12345678
default 0
config FSUTILS_PASSWD_KEY4
hex "Encryption key value 4"
default 0x9abcdef0
default 0
endif # FSUTILS_PASSWD