From 4f861a4e213b0f6089d367f810ff6e8a7a68be6b Mon Sep 17 00:00:00 2001 From: Abhishek Mishra Date: Sun, 5 Jul 2026 20:00:52 +0000 Subject: [PATCH] !fsutils/passwd: remove insecure default TEA encryption keys Use 0 as a Kconfig placeholder. The nuttx build rejects unset keys and can generate random values when configured. BREAKING CHANGE: CONFIG_FSUTILS_PASSWD_KEY1..4 no longer default to 0x12345678 / 0x9abcdef0. Configs that relied on those defaults must set keys manually or enable BOARD_ETC_ROMFS_PASSWD_RANDOMIZE_KEYS in nuttx. Fix: set keys in menuconfig or enable random key generation. Signed-off-by: Abhishek Mishra --- fsutils/passwd/Kconfig | 11 +++++++---- 1 file changed, 7 insertions(+), 4 deletions(-) diff --git a/fsutils/passwd/Kconfig b/fsutils/passwd/Kconfig index 4f40349fc..42a8301e2 100644 --- a/fsutils/passwd/Kconfig +++ b/fsutils/passwd/Kconfig @@ -25,18 +25,21 @@ config FSUTILS_PASSWD_IOBUFFER_SIZE config FSUTILS_PASSWD_KEY1 hex "Encryption key value 1" - default 0x12345678 + default 0 + ---help--- + Leave at 0 if random key generation is enabled under Board + Selection. Otherwise set all four keys to unique non-zero values. config FSUTILS_PASSWD_KEY2 hex "Encryption key value 2" - default 0x9abcdef0 + default 0 config FSUTILS_PASSWD_KEY3 hex "Encryption key value 3" - default 0x12345678 + default 0 config FSUTILS_PASSWD_KEY4 hex "Encryption key value 4" - default 0x9abcdef0 + default 0 endif # FSUTILS_PASSWD