Questions tagged [security]

6 questions
1
vote
1 answer

ESP32 Wipe Sensitive Key Data

Is it possible to ensure that keys (e.g. ssid, ssl certs) are wiped from the memory of a esp32? I'm new to the esp32, coming from a IoT device security perspective. Say a person was testing an esp32 application that utilized WIFI, in which sensitive…
PathToLife
  • 113
  • 4
1
vote
0 answers

Is there any way to secure Esp32 BLE server?

I've got a project in which currently I am using Bluetooth classic (with SSP - Simple secure pairing) to communicate to my esp32 board with my android app, but Bluetooth classic serial communication is not supported on ios devices therefore I want…
Piyush
  • 111
  • 1
1
vote
0 answers

Encrypting and decryption RSA (Or other asymetric encryption) on Arduino Mega

I want to encrypt and decrypt like 200 char strings on arduino mega, but I failed to find any library/code that can do that. Do you have any experience with doing that? Thanks. I'd like to use any asymmetric encryption The key should be ideally at…
krystof18
  • 315
  • 1
  • 4
  • 14
0
votes
0 answers

Get Hash from Biometric Fingerprint Data for Encryption

I'm trying to get a reliable hash from a fingerprint scanner to use as a encryption key. According to this post here: https://crypto.stackexchange.com/questions/103693/can-you-restore-a-private-key-from-biometrics, this can be done using stored…
Ezlanding
  • 101
0
votes
2 answers

Where can I store secret keys?

I want to store a password in my ESP8266 program, but I can't figure out a way to do it that makes it inaccessible to hackers. Even if I encrypt it, I'd still need to store the private key for the encryption process somewhere. I only have two ideas…
Blaine
  • 101
  • 4
0
votes
1 answer

How to allow cross-domain requests with ESP8266WebServer.h ? - CORS policy: Access-Control-Allow-Origin

With an nodeMCUv2 I want: to start a wifi server with ESP8266WebServer.h serve a root html page which will interact with the ESP and fetch external data Issue: CORS policy: No 'Access-Control-Allow-Origin' header is present on the requested…