Так как раз про фьюзы, в новых чипах закрытый ключ уже не хранится:
ESP32v3
Recently we launched an updated version of the ESP32, ESP32v3, that includes additional enhancements to the secure boot workflow that is described above. Specifically, the changes include:
The ESP32v3 uses PKI-based (RSA) verification instead of the AES-based verification that is documented above. In the RSA based verification, only the public key is stored on the ESP32, for signature verification, and the private key can be stored safely offline. This makes it harder to create a maliciously signed bootloader as long as the RSA private key is safe.
The eFUSE contains a hash of the RSA public key, while the RSA public key itself is stored in the flash.
не, это про бутлоадер
а выше - про работу крипто(ректального)акселератора уже в пользовательском приложении
romanetz
ВПК ПОТОК
Andrei
Воха
Andrew
Master