OTA Update with flash encryption.

[peetery]

Hi!

I'm wondering if it's possible to do the OTA updates with flash encryption on ESP32 with MicroPython?
At this point, I have my application implemented along with support for OTA updates and everything works perfectly fine - I have all my code frozen into the firmware. But I have doubts whether this is sufficient security for production to prevent someone from copying my micropython.bin image from flash. That's why I'm thinking about turning on flash encryption but I can't find enough information if it even works fine with OTA updates alongside.
I know that I can still disable the REPL completely, and would that combined with the frozen modules in the firmware be enough in terms of security or is flash encryption still necessary?

[bidrohini]

Flash encryption does not inherently prevent OTA updates, but you need to use the ESP-IDF's secure boot and OTA update mechanisms correctly.

[peetery]

Yeah, I figured it out. I'm already turned on flash encryption and secure boot (right now only in development mode) and OTA updates works perfectly fine :) Thanks for advice.