firmware
firmware copied to clipboard
[Feature Request]: Security: Factory reset via hardware, such as detection sensor module or button
Platform
NRF52
Description
This would allow a hardware button or IO pin event to trigger a wiping of private data, with a focus on encryption keys and nodeDB, from storage.
One use case: a remotely placed repeater with a tamper detection mechanism that, upon detection of enclosure intrusion would wipe encryption keys, preserving the security of the mesh.
Currently, we have --factory-reset via serial. It should be easy to implement this via detection sensor, for example.
Additional functionality proposal: allow for a message to be sent to the primary channel (or a specific node) before wiping data. Example:
- Via some kind of sensor, enclosure intrusion (or movement of enclosure) is detected.
- An alert bell is sent to the primary channel (or a specific node): "TAMPER detected, wiping memory".
- After a timeout of say 10 seconds or after ACK, firmware wipes.