firmware icon indicating copy to clipboard operation
firmware copied to clipboard

[Feature Request]: Security: Factory reset via hardware, such as detection sensor module or button

Open noon92 opened this issue 1 year ago • 0 comments

Platform

NRF52

Description

This would allow a hardware button or IO pin event to trigger a wiping of private data, with a focus on encryption keys and nodeDB, from storage.

One use case: a remotely placed repeater with a tamper detection mechanism that, upon detection of enclosure intrusion would wipe encryption keys, preserving the security of the mesh.

Currently, we have --factory-reset via serial. It should be easy to implement this via detection sensor, for example.

Additional functionality proposal: allow for a message to be sent to the primary channel (or a specific node) before wiping data. Example:

  1. Via some kind of sensor, enclosure intrusion (or movement of enclosure) is detected.
  2. An alert bell is sent to the primary channel (or a specific node): "TAMPER detected, wiping memory".
  3. After a timeout of say 10 seconds or after ACK, firmware wipes.

noon92 avatar Feb 17 '24 13:02 noon92