# Esp Privilege Separation

Published articles for Esp Privilege Separation.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## Securely booting user application in ESP Privilege Separation

DevFeed: [Securely booting user application in ESP Privilege Separation](<https://devfeed.tech/articles/securely-booting-user-application-in-esp-privilege-separation-13954.md>)

Original publisher: [Read original article](<https://developer.espressif.com/blog/securely-booting-user-application-in-esp-privilege-separation/>)

Author: John Lee

Published: 2023-02-18T00:00:00Z

Content type: tutorial

Language: en

Sources: [Blog on Developer Portal](<https://devfeed.tech/sources/blog-on-developer-portal.md>)

Topics: [ESP-IDF](<https://devfeed.tech/topics/esp-idf.md>), [Security](<https://devfeed.tech/topics/security.md>), [Embedded Software Dev](<https://devfeed.tech/topics/embedded-software-dev.md>), [Hardware](<https://devfeed.tech/topics/hardware.md>)

Tags: [blog](<https://devfeed.tech/tags/blog.md>), [embedded](<https://devfeed.tech/tags/embedded.md>), [esp-idf](<https://devfeed.tech/tags/esp-idf.md>), [esp-privilege-separation](<https://devfeed.tech/tags/esp-privilege-separation.md>), [esp32](<https://devfeed.tech/tags/esp32.md>), [firmware](<https://devfeed.tech/tags/firmware.md>), [hardware](<https://devfeed.tech/tags/hardware.md>), [iot](<https://devfeed.tech/tags/iot.md>), [public-key](<https://devfeed.tech/tags/public-key.md>), [secure-boot](<https://devfeed.tech/tags/secure-boot.md>), [security](<https://devfeed.tech/tags/security.md>), [trust](<https://devfeed.tech/tags/trust.md>), [verification](<https://devfeed.tech/tags/verification.md>)

### AI overview

This article describes certificate-based secure boot for user applications in the ESP Privilege Separation framework. It explains how protected and user applications can have independent update cycles and signing keys, and how the protected application verifies the user application when eFuse memory is scarce.

### Source excerpt

In the previous post, we demonstrated the ability to independently update the user application in the ESP Privilege Separation framework. With the separation and isolation of the protected app and user app, it becomes convenient to decouple the ownership of each of these apps and their updates. This also potentially allows the possibility of having multiple user applications for a single protected application, somewhat like an "application store" for user app.

## OTA Firmware Updates with ESP Privilege Separation

DevFeed: [OTA Firmware Updates with ESP Privilege Separation](<https://devfeed.tech/articles/ota-firmware-updates-with-esp-privilege-separation-13940.md>)

Original publisher: [Read original article](<https://developer.espressif.com/blog/ota-firmware-updates-with-esp-privilege-separation/>)

Author: John Lee

Published: 2023-01-29T00:00:00Z

Content type: tutorial

Language: en

Sources: [Blog on Developer Portal](<https://devfeed.tech/sources/blog-on-developer-portal.md>)

Topics: [ESP-IDF](<https://devfeed.tech/topics/esp-idf.md>), [Embedded Software Dev](<https://devfeed.tech/topics/embedded-software-dev.md>)

Tags: [blog](<https://devfeed.tech/tags/blog.md>), [business-logic](<https://devfeed.tech/tags/business-logic.md>), [esp](<https://devfeed.tech/tags/esp.md>), [esp-idf](<https://devfeed.tech/tags/esp-idf.md>), [esp-privilege-separation](<https://devfeed.tech/tags/esp-privilege-separation.md>), [esp32](<https://devfeed.tech/tags/esp32.md>), [firmware](<https://devfeed.tech/tags/firmware.md>), [firmware-update](<https://devfeed.tech/tags/firmware-update.md>), [iot](<https://devfeed.tech/tags/iot.md>), [ota](<https://devfeed.tech/tags/ota.md>), [partition](<https://devfeed.tech/tags/partition.md>), [security](<https://devfeed.tech/tags/security.md>), [updates](<https://devfeed.tech/tags/updates.md>)

### AI overview

This article explains independent over-the-air firmware updates for protected_app and user_app in ESP Privilege Separation. It describes the ESP-IDF partition layout, the user-app update workflow, background downloading, reboot handling, and optional signature verification.

### Source excerpt

Over-The-Air (OTA) firmware update is one of the most important feature of any connected device. It enables the developers to ship out new features and bug fixes by remotely updating the application. In ESP Privilege Separation, there are two applications -- protected_app and user_app for which the framework provides the ability to independently update both the application binaries. In this post we will describe the independent OTA update feature under ESP Privilege Separation.

## ESP Privilege Separation -- A Case Study

DevFeed: [ESP Privilege Separation -- A Case Study](<https://devfeed.tech/articles/esp-privilege-separation-a-case-study-13846.md>)

Original publisher: [Read original article](<https://developer.espressif.com/blog/esp-privilege-separation-a-case-study/>)

Author: John Lee

Published: 2022-07-05T00:00:00Z

Content type: article

Language: en

Sources: [Blog on Developer Portal](<https://devfeed.tech/sources/blog-on-developer-portal.md>)

Topics: [ESP32-C3](<https://devfeed.tech/topics/esp32-c3.md>), [Esp Rainmaker](<https://devfeed.tech/topics/esp-rainmaker.md>), [Internet of things](<https://devfeed.tech/topics/iot.md>), [SOC](<https://devfeed.tech/topics/soc.md>), [Framework](<https://devfeed.tech/topics/framework.md>), [App](<https://devfeed.tech/topics/app.md>)

Tags: [blog](<https://devfeed.tech/tags/blog.md>), [case-study](<https://devfeed.tech/tags/case-study.md>), [embedded-systems](<https://devfeed.tech/tags/embedded-systems.md>), [esp-privilege-separation](<https://devfeed.tech/tags/esp-privilege-separation.md>), [esp-rainmaker](<https://devfeed.tech/tags/esp-rainmaker.md>), [esp32-c3](<https://devfeed.tech/tags/esp32-c3.md>), [framework](<https://devfeed.tech/tags/framework.md>), [iot](<https://devfeed.tech/tags/iot.md>), [overview](<https://devfeed.tech/tags/overview.md>), [products](<https://devfeed.tech/tags/products.md>), [security](<https://devfeed.tech/tags/security.md>)

### AI overview

This case study describes integrating ESP-RainMaker, an IoT application, with the ESP Privilege Separation framework on the ESP32-C3 SoC. It covers placing the ESP-RainMaker agent in the protected application, splitting components between protected and user applications, and implementing system calls for ESP-RainMaker APIs.

### Source excerpt

In the previous post, we introduced ESP Privilege Separation, a framework to achieve "user-kernel" separation and isolation on ESP32-C3 SoC. There are multiple ways of applying this framework to your project. This post presents a case study of integrating ESP-RainMaker, a real-world IoT application, with the ESP Privilege Separation framework. ESP-RainMaker offers a complete ecosystem to build connected AIoT products. Please refer to this link for more details.

## Introducing ESP Privilege Separation

DevFeed: [Introducing ESP Privilege Separation](<https://devfeed.tech/articles/introducing-esp-privilege-separation-13888.md>)

Original publisher: [Read original article](<https://developer.espressif.com/blog/introducing-esp-privilege-separation/>)

Author: John Lee

Published: 2022-06-19T00:00:00Z

Content type: release

Language: en

Sources: [Blog on Developer Portal](<https://devfeed.tech/sources/blog-on-developer-portal.md>)

Topics: [Embedded Software Dev](<https://devfeed.tech/topics/embedded-software-dev.md>), [ESP-IDF](<https://devfeed.tech/topics/esp-idf.md>), [Microcontroller](<https://devfeed.tech/topics/microcontroller.md>), [ESP32-C3](<https://devfeed.tech/topics/esp32-c3.md>), [Espressif](<https://devfeed.tech/topics/espressif.md>)

Tags: [blog](<https://devfeed.tech/tags/blog.md>), [core](<https://devfeed.tech/tags/core.md>), [embedded-systems](<https://devfeed.tech/tags/embedded-systems.md>), [esp-idf](<https://devfeed.tech/tags/esp-idf.md>), [esp-privilege-separation](<https://devfeed.tech/tags/esp-privilege-separation.md>), [esp32](<https://devfeed.tech/tags/esp32.md>), [esp32-c3](<https://devfeed.tech/tags/esp32-c3.md>), [espressif](<https://devfeed.tech/tags/espressif.md>), [firmware](<https://devfeed.tech/tags/firmware.md>), [interface](<https://devfeed.tech/tags/interface.md>), [iot](<https://devfeed.tech/tags/iot.md>), [mcu](<https://devfeed.tech/tags/mcu.md>), [memory](<https://devfeed.tech/tags/memory.md>), [microcontrollers](<https://devfeed.tech/tags/microcontrollers.md>), [peripheral](<https://devfeed.tech/tags/peripheral.md>), [security](<https://devfeed.tech/tags/security.md>)

### AI overview

Espressif introduces ESP Privilege Separation, a framework that divides ESP-IDF firmware into protected and user applications with isolated execution environments, system calls, and configurable memory and peripheral access. The framework targets ESP32-C3 and is intended to provide privilege separation for microcontroller applications.

### Source excerpt

Typically, applications on microcontrollers (MCU) are developed as monolithic firmware. We have been discussing on achieving "user-kernel" separation with appropriate execution privileges, like general purpose OS, on MCUs. The crux of this was to make the end application development easier without worrying about the underlying changes in the system, like how applications on desktop/mobile phones are developed: the underlying operating system handles the critical functionalities, and the end...