KaspervanM / KaspervanM/WiFiRC-Car
Secure serial connection between ESP8266 and onboard RPI
- Dominant language
- C++
- Stars
- 0
- Forks
- 0
- PR merge metrics
- No merged PRs in 30d
Description
## What
The RPI needs to get the WiFi SSID and password from the ESP8266 in order to connect. This will be done using a serial. However, unlike within the ESP's EEPROM, everything is encrypted and the source code cannot be retrieved to decrypt. All files and source code can easily be acquired from the micro-sd chip. This means decrypting cannot be done on the RPI, but how does the ESP know if it really is the RPI that is asking for the password? Or, if the decrypting is one on the RPI, how can the method be concealed?
## How
* For one, the decrypting could be done on the RPI within a dll written in machine language.
* The password would still be vulnerable to exposure as the key and the encrypted password still needs to be given to the RPI. And as the program to decrypt is there as well, this is all that is needed to get the password.
* Another possibility would be for the password to be decrypted by the ESP before being sent to the RPI.
* This would be most vulnerable because without a verification method, you can easily read out the password if you connect the serial to a pc. And any verification method could be found in the source code of the RPI.
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.