This is an automated email from the ASF dual-hosted git repository.
xiaoxiang781216 pushed a commit to branch releases/13.0
in repository https://gitbox.apache.org/repos/asf/nuttx-apps.git
The following commit(s) were added to refs/heads/releases/13.0 by this push:
new 4f861a4e2 !fsutils/passwd: remove insecure default TEA encryption keys
4f861a4e2 is described below
commit 4f861a4e213b0f6089d367f810ff6e8a7a68be6b
Author: Abhishek Mishra <[email protected]>
AuthorDate: Sun Jul 5 20:00:52 2026 +0000
!fsutils/passwd: remove insecure default TEA encryption keys
Use 0 as a Kconfig placeholder. The nuttx build rejects unset keys
and can generate random values when configured.
BREAKING CHANGE: CONFIG_FSUTILS_PASSWD_KEY1..4 no longer default to
0x12345678 / 0x9abcdef0. Configs that relied on those defaults must
set keys manually or enable BOARD_ETC_ROMFS_PASSWD_RANDOMIZE_KEYS in
nuttx. Fix: set keys in menuconfig or enable random key generation.
Signed-off-by: Abhishek Mishra <[email protected]>
---
fsutils/passwd/Kconfig | 11 +++++++----
1 file changed, 7 insertions(+), 4 deletions(-)
diff --git a/fsutils/passwd/Kconfig b/fsutils/passwd/Kconfig
index 4f40349fc..42a8301e2 100644
--- a/fsutils/passwd/Kconfig
+++ b/fsutils/passwd/Kconfig
@@ -25,18 +25,21 @@ config FSUTILS_PASSWD_IOBUFFER_SIZE
config FSUTILS_PASSWD_KEY1
hex "Encryption key value 1"
- default 0x12345678
+ default 0
+ ---help---
+ Leave at 0 if random key generation is enabled under Board
+ Selection. Otherwise set all four keys to unique non-zero
values.
config FSUTILS_PASSWD_KEY2
hex "Encryption key value 2"
- default 0x9abcdef0
+ default 0
config FSUTILS_PASSWD_KEY3
hex "Encryption key value 3"
- default 0x12345678
+ default 0
config FSUTILS_PASSWD_KEY4
hex "Encryption key value 4"
- default 0x9abcdef0
+ default 0
endif # FSUTILS_PASSWD
