State of Flash Encryption and Secure Boot for ESP32

[git-n-pissed]

I'm trying to figure out the state of Flash Encryption and Secure Boot V2 for the ESP32. I would do some experimenting, but since such experimentation would require burning efuses, I wanted to see if anyone knew where things currently stand before I start making bricks.

Here is an issue related to Flash Encryption, but the OP's original question has not been answered.

Here is an issue to Secure Boot, and @dpgeorge did respond, but the last post was over 3 years ago :(

[stephanelsmith]

This is coming to head for me as well, as there are some items in my firmware needing protection.

In addition to flash encryption and secure boot, the other item are the UART ROM Download modes.

On the micropython side, there's "Disabling CTRL-C / REPL" consideration in your last link from long ago.