Skip to content
  • MySensors
  • OpenHardware.io
  • Categories
  • Recent
  • Tags
  • Popular
Skins
  • Light
  • Brite
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (No Skin)
  • No Skin
Collapse
Brand Logo
  1. Home
  2. Troubleshooting
  3. Failed to make encryption work on a barebone ATMEGA328P

Failed to make encryption work on a barebone ATMEGA328P

Scheduled Pinned Locked Moved Troubleshooting
atmega328prfm69wsecurity
42 Posts 5 Posters 2.9k Views 5 Watching
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • EncryptE Encrypt

    According to that post, it seems there is a high correlation between the fuses value and the fact that security may or may not work.

    Here is the boards.txt file I got from the official "Arduino on a breadboard with internal 8MHz clock" bootloader:

    ##############################################################
    
    atmega328bb.name=ATmega328 on a breadboard (8 MHz internal clock)
    
    atmega328bb.upload.protocol=arduino
    atmega328bb.upload.maximum_size=30720
    atmega328bb.upload.speed=57600
    
    atmega328bb.bootloader.low_fuses=0xE2
    atmega328bb.bootloader.high_fuses=0xDA
    atmega328bb.bootloader.extended_fuses=0x05
    
    atmega328bb.bootloader.file=atmega/ATmegaBOOT_168_atmega328_pro_8MHz.hex
    atmega328bb.bootloader.unlock_bits=0x3F
    atmega328bb.bootloader.lock_bits=0x0F
    
    atmega328bb.build.board=AVR_ATMEGA328BB
    atmega328bb.build.mcu=atmega328p
    atmega328bb.build.f_cpu=8000000L
    atmega328bb.build.core=arduino:arduino
    atmega328bb.build.variant=arduino:standard
    
    
    atmega328bb.bootloader.tool=arduino:avrdude
    atmega328bb.upload.tool=arduino:avrdude
    

    Do you have any clue @Anticimex / @mfalkvidd?

    AnticimexA Offline
    AnticimexA Offline
    Anticimex
    Contest Winner
    wrote on last edited by
    #30

    @encrypt but I still do not get how the bootloader could cause you to get tampered eeprom data.
    Unless the fuses also affect eeprom writes of course.

    Do you feel secure today? No? Start requiring some signatures and feel better tomorrow ;)

    1 Reply Last reply
    0
    • EncryptE Offline
      EncryptE Offline
      Encrypt
      wrote on last edited by
      #31

      @Anticimex: I have just found that there is an EESAVE fuse on the ATMEGA328P which prevents the EEPROM from being erased whenever a new sketch is pushed to the microcontroller.

      It seems to be the root cause of the issue since I've found references in other posts of the MySensors forum to that problem.

      I'll test that now and let you know.

      Come have fun with me on IRC: #mysensors on Libera.chat :)

      AnticimexA 1 Reply Last reply
      1
      • EncryptE Encrypt

        @Anticimex: I have just found that there is an EESAVE fuse on the ATMEGA328P which prevents the EEPROM from being erased whenever a new sketch is pushed to the microcontroller.

        It seems to be the root cause of the issue since I've found references in other posts of the MySensors forum to that problem.

        I'll test that now and let you know.

        AnticimexA Offline
        AnticimexA Offline
        Anticimex
        Contest Winner
        wrote on last edited by
        #32

        @encrypt ah, that would indeed explain a lot and especially the tampered indication.
        If true, I'll see if I can add that to the troubleshooting section to the documentation.
        I was not aware of this fuse.

        Do you feel secure today? No? Start requiring some signatures and feel better tomorrow ;)

        1 Reply Last reply
        1
        • EncryptE Offline
          EncryptE Offline
          Encrypt
          wrote on last edited by Encrypt
          #33

          IT WORKS @Anticimex !!! :the_horns:

          The issue was indeed the EESAVE fuse not set, which caused the EEPROM to be erased after each sketch upload.

          Here is my modified boards.txt file:

          ##############################################################
          
          atmega328bb.name=ATmega328 on a breadboard (8 MHz internal clock)
          
          atmega328bb.upload.protocol=arduino
          atmega328bb.upload.maximum_size=30720
          atmega328bb.upload.speed=57600
          
          atmega328bb.bootloader.low_fuses=0xE2
          atmega328bb.bootloader.high_fuses=0xD2
          atmega328bb.bootloader.extended_fuses=0x05
          
          atmega328bb.bootloader.file=atmega/ATmegaBOOT_168_atmega328_pro_8MHz.hex
          atmega328bb.bootloader.unlock_bits=0x3F
          atmega328bb.bootloader.lock_bits=0x0F
          
          atmega328bb.build.board=AVR_ATMEGA328BB
          atmega328bb.build.mcu=atmega328p
          atmega328bb.build.f_cpu=8000000L
          atmega328bb.build.core=arduino:arduino
          atmega328bb.build.variant=arduino:standard
          
          
          atmega328bb.bootloader.tool=arduino:avrdude
          atmega328bb.upload.tool=arduino:avrdude
          

          So, basically, for people coming here in the future:
          Follow the tutorial https://www.arduino.cc/en/Tutorial/ArduinoToBreadboard to flash the bootloader of your ATMEGA328P but replace the given boards.txt file (in the breadboard-1-6-x.zip archive) by the one above.

          A useful link to calculate the fuses values: http://www.engbedded.com/fusecalc/

          Thanks for your help @Anticimex, @mfalkvidd and @kimot :)

          Come have fun with me on IRC: #mysensors on Libera.chat :)

          AnticimexA 1 Reply Last reply
          1
          • EncryptE Encrypt

            IT WORKS @Anticimex !!! :the_horns:

            The issue was indeed the EESAVE fuse not set, which caused the EEPROM to be erased after each sketch upload.

            Here is my modified boards.txt file:

            ##############################################################
            
            atmega328bb.name=ATmega328 on a breadboard (8 MHz internal clock)
            
            atmega328bb.upload.protocol=arduino
            atmega328bb.upload.maximum_size=30720
            atmega328bb.upload.speed=57600
            
            atmega328bb.bootloader.low_fuses=0xE2
            atmega328bb.bootloader.high_fuses=0xD2
            atmega328bb.bootloader.extended_fuses=0x05
            
            atmega328bb.bootloader.file=atmega/ATmegaBOOT_168_atmega328_pro_8MHz.hex
            atmega328bb.bootloader.unlock_bits=0x3F
            atmega328bb.bootloader.lock_bits=0x0F
            
            atmega328bb.build.board=AVR_ATMEGA328BB
            atmega328bb.build.mcu=atmega328p
            atmega328bb.build.f_cpu=8000000L
            atmega328bb.build.core=arduino:arduino
            atmega328bb.build.variant=arduino:standard
            
            
            atmega328bb.bootloader.tool=arduino:avrdude
            atmega328bb.upload.tool=arduino:avrdude
            

            So, basically, for people coming here in the future:
            Follow the tutorial https://www.arduino.cc/en/Tutorial/ArduinoToBreadboard to flash the bootloader of your ATMEGA328P but replace the given boards.txt file (in the breadboard-1-6-x.zip archive) by the one above.

            A useful link to calculate the fuses values: http://www.engbedded.com/fusecalc/

            Thanks for your help @Anticimex, @mfalkvidd and @kimot :)

            AnticimexA Offline
            AnticimexA Offline
            Anticimex
            Contest Winner
            wrote on last edited by
            #34

            @encrypt great news! Thanks for joining the community and for your troubleshooting. This information will be compiled into the docs for future reference. Happy signing :spock-hand:

            Do you feel secure today? No? Start requiring some signatures and feel better tomorrow ;)

            tekkaT 1 Reply Last reply
            1
            • AnticimexA Anticimex

              @encrypt great news! Thanks for joining the community and for your troubleshooting. This information will be compiled into the docs for future reference. Happy signing :spock-hand:

              tekkaT Offline
              tekkaT Offline
              tekka
              Admin
              wrote on last edited by tekka
              #35

              @anticimex @Encrypt That's a bit odd and certainly specific to the bootloader you're using (ATmegaBoot): AVRdude does (at least with optiboot) a page erase (vs. chip erase where EESAVE has an effect). I do not have the EESAVE fuse bit set and no issues with erased eeprom when loading a new sketch, also see below:

              Arduino Uno with optiboot:

              uno.bootloader.tool=avrdude
              uno.bootloader.low_fuses=0xFF
              uno.bootloader.high_fuses=0xDE
              uno.bootloader.extended_fuses=0xFD
              uno.bootloader.unlock_bits=0x3F
              uno.bootloader.lock_bits=0x0F
              uno.bootloader.file=optiboot/optiboot_atmega328.hex
              

              High fuse (0xDE) does not enable EESAVE.

              1 Reply Last reply
              0
              • EncryptE Offline
                EncryptE Offline
                Encrypt
                wrote on last edited by Encrypt
                #36

                Hello @tekka and thank you for your remarks!

                Your input makes questions come to my mind:

                1. What is the difference between Optiboot and the bootloader given in the Arduino tutorial? I am quite new to the world of microcontrollers and I don't know much for the moment, I simply use what is working, eh eh :P

                2. The configuration you gave here doesn't use the internal 8MHz clock, therefore it doesn't fit my needs here, eh eh. Could I just use the "regular" Arduino Uno bootloader and set the proper fuses values in the boards.txt file to use the internal 8MHz clock?

                3. You are saying that it's actually optiboot which does the page erase and not avrdude? I believed there the "chip erase" instruction is the only instruction possible to erase the flash, handled by avrdude. And according to the ATMEGA328P datasheet (page 297), I have understood that any "chip erase" instruction will also erase the EEPROM if the EESAVE fuse isn't set. That operation seems to be mandatory too as they say: « A Chip Erase must be performed before the Flash and/or EEPROM are reprogrammed ». So, how does Optiboot / avrdude handle that in such a configuration?

                Finally, it seems there is no tutorial in the MySensors documentation explaining how to build a project using a standalone ATMEGA328P and which bootloader to choose (there are a few discussions though). It could be worth creating a tutorial / post about that and I could contribute to it of course :)

                Come have fun with me on IRC: #mysensors on Libera.chat :)

                tekkaT 1 Reply Last reply
                0
                • EncryptE Encrypt

                  Hello @tekka and thank you for your remarks!

                  Your input makes questions come to my mind:

                  1. What is the difference between Optiboot and the bootloader given in the Arduino tutorial? I am quite new to the world of microcontrollers and I don't know much for the moment, I simply use what is working, eh eh :P

                  2. The configuration you gave here doesn't use the internal 8MHz clock, therefore it doesn't fit my needs here, eh eh. Could I just use the "regular" Arduino Uno bootloader and set the proper fuses values in the boards.txt file to use the internal 8MHz clock?

                  3. You are saying that it's actually optiboot which does the page erase and not avrdude? I believed there the "chip erase" instruction is the only instruction possible to erase the flash, handled by avrdude. And according to the ATMEGA328P datasheet (page 297), I have understood that any "chip erase" instruction will also erase the EEPROM if the EESAVE fuse isn't set. That operation seems to be mandatory too as they say: « A Chip Erase must be performed before the Flash and/or EEPROM are reprogrammed ». So, how does Optiboot / avrdude handle that in such a configuration?

                  Finally, it seems there is no tutorial in the MySensors documentation explaining how to build a project using a standalone ATMEGA328P and which bootloader to choose (there are a few discussions though). It could be worth creating a tutorial / post about that and I could contribute to it of course :)

                  tekkaT Offline
                  tekkaT Offline
                  tekka
                  Admin
                  wrote on last edited by tekka
                  #37

                  @encrypt I may have an idea what's going on here: Are you programming a new sketch to your barebone AT328p via ArduinoISP or any other means of serial (=SPI) programming? Programming via bootloader (ATmegaboot or optiboot) requires a FTDI adapter and will only do page erases while leaving the eeprom untouched.

                  1 Reply Last reply
                  0
                  • EncryptE Offline
                    EncryptE Offline
                    Encrypt
                    wrote on last edited by Encrypt
                    #38

                    Hi @tekka!

                    I'm indeed programming the ATMEGA328P using an Arduino Uno transformed as ISP with the ArduinoISP sketch.

                    I've wired the circuit exactly as shown on the first picture of the tutorial here: https://www.arduino.cc/en/Tutorial/ArduinoToBreadboard. I used the same circuit to burn the bootloader and to upload my sketches.

                    Your remark makes me wonder: do I really need a bootloader at the end?

                    Come have fun with me on IRC: #mysensors on Libera.chat :)

                    tekkaT 1 Reply Last reply
                    0
                    • EncryptE Encrypt

                      Hi @tekka!

                      I'm indeed programming the ATMEGA328P using an Arduino Uno transformed as ISP with the ArduinoISP sketch.

                      I've wired the circuit exactly as shown on the first picture of the tutorial here: https://www.arduino.cc/en/Tutorial/ArduinoToBreadboard. I used the same circuit to burn the bootloader and to upload my sketches.

                      Your remark makes me wonder: do I really need a bootloader at the end?

                      tekkaT Offline
                      tekkaT Offline
                      tekka
                      Admin
                      wrote on last edited by
                      #39

                      @encrypt Ok, this explains your issue: programming via ISP will do a chip erase and hence the EESAVE fuse setting is critical for e2p persistance. The most common use case is programming via serial bootloader (e.g. optiboot, atmegaboot, etc.) which only does page erases and leaves the rest untouched. To answer your question: If you're using an ISP programmer you do not need a bootloader.

                      1 Reply Last reply
                      0
                      • mfalkviddM Offline
                        mfalkviddM Offline
                        mfalkvidd
                        Mod
                        wrote on last edited by mfalkvidd
                        #40

                        I thought the bootloader is overwritten when using ISP? So "you don't need a bootlader" is slightly incorrect, you can not have a bootloader when using isp?

                        tekkaT 1 Reply Last reply
                        0
                        • mfalkviddM mfalkvidd

                          I thought the bootloader is overwritten when using ISP? So "you don't need a bootlader" is slightly incorrect, you can not have a bootloader when using isp?

                          tekkaT Offline
                          tekkaT Offline
                          tekka
                          Admin
                          wrote on last edited by tekka
                          #41

                          @mfalkvidd The Arduino builder generates two .hex files, one of which contains the bootloader as specified in boards.txt. Depending on the flashing settings you may burn the sketch only or the sketch + bootloader, however, the bootloader is not needed for ISP programming.

                          mfalkviddM 1 Reply Last reply
                          0
                          • tekkaT tekka

                            @mfalkvidd The Arduino builder generates two .hex files, one of which contains the bootloader as specified in boards.txt. Depending on the flashing settings you may burn the sketch only or the sketch + bootloader, however, the bootloader is not needed for ISP programming.

                            mfalkviddM Offline
                            mfalkviddM Offline
                            mfalkvidd
                            Mod
                            wrote on last edited by
                            #42

                            @tekka I see. Thanks for explaining.

                            1 Reply Last reply
                            0
                            Reply
                            • Reply as topic
                            Log in to reply
                            • Oldest to Newest
                            • Newest to Oldest
                            • Most Votes


                            10

                            Online

                            11.7k

                            Users

                            11.2k

                            Topics

                            113.1k

                            Posts


                            Copyright 2025 TBD   |   Forum Guidelines   |   Privacy Policy   |   Terms of Service
                            • Login

                            • Don't have an account? Register

                            • Login or register to search.
                            • First post
                              Last post
                            0
                            • MySensors
                            • OpenHardware.io
                            • Categories
                            • Recent
                            • Tags
                            • Popular