Security Overview¶
Security considerations for Espilon deployments.
Encryption¶
Espilon uses ChaCha20 stream cipher for C2 communications:
- 256-bit key
- 96-bit nonce
- Authenticated encryption
Default Keys¶
Change Default Keys
Default keys are for testing only:
Generating Keys¶
# 32-byte key (64 hex chars)
openssl rand -hex 32
# 12-byte nonce (24 hex chars)
openssl rand -hex 12
Configure in menuconfig or devices.json.
Responsible Use¶
Legal Notice
Espilon is for authorized security testing and research only. Unauthorized use may violate laws. Always obtain proper authorization.
Previous: Commands | Next: Best Practices