From 0ff1bb2b2fcf424e6e3dfc445b5fe660066a932e Mon Sep 17 00:00:00 2001
From: Andrew Gunnerson <accounts+github@chiller3.com>
Date: Wed, 31 May 2023 00:04:48 -0400
Subject: [PATCH] README.md: Add note about using unencrypted private keys

Signed-off-by: Andrew Gunnerson <accounts+github@chiller3.com>
---
 README.md | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/README.md b/README.md
index 7d82719..9c28ce0 100644
--- a/README.md
+++ b/README.md
@@ -310,6 +310,13 @@ avbroot prompts for the private key passphrases interactively by default. To run
         <...>
     ```
 
+* Use unencrypted private keys. This is not recommended, but can be done by:
+
+    ```bash
+    openssl pkcs8 -in avb.key -topk8 -nocrypt -out avb.unencrypted.key
+    openssl pkcs8 -in ota.key -topk8 -nocrypt -out ota.unencrypted.key
+    ```
+
 ### Extracting the entire OTA
 
 To extract all images contained within the OTA's `payload.bin`, run: