How should public & private -mesh keys be stored?

[SørenHN]

In the Bluetooth Light Controller example for the client, in provisioner.c this beautiful comment can be found:

/* Provisioning encryption key storage (this is not how you should store your keys). */
static uint8_t m_public_key[NRF_MESH_PROV_PUBKEY_SIZE];
static uint8_t m_private_key[NRF_MESH_PROV_PRIVKEY_SIZE];

But how should keys be stored?

[Petter Myhre]

This was a hint from the developers that the keys should be stored in clear text, but they should be encrypted.

[SørenHN]

How is this done on a embedded platform? Should the clear text just be removed from the source code or, should the actual data stored on the chip be encrypted?

[Petter Myhre]

The actual keys stored in flash should be encrypted.