Support Pro/Storage update password changes. Maintenance.

This release adds support for the NRF52 MCU, changes the LED color to red on panics and allows the user to skip the additional user presence check for the first FIDO2 operation within two seconds after boot.

Features

• embedded runner to allow building for different SoCs from within a common code-base
• Change the LED color to red on panics (#52)
• Skip the additional user presence check for the first Get Assertion or Authenticate request within two seconds after boot (#61)

This is the first official nRF52 release(candidate) for the Nitrokey 3A Mini.

Features

• embedded runner to allow building for different SoCs from within a common code-base
• This pre-release only includes binaries for the nRF52
• All features from the v1.0.4 release are included
• Change the LED color to red on panics (#52)
• Skip the additional user presence check for the first Get Assertion or Authenticate request within two seconds after boot (#61)

factory-reset: also clean up docker directory

update NC to 23.0.7

This release improves compatibility with Windows 10 and with OpenSSH and changes the LED patterns.

Features

• Change the LED patterns so that the LED is off by default and blinks white during a user confirmation request or when winking (#34)
• Add a single white LED blink for 0.5 seconds after startup (#34)
• Support retrieval of OpenSSH resident keys (#48)

Bugfixes

• Improve stability of FIDO2 operations on Windows 10 (#54)

Updates to GNUK 1.2.19. Release candidate mainly to fix OpenSSH support:

• #67

Some behavior can change. MI might not work. Might require newer chopstx implementation. To be tested.
This release should be preferred over RTM.13-RC1 if possible, as long as the expected features work.

$ gpg2 --verify RTM.13-RC2-0-g72825e0.zip.sig gpg: assuming signed data in 'RTM.13-RC2-0-g72825e0.zip' gpg: Signature made Thu 07 Jul 2022 07:23:40 PM CEST gpg: using RSA key 868184069239FF65DE0BCD7DD9BAE35991DE5B22 gpg: Good signature from "Szczepan Zalega <szczepan.zalega@gmail.com>" [ultimate] gpg: aka "Szczepan Zalega (Nitrokey) <szczepan@nitrokey.com>" [ultimate]

Updates to GNUK 1.2.16. Release candidate mainly to fix OpenSSH support:

• #67

Some behavior can change. MI might not work. To be tested.

This release fixes a FIDO authentication issue with Google.

For more information, see the changelog.

This release candidate fixes the FIDO2 authentication with Google.

• Correct the FIDO2 attestation certificate (fixes authentication issue with Google, #36)

This release should improve handling on Windows.

v1.0.2 (2022-01-22) Bugfixes

• FIDO2: send keepalive ctaphid messages only while handling cbor messages

Please find the documentation to update your Nitrokey 3 here:

• Windows: https://docs.nitrokey.com/nitrokey3/windows/firmware-update.html
• Linux: https://docs.nitrokey.com/nitrokey3/linux/firmware-update.html
• macOS: https://docs.nitrokey.com/nitrokey3/mac/firmware-update.html

Notes

1. pynitrokey now supports automatic firmware download. Please refer to documentation to use it.
2. Update under Windows is now performed under 10 seconds, which is a significant improvement. We are still testing it, thus the --experimental switch is still needed.
3. Firmware is signed and verified both before writing and on the device (thanks to the SB2 format). It does not need additional checksums or signatures for verification. It is not possible to use wrong or old binary (downgrade protection is active).

No content.

v1.0.1 (2022-01-15) Bugfixes

• fido-authenticator: use smaller CredentialID - fixes issues with some services FIDO usage (fido-authenticator#8)
• trussed: update P256 library - fixes signing failure in some cases (#31)

Edit: note, using smaller CredentialID is a breaking change, which will make all FIDO2 registrations invalid. Please make sure you have backup 2FA method set on the account.

Please find the documentation to update your Nitrokey 3 here:

• Windows: https://docs.nitrokey.com/nitrokey3/windows/firmware-update.html
• Linux: https://docs.nitrokey.com/nitrokey3/linux/firmware-update.html
• macOS: https://docs.nitrokey.com/nitrokey3/mac/firmware-update.html

Notes

1. In the next pynitrokey release we plan to support automatic firmware download.
2. Firmware is signed and verified both before writing and on the device (thanks to the SB2 format). It does not need additional checksums or signatures for verification. It is not possible to use wrong or old binary (downgrade protection is active).

Output under Linux:

$ nitropy nk3 update firmware-nk3xn-lpc55-v1.0.1.sb2 Nitrokey tool for Nitrokey FIDO2, Nitrokey Start, Nitrokey 3 & NetHSM Current firmware version: v1.0.1 Updated firmware version: v1.0.1 The version of the firmware image is the same as on the device. Do you want to continue anyway? [y/N]: y Please do not remove the Nitrokey 3 or insert any other Nitrokey 3 devices during the update. Do you want to perform the firmware update now? [y/N]: y Please press the touch button to reboot the device into bootloader mode ... [\] Performing firmware update (may take several minutes) ... done Successfully updated the firmware to version v1.0.1.

Edit 19.01.22 (sz): Redundant files have been removed from the assets list.

This release candidate fixes some issues with the FIDO authenticator and the admin application.

Features

• Change LED color and device name if provisioner app is enabled.

Bugfixes

• admin-app: Fix CTAPHID command dispatch (#8).
• admin-app: Fix CTAPHID wink command (#9).
• fido-authenticator: Handle pin protocol field in hmac-secret extension data to fix the authenticatorGetAssertion command for newer clients (#14, fido-authenticator#1).
• fido-authenticator: Signal credential protection (fido-authenticator#5).

This release candidate improves compatibility with Windows 10 and with OpenSSH and changes the LED patterns.

Features

• Change the LED patterns so that the LED is off by default, blinks white during a user confirmation request and blinks blue when winking (#34)
• Add a single white LED blink for 0.5 seconds after startup (#34)
• Support retrieval of OpenSSH resident keys (#48)

Bugfixes

• Improve stability of FIDO2 operations on Windows 10 (#54)

Correct LED behavior. Blink at start up.

Update to the latest upstream. Correct LED behavior

pynitrokey v0.4.26:

• Nitrokey 3 Mini bootloader support (cont).

pynitrokey v0.4.25:

• NetHSM API update.
• Nitrokey 3 Mini bootloader support.
• Experimental NK Storage firmware data manipulation, which potentially enables user data-safe firmware updates.

Windows: this release does not contain an installer, but only a standalone executable.

bump version: NC 23.0.6