This release fixes a FIDO authentication issue with Google.

This release candidate fixes the FIDO2 authentication with Google.

• Correct the FIDO2 attestation certificate (fixes authentication issue with Google, #36)

v1.0.1 (2022-01-15) Bugfixes

• fido-authenticator: use smaller CredentialID - fixes issues with some services FIDO usage (fido-authenticator#8)
• trussed: update P256 library - fixes signing failure in some cases (#31)

Edit: note, using smaller CredentialID is a breaking change, which will make all FIDO2 registrations invalid. Please make sure you have backup 2FA method set on the account.

Please find the documentation to update your Nitrokey 3 here:

• Windows: https://docs.nitrokey.com/nitrokey3/windows/firmware-update.html
• Linux: https://docs.nitrokey.com/nitrokey3/linux/firmware-update.html
• macOS: https://docs.nitrokey.com/nitrokey3/mac/firmware-update.html

Notes

1. In the next pynitrokey release we plan to support automatic firmware download.
2. Firmware is signed and verified both before writing and on the device (thanks to the SB2 format). It does not need additional checksums or signatures for verification. It is not possible to use wrong or old binary (downgrade protection is active).

Output under Linux:

$ nitropy nk3 update firmware-nk3xn-lpc55-v1.0.1.sb2 Nitrokey tool for Nitrokey FIDO2, Nitrokey Start, Nitrokey 3 & NetHSM Current firmware version: v1.0.1 Updated firmware version: v1.0.1 The version of the firmware image is the same as on the device. Do you want to continue anyway? [y/N]: y Please do not remove the Nitrokey 3 or insert any other Nitrokey 3 devices during the update. Do you want to perform the firmware update now? [y/N]: y Please press the touch button to reboot the device into bootloader mode ... [\] Performing firmware update (may take several minutes) ... done Successfully updated the firmware to version v1.0.1.

Edit 19.01.22 (sz): Redundant files have been removed from the assets list.

This release should improve handling on Windows.

v1.0.2 (2022-01-22) Bugfixes

• FIDO2: send keepalive ctaphid messages only while handling cbor messages

Please find the documentation to update your Nitrokey 3 here:

• Windows: https://docs.nitrokey.com/nitrokey3/windows/firmware-update.html
• Linux: https://docs.nitrokey.com/nitrokey3/linux/firmware-update.html
• macOS: https://docs.nitrokey.com/nitrokey3/mac/firmware-update.html

Notes

1. pynitrokey now supports automatic firmware download. Please refer to documentation to use it.
2. Update under Windows is now performed under 10 seconds, which is a significant improvement. We are still testing it, thus the --experimental switch is still needed.
3. Firmware is signed and verified both before writing and on the device (thanks to the SB2 format). It does not need additional checksums or signatures for verification. It is not possible to use wrong or old binary (downgrade protection is active).