Skip to content

v1.6.0-test.20231218

Pre-release
Pre-release
Compare
Choose a tag to compare
@nitrokey-ci nitrokey-ci released this 18 Dec 13:27
· 194 commits to main since this release
v1.6.0-test.20231218
This tag was signed with the committer’s verified signature.
sosthene-nitrokey
GPG key ID: 36DA48A4C827B354
Learn about vigilant mode.
90362e0
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.

This update requires pynitrokey v0.4.35 or newer. You can install it with:

$ nitropy nk3 update --version v1.6.0-test.20231218

Changes

(since v1.6.0-test.20231206)

Opcard (OpenPGP): Add experimental configuration option to enable the SE050 secure element backend. This can be done, with pynitrokey v0.4.44: nitropy nk3 set-config opcard.use_se050_backend true.

This will cause a factory-reset of opcard data. On older versions of nitropy, the command may work but will require a power cycle of the device before opcard is functional.

This new backend will increase the security of PIN protected operations. It will also improve the performance of cryptographic operation, especially RSA. This means that when the secure element backend is enabled, RSA 4096 bit keys can now be generated on-device.

Fixed

  • Piv: Fixed generation of RSA keys.

Functions

Stable

Unstable

Assets 14
Loading