Skip to content

v1.7.0
Compare
Choose a tag to compare
@nitrokey-ci nitrokey-ci released this 24 Apr 10:00
· 81 commits to main since this release
v1.7.0
This tag was signed with the committer’s verified signature.
robin-nitrokey Robin Krahl
GPG key ID: 34F47D2F044B8F17
Learn about vigilant mode.
6e122a2
This commit was signed with the committer’s verified signature.
robin-nitrokey Robin Krahl
GPG key ID: 34F47D2F044B8F17
Learn about vigilant mode.

This release adds SE050 support to opcard, updates fido-authenticator to support CTAP 2.1 and introduces app and device factory reset.

Features

  • Report errors when loading the configuration during initialization and disable opcard if an error occured (#394)
  • Fix LED during user presence check for NK3AM (#93)
  • fido-authenticator: Implement CTAP 2.1
  • OpenPGP: fix locking out after an aborted factory-reset operation (#443)
  • Add an SE050 driver and its tests (#335)
  • Use SE050 entropy to bootstrap the random number generator (#335)
  • Enable SE050 support in OpenPGP by default (#471)
  • Support app and device factory reset (#383, #479)

Known Issues

  • ssh-agent cannot access the resident key used for SSH logins with firmware versions v1.7.0 and v1.7.1. This will be fixed in v1.7.2. (#496)

Notes

  • When upgrading from the test firmware release v1.6.0-test.20231218, OpenPGP keys will not be retained after the update if the opcard.use_se050_backend config option has been set to true.
Assets 14
Loading