v1.0.3-rc.1

This release candidate fixes the FIDO2 authentication with Google.

• Correct the FIDO2 attestation certificate (fixes authentication issue with Google, #36)

v1.0.2

This release should improve handling on Windows.

v1.0.2 (2022-01-22)

Bugfixes

• FIDO2: send keepalive ctaphid messages only while handling cbor messages

Please find the documentation to update your Nitrokey 3 here:

• Windows: https://docs.nitrokey.com/nitrokey3/windows/firmware-update.html
• Linux: https://docs.nitrokey.com/nitrokey3/linux/firmware-update.html
• macOS: https://docs.nitrokey.com/nitrokey3/mac/firmware-update.html

Notes

1. pynitrokey now supports automatic firmware download. Please refer to documentation to use it.
2. Update under Windows is now performed under 10 seconds, which is a significant improvement. We are still testing it, thus the --experimental switch is still needed.
3. Firmware is signed and verified both before writing and on the device (thanks to the SB2 format). It does not need additional checksums or signatures for verification. It is not possible to use wrong or old binary (downgrade protection is active).

v1.0.2-rc.1

Pre-release v1.0.2-rc.1

v1.0.1

v1.0.1 (2022-01-15)

Bugfixes

• fido-authenticator: use smaller CredentialID - fixes issues with some services FIDO usage (fido-authenticator#8)
• trussed: update P256 library - fixes signing failure in some cases (#31)

Edit: note, using smaller CredentialID is a breaking change, which will make all FIDO2 registrations invalid. Please make sure you have backup 2FA method set on the account.

Please find the documentation to update your Nitrokey 3 here:

• Windows: https://docs.nitrokey.com/nitrokey3/windows/firmware-update.html
• Linux: https://docs.nitrokey.com/nitrokey3/linux/firmware-update.html
• macOS: https://docs.nitrokey.com/nitrokey3/mac/firmware-update.html

Notes

1. In the next pynitrokey release we plan to support automatic firmware download.
2. Firmware is signed and verified both before writing and on the device (thanks to the SB2 format). It does not need additional checksums or signatures for verification. It is not possible to use wrong or old binary (downgrade protection is active).

Output under Linux:

$ nitropy nk3 update firmware-nk3xn-lpc55-v1.0.1.sb2 
Nitrokey tool for Nitrokey FIDO2, Nitrokey Start, Nitrokey 3 & NetHSM
Current firmware version:  v1.0.1
Updated firmware version:  v1.0.1
The version of the firmware image is the same as on the device.  Do you want to continue anyway? [y/N]: y

Please do not remove the Nitrokey 3 or insert any other Nitrokey 3 devices during the update.
Do you want to perform the firmware update now? [y/N]: y

Please press the touch button to reboot the device into bootloader mode ...

[\] Performing firmware update (may take several minutes) ... done

Successfully updated the firmware to version v1.0.1.

Edit 19.01.22 (sz): Redundant files have been removed from the assets list.

v1.0.1-rc.1

This release candidate fixes some issues with the FIDO authenticator and the admin application.

Features

• Change LED color and device name if provisioner app is enabled.

Bugfixes

• admin-app: Fix CTAPHID command dispatch (#8).
• admin-app: Fix CTAPHID wink command (#9).
• fido-authenticator: Handle pin protocol field in hmac-secret extension data to fix the authenticatorGetAssertion command for newer clients (#14, fido-authenticator#1).
• fido-authenticator: Signal credential protection (fido-authenticator#5).

v1.0.0

First stable firmware release with FIDO authenticator.

v0.3.0

v0.3.0

0.0.0-78-g695167e

Use correct product ID 42b2 and release v0.2.1