·
5 commits
to main
since this release
v1.8.0
robin-nitrokey
Robin Krahl
This tag was signed with the committer’s verified signature.
robin-nitrokey
Robin Krahl
8bfc4fb
This commit was signed with the committer’s verified signature.
robin-nitrokey
Robin Krahl
Features
- OpenPGP: add support for additional curves when using the se050 backend: (#524)
- NIST P-384
- NIST P-521
- brainpoolp256r1
- brainpoolp384r1
- brainpoolp512r1
- admin-app: Add command to list all supported config fields (admin-app#28)
- admin-app: Add
opcard.disabledconfiguration option to disable OpenPGP (#539) - piv: Add support for PIV, powered by the SE050 secure element (#534)
- Improve external flash mounting to decrease startup time (#440)
Notes
- This release adds a second CCID (smartcard) application, PIV. This may change the behavior of some programs like OpenSC when trying to access the existing CCID application, OpenPGP. The following workarounds are available:
- Disable the PIV application on the Nitrokey 3 with
nitropy nk3 set-config piv.disabled true. - Explicitly select the OpenSC application to use by setting the
OPENSC_DRIVERenvironment variable, for exampleOPENSC_DRIVER=openpgp.
- Disable the PIV application on the Nitrokey 3 with
Known issues
- PIV: uploading a large certificate (> 1KiB) to the device might fail. Power cycling the device and retrying often solves the issue.