Releases: Nitrokey/nitrokey-pro-firmware
v0.15: Support HW5
Support HW5.
Maintenance release. No need for an update for other hardwares.
No changes except refactoring since HW5 RC1.
$ gpg --verify nitrokey-pro-firmware-v0.15.tar.gz.sig-lennard nitrokey-pro-firmware-v0.15.tar.gz
gpg: Signature made Wed 25 May 2022 04:24:52 PM CEST
gpg: using RSA key 1A1A32875348A792ADA7BD6D878F36EEEA6A8D00
gpg: Good signature from "lennard boediger <lennard@nitrokey.com>" [unknown]
gpg: WARNING: This key is not certified with a trusted signature!
gpg: There is no indication that the signature belongs to the owner.
Primary key fingerprint: 1A1A 3287 5348 A792 ADA7 BD6D 878F 36EE EA6A 8D00
$ gpg --verify nitrokey-pro-firmware-v0.15.tar.gz.sig-szczepan nitrokey-pro-firmware-v0.15.tar.gz
gpg: Signature made Tue 23 May 2023 10:24:08 AM CEST
gpg: using RSA key 868184069239FF65DE0BCD7DD9BAE35991DE5B22
gpg: Good signature from "Szczepan Zalega <szczepan.zalega@gmail.com>" [ultimate]
gpg: aka "Szczepan Zalega (Nitrokey) <szczepan@nitrokey.com>" [ultimate]
Edit 23.05.2023: Added second signature (using 868184069239FF65DE0BCD7DD9BAE35991DE5B22), and uploaded original signature's key (1A1A32875348A792ADA7BD6D878F36EEEA6A8D00) to keyserver.
Note: Github for some reason renames nitrokey-pro-firmware-v0.15.tar.gz.sig-lennard to nitrokey-pro-firmware-v0.15.tar.gz.sig-lennard.sig after upload.
v0.15 RC: Support HW5
v0.14: stack protection, local HWRNG access and more
Update is recommended.
Tasks worked on in this release:
- Activate stack protection #86
- Correct HWRNG access
- Swap LED colors for HW4 #88
- Firmware update password handling correction
Update guide (draft):
Automatic update with pynitrokey is planned to be added in the future.
This release was tested on:
| OS | GnuPG |
|---|---|
| Windows 10 Pro 21H1 | 2.2.28 |
| macOS Big Sur 11.2.3 (20D91) | 2.3.2 |
| Linux 20.04.3LTS | 2.2.19 |
Full Changelog: v0.13...v0.14
Known issues found during the RC tests of this release:
Archive is signed with GnuPG. Verification:
$ gpg2 --verify nitrokey-pro-firmware-v0.14.tar.gz.sig
gpg: assuming signed data in 'nitrokey-pro-firmware-v0.14.tar.gz'
gpg: Signature made Mon 25 Oct 2021 12:55:41 PM CEST
gpg: using RSA key 868184069239FF65DE0BCD7DD9BAE35991DE5B22
gpg: Good signature from "Szczepan Zalega <szczepan.zalega@gmail.com>" [ultimate]
gpg: aka "Szczepan Zalega (Nitrokey) <szczepan@nitrokey.com>" [ultimate]
v0.14 RC4: swap LEDs
v0.14 RC3: activate stack protection, error handling
v0.14 RC: activate stack protection, error handling
v0.14 RC: activate stack protection
HSM: support new hardware platform
Single firmware for the all hardware: revisions HW1-4.
Maintenance release - no need to update.
Details about build environment, as well as hash sums and signature, are inside the archive.
Tested against SCSH 3.15.359 test suite using v3.4 smart card.
v0.13 Multi-hardware firmware
Single firmware for the all hardware: revisions HW1-4.
Maintenance release - no need to update.
Details about build environment, as well as hash sums and signature, are inside the archive.
Update through bootloader tested and confirmed to be working.
Tested with libnitrokey and GNUK test suite (for smart card communication test) on both HW3 and HW4 hardware revisions, using both OPC2 and OPC3.
2021.06.23: Correct archive to contain update binary in the proper format (previous archive suffixed with the original word).
HSM-3 RC2
Nitrokey HSM supporting HW4 (BGA) - test firmware, production ready.
Tested on both hardwares.
Waiting with the final release until repository cleanup - before that marking as pre-release.