Skip to content

RS-Key v0.2.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 15 Jun 05:09
· 1641 commits to main since this release
Immutable release. Only release title and notes can be modified.
v0.2.0
This tag was signed with the committer’s verified signature.
TheMaxMur MaxMur
GPG key ID: B72F4A649F92F410
Verified
Learn about vigilant mode.
118cf4d
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

[0.2.0] — 2026-06-15

The cycle since 0.1.0. USB bcdDevice is now 0x0760 (incremented once per
firmware change along the way).

Added

  • Own AAGUID + FIDO Metadata Statement. The authenticator reports its own
    model identity (2479c7bf-6b30-5683-9ec8-0e8171a918b7, a reproducible UUIDv5)
    instead of the inherited pico-fido one, and ships a self-published FIDO
    Metadata Statement (metadata/rs-key.metadata.json) with a drift guard.
  • Supply-chain provenance. Releases now carry SLSA build provenance
    (slsa-github-generator, keyless) and pass a release-time reproducibility gate
    that rebuilds all eight flavors bit-identical before anything is published.
  • Dependency review. A cargo-vet gate (Mozilla / Google / ISRG / Zcash
    audits + recorded exemptions) blocks new unreviewed crates; a new
    docs/supply-chain.md documents the whole chain.
  • Versioned documentation site — main, develop and tagged versions are
    published side by side with a switcher.
  • Kani proofs that the OpenPGP import (BER) parser is panic-free and
    terminating, plus a CI guard that flake.lock stays in sync with flake.nix.

Changed

  • Every GitHub Action is pinned to a commit SHA, kept fresh by Dependabot.
  • The physical-attack posture docs are reframed around the published RP2350
    hacking challenges (threat model / OTP fuses / limitations).

Fixed

  • U2F routing. A vendor-AID SELECT over CTAPHID_MSG no longer leaves a sticky
    applet selection that routed later U2F REGISTER / AUTHENTICATE / VERSION into
    0x6D00; the MSG selection is dropped on every CTAPHID_INIT.
  • OATH performance. RESET / LIST / CALCULATE-ALL / lookup probed all 255
    credential slots, and each absent slot rescanned flash; they now touch only
    present credentials — OATH RESET dropped from ~39 s to ~0.5 s.
  • USB transport wedge. Bounding the CTAPHID/CCID IN-endpoint writes stops an
    abandoned transaction from wedging the interface until a replug.
  • The OpenPGP card-status self-test now follows GET DATA response chaining.

Security

  • Constant-time audit fixes — RSA base blinding on the raw path and
    constant-time OTP access-code comparisons (docs/ct-audit.md).
  • Fault-injection fences on the PIN and secure-boot gates, so a glitched
    single comparison can't skip the check.

Verify a download: https://github.com/TheMaxMur/RS-Key/blob/v0.2.0/docs/supply-chain.md

Assets 14
Loading