Fail to generate 4096 bit keys about nitrokey-pro-firmware HOT 11 CLOSED

i would add a point
0. change your admin and user pin to a default value, as they seems to be saved in the logs :)

btw in the end it seems to fail because a libusb timeout.

scdaemon-pro-4096.log.txt

from nitrokey-pro-firmware.

Hi!
What OS and GPG version do you use? And what is the version of the device?
I have checked lately 4096 bit key generation on Nitrokey Pro using Ubuntu 16.04/GPG 2.1.11 and it worked.

from nitrokey-pro-firmware.

Arch Linux with gnupg 2.1.19, notrokey with firmware 0.8.

Just to be sure, during the key creation procedure I set 4096, my data (I set no expire) and it ask me for the pins. Then it fail, it remember I tryed with 4096 but there are no keys.

One thing I notice is the company in the firmware info does not match what I saw on other example on internet

from nitrokey-pro-firmware.

One thing I notice is the company in the firmware info does not match what I saw on other example on internet

Could you elaborate? Where did you saw it and how it looked like?

from nitrokey-pro-firmware.

gpg --card-status

[...]
Version ..........: 2.1
Manufacturer .....: ZeitControl
[...]

my bad seems to be correct, i got confused.

when i fail to generate the key, the 4096 size is reported in

Key attributes ...: rsa2048 rsa2048 rsa2048

from nitrokey-pro-firmware.

Despite 4096 bit keys being said as supported, any try to generate them with GPG or GPG2 failed. The same identical setup with 2048 worked first time.

This looks like a bug in GPG 2.1.19. We have just registered one with 2.1.15 but it would be great to have logs from the latest version.
Could you take the logs? Please follow these steps to do so:

1. Copy scdaemon.conf.txt to ~/.gnupg/scdaemon.conf and correct the absolute path there to match own user home directory. If any config is already there please backup it and swap with this one.
2. Kill old scdaemon with pkill scdaemon.
3. Do not-working scenario - generate 4096 keys as usual .
4. Run step 2 again so the log file will not be appended with unneeded information by running scdaemon in the background.
5. Undo changes from step 1 - rename/delete or swap scdaemon.conf with the backup, so log files will not be generated during day-to-day use.
6. Attach the log file scdaemon.log here in a comment as a file.

from nitrokey-pro-firmware.

Ah, you are right. I have forgot to mention about the PINs. Sorry!
Thank you for the logs! Indeed it looks like the timeout is a cause. I will send it further to GnuPG team.

from nitrokey-pro-firmware.

from nitrokey-pro-firmware.

from nitrokey-pro-firmware.

Just updated GPG to .20, generation worked succesfully. Key not tested but if they will have issue I'll open a new bug report as the problem itself is solved.

Thanks!

from nitrokey-pro-firmware.

Great, thank you for re-testing!

from nitrokey-pro-firmware.