Comments (11)
i would add a point
0. change your admin and user pin to a default value, as they seems to be saved in the logs :)
btw in the end it seems to fail because a libusb timeout.
from nitrokey-pro-firmware.
Hi!
What OS and GPG version do you use? And what is the version of the device?
I have checked lately 4096 bit key generation on Nitrokey Pro using Ubuntu 16.04/GPG 2.1.11 and it worked.
from nitrokey-pro-firmware.
Arch Linux with gnupg 2.1.19, notrokey with firmware 0.8.
Just to be sure, during the key creation procedure I set 4096, my data (I set no expire) and it ask me for the pins. Then it fail, it remember I tryed with 4096 but there are no keys.
One thing I notice is the company in the firmware info does not match what I saw on other example on internet
from nitrokey-pro-firmware.
One thing I notice is the company in the firmware info does not match what I saw on other example on internet
Could you elaborate? Where did you saw it and how it looked like?
from nitrokey-pro-firmware.
gpg --card-status
[...]
Version ..........: 2.1
Manufacturer .....: ZeitControl
[...]
my bad seems to be correct, i got confused.
when i fail to generate the key, the 4096 size is reported in
Key attributes ...: rsa2048 rsa2048 rsa2048
from nitrokey-pro-firmware.
Despite 4096 bit keys being said as supported, any try to generate them with GPG or GPG2 failed. The same identical setup with 2048 worked first time.
This looks like a bug in GPG 2.1.19. We have just registered one with 2.1.15 but it would be great to have logs from the latest version.
Could you take the logs? Please follow these steps to do so:
- Copy scdaemon.conf.txt to
~/.gnupg/scdaemon.conf
and correct the absolute path there to match own user home directory. If any config is already there please backup it and swap with this one. - Kill old
scdaemon
withpkill scdaemon
. - Do not-working scenario - generate 4096 keys as usual .
- Run step 2 again so the log file will not be appended with unneeded information by running
scdaemon
in the background. - Undo changes from step 1 - rename/delete or swap
scdaemon.conf
with the backup, so log files will not be generated during day-to-day use. - Attach the log file
scdaemon.log
here in a comment as a file.
from nitrokey-pro-firmware.
Ah, you are right. I have forgot to mention about the PINs. Sorry!
Thank you for the logs! Indeed it looks like the timeout is a cause. I will send it further to GnuPG team.
from nitrokey-pro-firmware.
from nitrokey-pro-firmware.
from nitrokey-pro-firmware.
Just updated GPG to .20, generation worked succesfully. Key not tested but if they will have issue I'll open a new bug report as the problem itself is solved.
Thanks!
from nitrokey-pro-firmware.
Great, thank you for re-testing!
from nitrokey-pro-firmware.
Related Issues (20)
- Nitrokey HSM: handle v4.0 smart cards
- Question: Support EC operations HOT 1
- Request: support longer OTP secrets, up to 64 bytes
- Nitrokey HSM: timeout on initialization after heavy use
- Nitrokey HSM: invalid serial number after a heavy load
- Allow to set a custom USB serial number
- WRONG_PASSWORD after accessing Nitrokey with scdrand HOT 10
- Adjust firmware for the new MCU
- Customise firmware HOT 3
- Adding Curve25519 support (on my own) HOT 2
- Consider using stack canaries via -fstack-protector* flags HOT 2
- Instructions with modern OpenOCD? HOT 6
- HW4: swapped red and green LEDs
- Lock device before Factory Reset execution
- Add HMAC for AES key
- OTP functionality HOT 7
- Document minimum compiler version
- Nitrokey Pro firmware upgrade from 0.9 -> 0.14 impossible from nitropy? HOT 6
- R3 Nitrokey Pro failure to enable update mode HOT 6
- PGP key used to sign binary firmware is not available HOT 2
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from nitrokey-pro-firmware.