Nitrokey 3 - RC Firmware Release

We are happy to announce that a new firmware for the Nitrokey 3 is now available. The version 1.3RC1 is a release candidate and will not be delivered via the automatic update with pynitrokey. Since many things are changing with this version we decided to release a release candidate first to make sure there are no problems. We expect to release a version 1.3 within the next days, which will be delivered automatically with pynitrokey. Until then, you have to download the current version via Github and install it manually with pynitrokey, just like for the alpha firmware.

Most important changes:

  • The Secrets-app is now enabled and available. Currently you can already use it for One-Time-Passwords (OTPs). This will be extended step by step with password safe functions.
  • Improvement of data security for the Nitrokey 3A Mini
  • Numerous bugs especially in communication (CCID, CTAP) have been fixed
  • Improvements in FIDO2-compatibility

More details can be found in the changelog inside the Nitrokey 3 firmware repository.

A new pynitrokey version will follow the next days. The current version sometimes doesn't wait long enough at the end of the update and reports an error even though everything is fine. Please remember to never unplug your Nitrokey 3 while the LED is still active.

15.3.2023

Comments

Submitted by Anonymous on 18. March 2023 - 18:56
Gibt es denn eine App für bspw. Android um OTP nutzen zu können? Ich würde es doch gerne auch unterwegs nutzbar haben...
Submitted by meissner on 20. March 2023 - 12:06
Nein, die gibt es aktuell nicht. Ein grundsätzliches Problem ist, dass die Daten alle auf dem externen Flash liegen (um viele Einträge zu ermöglichen) und dieser kann nicht aktiviert werden wenn der Nitrokey 3 über NFC benutzt wird (da einfach nicht genügend Energie zur Verfügung steht). Langfristig existiert die Idee einige OTPs auf den internen Speicher für die NFC Nutzung abzulegen, das ist aber lediglich eine Idee und nicht eingeplant aktuell.
Submitted by Anonymous on 20. March 2023 - 22:19
Das mit dem Nfc war mir schon klar, kann ihn ja aber normal über Usb mit dem Handy verbinden.
Submitted by meissner on 21. March 2023 - 10:28
Achso, verstehe. Ja grundsätzlich geht das, damit wird dann FIDO2/U2F funktionieren, aber für OTPs gibt es (noch) keine mobile App. Das ist leider alles andere als trivial, wir haben das auf dem Schirm, kann aber nicht sagen wann es eine derartige App geben wird.
Submitted by Anonymous on 21. March 2023 - 19:45
in the release notes of 1.3.0-rc.1 you mention pynitrokey v0.34.0 as requirement,is this correct? I'm asking because github.com/Nitrokey/pynitrokey/releases shows 0.4.34 as latest version...
Submitted by meissner on 21. March 2023 - 22:24
good catch, yes this was a typo, it's 0.4.34 of course! updated the release notes accordingly
Submitted by Anonymous on 21. March 2023 - 19:49
in the release notes of 1.3.0-rc.1 you mention that a max. of 45 resident keys is permitted (for the update to work) However, "fido2-token -I -c $DEVICE" shows a maximum of 100 keys. What is the correct number? How many keys are supported by NK3?
Submitted by meissner on 21. March 2023 - 22:29
Yes, the promoted number of RKs by fido2-token is incorrect. This issue targets this topic and also defines restrictions for now. Technically far more are possible (especially secrets entries), we keep the numbers not too high for now as there are some performance issues once there are too many entries.

Add new comment

Fill in the blank.