v1.6.0

Changes

Features

• usbip: Add user presence check (#314, #321)
• admin-app: Add config mechanism (#344)

Changed

• secrets-app: Update to v0.13.0-rc.2
  • Confirm credential removal with a touch (trussed-secrets-app#92)
  • Allow to update credential (trussed-secrets-app#65)
• Improve stack usage of several components (#353)
• Reject APDU commands from multiple transports (apdu-dispatch#19)

Fixed

• fido-authenticator: Reduce the maximum credential ID length for improved compatibility (fido-authenticator#37)
• fido-authenticator: Multiple changes to improve compliance with the specification (overview: fido-authenticator#6)
• Upgrade opcard to v1.2.0, fixing memory issues when using multiple RSA keys, potential data corruption, correct handling of non canonical curve25519 public keys and properly rejecting NFC requests (#376)
• Correct maximum binary size for LPC55 and only enable PRINCE for the subregions used for the filesystem (#355)
• lpc55: Move USB initialization to the end of the boot process to make sure that the device can respond to all requests, fixing a potential delay when connecting the device under Linux (#302)

Functions

• admin-app v0.1.0-nitrokey.8
• fido-authenticator v0.1.1-nitrokey.9 (FIDO2)
• secrets v0.13.0-rc2 (OTP and Passwords)
• opcard v1.2.1 (OpenPGP)