v0.8.0-rc2 Decreased memory usage through updated ctap-type

Fixes: compatibility with newer ctap-types versions: #9

v0.8.0-rc1 Decreased memory usage

This is mostly a maintenance release, enabling working of the app with smaller memory requirements.

Fixes:

• Decreased memory usage: #7

No functional changes.

v0.7.0 RSA support

Update. RSA support. Backends. Options struct. Smaller input buffer.
First public test release

v0.6

Quick fixes. Rebased on the main.
State encryption behind feature flag (disabled for this release for the debug purposes).
RSA and hardware check disabled due to development sample hardware limitations.

Tested on Nitrokey 3 CN / LPC55 over FIDO U2F and FIDO2, using:

• Nitrokey/nitrokey-websmartcard-tests@836a589

Firmware built using make webcrypt and:

• Nitrokey/nitrokey-3-firmware@410cab1

v0.5 RSA 2048 Resident Keys Support

Support RSA 2048 Resident Keys:

• import
• sign
• decrypt
• read public key

Documentation is updated with the new details regarding RSA keys:

• https://github.com/Nitrokey/nitrokey-webcrypt/blob/master/implementation.md

No new commands, but instead a new parameter for the Resident Key import. The keyhandle received can be then used as with any other key.
Signing operation for RSA keys uses PKCSv15 padding and SHA256 as the hash. The only supported size for the RSA keys is RSA 2048.
RSA raw keys have to be encoded in PKCS#8 DER.

Due to the technical difficulties this release is available only as a simulation binary, signed with a GPG key [email protected]:

sz@stumpy ~/w/w/nitrokey-webcrypt-rust (rsa) [SIGINT]> gpg2 --verify *sig
gpg: assuming signed data in 'nitrokey-webcrypt-udp-simulation-v0.5'
gpg:                using RSA key 868184069239FF65DE0BCD7DD9BAE35991DE5B22
gpg: Good signature from "Szczepan Zalega <[email protected]>" [ultimate]
gpg:                 aka "Szczepan Zalega (Nitrokey) <[email protected]>" [ultimate]

v0.4 Encrypted Storage

Use software encrypted storage for platforms, where native hardware encryption is not available.

Required changes in the firmware:

• WebCrypt: a14a49b
• Nitrokey/nitrokey-3-firmware@059d277
• trussed-dev/trussed@main...Nitrokey:trussed:webcrypt-devel
  • specifically: trussed-dev/trussed@2589313
• additional usb-ip runner update:
  • Nitrokey/nitrokey-websmartcard-usbip@3747992

Attachments:

• test report: test-report-u2f.zip
• firmware binary: webcrypt-nk3xn-v1.0.4-11-g059d277.bin
• solution documentation: documentation-fs-enc-poc.md

OpenPGPjs support

Support basic private key operations to use Nitrokey Webcrypt in OpenPGPjs.

See this PR for more details:

• openpgpjs/openpgpjs#1567

Attached:

• firmware
• test results
• updated OpenPGPjs documentation

v0.2.1 Initial NFC support

Initial NFC support. Improve error handling.

The Nitrokey 3 firmware was built from the below branch:

• https://github.com/Nitrokey/nitrokey-3-firmware/tree/nitrokey-webcrypt

v0.2 Initial release

Initial firmware support. Resident Keys. CTAP1 and CTAP2.

The Nitrokey 3 firmware was built from the below branch:

• https://github.com/Nitrokey/nitrokey-3-firmware/tree/nitrokey-webcrypt