Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Support for new authorization mechanism #22

Closed
szszszsz opened this issue Nov 19, 2016 · 0 comments · Fixed by #85
Closed

Support for new authorization mechanism #22

szszszsz opened this issue Nov 19, 2016 · 0 comments · Fixed by #85
Labels
enhancement
Milestone
v0.54

Comments

@szszszsz
Copy link
Member

szszszsz commented Nov 19, 2016 •
edited
Loading

Recently new authorization mechanism has been introduced to NK Pro. Briefly it consist of:

  • removing CMD_AUTHORIZE completely
  • adding temporary password directly to command packets which needs to be authorized

Links:
@NKelias NKelias mentioned this issue Jan 27, 2019
Merged
@szszszsz szszszsz added this to the v0.54 milestone Jan 31, 2019
szszszsz added a commit that referenced this issue Jun 13, 2019
@szszszsz
Merge branch 'otp_extended'
7f41e19 
Following description from #85:

Functional changes:
    OTP secret extended to 40 Bytes
    Authorization changed from pre-authenticated CRC to temporary password in HID report
    OTP counter transferred as 64bit unsigned Integer instead of C-String
    OTP counter is retained when editing slots
    Temporary passwords cleared through lock_device operation
    HOTP verification functionality added

Further changes:
    OTP handlng now uses struct format for message parsing and passing data around
    Replace optimizable memset with non-optimizable memset_safe function for critical data

Additional:
    Smart card counters update on Pro request

Fixes #85
Fixes #70
Fixes #64
Fixes #26
Fixes #22
Fixes #23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
enhancement
Projects
None yet
Milestone
v0.54
Development

Successfully merging a pull request may close this issue.

v0.54 updated OTP handling NKelias/nitrokey-storage-firmware
1 participant
@szszszsz