diff --git a/NEWS b/NEWS index eaaf481..a69238f 100644 --- a/NEWS +++ b/NEWS @@ -1,5 +1,6 @@ Gnuk NEWS - User visible changes + * Major changes in Gnuk 1.2.10 Released 2018-05-10, by NIIBE Yutaka diff --git a/README b/README index ea4c45b..cb81ba0 100644 --- a/README +++ b/README @@ -1,14 +1,14 @@ Gnuk - An Implementation of USB Cryptographic Token for GnuPG - Version 1.2.9 - 2018-04-05 + Version 1.2.10 + 2018-05-10 Niibe Yutaka Free Software Initiative of Japan Release Notes ============= -This is the release of Gnuk, version 1.2.9, which has major +This is the release of Gnuk, version 1.2.10, which has major incompatible changes to Gnuk 1.0.x. Specifically, it now supports overriding key import, but importing keys (or generating keys) results password reset. Also, you need to import private keys before changing @@ -25,9 +25,9 @@ than 8 seconds to sign/decrypt. Key generation of RSA-4096 just fails, because the device doesn't have enough memory. It supports new KDF-DO feature. Please note that this is -experimental. To use the feature, you need to use newer GnuPG -(forthcoming 2.2.6 or later). You need to prepare the KDF-DO on your -token by the card-edit/kdf-setup command. +experimental. To use the feature, you need to use newer GnuPG (2.2.6 +or later). You need to prepare the KDF-DO on your token by the +card-edit/kdf-setup command. What's Gnuk? @@ -35,7 +35,7 @@ What's Gnuk? Gnuk is an implementation of USB cryptographic token for GNU Privacy Guard. Gnuk supports OpenPGP card protocol version 3, and it runs on -STM32F103 processor. +STM32F103 processor (and its compatible). I wish that Gnuk will be a developer's soother who uses GnuPG. I have been nervous of storing secret key(s) on usual secondary storage. @@ -405,9 +405,11 @@ Then, type: Then, we will have "gnuk.elf" under src/build directory. -Next, we can get the final image by running following command. - - $ make build/gnuk-vidpid.elf +If you are not the authorized vendor, please never distribute this +file of "gnuk.elf", which includes VID:PID in the image. If you would +like to distribute the image (for example, to check if it's +reproducible or not), the file "gnuk-no-vidpid.elf" is the one with no +VID:PID. How to install diff --git a/doc/development.rst b/doc/development.rst index 19eb69b..6f3523b 100644 --- a/doc/development.rst +++ b/doc/development.rst @@ -58,6 +58,8 @@ Type: :: Then, we will have "gnuk.elf" under src/build directory. -Next, we can get the final image by running following command. :: - - $ make build/gnuk-vidpid.elf +If you are not the authorized vendor, please never distribute this +file of "gnuk.elf", which includes VID:PID in the image. If you would +like to distribute the image (for example, to check if it's +reproducible or not), the file "gnuk-no-vidpid.elf" is the one with no +VID:PID. diff --git a/doc/note/firmware-update b/doc/note/firmware-update index d312cb2..386fe8a 100644 --- a/doc/note/firmware-update +++ b/doc/note/firmware-update @@ -65,7 +65,7 @@ Invoking firmware update We specify reGNUal binary and Gnuk binary. - $ ../tool/gnuk_upgrade.py ../regnual/regnual.bin gnuk-vidpid.bin + $ ../tool/gnuk_upgrade.py ../regnual/regnual.bin gnuk.bin Two or more tokens diff --git a/doc/note/firmware-update-2 b/doc/note/firmware-update-2 index 830293f..ef0d41d 100644 --- a/doc/note/firmware-update-2 +++ b/doc/note/firmware-update-2 @@ -78,14 +78,15 @@ is FST-01. Then you get build/gnuk.elf. -Next, we can get the final image by running following command. - - $ make build/gnuk-vidpid.elf - +If you are not the authorized vendor, please never distribute this +file of "gnuk.elf", which includes VID:PID in the image. If you would +like to distribute the image (for example, to check if it's +reproducible or not), the file "gnuk-no-vidpid.elf" is the one with no +VID:PID. Invoking configure with FSIJ's USB ID (234b:0000) and generating -gnuk-vidpid.elf means that you are using FSIJ's USB ID (for reGNUal in -this case). Please note that FSIJ only allows use of its USB ID for +gnuk.elf means that you are using FSIJ's USB ID (for reGNUal in this +case). Please note that FSIJ only allows use of its USB ID for specific situations. Please read README of Gnuk about that. @@ -121,7 +122,7 @@ your environment for Gnuk Token. How to run the script: :: $ cd tool - $ ./upgrade_by_passwd.py ../regnual/regnual.bin ../src/build/gnuk-vidpid.bin + $ ./upgrade_by_passwd.py ../regnual/regnual.bin ../src/build/gnuk.bin Then, the script on your host PC invoke the steps described above, and you will get new version of Gnuk installed.