version 1.1.0

ChangeLog

@@ -1,5 +1,7 @@
 2013-12-20  Niibe Yutaka  <gniibe@fsij.org>
 
+	* Version 1.1.0.
+
 	* src/usb_ctrl.c (USB_FSIJ_GNUK_CARD_CHANGE): New.
 	(usb_cb_setup): Support USB_FSIJ_GNUK_CARD_CHANGE.
 	* src/usb-icc.c (ccid_card_change_signal): New argument HOW.

NEWS

@@ -2,16 +2,29 @@ Gnuk NEWS - User visible changes
 
 * Major changes in Gnuk 1.1.0
 
-  Released 2013-12-XX, by NIIBE Yutaka
+  Released 2013-12-20, by NIIBE Yutaka
 
-** Key management with overriding (Incompatible Change)
+** Overriding key import / generation (Incompatible Change)
+Gnuk supports overriding key import or key generation even if keys are
+already installed.  Note that it will result password reset of user.
 
 ** RSA key generation improvement
+Prime number generation is done by Fouque-Tibouchi method.
 
 ** Security fix for RSA computation 
+PolarSSL had a vulnerability against timing attack.  For detail,
+please see:
+
+  http://www.gniibe.org/memo/development/gnuk/polarssl/polarssl-rsa-blinding
+
+** Improved RSA routine
+RSA computation has been improved using MPI square routine.  Note that
+you should not adopt this modification for general purpose computer,
+as this change is weak against the Yarom/Falkner flush+reload cache
+side-channel attack.
 
 ** Upgrade of NeuG
-The true random number generator was upgraded with NeuG 1.0.
+The true random number generator was upgraded to the one of NeuG 1.0.
 
 ** Replacement of kernel (thread library)
 Instead of ChibiOS/RT, we now use Chopstx.

README

@@ -1,10 +1,20 @@
 Gnuk - An Implementation of USB Cryptographic Token for GnuPG
 
 							  Version 1.1.0
-							     2013-12-XX
+							     2013-12-20
 							   Niibe Yutaka
 				      Free Software Initiative of Japan
 
+Warning
+=======
+
+This is an experimental release of Gnuk 1.1.0, which has incompatible
+changes to Gnuk 1.0.x.  Specifically, it now supports overriding key
+import, but importing keys (or generating keys) results password
+reset.  Please update your documentation for Gnuk Token, so that the
+instruction of importing keys won't cause any confusion.
+
+
 What's Gnuk?
 ============
 
@@ -533,7 +543,8 @@ RSA), you can import them.
 Gnuk supports key generation, but this feature is young and should be
 considered experimental.
 
-For detail, please see documentation under doc/.
+For detail, please see documentation under doc/.  You can see the HTML
+version at: http://www.fsij.org/doc-gnuk/
 
 
 How to debug

doc/index.rst

@@ -15,6 +15,7 @@ Contents:
    :maxdepth: 2
 
    intro.rst
+   gpg-settings.rst
    stop-scdaemon.rst
    udev-rules.rst
    gnuk-token-initial-configuration.rst
@@ -24,7 +25,6 @@ Contents:
    gnuk-keytocard-noremoval.rst
    gnuk-passphrase-setting.rst
    using-gnuk-token-with-another-computer.rst
-   gpg-settings.rst
    gnome3-gpg-settings.rst
    development.rst
 

doc/intro.rst

@@ -39,14 +39,8 @@ In version 1.1.x, Gnuk supports following boards.
 
 * STM32 part of STM8S Discovery Kit
 
-Not supported yet.
-
-* CQ STARM
-
 * STBee
 
-* STBee Mini
-
 
 Host prerequisites for using Gnuk Token
 ---------------------------------------
@@ -59,7 +53,7 @@ Host prerequisites for using Gnuk Token
 
 * SSH: openssh
 
-* Web: scute, firefox
+* [optional] Web: scute, firefox
 
 
 Usages

doc/udev-rules.rst

@@ -48,6 +48,7 @@ files.  If not, please let the daemon reload rules::
 udev rules for ST-Link/V2
 =========================
 
+For development of Gnuk, we use ST-Link/V2 as JTAG/SWD debugger.
 We need to have a udev rule for ST-Link/V2.  It's like::
 
     ACTION=="add", SUBSYSTEM=="usb", ATTR{idVendor}=="0483", ATTR{idProduct}=="3748", GROUP="tape", MODE="664", SYMLINK+="stlink"