@@ -1,5 +1,8 @@
|
|||||||
2022-04-22 NIIBE Yutaka <gniibe@fsij.org>
|
2022-04-22 NIIBE Yutaka <gniibe@fsij.org>
|
||||||
|
|
||||||
|
* VERSION: 1.2.20.
|
||||||
|
* chopstx: Update to 1.21.
|
||||||
|
|
||||||
* src/gnuk.h (_regnual_start): Fix type.
|
* src/gnuk.h (_regnual_start): Fix type.
|
||||||
* src/main.c (main): Fix address for _regnual_start.
|
* src/main.c (main): Fix address for _regnual_start.
|
||||||
* src/usb_ctrl.c (mem_info, usb_setup): Follow the change.
|
* src/usb_ctrl.c (mem_info, usb_setup): Follow the change.
|
||||||
|
|||||||
15
NEWS
15
NEWS
@@ -1,6 +1,21 @@
|
|||||||
Gnuk NEWS - User visible changes
|
Gnuk NEWS - User visible changes
|
||||||
|
|
||||||
|
|
||||||
|
* Major changes in Gnuk 1.2.20
|
||||||
|
|
||||||
|
Released 2022-04-22, by NIIBE Yutaka
|
||||||
|
|
||||||
|
** Minor fixes for newer compiler
|
||||||
|
|
||||||
|
For build with newer compiler, Gnuk and regnual are fixed for address
|
||||||
|
calculation and access to object on memory, as well as declarations of
|
||||||
|
function and type in standard C library.
|
||||||
|
|
||||||
|
** Upgrade of Chopstx
|
||||||
|
|
||||||
|
We use Chopstx 1.21. This includes fix to silence compiler warnings.
|
||||||
|
|
||||||
|
|
||||||
* Major changes in Gnuk 1.2.19
|
* Major changes in Gnuk 1.2.19
|
||||||
|
|
||||||
Released 2021-10-12, by NIIBE Yutaka
|
Released 2021-10-12, by NIIBE Yutaka
|
||||||
|
|||||||
33
README
33
README
@@ -1,19 +1,14 @@
|
|||||||
Gnuk - An Implementation of USB Cryptographic Token for GnuPG
|
Gnuk - An Implementation of USB Cryptographic Token for GnuPG
|
||||||
|
|
||||||
Version 1.2.19
|
Version 1.2.20
|
||||||
2021-10-12
|
2021-04-22
|
||||||
Niibe Yutaka
|
Niibe Yutaka
|
||||||
Free Software Initiative of Japan
|
Free Software Initiative of Japan
|
||||||
|
|
||||||
Release Notes
|
Release Notes
|
||||||
=============
|
=============
|
||||||
|
|
||||||
This is the release of Gnuk, version 1.2.19, which has major
|
This is the release of Gnuk, version 1.2.20.
|
||||||
incompatible changes to Gnuk 1.0.x. Specifically, it now supports
|
|
||||||
overriding key import, but importing keys (or generating keys) results
|
|
||||||
password reset. Also, you need to import private keys before changing
|
|
||||||
your password. Please update your documentation for Gnuk Token, so
|
|
||||||
that the instruction of importing keys won't cause any confusion.
|
|
||||||
|
|
||||||
It has supports of Ed25519 and X25519 (ECDH on Curve25519). It also
|
It has supports of Ed25519 and X25519 (ECDH on Curve25519). It also
|
||||||
has experimental support of ECDSA (on NIST P256 and secp256k1) and
|
has experimental support of ECDSA (on NIST P256 and secp256k1) and
|
||||||
@@ -23,14 +18,20 @@ It also supports RSA-4096, but users should know that it takes more
|
|||||||
than 8 seconds to sign/decrypt. Key generation of RSA-4096 just fails,
|
than 8 seconds to sign/decrypt. Key generation of RSA-4096 just fails,
|
||||||
because the device doesn't have enough memory.
|
because the device doesn't have enough memory.
|
||||||
|
|
||||||
It supports new KDF-DO feature. Please note that this is
|
It supports new KDF-DO feature. To use the feature, you need to use
|
||||||
experimental. To use the feature, you need to use newer GnuPG (2.2.6
|
newer GnuPG (2.2.6 or later). You need to prepare the KDF-DO on your
|
||||||
or later). You need to prepare the KDF-DO on your token by the
|
token by the card-edit/kdf-setup command of GnuPG.
|
||||||
card-edit/kdf-setup command.
|
|
||||||
|
|
||||||
With FST-01SZ and GNU/Linux emulation, experimental ack button support
|
With FST-01SZ and GNU/Linux emulation, experimental ack button support
|
||||||
is available for test.
|
is available for test.
|
||||||
|
|
||||||
|
Please note that version 1.2 implementation has major incompatible
|
||||||
|
changes to Gnuk 1.0.x. Specifically, it supports overriding key
|
||||||
|
import, but importing keys (or generating keys) results password
|
||||||
|
reset. Also, you need to import private keys before changing your
|
||||||
|
password. Please update your old documentation for Gnuk Token, so
|
||||||
|
that the instruction of importing keys won't cause any confusion.
|
||||||
|
|
||||||
|
|
||||||
What's Gnuk?
|
What's Gnuk?
|
||||||
============
|
============
|
||||||
@@ -243,7 +244,7 @@ External source code
|
|||||||
|
|
||||||
Gnuk is distributed with external source code.
|
Gnuk is distributed with external source code.
|
||||||
|
|
||||||
* chopstx/ -- Chopstx 1.20
|
* chopstx/ -- Chopstx 1.21
|
||||||
|
|
||||||
We use Chopstx as the kernel for Gnuk.
|
We use Chopstx as the kernel for Gnuk.
|
||||||
|
|
||||||
@@ -365,9 +366,9 @@ You need GNU toolchain and newlib for 'arm-none-eabi' target.
|
|||||||
On Debian we can install the packages of gcc-arm-none-eabi
|
On Debian we can install the packages of gcc-arm-none-eabi
|
||||||
and its friends. I'm using:
|
and its friends. I'm using:
|
||||||
|
|
||||||
binutils-arm-none-eabi 2.35.2-2+14+b2
|
binutils-arm-none-eabi 2.37-7+15
|
||||||
gcc-arm-none-eabi 15:8-2019-q3-1+b1
|
gcc-arm-none-eabi 15:10.3-2021.07-4
|
||||||
libnewlib-arm-none-eabi 3.3.0-1
|
libnewlib-arm-none-eabi 3.3.0-1.3
|
||||||
gdb-multiarch 10.1-2
|
gdb-multiarch 10.1-2
|
||||||
|
|
||||||
Or else, see https://launchpad.net/gcc-arm-embedded for preparation of
|
Or else, see https://launchpad.net/gcc-arm-embedded for preparation of
|
||||||
|
|||||||
@@ -122,7 +122,7 @@ your environment for Gnuk Token.
|
|||||||
How to run the script: ::
|
How to run the script: ::
|
||||||
|
|
||||||
$ cd tool
|
$ cd tool
|
||||||
$ ./upgrade_by_passwd.py ../regnual/regnual.bin ../src/build/gnuk.bin
|
$ ./upgrade_by_passwd.py
|
||||||
|
|
||||||
Then, the script on your host PC invoke the steps described above, and
|
Then, the script on your host PC invoke the steps described above, and
|
||||||
you will get new version of Gnuk installed.
|
you will get new version of Gnuk installed.
|
||||||
|
|||||||
Reference in New Issue
Block a user