Gnuk NEWS - User visible changes * Major changes in Gnuk 0.11 Released 2011-04-15, by NIIBE Yutaka This is bug fixes only release. * Major changes in Gnuk 0.10 Released 2011-02-10, by NIIBE Yutaka ** The executable can be installed to multiple devices. So far, users of Gnuk should have not shared single executable among multiple devices because the executable includes random bits (or fixed serial number). Now, random_bits and fixed serial number are configured *after* compilation, we can install single executable image to multiple devices. Note that we need to configure random_bits for each device. ** Removed configure option: --with-fixed-serial It is not compile time option any more. After installation, we can modify serial number in AID by tool/gnuk_put_binary.py. Modification is possible only once. If you don't modify, Gnuk uses unique chip ID of STM32 processor for AID. * Major changes in Gnuk 0.9 Released 2011-02-01, by NIIBE Yutaka ** Card Holder Certificate is supported (still this is experimental). Gnuk can support card holder certificate now. Note that GnuPG is not ready yet. The tool/gnuk_update_binary.py is for writing card holder certificate to Gnuk Token. ** Better interoperability to OpenSC. Gnuk is not yet supported by OpenSC, but it could be. With the changes in Gnuk, it could be relatively easily possible to support Gnuk Token by OpenSC with a few changes to libopensc/card-openpgp.c, and libopensc/pkcs15-openpgp.c. ** New board support "STBee" STBee is a board by Strawberry Linux Co., Ltd., and it has STM32F103VET6 on the board. The chip is High Density CPU with 512KB flash memory and many I/O. If you want to connect sensor, display, etc., this board would be a good candidate. ** Experimental PIN-pad modification(unblock) support is added. PIN-pad modification(unblock) is supported. * Major changes in Gnuk 0.8 Released 2011-01-19, by NIIBE Yutaka ** Experimental PIN-pad modification support is added. PIN input using rotally encoder and push switch is tested with STBee Mini. By this hardware, PIN-pad modification is supported. * Major changes in Gnuk 0.7 Released 2011-01-15, by NIIBE Yutaka ** Bug fix only. In version 0.6, a severe bug was introduced in usb-icc.c when adding a work around for libccid 1.3.11. The fix is one-liner, but it is worth to release newer version. * Major changes in Gnuk 0.6 Released 2011-01-14, by NIIBE Yutaka ** Experimental PIN-pad support is added. Local PIN-pad input is suppored for boards which have input hardware. PIN input using consumer IR receive module is tested with STBee Mini and STM8S Discovery. ** USB device serial number is virtually unique now. STM32F103 has 96-bit unique chip identifier. We take advantage of this, Gnuk Token has virtually unique USB serial number. ** Card serial number is determined at run time by chip identifier. Until version 0.5, card serial number was compile time option. If we used same binary for different devices, card serial number was same. Now, we use STM32F103's 96-bit unique chip identifier for card serial number (when you don't use --with-fixed-serial option). ** More improved USB-CCID/ICCD implementation. The changes in 0.5 was not that good for libccid 1.3.11, which has small buffer (only 262-byte APDU). Workaround for libccid 1.3.11 is implemented. * Major changes in Gnuk 0.5 Released 2010-12-13, by NIIBE Yutaka ** LED blink LED blink now shows status output of the card. It shows the status of CHV3, CHV2, and CHV1 when GPG is accessing the card. ** New board support "STM8S Discovery" ST-Link part (with STM32F103C8T6) of STM8S Discovery board is now supported. ** Digital signing for SHA224/SHA256/SHA384/SHA512 digestInfo is now possible. ** Fixes for password management Now, you can allow the token to do digital signing multiple times with single authentication. You can use "forcesig" subcommand in card-edit of GnuPG to enable the feature. ** Key management changes If you remove all keys, it is possible to import keys again. ** More improved USB-CCID/ICCD implementation. Gnuk works better with GPG's in-stock protocol stack. You can do digital signing (not decryption, key import, or get_public_key in GPG2). For decryption, key import and get_public_key, changes are needed for GPG (scd/ccid-driver.c) to support the case of extended APDU. In short, you can sign with Gnuk by GPG. ** Windows support. Gnuk Token could run with GPG4WIN on MS Windows. GPG4WIN runs with "usbccid" driver and "winscard" driver. * Major changes in Gnuk 0.4 Released 2010-11-09, by NIIBE Yutaka ** New board support "STBee Mini". ** Flash writing tool for "DfuSe" is included now. ** Since Flash GC is now implemented, it can be used longer. * Major changes in Gnuk 0.3 Released 2010-10-23, by NIIBE Yutaka ** Now we have 'configure' script to select target. ** Support system with DFU (Device Firmware Upgrade) downloader. ** New board support "CQ STARM". ** Improved USB-ICCD implementation. Works fine with GPG's protocol stack. * Major changes in Gnuk 0.2 Released 2010-09-13, by NIIBE Yutaka ** With DEBUG=1, timeout is more than 3 seconds. ** Flash ROM entries for random numbers are cleared after use. ** Board support "STM32 Primer 2" now works. * Major changes in Gnuk 0.1 Released 2010-09-10, by NIIBE Yutaka ** Enabled force_chv1 (in the pw_status_bytes), so that the decipher works. ** Support both of key for digital signing and key for decryption. ** Decipher is supported. ** New board support "STM32 Primer 2" is added by Kaz Kojima. ** LED behavior is meaningful now. "ON" during execution. ** Fixed bcdCCID revision number. ** Logo. * Major changes in Gnuk 0.0 Released 2010-09-06, by NIIBE Yutaka ** This is initial release. Only it supports digital signing. Local Variables: mode: outline End: