The GNU Privacy Handbook (1999)

Re:The GNU Privacy Handbook (1999) by robryk on Sunday September 11, 2016 @02:03PM (#12474675)

Nitrokey claims on their homepage that the firmware of the Storage version of NitroKey can be updated by software. This seems to mean that there's someone out there with a key that can sign arbitrary code that can be loaded as an update and gains access to the crypto material on the device.

[ Parent | on HN ]

Re:The GNU Privacy Handbook (1999) by Karunamon on Sunday September 11, 2016 @02:06PM (#12474686)

I had a look through their instructions and I'm not sure if there is a signing process that happens. You have to enable firmware access from the app, and then it's a bog standard DFU flash to load the new firmware.

[ Parent | on HN ]

Re:The GNU Privacy Handbook (1999) by robryk on Monday September 12, 2016 @04:38PM (#12483425)

Does it require you to perform any physical actions on the dongle? If not, why can't I straightforwardly extract keys if I own the machine the dongle is attached to?

[ Parent | on HN ]