Nitrokey / nitrokey-app

Nitrokey's Application (Win, Linux, Mac)
https://www.nitrokey.com/
287 stars 55 forks source link

Warn user about bad AES when TOTP is set up #429

Closed alex-nitrokey closed 2 years ago

alex-nitrokey commented 4 years ago

Expected behaviour

If a user creates a TOTP she/he should get warned about broken AES key, like it is the case when encrypted volume is opened (see error message discussed here #264).

Current behaviour

The user is not warned about bad AES key so that she/he may set up the whole device including TOTP keys and only realizes the necessity of hitting "destroy encrypted data" button afterwards and thus needs to set up TOTP keys again.

szszszsz commented 4 years ago

AFAIR the AES key should be generated on the EV/PWS setup automatically, but will check that.

szszszsz commented 2 years ago

Closing as wontfix for now, as OTP flash space is not encrypted at the moment, thus AES key is not required. This might change in the future.