search

Nitrokey / nitrokey-app

Nitrokey's Application (Win, Linux, Mac)
https://www.nitrokey.com/
288 stars 55 forks source link

OTP/ Passwords remain after GnuPG Factory Reset #484

Open Niklap97 opened 3 years ago

Niklap97 commented 3 years ago

Application version: 1.5 RC8 Operating system: [Windows 10] Issue occurrency: [sometimes?]

Expected behaviour

OTP and Password have only empty slots after the GnuPG Factory Reset.

Current behaviour

Some OTP/Passwords-Slots remain after the GnuPG Factory Reset.

Steps for reproduction

  1. create OTP and Passwords in the Nitrokey App and close it
  2. execute the GnuPG Factory Reset
  3. start the Nitrokey App and check for OTP and Passwords
szszszsz commented 2 years ago
  1. Assuming here that the used device was Nitrokey Pro v0.14.
  2. OTP slots are not changing after GnuPG Factory Reset by design.
  3. If Nitrokey App was not closed completely, then the PWS entries were shown from the cache. Nitrokey App tries to avoid downloading the names each time for a better UX, and does not actively check if the GnuPG's Factory Reset was executed in the meantime.
  4. If Nitrokey App was closed completely in step 1, then this might be a bug in the Nitrokey Pro firmware. To retest through libnitrokey test suite.
  5. (edit) Similar thing happens on Gnome, when the entries are not refreshed in the TopIcons extension