Closed shaohme closed 1 year ago
Hi!
Thanks for the detailed report.
This is a known issue with GnuPG releases older than 2.3. Older GnuPG releases don't recompute the PINs after configuring the KDF-DO, resulting in gpg then failing to send the appropriate PINs.
See the GnuPG ticket relevant to this issue: https://dev.gnupg.org/T3891
To solve the issue, please upgrade to a gpg version more recent than 2.3.
Note that once kdf-setup
has been run with an up to date release of GnuPG, the device should be fully usable even with an older release.
Hi!
Thanks for the detailed report.
This is a known issue with GnuPG releases older than 2.3. Older GnuPG releases don't recompute the PINs after configuring the KDF-DO, resulting in gpg then failing to send the appropriate PINs.
See the GnuPG ticket relevant to this issue: https://dev.gnupg.org/T3891
To solve the issue, please upgrade to a gpg version more recent than 2.3. Note that once
kdf-setup
has been run with an up to date release of GnuPG, the device should be fully usable even with an older release.
I see. Too bad my favorite distros are currently slow at upgrading to latest GnuPG ;-)
I have used KDF with a YubiKey 5 where it seems to work, so I guess this is a problem with GnuPG 2.2.X and Nitrokey? Or maybe YubiKey firmware just works around or ignore it ...
I have recently updated to latest 1.5.0 firmware for my Nitrokey 3A NFC. After factory reset the device I immediately enable KDF by executing 'kdf-setup'. Afterwards I cannot change or use PINs for my NK3 and have to factory reset again to make PIN/Admin-PIN work again.
Below is an example ouput of "Card error" occuring when trying to change Admin PIN after KDF setup.