nitrokey-rs/src, branch v0.3.0Rust interface to libnitrokeyhttps://git.ireas.org/nitrokey-rs/atom?h=v0.3.02019-01-03T23:51:00ZUpdate documentation and test for factory_reset2019-01-03T23:51:00ZRobin Krahlrobin.krahl@ireas.org2019-01-03T23:48:22Zurn:sha1:c5d5ab12ab8ca6b9889550f050b859b76fa4bdd7
Contrary to my previous beliefs, build_aes_key has to be called even
after a factory reset using the Nitrokey API. This patch updates the
documentation and the unit tests based on this insight.
Fix documentation test for Storage::change_update_pin2019-01-03T23:50:33ZRobin Krahlrobin.krahl@ireas.org2019-01-03T23:44:43Zurn:sha1:7b4c1f73be9d430ebff698794a482d0a374b8dc9Add Storage::enable_firmware_update method2019-01-03T22:26:45ZRobin Krahlrobin.krahl@ireas.org2019-01-03T22:24:51Zurn:sha1:a02623db10c13d03ae889fd37078e467fe62406f
This patch adds the enable_firmware_update method to the Storage struct
that uses NK_enable_firmware_update to put the Nitrokey Storage into
update mode. This method is not tested as external tooling is required
to resume normal operation and as it is hard to bail out if an error
occurs.
Add Device::build_aes_key method2019-01-03T17:06:30ZRobin Krahlrobin.krahl@ireas.org2019-01-03T17:04:50Zurn:sha1:616f84c13a4e676d3e2f870533fb1b8778c5f614
This patch adds the build_aes_key method to the Device trait that uses
the NK_build_aes_key function to build new AES keys on the device. This
effectively resets the password safe and the encrypted storage. It is
unclear whether other data (e. g. the one-time passwords) are affected
too.
Add Device::factory_reset method2019-01-03T13:53:06ZRobin Krahlrobin.krahl@ireas.org2019-01-03T13:50:15Zurn:sha1:0a7a62c9af15b11e5dbfad1900ac89924457b272
This patch adds the factory_reset_method to the Device trait that uses
the NK_factory_reset function to perform a factory reset. The tests
verify that the user and admin PIN are reset and that the OTP storage
and the password safe are deleted.
Add Storage::change_update_pin method2019-01-03T12:17:54ZRobin Krahlrobin.krahl@ireas.org2019-01-03T12:16:21Zurn:sha1:d60e03b46a6af75056f07394ef66ecaa35f32d77
This patch adds the change_update_pin method to the Storage struct that
uses the NK_change_update_password function to set the password required
for firmware updates.
Document decryption failure for get_password_safe2019-01-03T10:45:17ZRobin Krahlrobin.krahl@ireas.org2019-01-03T10:45:17Zurn:sha1:1061005a82ed0ba6ad5c48322e704f786bd802ab
After a factory reset, the password safe cannot be accessed as its
secret cannot be decrypted. This patch improves the documentation for
GetPasswordSafe::get_password_safe to reflect this behavior.
Update documentation for pws methods2019-01-03T01:33:12ZRobin Krahlrobin.krahl@ireas.org2019-01-03T01:33:12Zurn:sha1:3a885bf34416f0b337398b94f6babceb4de1b661Preserve unknown error code values2019-01-03T01:12:17ZDaniel Muellerdeso@posteo.net2019-01-02T23:53:18Zurn:sha1:65ead1426e1e9864b7e245fd729a66e689e549b4
The CommandError::Unknown variant, which is used whenever a reported
error code is not known, makes it close to impossible to determine the
root cause of, say, a one-off error, because all information explaining
what went wrong is discarded.
With this change we adjust the Unknown variant to include the error
report. In addition, we introduce a new CommandError variant, Undefined,
that is used when no error code is available.
Fix typo: occured -> occurred2019-01-03T00:58:59ZDaniel Muellerdeso@posteo.net2019-01-02T23:48:45Zurn:sha1:60a976fb7f721b800ba145a9bd5b416c6d3de834