Skip to content

Nitrokey Start v13.0 - OpenSSH 9.0 support

Latest
Compare
Choose a tag to compare
@szszszsz szszszsz released this 08 Dec 10:59
· 8 commits to gnuk1.2-regnual-fix since this release
RTM.13
a6f850c

This release contains:

  • The long awaited support for the OpenSSH 9.0 #67.
  • Memory management fixes

Notes:

  • Update from the previous firmware releases on HW4 might result in non-working LED.
  • "Green" branch firmware (an upgrade from RTM.1) is not provided in this release.

Binaries are available in prebuilt/RTM.13/ directory:

Update should be as easy as calling:

pipx run pynitrokey start update

See https://docs.nitrokey.com/start/linux/firmware-update for more information.


Technical details:

  • Rebases to GNUK 1.2.19
  • Stack memory increased for the main and openpgp-card tasks

Tested RTM.13-RC3 tag on paths:

  • hw3-flashed
  • hw3-update-10-to-13.rc3
  • hw5-flashed
  • hw5-update-12.0-to-13.rc3
  • hw5-update-12.1-to-13.rc3
  • hw5-update-13-to-13 (just update operation)
  • hw5-update-13-to-12.1 - reverting update (just update operation)

The failing test is related to the default state for the OpenPGP compatibility, and does not influence day to day use.

Built in isolated Docker environment with:

  • arm-none-eabi-gcc (15:8-2019-q3-1+b1) 8.3.1 20190703 (release) [gcc-8-branch revision 273027]

Current regions/sections usage:

Memory region         Used Size  Region Size  %age Used
          flash0:          4 KB         4 KB    100.00%
           flash:      124944 B       124 KB     98.40%
             ram:       11440 B        20 KB     55.86%

build/gnuk.elf  :
section                   size         addr
.sys                    0x1000    0x8000000
.startup                  0xf0    0x8001000
.text                  0x18ce0    0x80010f0
.textalign                 0x0    0x8019dd0
.stacks                 0x1f90   0x20000000
.data                      0x0   0x20001f90
.bss                     0xd20   0x20001f90
.gnuk_ch_certificate    0x1630    0x8019dd0
.gnuk_flash             0x4400    0x801b400
.gnuk_final               0x10    0x801f800
.debug_info            0x459af          0x0
.debug_abbrev           0x998a          0x0
.debug_loc             0x278ab          0x0
.debug_aranges          0x10c8          0x0
.debug_ranges           0x46d0          0x0
.debug_line            0x19577          0x0
.debug_str              0x4ef9          0x0
.comment                  0x9f          0x0
.ARM.attributes           0x2b          0x0
.debug_frame            0x3950          0x0
Total                  0xc06c6