[Gnuk-users] Nitrokey support in Gnuk-1.1.x

[NIIBE Yutaka]

On 08/27/2015 08:58 AM, Mateusz Zalega wrote:
> Thanks! It started working after I added RCC_APB2ENR_AFIOEN. I attached
> both chopstx board and GNUK_USB_DEVICE_ID patches. The board name was
> changed before it has been put into production.

Thank you for the patch.  I'll include it soon.

> 2048-bit RSA is working fine, however when I tried using ECC (NIST
> P-256) with current Gnuk-1.1.x, gnupg-2.1.7 and libgcrypt-1.6.3, I have
> always ended up with:
>> gpg: KEYTOCARD failed: Invalid value
> 
> Am I missing something here?

Currently, UI is not yet available, and before you write your ECC key
to Gnuk Token, you need to change key attributes of Gnuk Token
manually.  If it's ECC with NIST P-256, I think that command is like:

   $ gpg-connect-agent "SCD SETATTR KEY-ATTR --force 1 19 nistp256" /bye
   $ gpg-connect-agent "SCD SETATTR KEY-ATTR --force 2 18 nistp256" /bye
   $ gpg-connect-agent "SCD SETATTR KEY-ATTR --force 3 19 nistp256" /bye

--