[Gnuk-users] compilation fails --with-dfu

NIIBE Yutaka gniibe at fsij.org
Thu Dec 8 23:55:51 UTC 2016


Jan Suhr | Nitrokey <jan at nitrokey.com> writes:
> When building Gnuk 1.2 for the Nitrokey Start target and with DFU, the

Thanks for the report.

I don't think Nitrokey Start has DFU.  If it is so, I think that good
fix is to change "configure" not allowing --with-dfu option for Nitrokey
Start.

While DFU (Device Firmware Update) is general term, DFU in this context
refers the specific DFU named DfuSe by STMicroelectronics, which some
products (evaluation boards) have as a factory setting.

It is a useful tool for developers because it allows developers to
experiment Gnuk (or any firmware application) with no use of JTAG/SWD
debugger.

However, --with-dfu option means that DFU feature can be a backdoor to
steal your private keys.  So, it's only an option for developers on
their experiment.
-- 



More information about the gnuk-users mailing list