Cant overwrite keys

[faljse]

gpg --edit-key --expert asdf@asdf.at
gpg (GnuPG) 2.4.8; Copyright (C) 2025 g10 Code GmbH
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.

Secret key is available.

sec  ed25519/AB73B566F2261C22
     created: 2025-09-17  expires: never       usage: SC  
     trust: ultimate      validity: ultimate
ssb  cv25519/159246B9B3DA1568
     created: 2025-09-17  expires: never       usage: E   
ssb  ed25519/921CCD337B5AAE40
     created: 2025-09-17  expires: never       usage: SA  
[ultimate] (1). asdf <asdf@asdf.at>

gpg> keytocard
Really move the primary key? (y/N) y
Please select where to store the key:
   (1) Signature key
   (3) Authentication key
Your selection? 1

gpg: WARNING: such a key has already been stored on the card!

Replace existing key? (y/N) y

now i enter the admin pin in the popup
the led then blinks green and immediately turns to red.

No error msg, the led keeps shining red and the program is hanging indefinitely.

[daringer]

ok, that red-led means there was a panic (crash) on the nitrokey 3.
I tried to reproduce, but it worked for me.
Can you please give us the outputs for:

nitropy nk3 get-config opcard.use_se050_backend
nitropy nk3 status

[faljse]

$ nitropy nk3 get-config opcard.use_se050_backend
Command line tool to interact with Nitrokey devices 0.10.0
true

$ nitropy nk3 status
Command line tool to interact with Nitrokey devices 0.10.0
UUID:               <removed>
Firmware version:   v1.8.2
Init status:        ok
Free blocks (int):  32
Free blocks (ext):  463
Variant:            LPC55

As a workaround i (mis?)used this cmd to reset the pgp card
nitropy nk3 set-config opcard.use_se050_backend true

[daringer]

this looks fine all the way - weird ... maybe we are seeing some weird hardware issue (maybe the external flash) that only shows up for specific pages/operations - very unlikely, but given this weirdness: anything is possible 🤔

Can I ask you to do a full device factory-reset (nitropy nk3 factory-reset) and try to reproduce this afterwards ? (please be aware that this operation deletes ALL data on the device)

[cyb3rko]

I experience the same situation with my NK3.

[daringer]

Hey please try v1.8.3 (should be public in some hours), this should improve the factory-reset behavior

[cyb3rko]

Couldn't overwrite keys, but I could reset the GPG module on v1.8.3 with factory-reset and generate a new key.

[timfvb]

I have the same issue on my nitrokey.

[kanru]

Same problem. I first generated a key on my NK3AN, then tried to import a key to overwrite it.

1. Key slot 3 originally had a RSA4096 key I imported
2. I generated a new EDDSA key on the same slot, this went fine
3. I wanted to import another key to the same slot, but it always crashes

Firmware version:   v1.8.3
Init status:        ok
Free blocks (int):  28
Free blocks (ext):  461
Variant:            LPC55