Task List

Feel free to add tasks to the list or check off completed ones. Release critical tasks should have an associated issue.

Before taking on a work item, check whether it is still unassigned and put your name in place. Dependencies are (currently) indicated by increasing the indentation (won't work for multiple dependencies).

• (@d-e-s-o) adjust nitrokey-test to work with Librem Key
• (@d-e-s-o) restructure storage command (#80)
  • (@d-e-s-o) changing of the read-write state of the unencrypted volume
    • (unassigned) export firmware
• (@robinkrahl) add API for changing encrypted volume state to nitrokey
  • (unassigned) changing of the read-write state of the encrypted volume
• (unassigned) enabling of firmware upgrade mode
• (unassigned) change of update (firmware?) PIN
• (unassigned) Add --only-aes-key option to reset command (#69)
• (@robinkrahl) [see #24] We need a function to connect to a Nitrokey specified by either serial number or USB device – see also Nitrokey/libnitrokey#138
  • (@robinkrahl) Add a --serial-number and maybe a --usb-path option to nitrocli (#119, #122)
  • (unassigned) Change nitrokey-test to check for environment variable and invoke tests on correct device
• (unassigned) build AES key
  • I’m not entirely sure why this is crossed out. Currently we build the AES keys after the factory reset. Still, there is a use case for a separate build-keys command, e. g. after a factory reset using gnupg. (I think you might even have to do this for new Nitrokey devices, but I’m not sure.) We just have to make sure that we don’t run into these issues, but I think that should be fine as we don’t execute the factory reset directly before the key generation. —robinkrahl, 2020-09-10
  • We had this discussion over in issue #69 where we decided to ditch an external facing command (d-e-s-o, 2020-10-07)
• (unassigned) add more fields to status output
• other nitrokey functions that we currently do not use:
  • Storage::clear_new_sd_card_warning
  • Storage::get_production_info
  • Storage::wink

Completed

• (@d-e-s-o) hidden volumes
• (@d-e-s-o) nitrokey-test: support nitrokey::DeviceModel parameter
  • (@d-e-s-o) refactor program to allow for intercepting of stdout/stderr
    • (@d-e-s-o) add first integration test
      • (@d-e-s-o) add non-interactive passphrase query (#27)
        • (@d-e-s-o) add tests for config command
        • (@d-e-s-o) add tests for lock command
        • (@d-e-s-o) add tests for otp command
        • (@d-e-s-o) add tests for pin command
        • (@d-e-s-o) add tests for pws command
        • (@d-e-s-o) add tests for storage command
• (@robinkrahl) add --model option to select the device model to connect to
• (@robinkrahl) add --format option to otp set and support base32 secrets (#46)
• (@d-e-s-o) prototype extension mechanism (#50)
  • (@d-e-s-o) prototype a OTP CSV export plugin in Python (#52)
• (@robinkrahl) factory reset (#71)
• (@robinkrahl) implement -V/--version option for querying the program version
• (@d-e-s-o) provide shell completion support for commands & arguments (#57)
• (@robinkrahl) provide a command that fills the SD card with random data (nitrokey::Storage::fill_sd_card) (#125)
• (@robinkrahl) provide a command that shows SD card usage (nitrokey::Storage::get_sd_card_usage) (#124)