Comments (7)
robinkrahl
commented on May 30, 2024
I am considering changing the structure of the `storage` subcommand.
Currently we have:
I also thought about a similar solution, but I wasn’t really happy with
it because it is rather complex. What do you think about making the
hidden and encrypted subcommands into top-level commands?
So I guess that function is not available on recent firmware. But do I
understand correctly that the command may come back in the future?
My understanding is that it won’t come back. I guess that it is not
needed because you have to unlock the encrypted volume before writing to
it. Unforunately, the commit messages do not explain the changes [0]
[1].
@szszszsz Will the NK_set_encrypted_read_only command come back in
future versions or can we ignore it?
[0] Nitrokey/nitrokey-storage-firmware@0a3afc0
[1] Nitrokey/nitrokey-storage-firmware@0662220
from nitrocli.
szszszsz
commented on May 30, 2024
@robinkrahl Indeed, there is no comment about that. Corrected. It was planned to be fixed asap, but OTP development got higher priority now. It is on the roadmap, and it should be available in the future firmware.
Added description to v0.50 release:
Encrypted Volume read-only/read-write mode changing feature was suspended, due to side-effect in current implementation - removing (as in locking) the whole Encrypted Volume for a short period, which could end up in user data loss (due to not sync'ed host OS buffers).
Related issue: #55
from nitrocli.
robinkrahl
commented on May 30, 2024
@szszszsz Thanks for clearing this up!
from nitrocli.
robinkrahl
commented on May 30, 2024
Added support for the encrypted volume mode in nitrocli in commit ad76653b3be57c0cfd31c8056a8d68537034324e.
from nitrocli.
d-e-s-o
commented on May 30, 2024
Added support for the encrypted volume mode in nitrocli in commit ad76653b3be57c0cfd31c8056a8d68537034324e.
Awesome! I guess I'll wait with the implementation on the nitrocli side, though, because it is just rather confusing and a lot of documentation overhead if it is only available for 0.49 right now.
I also thought about a similar solution, but I wasn’t really happy with it because it is rather complex. What do you think about making the hidden and encrypted subcommands into top-level commands?
What would be the top level commands? storage, encrypted, hidden? Or unencrypted, encrypted, hidden?
The first one does not really make sense. The hidden and encrypted volumes are storage so that seems illogical. The second one does not allow us to provide a general storage status. I guess we could move that back (at least in parts) into the status command. Not sure.
from nitrocli.
robinkrahl
commented on May 30, 2024
What would be the top level commands? `storage`, `encrypted`,
`hidden`? Or `unencrypted`, `encrypted`, `hidden`?
The latter. The status could be moved to the top-level status command.
The first one does not really make sense. The hidden and encrypted
volumes are storage so that seems illogical. The second one does not
allow us to provide a general storage status. I guess we could move
that back (at least in parts) into the `status` command. Not sure.
Yeah, it’s not perfect, but I think it’s better than three levels of
nested subcommands.
from nitrocli.
d-e-s-o
commented on May 30, 2024
What would be the top level commands?
storage,encrypted,hidden? Orunencrypted,encrypted,hidden?
The latter. The status could be moved to the top-level status command.
Okay! Let me look into that as part of the addition of the read-write state of the unencrypted volume change.
from nitrocli.
Related Issues (20)
- Compare strings instead of byte slices in tests HOT 2
- Access PWS slots by name HOT 8
- Improve otp subcommand HOT 1
- Validate PWS and OTP string length HOT 5
- Document scdaemon reset workaround in readme
- Publishing nitrocli-ext HOT 5
- Publishing the core extensions HOT 10
- Improve installation instructions HOT 6
- Split up commands module HOT 1
- Show retry count (< 3) in pinentry HOT 1
- "Wrong password, please reenter" after device reconnection HOT 22
- "Unexpected response: OK" if empty password is entred via pinentry HOT 1
- Add log messages to nitrocli HOT 12
- Add option to otp-cache to create custom aliases HOT 4
- pinentry-tty does not work HOT 13
- Change tests to not create python scripts during builds HOT 2
- Migrate to clap 3.0.0 HOT 2
- Move CI checks to Makefile HOT 4
- nitrocli (for NK2 Pro) not responsive while NK3 plugged in HOT 4
- Document extensions in readme HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from nitrocli.