Software Releases

v1.26.10

This release adds support for the new features in NetHSM v4 (clustering, IPv6 config, backup format v1). Clustering support is still experimental.

• PIV: Add support for RSA 2048 private key import by @sosthene-nitrokey in #721
• Enable support for python 3.14 by @sosthene-nitrokey in #738
• Add support for NetHSM v4 and release v0.12.0 by @robin-nitrokey in #746

Full Changelog: v0.11.4...v0.12.0

• Add support for backup format v1.
• Add support for clustering (requires NetHSM v4):
  • Add ClusterMember, InitialClusterMember and ClusterJoinData classes
  • Add add_cluster_member, list_cluster_members, set_cluster_member_urls, remove_cluster_member, join_cluster, get_cluster_ca_certificate, set_cluster_ca_certificate functions to NetHSM
• Add support for IPv6 configuration (requires NetHSM v4):
  • Add Ipv6Config class
  • NetworkConfig: Add optional ipv6 field
  • NetHSM.set_network_config: Add optional ipv6 argument

• Improve backup parsing speed
• Use poetry as build backend

All Changes

• Add IPv6 support
• Improve networking with internal router
• Add support for clustering (technical preview)
• Fix frequent DA lock issues
• Fix syslog feedback loop

v1.26.8

• Remove OpenSymbol font by @robin-nitrokey in #412
• Fix typo in user visible string by @iluminat23 in #413
• Update documentation by @mmerklinger in #306
• Use CCID when needed to connect to the nitrokey 3 by @sosthene-nitrokey in #398

• @iluminat23 made their first contribution in #413

Full Changelog: v2.5.2...v2.6.0

v1.26.7

v0.11.4

Release v1.26.6

This release adds support for using arbitrary key IDs with the PKCS11 module.

• Add signing for Windows binary.
• Encode PKCS11 IDs that are not valid NetHSM IDs (#294, requires NetHSM v3.0 or later). These key IDs are represented on the NetHSM using the prefix 0--- and the hex-encoded PKCS11 ID. Previously, using such key IDs caused an error.
• Add Windows version information for builds in the GitHub pipeline.

• Updated CI pipeline to test with Fedora 42, 43, and Debian 13.
• Add default derive for ObjectKind enum.
• Update bytes, time, cryptoki-sys, and ureq dependencies.

Full Changelog

• Add Windows version information for builds in the GitHub pipeline.

Full Changelog

• Enable communication with Nitrokey 3 and Nitrokey Passkeys over CCID instead of CTAPHID
  • nitrokey.trussed.list: add optional use_ccid argument
  • nitrokey.list: add should_default_ccid function, that indicates when CCID should be prefered. CCID is more limited than CTAPHID, so this functions only returns True on Windows when not an administrator, as CTAPHID is not available in this case.
  • nitrokey.trussed.TrussedDevice.path: change type to Optional[str]
• Remove support for fido2 v1.
• nitrokey.trussed.TrussedBase: Fix type annotations for __exit__ arguments so that all derived classes implement the contextlib.AbstractContextManager protocol.

All Changes