hotp-verification: adapt to nk3 v1.6 security model

* overwriting a hotp secret is not possible anymore
* make sure to delete the hotp secret before setting a new one
* requires one additional user presence check during HOTP setup
* bump to v1.5

Signed-off-by: Markus Meissner <coder@safemailbox.de>
This commit is contained in:
Markus Meissner 2023-12-20 11:58:09 +01:00
parent a1c13ff132
commit 5e43bcd2f4
No known key found for this signature in database
GPG Key ID: 44CB2D868DD16BDA

View File

@ -2,12 +2,12 @@ modules-$(CONFIG_HOTPKEY) += hotp-verification
hotp-verification_depends := libusb $(musl_dep)
# v1.4
hotp-verification_version := b69bb20119d3cea5ec5c13d11b213dd80dfd8334
# v1.5
hotp-verification_version := 70c04f51387eee8f777e943ba83b6405764a3cd2
hotp-verification_dir := hotp-verification-$(hotp-verification_version)
hotp-verification_tar := nitrokey-hotp-verification-$(hotp-verification_version).tar.gz
hotp-verification_url := https://github.com/Nitrokey/nitrokey-hotp-verification/archive/$(hotp-verification_version).tar.gz
hotp-verification_hash := ee6bcb7fc48bd5e7c290b2b344ce50713f4199425b1a6b324d0b27c80257241d
hotp-verification_hash := 5244b6b514117f955a03be2363fd51567a125cb8dc904d1bd89351be27eb8bb3
hotp-verification_target := \
$(MAKE_JOBS) \