Feature requests for encryption and anti-tampering

[markus-nitrokey]

Hi,

@085

Could Nitrokey consider potting future Nitrokey models in resin to increase durability and protect against tampering?

This is already being worked on, but I can’t share an ETA yet.

@085

Security keys like OnlyKey encrypt the entire external storage, forcing you to use a PIN for things like FIDO2 operations. This prevents users from needing to just rely on the secure element. If Nitrokey does not already do this, could this be considered?

Following applies to the Nitrokey 3. The data on the external storage is encrypted. The secure element is used if the app is configured to use it. A list of the apps that support the secure element can be found in the documentation.

@085

It seems that there will be a future Nitrokey using the open source Tropic chip. When could this be expected?

This is in a very early stage and only exists as a proof of concept. At this point I can’t confirm this as a planned product.

@085

Also, devices like the Trezor Safe 7 have multiple Secure Enclaves to increase security even more, could Nitrokey consider doing this too?

I don’t really see the need for it at this point, but we will of course reevaluate this in the future.