qlrd

qlrd's avatar
qlrd
npub1kygl...ph68
A beign-there and Krux contributor
Thanks for @OpenSats #krux team and all users that that somehow contributed and/or motivated me. You were the reason why this exists (actually the first version I made for my wife, but she never, fortunately, needed to use it lol).
#krux v24.11.1 This release includes a fix for a recently discovered issue #477 in our encryption system. Due to an implementation error, the camera-captured entropy was not being used as intended in our AES-CBC encryption mode. This means that the additional layer of security provided by the camera's randomness was not effectively applied. ## What Does This Mean for You? *Who is Affected*: Users who have changed their settings to use AES-CBC encryption instead of the default AES-ECB for encrypted backups on flash storage, SD cards, or encrypted QR codes. *Impact*: The encryption strength for these backups may not be as robust as intended. ## Recommended Action: If you have used AES-CBC encryption for your backups, we recommend the following steps: Update Your Device: Please install the latest software update where this issue has been resolved. Replace Your Backups: After updating, recreate your encrypted backups on flash storage, SD cards, or QR codes to ensure they are secured with the corrected encryption implementation. Thanks @earthdiver for the finding! Always test your encrypted backups and keys after creation and have a redundant physical backup of your keys.
#krux v24.11.0 released! - Tamper Check Flash Hash and Tamper Check Code (Experimental) - Flash Map - Japanese Translation - BIP85: Allow Export Base64 Passwords - Vulnerability Fix: Block Import of Python Modules from SD Card - Add Compatibility to Partial Text Mnemonic QR Codes - Multi-keypad Position Indicator - WonderMV Simulator - Krux Ethos - Minor Bugfixes and Refactor Special thanks to: @jdlcdl for consistent contributions as code, insights and reviews of all new features and improvements. @tadeubas for the contributions, insights, reviews, and the discovery on frozen modules import from SD cards behavior, crucial TC Flash Hash solution to work. @qlrd for constant improvements on Krux-Installer, which can now aid on air-gapped firmware updates. @3rdIteration for the precious insights on TC Flash Hash possible vulnerabilities. @BitCoisas for the Japanese translation. @kkdao for spreading the word about Krux around the world. Krux community for the great ideas, tests and feedback.
#krux installer v0.0.20 released. Many thanks to @Jean Do and @Bitcoisas | Hiro for allow its japanese translation. **Major update** Now user can, after download and verify an official firmware, select between: * to flash; * or make an airgapped update: * user will be requested to insert a SDCard on computer; * user can select among recognized removable drives; * both firmware.bin and firmware.bin.sig will be copied to sdcard; * after the copy, user will be requested to eject sdcard and insert it on device; * at same time, the firmware.bin's computed hash will appear to compare with the computed hash on device; **Minor updates** * added support to de_DE locale; * added support to ja_JP locale; * fixes on Windows bug that didn't allow users to select a custom asset folder; Many thanks to: * All selfcustody team * @OpenSats for the support * @npub13s0k...5g70 for for all incredible people.