v0.15: Support HW5

Support HW5.
Maintenance release. No need for an update for other hardwares.
No changes except refactoring since HW5 RC1.

$ gpg --verify nitrokey-pro-firmware-v0.15.tar.gz.sig-lennard nitrokey-pro-firmware-v0.15.tar.gz
gpg: Signature made Wed 25 May 2022 04:24:52 PM CEST
gpg:                using RSA key 1A1A32875348A792ADA7BD6D878F36EEEA6A8D00
gpg: Good signature from "lennard boediger <[email protected]>" [unknown]
gpg: WARNING: This key is not certified with a trusted signature!
gpg:          There is no indication that the signature belongs to the owner.
Primary key fingerprint: 1A1A 3287 5348 A792 ADA7  BD6D 878F 36EE EA6A 8D00
$ gpg --verify nitrokey-pro-firmware-v0.15.tar.gz.sig-szczepan nitrokey-pro-firmware-v0.15.tar.gz
gpg: Signature made Tue 23 May 2023 10:24:08 AM CEST
gpg:                using RSA key 868184069239FF65DE0BCD7DD9BAE35991DE5B22
gpg: Good signature from "Szczepan Zalega <[email protected]>" [ultimate]
gpg:                 aka "Szczepan Zalega (Nitrokey) <[email protected]>" [ultimate]

Edit 23.05.2023: Added second signature (using 868184069239FF65DE0BCD7DD9BAE35991DE5B22), and uploaded original signature's key (1A1A32875348A792ADA7BD6D878F36EEEA6A8D00) to keyserver.
Note: Github for some reason renames nitrokey-pro-firmware-v0.15.tar.gz.sig-lennard to nitrokey-pro-firmware-v0.15.tar.gz.sig-lennard.sig after upload.

v0.15 RC: Support HW5

Support HW5. No need for an update for other hardwares.
Tests attached.

v0.14: stack protection, local HWRNG access and more

Update is recommended.

Tasks worked on in this release:

• Activate stack protection #86
• Correct HWRNG access
• Swap LED colors for HW4 #88
• Firmware update password handling correction

Update guide (draft):

• https://github.com/Nitrokey/nitrokey-pro-firmware/blob/master/DEVELOPMENT.md#firmware-update

Automatic update with pynitrokey is planned to be added in the future.

This release was tested on:

OS	GnuPG
Windows 10 Pro 21H1	2.2.28
macOS Big Sur 11.2.3 (20D91)	2.3.2
Linux 20.04.3LTS	2.2.19

Full Changelog: v0.13...v0.14

Known issues found during the RC tests of this release:

• #89
• #90

Archive is signed with GnuPG. Verification:

$ gpg2 --verify nitrokey-pro-firmware-v0.14.tar.gz.sig
gpg: assuming signed data in 'nitrokey-pro-firmware-v0.14.tar.gz'
gpg: Signature made Mon 25 Oct 2021 12:55:41 PM CEST
gpg:                using RSA key 868184069239FF65DE0BCD7DD9BAE35991DE5B22
gpg: Good signature from "Szczepan Zalega <[email protected]>" [ultimate]
gpg:                 aka "Szczepan Zalega (Nitrokey) <[email protected]>" [ultimate]

v0.14 RC4: swap LEDs

RC. Test release for evaluating changes regarding the stack protection, firmware update password and RNG error handling.
LEDs are swapped for HW4.

v0.14 RC3: activate stack protection, error handling

RC. Test release for evaluating changes regarding the stack protection, firmware update password and RNG error handling.

v0.14 RC: activate stack protection, error handling

Test release for evaluating changes regarding the stack protection and RNG error handling

v0.14 RC: activate stack protection

Test release for evaluating stack protection

HSM: support new hardware platform

Single firmware for the all hardware: revisions HW1-4.
Maintenance release - no need to update.
Details about build environment, as well as hash sums and signature, are inside the archive.

Tested against SCSH 3.15.359 test suite using v3.4 smart card.

v0.13 Multi-hardware firmware

Single firmware for the all hardware: revisions HW1-4.
Maintenance release - no need to update.

Details about build environment, as well as hash sums and signature, are inside the archive.
Update through bootloader tested and confirmed to be working.
Tested with libnitrokey and GNUK test suite (for smart card communication test) on both HW3 and HW4 hardware revisions, using both OPC2 and OPC3.

2021.06.23: Correct archive to contain update binary in the proper format (previous archive suffixed with the original word).

HSM-3 RC2

Nitrokey HSM supporting HW4 (BGA) - test firmware, production ready.
Tested on both hardwares.
Waiting with the final release until repository cleanup - before that marking as pre-release.