# Nitrokey

## Introduction

This plugin is used to get the correct version number on Nitrokey storage
devices. These devices have updatable firmware but so far no updates are
available from the vendor.

The device is switched to a DFU bootloader only when the secret firmware pin
is entered into the nitrokey-app tool. This cannot be automated.

## GUID Generation

These devices use the standard USB DeviceInstanceId values, e.g.

* `USB\VID_20A0&PID_4109&REV_0001`
* `USB\VID_20A0&PID_4109`
* `USB\VID_20A0`

## Update Behavior

The device usually presents in runtime mode, but on detach re-enumerates with a
different USB VID and PID in DFU mode. The device is then handled by the `dfu`
plugin.

On DFU attach the device again re-enumerates back to the runtime mode.

For this reason the `REPLUG_MATCH_GUID` internal device flag is used so that
the bootloader and runtime modes are treated as the same device.

## Vendor ID Security

The vendor ID is set from the USB vendor, in this instance set to `USB:0x20A0`
in runtime mode and `USB:0x03EB` in bootloader mode.

## External Interface Access

This plugin requires read/write access to `/dev/bus/usb`.