libnitrokey error handling

This page is intended to evaluate the error messages returned by the libnitrokey commands used in the nitrocli commands. Commands that are checked in the list have been evaluated.

• status

• lock

• config

  • get
  • set

• storage

  • If no AES key is present, a distinct error code should be returned (analog issue for Pro).
  • open
  • close
  • status

• otp

  • get
  • $ nitrocli otp get 12
    > Could not generate OTP: The given OTP slot is not programmed

  • $ nitrocli otp get 255
    > Could not generate OTP: The given slot is invalid

  • -a/--algorithm is under our control
  • no libnitrokey errors triggerable through -a totp -t
  • set
  • status
  • clear

• pin

  • clear
  • set
  • unblock

• pws

  • If the AES key cannot be decrypted, the device should return an AES decryption error instead of an unkown error (Storage only, issue).
  • If no AES key is present, a distinct error code should be returned (issue).
  • get
  • set
  • status
  • clear