Normie noobie guide?

[iuvi7]

Hello!

May i wonder if there any webflasher that can be used for Normie noobie such me to flash firmware Pico Fido + Pico OpenPGP ?

Just got RP2350 today but lost on steps of compiling\flashing

If not, or so, could someone help me do it step by step so i can write down markdown guide wich can be published for newee users (and additionally translate it to other language) 🪛

Thanks

[jetcookies]

You can refer to the official Raspberry Pi documentation for instructions on flashing and resetting the device. We also provide pre-compiled firmware in the librekeys/pico-fido-firmwares repository. Once you have successfully flashed the firmware, you can configure it using picoforge.

---

[EDIT]
Simply put, this basically involves holding down the BOOTSEL button while powering on your device, after which you’ll see a connected storage device. You can then select and download the firmware appropriate for your device, copy it to that storage device, and wait a short while for the flashing process to complete automatically. Next, use PicoForge to configure your device (PID/VID, button timeout, etc.). If all goes well, you should end up with a working Picokey.

[iuvi7]

@jetcookies Thanks! Wich should i use for RP2350 ? If i'm not wrong correct the last one in list? pico2 without "-eddsa"

P.S. What "-eddsa" version is about?

[lockedmutex]

@jetcookies Thanks! Wich should i use for RP2350 ? If i'm not wrong correct the last one in list? pico2 without "-eddsa"

P.S. What "-eddsa" version is about?

EDDSA version has support for elliptic curve based cryptography. Like for use in SSH.

[iuvi7]

@lockedmutex Ok, now i see

EDDSA version means work only with elliptic curves or this goes as additional to main functionality?

If i want to try both versions can i flash RP2350 with one of them and later re-flash it with another? Or it's better buy second RP2350?

Heard i need to NUKE it somehow :D

[lockedmutex]

It is additional, all base features plus eddsa support.

[iuvi7]

Flashed successfully

Try to create Database in KeepassXC with additional hardware protection , sadly not works "No hardware keys detected" (tryed with default settings and also changing to УВikey)

It says one of slot's should be programmed somehow to a "call-responce HMAC-SHA1" (If i get it right such functionality allow to enter pre-set line of symbols\password by pushing a button key) but seems in picoforge no such option it seems (good for proposal? p.s. created issue)

Anyhow, thanks for your help 🙏

[jetcookies]

@iuvi7

It says one of slot's should be programmed somehow to a "call-responce HMAC-SHA1" (If i get it right such functionality allow to enter pre-set line of symbols\password by pushing a button key) but seems in picoforge no such option it seems

If you have successfully set the pidvid to Yubico YubiKey，I believe yubioath-flutter can handle the HMAC-SHA1 configuration you need.

[iuvi7]

Thank you guys! Now i get how it works and will be back when i write an small guide for new'ees like me ;)

[iuvi7]

One more thing pls, as i get it right, function that protect RP2350 still under development (disabled in picoforge)

So potentially if i loose one - it can be cracked, right?

[lockedmutex]

@iuvi7 If you are going to contribute to documentation then this is the place to do it:

https://github.com/librekeys/librekeys.github.io

@iuvi7 and yes if you loose one, anyone can debug and get the data on the flash. Using secure lock would be better.

[iuvi7]

Okay, thank you! Hope Secure boot will be available soon to set it up in picoforge

[EchedelleLR]

In case someone owns an ESP32-S2 and wants to upgrade the firmware (I am already using the key for some services). Is there a way to flash it without losing the internal data?