PIN Too long?!?

[securedualboot]

So when setting up the Admin PIN and the PIN there is not real sign or doc on limits:
Are there strict limits? It seems when setting them not really but when trying to use them I’ll get this “PIN too long” error for one or both PIN and Admin PIN. Have tried several different PINs ever sticking with the 6 or 8 char limit on the default PINs. Think the Admin PIN is the one giving me an error in HEADS with trying anything.

Please help. Thanks ever so much.

[kieran]

Seems to be some missing documentation.

The following has some details.

Librem Key: Password too Long, Card not available

That makes sense. There’s an upper limit on the length of the admin PIN. Here is the explanation from Nitrokey’s FAQ: Nitrokey uses PINs instead of passwords. The main difference is that the hardware limits the amount of tries to three while a limit doesn’t exist for passwords. Because of this, a short PIN is still secure and there is not need to choose a long and complex PIN. Nitrokey Pro’s and Storage’s PINs can be up to 20 digits long and can consist of numbers, characters and special char…

The following topics in general discuss problems with PINs.

Librem Key: Password too Long, Card not available

I just bought a 15v4 with Librem Key, and ran into some issues with key setup. Hopefully this thread will help you avoid my same issues. FIRST PROBLEM user@user:~$ gpg --card-status gpg: selecting openpgpg failed: No such device gpg: OpenPGP card not available: No such device gpg --card-status and gpg --card-edit require you to run as ROOT. Apparently the first batch of US manufactured Librem Keys USB IDs haven’t yet been added to upstream, which causes this error. user@use…

PureBoot PIN Problems with Librem Key, Heads

Hi, The documentation about the user PIN and master PIN for the Librem Key / Nitrokey is missing a lot of important details. I had to spend several hours of debugging to get PureBoot working and most users would probably not make it. gpg allows me to set a long PIN (maybe 64 was the max size given by the Librem Key), but Heads will fail completely to accept a PIN of size > 20 characters. Also you need to warn that there is a maximum number of tries of 3 attempts before the Librem Key will get…

[securedualboot]

So after much testing those are not the same problem that i am having. That is usually showing a 20 char or less limit for use within Heads.
My issue is that even with an 8 char PIN for admin when trying to set TOTP or HOTP that the PIN entry seem to always be too long.
While the librem key seem to possibly great there is a lot of knowledge that is lacking in availability.

[kieran]

Best to contact support via email then.