SmartcardEncryptedKeyFile v0.3.0

Installation

Copy the attached plgx file into the KeePass installation folder or any subfolder thereof.

Requirements

• KeePass 2.57.1
• .Net Framework 4.8
• Windows

Release Notes

v0.3.0

• Set owner and description of native windows PIN prompt without hacks & workarounds
  • Now using Windows API (Ncrypt) directly to decrypt Encrypted Key File (before: .Net Framework classes with limited options)
• Indicate to KeePass, that Secure Desktop is only supported on Win 10
  • KeePass shows a warning when using the plugin with secure desktop enabled and does not attempt to invoke the plugin. Before one would have been locked-in (more or less) at the secure desktop when secure desktop is enabled when the EKF plugin asks for PIN input.

Known Issues

• Secure Desktop support only for Win10

v0.2.1

• Write exported key files in KeyX v2 format (before: v1 format)
• Import key files like KeePass reads them (before: always read as binary)
  • After activating Enrypted Key File for a database, previously used key files of all kinds now remain valid and can be used as independent alternative to the Encrypted Key File when needed (before: only binary key files)

Known Issues

• Enter master key on secure desktop compatiblity broken for current windows builds (at least Win 11 24H2). Please disable this KeePass option to use this plugin. You'll be locked-in (more or less) at the secure desktop when secure desktop is enabled and the EKF plugin needs to ask for a smartcard PIN. Use task manager to kill keepass if this happens.
• Native smartcard PIN prompt is not owned & centered properly on Win11 (at least Win 11 24H2, Win 10 works well)

v0.2.0

• Fix Window Defender false positives on some systems
• Show Smartcard Operation Dialog (Abort option) for more smartcard operations
• Require KeePass v2.57.1

Known Issues

• Enter master key on secure desktop compatiblity broken for current windows builds (at least Win 11 24H2). Please disable this KeePass option to use this plugin.
• Imported key files that are not binary (e.g. KeyX format, Hex) can't be used after the key provider has been activated for a database. A different key will be used internally. This does not happen when using binary keyfiles (i.e. files with 32byte length).
• Native smartcard PIN prompt is not owned & centered properly on Win11 (at least Win 11 24H2, Win 10 works well)

v0.1.1

• Fix exception occuring when computer has not been restarted for more than 24days

v0.1.0

• Initial Release