Seen on the first Arch field test: pcscd up, but polkit denied the
user, and the CLI only printed the raw 0x8010006A.
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Only click and cryptography are needed, both packaged by Arch, so a
plain ./boltcard-writer works when uv cannot be installed (Omarchy's
pinned mirror 404'd on the uv package during the first field test).
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
nix run / nix build produce a wrapped CLI that pins libpcsclite by store
path, the package build runs the test suite (so nix flake check is CI),
programs.boltcard-writer.enable installs it and turns on pcscd, and
nix develop / nix-shell give the uv workflow used on Arch.
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
The vector tests replay the application note's worked examples
(auth key 0/3, IV, ChangeKey 0/2, WriteData) byte-for-byte. The
simulator implements the card side of secure messaging so the
provision and wipe flows run end to end without hardware.
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Provision, inspect and wipe NTAG 424 DNA Bolt Cards from a Linux PC
using an LNbits /boltcards/api/v1/auth link, replacing the phone app
for desks with a USB reader (ACR1252U).
- pcsc.py: ctypes client for libpcsclite (no compiled deps)
- ntag424.py: EV2 secure messaging (AuthenticateEV2First, ChangeKey,
ChangeFileSettings, GetCardUID, WriteData) per NT4H2421Gx / AN12196
- boltcard.py: the same write/wipe sequence as bolt-card-programmer
(NDEF URL, SDM 40 00E0 C1 FF12, keys 1-4 then 0, key version 1)
plus local p/c verification identical to the extension's nxp424.py
- cli.py: readers / read / write / wipe, keys backed up before any
card mutation, uid cross-check on wipe
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
