Pico OpenPGP version 4.0 is a major release that introduces PicoKey App support, adds compatibility with the new RP2354 MCU, and significantly improves security, platform compatibility, and overall robustness.
Highlights
- Full PicoKey App integration, enabling improved device detection and management
- RP2354 support, with automated builds for RP2350 platforms
- Major OTP-based security improvements, including new key derivation functions and PVC attack mitigations
- Support for EdDSA / Ed448
- Improved compatibility across non-Pico boards, ESP32, and host platforms
- Extensive bug fixes and internal cleanups
This release also upgrades core libraries (mbedTLS 3.6.5, Pico SDK 2.2, TinyCBOR 0.6.1), improves USB descriptor correctness, removes legacy USB workarounds, and introduces a dual licensing model (AGPLv3 + Enterprise/Commercial).