Import and export of OTP secrets (CSV or PSKC)

[jans23]

In order to allow better integration with 3rd party software such as PrivacyIdea and KeyIdentity the import and export of OTP secrets in an appropriate format is desired. Common formats are CSV and PSKC.

Do you see nitrocli as the right tool to support such?

Obviously export is only possible during generation of the secret (in the software) and it doesn't mean to export a secret already configured in the Nitrokey.

[d-e-s-o]

That's an interesting question and a good proposal. I like the idea of nitrocli supporting such an export, but it appears to me that such functionality should reside inside an "extension" (discussions around which are happening in issue https://github.com/d-e-s-o/nitrocli/issues/50). There are three reasons: we likely need additional dependencies to write those formats (which are not used in any other parts of the program), the list of supported formats may grow over time, and such an export seems to be rare enough a feature to not be required by the majority of users.

However, right now I can't really see how this functionality (as I understand it from your description) can be implemented sanely in such an extension, short of basically duplicating the entire otp set subcommand. Perhaps we should think about an extension design that can accommodate this case or see how it could fit in nicely.