From 89fdaed31ecd8af7e89c6a5180ca3362b01fd8d4 Mon Sep 17 00:00:00 2001
From: matejcik <ja@matejcik.cz>
Date: Fri, 12 Apr 2024 14:21:53 +0200
Subject: [PATCH] chore(core): add unsigned vendor headers with production keys

---
 .../vendorheader/T3T1/vendor_prodtest.json    |  20 ++++++++++++++++++
 .../vendorheader/T3T1/vendor_prodtest.toif    |   1 +
 .../vendorheader/T3T1/vendor_trezor.json      |  20 ++++++++++++++++++
 .../vendorheader/T3T1/vendor_trezor.toif      | Bin 0 -> 635 bytes
 .../T3T1/vendor_trezor_btconly.json           |  20 ++++++++++++++++++
 .../T3T1/vendor_trezor_btconly.toif           |   1 +
 .../T3T1/vendorheader_prodtest_unsigned.bin   | Bin 0 -> 1024 bytes
 .../vendorheader_trezor_btconly_unsigned.bin  | Bin 0 -> 1024 bytes
 .../T3T1/vendorheader_trezor_unsigned.bin     | Bin 0 -> 1024 bytes
 9 files changed, 62 insertions(+)
 create mode 100644 core/embed/vendorheader/T3T1/vendor_prodtest.json
 create mode 120000 core/embed/vendorheader/T3T1/vendor_prodtest.toif
 create mode 100644 core/embed/vendorheader/T3T1/vendor_trezor.json
 create mode 100644 core/embed/vendorheader/T3T1/vendor_trezor.toif
 create mode 100644 core/embed/vendorheader/T3T1/vendor_trezor_btconly.json
 create mode 120000 core/embed/vendorheader/T3T1/vendor_trezor_btconly.toif
 create mode 100644 core/embed/vendorheader/T3T1/vendorheader_prodtest_unsigned.bin
 create mode 100644 core/embed/vendorheader/T3T1/vendorheader_trezor_btconly_unsigned.bin
 create mode 100644 core/embed/vendorheader/T3T1/vendorheader_trezor_unsigned.bin

diff --git a/core/embed/vendorheader/T3T1/vendor_prodtest.json b/core/embed/vendorheader/T3T1/vendor_prodtest.json
new file mode 100644
index 000000000..902d02da1
--- /dev/null
+++ b/core/embed/vendorheader/T3T1/vendor_prodtest.json
@@ -0,0 +1,20 @@
+{
+    "header_len": 1024,
+    "text": "UNSAFE, FACTORY TEST ONLY",
+    "hw_model": "T3T1",
+    "expiry": 0,
+    "version": [0, 0],
+    "sig_m": 2,
+    "trust": {
+        "allow_run_with_secret": true,
+        "show_vendor_string": false,
+        "require_user_click": false,
+        "red_background": false,
+        "delay": 0
+    },
+    "pubkeys": [
+        "6ba03ad7bee679ae076c6e6e494592836b1a75acde87dc545e74587db3c07257",
+        "9a9cbaf7b859bb4ff98838611039d62d5a7e8e5dd3ab524828e9e1c7fe08b810",
+        "de1f7bf0d13d90f7a2576f1c9f6ec06f2fcfac138ed19eb4ad2fc69f52da513f"
+    ]
+}
diff --git a/core/embed/vendorheader/T3T1/vendor_prodtest.toif b/core/embed/vendorheader/T3T1/vendor_prodtest.toif
new file mode 120000
index 000000000..22ac5e840
--- /dev/null
+++ b/core/embed/vendorheader/T3T1/vendor_prodtest.toif
@@ -0,0 +1 @@
+vendor_unsafe.toif
\ No newline at end of file
diff --git a/core/embed/vendorheader/T3T1/vendor_trezor.json b/core/embed/vendorheader/T3T1/vendor_trezor.json
new file mode 100644
index 000000000..72d6398f9
--- /dev/null
+++ b/core/embed/vendorheader/T3T1/vendor_trezor.json
@@ -0,0 +1,20 @@
+{
+    "header_len": 1024,
+    "text": "Trezor",
+    "hw_model": "T3T1",
+    "expiry": 0,
+    "version": [0, 0],
+    "sig_m": 2,
+    "trust": {
+        "allow_run_with_secret": true,
+        "show_vendor_string": false,
+        "require_user_click": false,
+        "red_background": false,
+        "delay": 0
+    },
+    "pubkeys": [
+        "b04f490da2ea3b7ec9719d3e765ef7342b4d21bcaf8cb7f1ba2f3e1639418719",
+        "799219b494e3d953a8ca0ebcb3373412c07c9f777553ad13dd831dcdf89d10ac",
+        "41ebd59b8744c0dd0689d8b51e4a9d5927dd6db3a1091f0c6c587a10171f3530"
+    ]
+}
diff --git a/core/embed/vendorheader/T3T1/vendor_trezor.toif b/core/embed/vendorheader/T3T1/vendor_trezor.toif
new file mode 100644
index 0000000000000000000000000000000000000000..c940ab1e1531de8fc977f71b337b75b2c99834ae
GIT binary patch
literal 635
zcmWIX_jIdZs9?xvVqkcCY2(Dj1`@0ZOsp(iA_5ixi-a;7h3+(Y1+eotJ1lTmtf;V~
zM=0Z<>V+n+9beiKZQ}0hu}NR^__0^~wYdELMI4R-ERJ^SE*Vp|`2K(XzSe*GlB=tH
z`jyYl47)$~|Mr(#m6ZOhm9kd<8<l+6l)w7vJIS{ZYn`r4d-+Fto>sXfx3~Ax)z<{J
zueloaHXy8KlGzm5{N=okK2N9JS{U+cwQAGuwR`UfK3r{{x&0d7+TH$@r>`HI*?&(p
z|K<&&vp2uGoO`5``TTsL_`R~7mtU#<l~Rf@R9|;)U*+p}7r&d?3ikU6U;NU4?)u#L
zD5Yx|(>v<xq^n(5m)@$}7`AZFGmB^|)pJgj7w`DiF5h_jkNLZrPk!%H_j`Ug#I3&v
zO6=ZW{;T?%CX5S~kZ$|#QI4brp&E_#+cGY>^Tw}zb5z%^zqj_RWio4d|NGmwt!EW)
z`!>(WwCrT8T}8WE?wq|<?sKl*y;NQE5$MNPe`bf>-{U-c-l?UVSJs?+wYYqyWqMTM
z_ft9YdlyG)D=k~I-tX&m>sh^LZ<<x}9<;u8qwu_o#O}JNFRvGFdU<`e|MacKJCcw7
z&Hi|M&$3eY)GyBhBFleAJl46TS@<pP^UF>1ze*`h`X+mA$=&<E<c!OYJ=6K5<05hT
z?zgD5e>UGcb9Lv-?YFhH7cm6Qz5aft_5AO@Y(w_#d%kP+xxfa^%a@;4X3unER6o}f
zn`Ik&Xj`1K%cXOXy}g@XILtIFKHfFQm7Pa$O~$Y4w}ET72UyPP-+g`lnUK0JQBXRW
GP!9mkEKx83

literal 0
HcmV?d00001

diff --git a/core/embed/vendorheader/T3T1/vendor_trezor_btconly.json b/core/embed/vendorheader/T3T1/vendor_trezor_btconly.json
new file mode 100644
index 000000000..4b610ea9f
--- /dev/null
+++ b/core/embed/vendorheader/T3T1/vendor_trezor_btconly.json
@@ -0,0 +1,20 @@
+{
+    "header_len": 1024,
+    "text": "Trezor Bitcoin-only",
+    "hw_model": "T3T1",
+    "expiry": 0,
+    "version": [0, 0],
+    "sig_m": 2,
+    "trust": {
+        "allow_run_with_secret": true,
+        "show_vendor_string": false,
+        "require_user_click": false,
+        "red_background": false,
+        "delay": 0
+    },
+    "pubkeys": [
+        "38d9a87fd9f131367542c9f727308d4ffed4d035a087ae8afc5f1525ec49593b",
+        "d90a422bfcc31e5ca199dfb8aa2f0580b71b361956efd69e4a1554c75af495dc",
+        "ab822cacb5003da6c5ea71858feaa19000e2024f02bd237fdee732dee01c9bde"
+    ]
+}
diff --git a/core/embed/vendorheader/T3T1/vendor_trezor_btconly.toif b/core/embed/vendorheader/T3T1/vendor_trezor_btconly.toif
new file mode 120000
index 000000000..c74d91110
--- /dev/null
+++ b/core/embed/vendorheader/T3T1/vendor_trezor_btconly.toif
@@ -0,0 +1 @@
+vendor_trezor.toif
\ No newline at end of file
diff --git a/core/embed/vendorheader/T3T1/vendorheader_prodtest_unsigned.bin b/core/embed/vendorheader/T3T1/vendorheader_prodtest_unsigned.bin
new file mode 100644
index 0000000000000000000000000000000000000000..557b001f137a9ba08ef19fb107bde16361d5485c
GIT binary patch
literal 1024
zcmWFuiV9<3VSoZA=6c2u;}Am_pMfEJfz|bW&nnlk=j7#ix=w1&mMUFyul-I)TuDUj
z<^x6Hv*zsjz9VwC|IZGKL;=fdx>0p~v6oi|d1$<Rc>Ev74uN~})gLa}PWZkkJYQyh
z-hq7m^J|3rF3#JsR{z-ipj(0VlA(UVj&80x3T}?hA^t&;3L&n+AqxI}K9LLzA^x6j
z6$}*&+{_FNZznnCJu%>6`K%!O_urmu#)BuE48%O$a{E2DrCjp<kaaP3&A%U?Cr*X|
z;UurS-|D<-wO&6LpSRpFexqG)Wy@E~GeWn199ilW@!vNjNj5hmDRc7T?NR>K0``kf
z-~M+w_Vt0Au}PB0L~h)=xxKJM@L=e_XO?-(3#YHo&Aj(xoAvXl{=1WR3T`Yvy!2J@
zWAC48*KYS_+(<HCl;~oecl{nef9$lI8_k~N?f$eRkmqyJF@rPSk_QdUm3Ph6PnzO?
z|6q{d#`k)+YbwlocCXo9op)o~<@I+zYgcW3{k<<ND)zmX>`%6j_iktQHs}7I7tyvc
z_GEYYz8cAC_xIN;{{3fnc&XRs1>*DLukRE1XxsMG^8)wT-ggFTPA+`-HE~CXFPE(T
zzBf@xv8PM+e3!l!7jt@bws8KI`s<&vewVC|m408__O<@lp5*-ZMmazAtE}@lW3$aR
zt_?SfyPX|3{dj(k@19!*?><$;X|G=!E3<pj{)g2!_4i#`_ciGo?`9t3e<{ynQzb5*
z`k(wfRkgA_)URJ+&kcj^m)FcTs(3DaO#JDc-mUJJxBa{wxyRW0?B>&t=cexnd6p*k
zUgvN}*lfYv%j$CyXVki?>2I$r&bx8HfA`r-w*TzR^l!88*UyPtCb%!wPXDs!{><BJ
zU&d{ZdVgK7qr<X%^YY(w`wQ*;g6^cc?P~rZanCM$dHT({#@DvoSQmcF_)*~Dp1L)1
zIT<>i|L9Gx>S^~ozwLMN{}qih+n(Qg8~m}u^yI|YwCUIL_wQ5BIvT@#=I^I3tKZj`
z*Z+E7c|HE%ZRvft;$CGdrA-sv^Vfdc-#atjSj~F9c%PxPN_NKi(`Pq5;@?+MZ=JS#
zs?nMUx%HW6dP|R$&Ay-eTz!_c(Y@>IAAjB^SGewR;S%1rmC2IRp1prBd~$<L?aCKU
zh8==$f4{NK=Sgz;z3yy!+g{__Mvu22|Gn+t^({WnD|N4TnI&&w|0tZ{zUz-n5@&8n
x(#+fWk8=OlXY_ZvuSxGsznNqvW!(K$z4Y-nb6xT2Ch9QoJm()1B6CuK1puy0<$C}C

literal 0
HcmV?d00001

diff --git a/core/embed/vendorheader/T3T1/vendorheader_trezor_btconly_unsigned.bin b/core/embed/vendorheader/T3T1/vendorheader_trezor_btconly_unsigned.bin
new file mode 100644
index 0000000000000000000000000000000000000000..4112ea74f376027b29c36c5b1d43f6fe22ec6cb4
GIT binary patch
literal 1024
zcmWFuiV9<3VSoZA=6c2u;}Am_pMk;R=8F289}Ue)olbsNH|X{McjbcVg7$S?f8s?|
z-*`q^-{f-A{&QF^X5q~HJ67qlHf)zRlMH)*ZJw8C$nmHzQ}3*9(pj^W!FJivSB0(p
zuNF>Vc*Nw-v{$+Q-gBdS4`gQF6Amd#t;#P_aLO!6&d<!#&CkoJ4Dt7Lt6->L$Y)|;
zczbE%#Ki^@tO-o4EL<W276FTdG8%>MG<gNE^Ef*!a9FIUu%kyP<Dlw=Ca)b|+7fNz
z?(4BhU-S5}SNyfO{QgB8jsh%>cIqw}Q@8m3fBwGKfBKTEt9<&E&&~|HKllIkms^#T
z{;ZX<R{tB7eAtw~`sq8#w-IZdu1tIRM|z%Cxh1!^_tVwa1h%ia8ud0HtY(tg6xsac
zypBFkr`=i@@@utf)9$r<?+89zZJxRP8sFO8{*|Y%ADh{KPc{GM4WqL+zq*`zq?7sl
ze4+TgvYnS-sr{8wiZE1PcWz(h>vtEwo7oEX`w3tC(tqyy-1sP^YZ=o!>g%MdU00Xh
zs@xd1aL+S~Xe-roPL&t$_|`7pc>9m}yP8ja?^E}CemKOfzXwX}-e3N!`kN+<3zm>>
z`|eSWqz0iHjrH3yF1ho@uYGe=*RH>}_N-+xYkB|s+qbP}6>s}C&&agwWUO69yISs?
zy;bgWuHL;=UGov>$5(%5huz=fJbT`$rJGmQoO`vne5Pf3RN?niIr4iKM`|lATeIHp
z>vii{y=QNlRr4OSzILPVyo<!{x~MO&7jAlaeYXGft;Rc&kN(a6cze&XQuov^&jKRL
ze@8slxuse7E$;KnP4mA>DNXt&du_?x`@iIj%a1+N`K03_ar*AJsI`AK-#c@4=gaN4
zwY3*91kJtvex~*O@4swA_U(JVYxTLn2F=TtpH^nibYoOM*Ats%8+&M5oU_ZNbCJEh
xn_oE0G%G&dHOG~mM{rHXuj;pfYqtkj&g$QNeg2t{x-L;rI+;+9Ncba!1pqaAjK=@~

literal 0
HcmV?d00001

diff --git a/core/embed/vendorheader/T3T1/vendorheader_trezor_unsigned.bin b/core/embed/vendorheader/T3T1/vendorheader_trezor_unsigned.bin
new file mode 100644
index 0000000000000000000000000000000000000000..4c685eb03ded720a2e492e12e58ca3569b5024a3
GIT binary patch
literal 1024
zcmWFuiV9<3VSoZA=6c2u;}Am_pMhb6zbEgaSJrhW3+LLE#eFx?_Ep@ozGwT#UHW!n
zmX7U`m6Ig5OnH1Wc*QBcJ)6x<gbviqFE0&VD}1+E_Uw<j0&5&!U!C3Va^Nmo=Z&p$
zUUMVW@8)h^$SKd06Hz4~E^lhU7E+X2m0!dV;_vBJ!BD}F&&0s+_R_|Qiwz`L6PQ?8
zxI_dj0u~8nGz#5m@(N(*adueXuvk%HM~_g(LDdUQUOT?DCECQ@*JG2u=J8{%_-k?b
z{fjsp1y~&I)Lk;BZt?y9{C%ze^d(nU`SdHFof&q2?*HvCw<;<9Su16&{x>T5uql7_
z(|3|@Bi1@ynfCIJ^gOL{OKxxPr>n0CY+rLV>TN(+%_OraviZw-9etioyR|Un*J{<K
z-D~&W5q!AXJahXszO}pkD^FiPHnabpYW~d|MrUt+bvgG)C-eFFLh*ZLJ1@Ud`zxgs
zVW__D+`h`!?=F5fvlZ<36TbMR|J?Pt@li_GGNyOb*GX5qt}eY*xiM_vo@W-(R;uTm
zDlgvgtzEwH_8;?iHJ|+6r|$RsaEM!f50u!wzx-GAH%%B9EFs<Y-J={y4MH^<>$hcG
za_5a-`{t;wU4L)wS<7VB^8WX?Z(GkQ-u7*tk!jh<Si6dLwcI&-tK8>Yy?d#;<|ELL
zul~#qyT8YI_PkR|H?OQY_iAzZOw07B!tbYY<o7O))K*%yX1(9n>(;Y+&)zhv<~?YA
z?MC5w7m3|<QD0s!-1PGLZ2#$7jdvs;{hR&q_MT;>?x|m%1w@wrj(DtdOSAA>+~=2@
z=6{t^n)FTf+LF8Xf5{n_AA6?rNykOv^xbb!YyWJ%cjoHOm)mb^YcFC5ntT2IOzZjI
zf7yoY+xL9e>T`h&nwKv>t<0Y3#;AU-CpODA_RzLCXO~OoB71u`zi^moR(!l`jw?Hl
k;F^qI)o%mWZV#}W)xZ1t{4*hSU810LGNB%k*he4>02z^jpa1{>

literal 0
HcmV?d00001