761 Commits (0688fe6008550cdda9b780240773009bc2948d90)

Author	SHA1	Message	Date
Saleem Rashid	0df9404054	signing: Check decred_script_version for txinput	7 years ago
Saleem Rashid	f0875285b2	transaction: Fix Decred multisig	7 years ago
Saleem Rashid	e7703a16fe	crypto: Remove hardcoded instances of secp256k1	7 years ago
Saleem Rashid	77e76542bc	signing: Compute tx_weight for Decred	7 years ago
Saleem Rashid	d63e294c0b	signing: Document Decred signing	7 years ago
Saleem Rashid	057ec1227d	signing: Add Decred support	7 years ago
Saleem Rashid	3f51bc3628	signing: Use SignTx in signing_init	7 years ago
Saleem Rashid	9849321883	coins: Add Decred support	7 years ago
Saleem Rashid	b3f1d79821	coin_info: Refactor coins-gen.py	7 years ago
Saleem Rashid	69356e5f56	messages_map: Fix Flake8 warnings	7 years ago
Saleem Rashid	88230e33c4	nem_mosaics: Fix Flake8 warnings	7 years ago
Saleem Rashid	7092951a40	Makefile: Add GENERATE_CODE function ... Fixes #281	7 years ago
Tomas Susanka	519c117e30	nem: SignTx instead of ConfirmOutput in mosaic creation	7 years ago
Jochen Hoenicke	ed7a8bfa6c	Fixes for emulator	7 years ago
Jochen Hoenicke	25e824aaa3	Supervisor Calls ... Add Supervise interrupts to allow to do privileged operations like flashing from application code.	7 years ago
Jochen Hoenicke	068f013bc6	Force size fields in storage to be 32 bit ... Better storage compatibility between 64 bit and 32 bit builds.	7 years ago
Jochen Hoenicke	0127c1a374	Add function storage_getPinWait	7 years ago
Jochen Hoenicke	c09590b54d	Cleaner flash handling using FLASH_PTR ... Use `FLASH_PTR` macro to convert a flash address to a const pointer. For real hardware it is just a cast, for emulator we subtract the `FLASH_ORIGIN` and use it as index into the memory mapped flash file. Make write access to flash with volatile pointers Also use FLASH_PTR in DebugMemory* for now. This allows for reading and writing the flash in the emulator or just crash it by reading outside the flash...	7 years ago
Jochen Hoenicke	2587e49843	Disable fastflash. ... It doesn't make sense any more and doesn't work with newer bootloaders.	7 years ago
Jochen Hoenicke	4ebbe8c274	Fix compilation problems	7 years ago
Jochen Hoenicke	a7158f39a5	fix out-of-bounds read (for debug_link) ... Pinmatrix should always be null-terminated for debug-link. The memset overwrote the terminating nul character.	7 years ago
Jochen Hoenicke	c4e1c5953e	Fix shift overflow ... Avoid undefined behavior by casting uint8_t to uint32_t before shifting by 24 bits.	7 years ago
Pavol Rusnak	ceced152a8	docs: update changelogs	7 years ago
Pavol Rusnak	95dd254094	util: use shutdown from trezor-core instead of system_halt	7 years ago
Pavol Rusnak	9588e8f273	update bootloader to 1.4.0 via firmware, run unsigned firmware in unprivileged mode	7 years ago
Jochen Hoenicke	d6f41dba9e	messages: fix size of msg_tiny and add static_assert	7 years ago
Pavol Rusnak	559a700fb0	fsm: add for button before Recovery device	7 years ago
Pavol Rusnak	5ae04c17c5	firmware: set version to 1.6.1	7 years ago
Pavol Rusnak	b20336e82d	Revert WinUSB feature ... This reverts the following range of commits: 68168393b9ea61328f4bb43bc3059ab32c4be2e9..ab76828e16b552c82f468e5d89f1af0645258995 Revert "update usb descriptors" This reverts commit ab76828e16. Revert "trezorhal: reply with winusb guid just for the main interface (0)" This reverts commit 6acfc5d1b3. Revert "winusb: fix WINUSB_EXTRA_STRING" This reverts commit 966d8cb4ce. Revert "winusb: cleanup DeviceInterfaceGUIDs usage" This reverts commit 56c5a46095. Revert "make winusb_string_descriptor const" This reverts commit 132cc4b474. Revert "webusb: remove unused constants" This reverts commit 38b4d507bc. Revert "bootloader: remove debug" This reverts commit 56d3cbe2e9. Revert "Bootloader - Switch from HID to WebUSB" This reverts commit a22abfe90b. Revert "Switch from HID to WebUSB" This reverts commit cb067bd14c. Revert "Add WinUSB, WebUSB, USB2.1 to build" This reverts commit 05e218bcb8. Revert "Add WebUSB descriptors" This reverts commit a062127cef. Revert "Add WinUSB (WebUSB preparation)" This reverts commit e6981e85cd.	7 years ago
Roman Zeyde	e444dadbb2	storage: next firmware version would be 1.7.0	7 years ago
Pavol Rusnak	2a4a298d58	firmware: refactor fsm_getDerivedNode to include fingerprint	7 years ago
Jochen Hoenicke	d5e49556c5	Indicate own dest address in send dialog ... If the destination address is controlled by the TREZOR (the wallet set the address_n field), show the path to the address on the confirm output dialog in the same format as the "show on Trezor" dialog indicates the path.	7 years ago
Pavol Rusnak	e460c4fe17	session: rework get_state	7 years ago
Pavol Rusnak	7834eaba26	protect: passphrase is optional	7 years ago
Pavol Rusnak	7fa8ae136f	firmware: implement behaviour of state (still missing in PassphraseAck)	7 years ago
Pavol Rusnak	d7de064bde	bump version to 1.7.0; update firmware changelog	7 years ago
Pavol Rusnak	ab76828e16	update usb descriptors	7 years ago
Karel Bilek	cb067bd14c	Switch from HID to WebUSB ... Also renaming varions functions from hid_ to webusb_ to actually reflect what they are doing	7 years ago
Jochen Hoenicke	c574c0a497	Updated confirmOutput dialog ... Build it manually (to allow not indenting the address and using a different font).	7 years ago
Jochen Hoenicke	63c6f95400	Fit 21 characters per line	7 years ago
Jochen Hoenicke	b9b36e0768	Remove duplicated code	7 years ago
Jochen Hoenicke	83a69a0334	Added fixed-width font and multi-font support	7 years ago
Pavol Rusnak	fc7189f801	use Failure_PinMismatch where it makes sense (ChangePin, ResetDevice, RecoveryDevice)	7 years ago
Pavol Rusnak	909f158c84	vendor: update trezor-common	7 years ago
Saleem Rashid	e019ab5557	fsm: Abort layoutAddress on Initialize or Cancel ... Fixes #247	7 years ago
Jochen Hoenicke	1bc1bb1e77	Less paranoid change outputs. ... - Allow change to be on the main chain (see spesmilo/electrum#3920). - Allow more than one output to the Trezor, but don't treat it as change.	7 years ago
Saleem Rashid	e3a0b6e7b4	setup: Switch to unprivileged execution	7 years ago
Saleem Rashid	1f8f08d48a	setup: Enable MPU ... Disable code execution from SRAM and reconfiguration of the MPU. Prevents almost all code execution attacks.	7 years ago
Wampum	2391beb6f4	expand description of multisig label (#294)	7 years ago
Pavol Rusnak	bd660655ee	introduce and use memzero instead of explicit_bzero	7 years ago
Pavol Rusnak	4a2d68acb9	use explicit_bzero where possible; update trezor-crypto	7 years ago
Pavol Rusnak	cd763b979b	layout: fix last commit	7 years ago
Pavol Rusnak	f70772fb58	rework ConfirmOutput layout (fixes #289)	7 years ago
Pavol Rusnak	c4e3596803	update trezor-crypto, adapt firmware to to changes	7 years ago
Pavol Rusnak	7e382fb790	update to python3	7 years ago
Pavol Rusnak	94fcc8c9a4	add bip84 (native segwit)	7 years ago
Saleem Rashid	6a2b92c49e	storage: Fix for Clang	7 years ago
Saleem Rashid	58d2079b56	transaction: Fix uninitialized read in compile_output	7 years ago
Saleem Rashid	fd57b89902	Makefile: Use $PYTHON	7 years ago
Saleem Rashid	bab8db9191	vendor: Update Nanopb to 0.3.9	7 years ago
Saleem Rashid	045ef22d98	storage: Do not use Nanopb	7 years ago
Saleem Rashid	b92a0d24b0	fsm: Include file and line in fsm_sendFailure for DEBUG_LINK	7 years ago
Saleem Rashid	ba5b44d0c5	emulator: Initial commit	7 years ago
Saleem Rashid	36eac04e61	protob: Increase Features.coins max_count	7 years ago
Pavol Rusnak	9732825e24	move ethereum_tokens-gen.py to trezor-common	7 years ago
Saleem Rashid	83a34ff925	util: Add MIN and MAX macros	7 years ago
Saleem Rashid	9401d2805a	protob: Increase NEM payload max_size ... See NemProject/NanoWallet#362	7 years ago
Saleem Rashid	f17a0a85e0	fsm: Add NEMDecryptMessage	7 years ago
Jochen Hoenicke	810443f197	Fix NULL pointer access ... Fixes #269	7 years ago
Jochen Hoenicke	ded41c484c	storage: Padding to multiple of 4 bytes	7 years ago
Saleem Rashid	cfc5fda603	storage: Compact old_storage_size logic	7 years ago
Saleem Rashid	a304b76d34	storage: Clean up old_storage_size ... Note that OLD_STORAGE_SIZE(imported) != 460, because OLD_STORAGE_SIZE does not include end padding	7 years ago
Jochen Hoenicke	5812f9865d	Fix size of version 9 storage	7 years ago
Pavol Rusnak	2c63d51580	u2f: avoid using hdnode_private_ckd_cached in order not to constantly invalidate cache	7 years ago
Pavol Rusnak	106642bd44	fix last commit	7 years ago
Jochen Hoenicke	73edc7cb74	Added U2F root key to storage. ... Fixes #251.	7 years ago
Jochen Hoenicke	88563ebaa5	Fix compile problem, fix clearing single byte	7 years ago
Pavol Rusnak	f22c849767	storage: rework storage_commit into storage_update	7 years ago
Pavol Rusnak	70843c9059	storage: introduce storageRam and storageRom	7 years ago
Pavol Rusnak	57bbcc754a	storage: make storage accessible only via functions ... add calls also for debug build and use them in fsm	7 years ago
Pavol Rusnak	41901a8056	firmware: rework protectChangePin ... bootloader: wait for flash operation to finish	7 years ago
Pavol Rusnak	36f3b7fe09	firmware: mark usb buffer variables confidential	7 years ago
Pavol Rusnak	14d15dab99	fsm: refactor path checking code into path_mismatch function	7 years ago
Saleem Rashid	7cd9945905	fsm: Use coin->curve_name	7 years ago
Saleem Rashid	6e25e0b363	coins: Use curve_info instead of HasherType	7 years ago
Saleem Rashid	268e7de109	Update trezor-crypto	7 years ago
Saleem Rashid	dc781725c6	hasher: Move to trezor-crypto ... This reverts commit dd7b21a6ca.	7 years ago
Saleem Rashid	0e60ba54b7	crypto: Use Hasher for message signing	7 years ago
Saleem Rashid	a1e911aa4c	transaction: Do not hardcode HASHER_SHA2	7 years ago
Saleem Rashid	54b0869535	signing: Use Hasher instead of SHA256_CTX	7 years ago
Saleem Rashid	dd7b21a6ca	hasher: Initial commit	7 years ago
Pavol Rusnak	bc7c66aa76	add Features.model field (set to "1")	7 years ago
Pavol Rusnak	f44635a9ca	vendor: update trezor-common	7 years ago
Tomas Susanka	a82bbbb30d	layout: encode -> encrypt typo ... updates #252	7 years ago
Tomas Susanka	cfe8a98c68	signing segwit change output typo	7 years ago
Pavol Rusnak	723cf295a7	device label -> device name	7 years ago
Pavol Rusnak	4770df8912	update version to 1.6.0	7 years ago
Pavol Rusnak	3386b16a1c	GetAddress: detect mismatched coin and path, show warning	7 years ago
Pavol Rusnak	a713fca857	layout: recognize known bip44/bip49 paths in GetAddress dialog	7 years ago
Pavol Rusnak	cc0896c334	add bip44 coin_type to CoinInfo	7 years ago
Pavol Rusnak	54659d49d8	layout: op_return now requires confirmation by user	7 years ago
Pavol Rusnak	de3b78bd0b	layout: print bip32 path in GetAddress dialog	7 years ago
Pavol Rusnak	61044b3fc3	u2f: add u2f.bin.coffee	7 years ago
Saleem Rashid	e3460b9f00	reset: Call storage_commit after initialization ... Fixes #230	7 years ago
Jochen Hoenicke	e1fa7af1da	Byte-precise size estimate for fees ... Fixes issue #232. It assumes largest possible signature size for all inputs. For segwit multisig it can be .25 bytes off due to difference between segwit encoding (varint) vs. non-segwit encoding (op_push) of the multisig script.	7 years ago
Pavol Rusnak	a4d46b7ae1	vendor: update trezor-common, increase coins count	7 years ago
Jochen Hoenicke	b8bca1c444	Fix segwit forkid signatures	7 years ago
Jochen Hoenicke	8da2770051	Increase coin count	7 years ago
Jochen Hoenicke	a8bc3cb6bd	Remove add_hash_type fields. ... The 4 byte hash_type/forkid is part of the signed message, but not part of the transaction. Instead of hacking it into the transaction, add it after the transaction when computing the signature.	7 years ago
Saleem Rashid	d39e4be1c8	signing: Use force_bip143 instead of has_forkid	7 years ago
Saleem Rashid	c6246b5fba	coins: Add force_bip143	7 years ago
Saleem Rashid	b6f11c9f93	signing: Add signing_hash_type function ... This also enables SIGHASH_FORKID for SegWit	7 years ago
Pavol Rusnak	892bb8501a	fsm: ignore case for NEM addresses	7 years ago
Jochen Hoenicke	bbf6b1b097	Implemented VerifyMessage for bech32	7 years ago
Jochen Hoenicke	0f50b816e6	Wrap long addresses in three lines	7 years ago
Jochen Hoenicke	97581928de	Enable Segwit Bech32 addresses ... Increase the size of the addresses in protobuf. Fix layout2.c to handle longer addresses. Add a field bech32_prefix to coins.h Adapted the coins-gen script. Added bech32 support in signing.c and transaction.c	7 years ago
Jochen Hoenicke	cf3dc6051c	Omit leading space in shortcut in GetFeatures	7 years ago
Jochen Hoenicke	1566631023	Improved backwards compatibility of GetFeatures ... Set all CoinType fields except signed_message_header. Move static assert into the function where it is needed.	7 years ago
Jochen Hoenicke	b5fa8a266a	New CoinInfo separated from protobuf structures ... Having CoinType using the protobuf structures has several disadvantages. - We always need to change trezor-common if we need a new field (like bech32 prefix) - Every time Trezor initializes it sends all this information out and nobody cares. - The protobuf structures add storage overhead due to their fixed size. I also removed most of the `has_` fields except for forkid: - `has_segwit` was merged with segwit - `has_coin_shortcut` can be replaced by test for NULL if necessary. The fields were reordered for better padding.	7 years ago
Pavol Rusnak	18d8cb3c56	add project website (trezor.io) to license header	7 years ago
Jochen Hoenicke	a24e8a0484	Remove magic constants ... Use defines for wallet depth and change chain. Updated some comments to clarify what is checked.	7 years ago
Jochen Hoenicke	4805f27e8c	Fix checking change address ... There was a signed/unsigned problem: size_t is unsigned, but we use -1 to indicate mismatch. The problem was that when checking the input address path, it still did this unintentionally when a mismatch was detected, forbidding to sign with mismatched inputs, even when there is no change address. We now use 1 for mismatch. Also we don't allow change address anymore if the inputs have a path of length 1. This simplifies the code a bit.	7 years ago
Jochen Hoenicke	5e98b0ffd6	Added U2F entry for Bitfinex (#237)	7 years ago
Pavol Rusnak	fa02dec704	layout2: use macro for layoutSwipe	7 years ago
Saleem Rashid	eebd53fd09	layout2: Disable oledSwipeLeft with DEBUG_LINK (#239) ... This greatly reduces time for device tests	7 years ago
Saleem Rashid	d006ef6bf7	Makefile.include: Generate dependency files before build (#225) ... * Makefile.include: Generate .d files before build * Makefile.include: Generate .small.d files before build	7 years ago
Pavol Rusnak	5831e53854	layout2: refactor and fix layoutCosiCommitSign	7 years ago
Pavol Rusnak	ca30449d07	build: add rebuild dep	7 years ago
Pavol Rusnak	b56da1e4b4	layout: show path for CoSi commit/sign if following SLIP-0018	7 years ago
Saleem Rashid	296c120528	nem_mosaics: Refactor and use Python 2	7 years ago
Saleem Rashid	128742d113	nem2: Update copyright header for consistency	7 years ago
Saleem Rashid	c87c16adc9	firmware: Generate nem_mosaics.[ch] at build time	7 years ago
Saleem Rashid	a90acf8b62	nem_mosaics: Remove generated files	7 years ago
Saleem Rashid	12c541f872	nem2: Handle Importance Transfer transactions	7 years ago
Pavol Rusnak	83db3c098f	fsm: implement CoSi messages	7 years ago
Saleem Rashid	5b0c0b1bfd	nem_mosaics: Add PacNEM	7 years ago
Saleem Rashid	d0e89db9fa	nem_mosaics: Add Breeze Token	7 years ago
Saleem Rashid	1d83eee3b3	nem2: Canonicalize mosaics in transfer transactions ... NIS deserializes then serializes transactions in order to verify the signature. This means that transactions must be serialized canonically, otherwise the signature will not match. Due to [1], mosaics are sorted and deduplicated in transfer transactions. [1]: 4231550ddf	7 years ago
Saleem Rashid	1f20625bbc	nem2: Refactor for new bn_format	7 years ago
Saleem Rashid	2aeeb3f978	nem2: Handle Aggregate Modification transactions	7 years ago
Saleem Rashid	a10e131ecd	nem2: Handle Mosaic Supply Change transactions	7 years ago
Saleem Rashid	327736ca96	nem_mosaics: Whitelist networks	7 years ago
Saleem Rashid	17e33d5517	nem2: Handle Mosaic Definition Creation transactions	7 years ago
Saleem Rashid	b0394622a3	nem2: Warn on unknown mosaics	7 years ago
Saleem Rashid	3a303087ae	nem_mosaics: Add DIM TOKEN	7 years ago
Saleem Rashid	9f41ee39ba	nem_mosaics: Add DIMCOIN	7 years ago
Saleem Rashid	8dbd6182fb	nem_mosaics: Initial commit	7 years ago
Saleem Rashid	4a55dd89e6	nem2: Handle Provision Namespace transactions	7 years ago
Saleem Rashid	b559e5fb6d	fsm: Add NEM_CHECK_PARAM macros	7 years ago
Saleem Rashid	563723a55f	nem2: Handle multisig transactions	7 years ago
Saleem Rashid	19033a459d	fsm: Add NEMSignTx	7 years ago
Saleem Rashid	3057f78837	fsm: Add NEMGetAddress	7 years ago
Saleem Rashid	c331d7e8f0	vendor: Update trezor-crypto	7 years ago
Saleem Rashid	da1262cf4a	vendor: Update trezor-common	7 years ago
Jason Zavaglia	8983a346d9	Have coins.h and coins.c generated at build time (#220)	7 years ago
Pavol Rusnak	4b8ac90d10	travis: fix build for old protobuf	7 years ago
Pavol Rusnak	8a6dd3c764	build: use python2 for messages_map.py	7 years ago
Pavol Rusnak	53f5d5c147	u2f: add gandi to known apps	7 years ago
Pavol Rusnak	1072369bc4	firmware: need extra cast for nanopb call in message.c	7 years ago
Pavol Rusnak	1f1c3bf35f	firmware/protob: remove generated stuff	7 years ago
Jason Zavaglia	5cc299facd	Generate the protobuf files at build time (#219) ... Improve the build reliability by ensuring protobuf files are generated at build time.	7 years ago
Pavol Rusnak	30367bfad1	reset: refactor code into layoutResetWord	7 years ago
Pavol Rusnak	ef89fc4e89	ethereum: refactor hash_rlp_number	7 years ago
Jochen Hoenicke	5f9cd15b02	Support multi-byte chain-id. (#212)	7 years ago
Pavol Rusnak	07f6e495b7	fsm: fix race condition in GetAddress	7 years ago
Pavol Rusnak	e4cc08775f	vendor: update trezor-common, enable Bitcoin segwit manually	7 years ago
Pavol Rusnak	3e9ebe6c10	changelog: add 1.5.2 ... + update vendor/trezor-crypto	7 years ago
Jochen Hoenicke	98e617d874	startup: use custom reset_handler ... + group confidential data in one place + zero all SRAM where needed	7 years ago
Pavol Rusnak	a01ba51a2a	storage: copy only required bytes from old storage, bump storage version ... + backup_device: ask for pin, always use correct number of words	7 years ago
Saleem Rashid	9c25e03d98	vendor: Update trezor-crypto	7 years ago
Saleem Rashid	c121627a06	Travis CI: Test matrix of DEBUG_LINK and FASTFLASH ... This should catch inconsistencies with Features.coins or if there is a build configuration that makes the firmware too large. Also, add MAKEFLAGS and only build STM32F2 support in libopencm3 to speed up build time	7 years ago
Saleem Rashid	fa7e32fadf	protob: Fix Features.coins max_count for DEBUG_LINK=1	7 years ago
Saleem Rashid	7e56a62e8b	coins: Add _Static_assert for Features.coins max_count	7 years ago
Pavol Rusnak	e69ef2e75a	coins: include testnet coins just in debug builds ... + add more ethereum tokens	7 years ago
Pavol Rusnak	dd9f7cd926	fix typos in changelog	7 years ago
Pavol Rusnak	1d6329b1bf	changelog: make last release mandatory	7 years ago
Pavol Rusnak	f0d2e7a371	storage: bump version	7 years ago
Pavol Rusnak	ace1d84265	recovery: don't reset storage on typos during dry-run recovery	7 years ago
Pavol Rusnak	a9a414df08	fix typo	7 years ago
Pavol Rusnak	c2c3debd01	changelog: fix typos	7 years ago
Pavol Rusnak	b1838d6867	ethereum: add more tokens	7 years ago
Jochen Hoenicke	33ed08ec32	Fix check for max try and add another check before	7 years ago
Pavol Rusnak	4ee52ab95f	changelog: add more entries	7 years ago
Pavol Rusnak	45ca9bd583	protect: change wording	7 years ago
Pavol Rusnak	82a06ce342	firmware: mark more strings with gettext	7 years ago
Pavol Rusnak	c778d7b9c3	storage: wipe storage after 15 wrong pins	7 years ago
Pavol Rusnak	fa2f5fb33f	update coins	7 years ago
Jochen Hoenicke	3440ead4c9	Fix multisig for BCC	7 years ago
Jochen Hoenicke	5f6948e66b	Remove progress update	7 years ago
Jochen Hoenicke	3c75d28c78	Check input bip32 path again on second pass.	7 years ago
Jochen Hoenicke	6b615ce405	No quadratic hashing for hardfork ... Don't hash the whole transaction if forkid is set. Instead use the same codepath as for segwit. Rename segwit_to_spend to authorized_amount and use it for forkid amount and segwit amount validity checks. Removed some duplicated code.	7 years ago
Saleem Rashid	979a6ef266	signing: Skip TX_META with SIGHASH_FORKID	7 years ago
Saleem Rashid	a34554b091	signing: Add SIGHASH_FORKID support	7 years ago
Saleem Rashid	841af54061	vendor: Update trezor-common	7 years ago
Pavol Rusnak	91c4cbdbd0	setup: move stack protector variable to setup.h	7 years ago
Pavol Rusnak	0760ff0468	setup: move stack smashing protection code to setup.c	7 years ago
Saleem Rashid	e33e1ec0b1	fsm: Do not wipe msg_resp in DebugLinkGetState	7 years ago
Saleem Rashid	11d424cdef	vendor: Update trezor-crypto	7 years ago
Saleem Rashid	38b6332db5	layout2: Extract BITCOIN_DIVISIBILITY constant	7 years ago
Pavol Rusnak	c3bf0e4086	enable segwit for bitcoin \o/	7 years ago