101 Commits (0f2ec166090c20cf2ff63959706b6fe72aa40cfc)

Author	SHA1	Message	Date
Jochen Hoenicke	5cbeb970c9	signing: copy content of root HDNode in signing_init ... Instead of just storing a pointer, store the content, in case they later get overwritten.	6 years ago
Pavol Rusnak	71e52e3520	firmware: use preimage hasher for Zcash Sapling	6 years ago
Pavol Rusnak	4f9284d572	firmware: drop version_group_id from coin definition, use externally provided one	6 years ago
Pavol Rusnak	7b4f027445	fsm: use const where applicable, document where it isn't and why	6 years ago
matejcik	c17cec93f7	firmware: use flattened protobuf symbols	6 years ago
Pavol Rusnak	3de28570e4	firmware: don't use hardcoded version_group_id, but use the one from coin definition	6 years ago
Pavol Rusnak	0febd07dfc	firmware: update code to use new nested messages in trezor-common	6 years ago
Pavol Rusnak	b73e18e573	firmware: implement zip143 overwinter	6 years ago
Pavol Rusnak	32a7db423c	signing: rename hashers to separate their use and reduce confusion	6 years ago
Pavol Rusnak	747f2aa772	firmware: refactor expiry into tx_init	6 years ago
Pavol Rusnak	49d9fe4d13	firmware: rename decred_expiry to expiry	6 years ago
Pavol Rusnak	e2275a8b83	firmware: use new coin definitions from trezor-common	6 years ago
Jochen Hoenicke	e1ad1512d0	Avoid division by zero. ... Check that there is no overflow in `inputs_count + outputs_count`. Check that previous transaction contains at least the spent output.	7 years ago
Saleem Rashid	95e5f15bde	vendor: Update trezor-crypto	7 years ago
Saleem Rashid	0df9404054	signing: Check decred_script_version for txinput	7 years ago
Saleem Rashid	e7703a16fe	crypto: Remove hardcoded instances of secp256k1	7 years ago
Saleem Rashid	77e76542bc	signing: Compute tx_weight for Decred	7 years ago
Saleem Rashid	d63e294c0b	signing: Document Decred signing	7 years ago
Saleem Rashid	057ec1227d	signing: Add Decred support	7 years ago
Saleem Rashid	3f51bc3628	signing: Use SignTx in signing_init	7 years ago
Jochen Hoenicke	1bc1bb1e77	Less paranoid change outputs. ... - Allow change to be on the main chain (see spesmilo/electrum#3920). - Allow more than one output to the Trezor, but don't treat it as change.	7 years ago
Saleem Rashid	ba5b44d0c5	emulator: Initial commit	7 years ago
Saleem Rashid	6e25e0b363	coins: Use curve_info instead of HasherType	7 years ago
Saleem Rashid	268e7de109	Update trezor-crypto	7 years ago
Saleem Rashid	a1e911aa4c	transaction: Do not hardcode HASHER_SHA2	7 years ago
Saleem Rashid	54b0869535	signing: Use Hasher instead of SHA256_CTX	7 years ago
Tomas Susanka	cfe8a98c68	signing segwit change output typo	7 years ago
Jochen Hoenicke	e1fa7af1da	Byte-precise size estimate for fees ... Fixes issue #232. It assumes largest possible signature size for all inputs. For segwit multisig it can be .25 bytes off due to difference between segwit encoding (varint) vs. non-segwit encoding (op_push) of the multisig script.	7 years ago
Jochen Hoenicke	b8bca1c444	Fix segwit forkid signatures	7 years ago
Jochen Hoenicke	a8bc3cb6bd	Remove add_hash_type fields. ... The 4 byte hash_type/forkid is part of the signed message, but not part of the transaction. Instead of hacking it into the transaction, add it after the transaction when computing the signature.	7 years ago
Saleem Rashid	d39e4be1c8	signing: Use force_bip143 instead of has_forkid	7 years ago
Saleem Rashid	b6f11c9f93	signing: Add signing_hash_type function ... This also enables SIGHASH_FORKID for SegWit	7 years ago
Jochen Hoenicke	97581928de	Enable Segwit Bech32 addresses ... Increase the size of the addresses in protobuf. Fix layout2.c to handle longer addresses. Add a field bech32_prefix to coins.h Adapted the coins-gen script. Added bech32 support in signing.c and transaction.c	7 years ago
Jochen Hoenicke	b5fa8a266a	New CoinInfo separated from protobuf structures ... Having CoinType using the protobuf structures has several disadvantages. - We always need to change trezor-common if we need a new field (like bech32 prefix) - Every time Trezor initializes it sends all this information out and nobody cares. - The protobuf structures add storage overhead due to their fixed size. I also removed most of the `has_` fields except for forkid: - `has_segwit` was merged with segwit - `has_coin_shortcut` can be replaced by test for NULL if necessary. The fields were reordered for better padding.	7 years ago
Pavol Rusnak	18d8cb3c56	add project website (trezor.io) to license header	7 years ago
Jochen Hoenicke	a24e8a0484	Remove magic constants ... Use defines for wallet depth and change chain. Updated some comments to clarify what is checked.	7 years ago
Jochen Hoenicke	4805f27e8c	Fix checking change address ... There was a signed/unsigned problem: size_t is unsigned, but we use -1 to indicate mismatch. The problem was that when checking the input address path, it still did this unintentionally when a mismatch was detected, forbidding to sign with mismatched inputs, even when there is no change address. We now use 1 for mismatch. Also we don't allow change address anymore if the inputs have a path of length 1. This simplifies the code a bit.	7 years ago
Jochen Hoenicke	98e617d874	startup: use custom reset_handler ... + group confidential data in one place + zero all SRAM where needed	7 years ago
Jochen Hoenicke	3440ead4c9	Fix multisig for BCC	7 years ago
Jochen Hoenicke	5f6948e66b	Remove progress update	7 years ago
Jochen Hoenicke	3c75d28c78	Check input bip32 path again on second pass.	7 years ago
Jochen Hoenicke	6b615ce405	No quadratic hashing for hardfork ... Don't hash the whole transaction if forkid is set. Instead use the same codepath as for segwit. Rename segwit_to_spend to authorized_amount and use it for forkid amount and segwit amount validity checks. Removed some duplicated code.	7 years ago
Saleem Rashid	979a6ef266	signing: Skip TX_META with SIGHASH_FORKID	7 years ago
Saleem Rashid	a34554b091	signing: Add SIGHASH_FORKID support	7 years ago
Pavol Rusnak	3d7d0f0734	use C99 for loop where possible	7 years ago
Pavol Rusnak	c6fd70b471	gettext: mark localizable strings as proof-of-concept	7 years ago
Pavol Rusnak	00f6312a81	rename failures, unify strings where possible	7 years ago
Pavol Rusnak	317363f84c	enable mixing of segwit and non-segwit inputs	7 years ago
Pavol Rusnak	391e3940e5	refactor fee computation, but keep ceil logic	7 years ago
Pavol Rusnak	24ac52079f	disable native segwit for now	7 years ago