1001 Commits (37c61c1381bf9f060687e6f7eea503ae77acb9ba)

Author	SHA1	Message	Date
Martin Milata	c54077a714	fix(core): imports needed for T1 startup ... Now debug build booted on wiped T1 connects to USB and shows square in top right corner.	3 years ago
matejcik	1e0a23c133	fix(core/paths): make sure containers are copied along with the numbers they contain	3 years ago
matejcik	ed5c357b78	fix(core): properly cache last successful unlock time	3 years ago
matejcik	959cf7d515	fix(core/homescreen): properly redraw when an outside process kills homescreen ... This happens with FIDO which does not use the normal workflow management and so `workflow.close_others()` is never called.	3 years ago
matejcik	f1a54f2108	refactor(core): remove more global imports	3 years ago
matejcik	2cb379108c	refactor(core/homescreen): load homescreen image on-demand	3 years ago
matejcik	f61d7fffa8	fix(core): fix top-level imports in apps.common.passphrase	3 years ago
matejcik	b1e4246b46	refactor(core/webauthn): make sure KEY_AGREEMENT_*KEY is generated once per power-up ... This is what the spec recommends and it has been the case before workflow-restarts, when `apps.webauthn.fido2` was imported exactly once per lifetime. With workflow-restarts, `fido2` is being imported repeatedly and the keys regenerated. This does not seem to be a problem per the spec -- a FIDO workflow will retain the same keys, and non-FIDO workflows can be seen as unplugs/replugs as far as the FIDO functionality is concerned. However, regenerating the keys is slow, which is a problem for the hardware-based unit tests. We can avoid the slowness by returning to the spec-mandated behavior and generating once per power-up.	3 years ago
matejcik	f6f3c7ffcf	fix(core): prevent flickering when homescreen does not need to redraw	3 years ago
matejcik	aaa3ce6117	fix(core/bitcoin): fix CoinJoin authorization with new cache	3 years ago
matejcik	b387970468	refactor(core/debug): move "wipe with debug build" to boot.py ... otherwise it gets wiped after every workflow	3 years ago
matejcik	1822aebdb4	feat(core): prefill field_cache in bitcoin app	3 years ago
matejcik	f3db4f2dd3	refactor(core): defragment PathSchema memory usage	3 years ago
matejcik	b1ca6ca848	refactor(core/debug): offload debug configuration from apps.debug	3 years ago
matejcik	e859c13d70	refactor(core): limit global imports in key places ... so that by importing `apps.base`, we don't pull in the whole circus	3 years ago
matejcik	e629a72c3a	refactor(core): move app registrations to a single handler function ... apps.webauthn.boot() does not need an if-condition because it's only called from session.py when the usb interface is enabled This means that they do not need to be stored in RAM at all. The obvious drawback is that we need to hand-edit the if/elif sequence, but we don't register new handlers all that often so 🤷	3 years ago
matejcik	276bb59dba	refactor(core/cardano): update caching mechanism	3 years ago
matejcik	3cdb09c294	refactor(core): modify cache to preallocate all its data ... also get rid of expensive "wire" import	3 years ago
matejcik	ea505b592c	refactor(core): move empty_bytearray to trezor.utils	3 years ago
gabrielkerekes	6f59892824	refactor(core/cardano): introduce derive_public_key to simplify pub key derivation	3 years ago
gabrielkerekes	905970fd6a	refactor(core/cardano): generalise _paginate_lines	3 years ago
gabrielkerekes	2313293477	feat(core/cardano): add support for catalyst voting registration	3 years ago
Pavol Rusnak	2852b947ec	chore(core): regenerate coins	3 years ago
Martin Milata	ac711fb8ee	style(core): use more recent type annotation syntax ... https://www.python.org/dev/peps/pep-0585/ - Type Hinting Generics In Standard Collections https://www.python.org/dev/peps/pep-0604/ - Allow writing union types as X | Y	3 years ago
Martin Milata	8b3ac659a0	style(core): mypy: disable implicit Optional for function arguments ... https://www.python.org/dev/peps/pep-0484/#union-types	3 years ago
Martin Milata	da72482c2f	refactor(core/ui): get rid of confirm_wipe	3 years ago
Martin Milata	c0174ff217	refactor(core/ui): raise exception on dialog cancel by default	3 years ago
Martin Milata	2b6ea25712	refactor(core): convert rest of apps.bitcoin to layouts	3 years ago
Martin Milata	b1e38fe382	refactor(core): no implicit spaces in render_text	3 years ago
Martin Milata	2a5f5c1c20	refactor(core): convert parts of apps.monero to layouts	3 years ago
Martin Milata	6668921a4f	refactor(core): convert apps.common.request_pin to layouts	3 years ago
Martin Milata	01900b8536	refactor(core): convert parts of apps.webauthn to layouts	3 years ago
Martin Milata	ffe6d65f72	refactor(core): convert parts of apps.management to layouts	3 years ago
Martin Milata	c09a142e2a	refactor(core): convert apps.misc.* to layouts	3 years ago
Martin Milata	6ded531f8f	refactor(core): convert apps.common.sdcard to layouts	3 years ago
Rafael Korbas	a9b8b0e119	feat(core/cardano): chunked serialization of signed transaction	3 years ago
gabrielkerekes	3cb686d452	fix(core/cardano): make witnesses order deterministic	3 years ago
Andrew Kozlik	3084d1196d	feat(core): Support 50 digit PIN and wipe code.	3 years ago
Pavol Rusnak	da7214d82f	fix(common): update support.json to include Firo	3 years ago
matejcik	cb7152542d	feat: drop DebugLinkShowText functionality	3 years ago
Rafael Korbas	74ed5b7018	feat(core/cardano): Implement bech32 asset ids based on CIP-0014	3 years ago
Rafael Korbas	bd4512b53a	fix(core/cardano): Allow stake pool registrations with zero margin	3 years ago
Andrew Kozlik	b10acbe153	feat(core): Allow decreasing output amount in RBF transactions.	3 years ago
Andrew Kozlik	6de20a7dcd	chore(core/bitcoin): Add DecredApprover.	3 years ago
Andrew Kozlik	523b1051c5	chore(core/bitcoin): Add stricter script_type checks in sanitizers.	3 years ago
Andrew Kozlik	6e8eebfc9c	chore(core/bitcoin): Separate Decred-specific scripts from Bitcoin scripts.	3 years ago
JoeGruff	e3ea32a986	multi: Add decred staking. ... Add two new input and four output script types. Decred ticket purchases consist of a stake submission, op returns, and change addresses. Although change addresses are allowed by consensus, they are no longer used in practice and so have been given the restrictions of a null pubkey and no value. Stake scripts are almost identical to p2pkh or p2sh except for an extra opcode in front. Inputs are currently only used in the form of one input three outputs with the first output, or stake submission, paying to a public key hash, or with two inputs and five outputs with the stake submission paying to a multisig script hash. The op returns are directed to the user in the case of one and the voting service provider and user in the case of two. One of the sstx commitment for a ticket must pay back to the trezor wallet. This is checked and an error is thrown if we don't find the expected public key hash. Because this adds the ability to create new types of outputs once the ticket votes, two new input script types are also needed. A successful vote will lead to a stake generation script that must be spent, and an unsuccessful vote will lead to a revocation script that must be spent. If we allowed stake change scripts to have a valid pubkey, that too would require another op code, but we disallow those for output.	3 years ago
Pavol Rusnak	6c11bc60d7	common/defs/fido: add namecheap	3 years ago
Andrew Kozlik	850aa56691	docs(core): Add references to SLIPs in the code.	3 years ago
Roman Zeyde	7ce4e13bcf	feat(core): add public_key to ECDHSessionKey	3 years ago
matejcik	ed0ac98970	fix(common/tools): strip "mainnet" from Ethereum network names	3 years ago
Pavol Rusnak	17fa6ab4ec	chore(common): update chains+tokens	3 years ago
Rafael Korbas	ceea21ec1f	feat(cardano): Format stake pool ids as bech32 instead of hex	3 years ago
Rafael Korbas	3197741795	fix(core/Cardano): account index validation in _should_hide_output()	3 years ago
Rafael Korbas	cf871ee754	fix(core/Cardano): do not show change output in byron-shelley transfers	3 years ago
Martin Milata	c28763c169	refactor(core): use reload_settings_from_storage on boot	3 years ago
Martin Milata	9b60cc0098	feat(core): restart loader from current position ... On "hold to confirm" dialogs, when you hold your finger, lift it, and quickly hold again, the progress bar jumps to the beginning. This commit changes the behavior so the progress continues from its current position of the reverse animation.	3 years ago
Martin Milata	06b9d1314d	fix(core): do not autolock when already locked ... Gets rid of unnecessary screen redraw.	3 years ago
Martin Milata	192d0dcf87	feat(core): hold homescreen to lock	3 years ago
Buck Perley	682298d7bb	fix(core): add exceptions for unchained capital paths	3 years ago
gabrielkerekes	d4dcd7bff9	fix(core/cardano): allow staking accounts beyond 100'	3 years ago
Andrew Kozlik	e5741ac308	chore(core): Use BufferReader for CBOR decoding.	3 years ago
Andrew Kozlik	ac939c94aa	fix(core/tezos): Implement strict length checking. ... (cherry picked from commit e7f44ebee8)	3 years ago
matejcik	6fd355756c	fix(core/stellar): review usages of write_bytes_unchecked ... (cherry picked from commit 781e9f4db8)	3 years ago
matejcik	08edbca428	fix(core/eos): review usages of write_bytes_unchecked ... (cherry picked from commit 5b5ed8cce1)	3 years ago
Andrew Kozlik	78a2ff16d4	fix(core): In apps.bitcoin ensure that get_address() fails for multisig if user's public key is not included. ... (cherry picked from commit 77f5e90466)	3 years ago
Martin Milata	391602ae99	refactor(core): turn show_address, show_pubkey, show_xpub into layouts	3 years ago
Martin Milata	03699f5639	refactor(core): turn show_success, show_warning into layouts	3 years ago
Martin Milata	f38abf9d89	refactor(core): introduce layouts ... Layouts can be used by the application code to interact with user using small number of dialogs or other groups of UI components. Each layout is identified by name and takes some parameters. Most layouts will have an implementation for each hardware model, mechanism is provided to import the correct version so that application code can be oblivious to the model. This commit introduces the layout concept and converts a couple of dialogs to use it.	3 years ago
Martin Milata	f1382bf892	refactor(core): model-dependent UI component directories ... They now live under trezor.ui.components.tt. Later trezor.ui.components.t1 will be added and application code will be rewritten to not use them directly in order to work on both TT and T1.	3 years ago
matejcik	73a28e12f2	fix(core): create protobuf messages correctly	3 years ago
matejcik	bf562cfd4b	feat(core/misc): enable typing for misc app	3 years ago
matejcik	ccd241fe55	feat(core/cardano): enable typing for Cardano app	3 years ago
Pavol Rusnak	18b51b856b	common/fido: update icons for github, mojeid and slushpool (#1456)	3 years ago
Rafael Korbas	e4c406822c	Add multiasset sending and min validity to Cardano transactions	3 years ago
Andrew Kozlik	79fad70b05	fix: Improve wording when showing multisig XPUBS.	3 years ago
Rafael Korbas	44c7d23741	Cardano: map account paths to account numbers	3 years ago
Pavol Rusnak	7f0e939359	feat(core): implement amount_unit for AuthorizeCoinJoin and SignTx	3 years ago
Pavol Rusnak	e85ed74f8f	core: implement GetAddress.ignore_xpub_magic	3 years ago
Pavol Rusnak	4ed714ba47	common/defs: add xpub_magic_multisig_segwit_{native,p2sh} fields to coins	3 years ago
Rafael Korbas	3a7a8e4d77	Disable "at least one output" restriction for Cardano, warn instead	3 years ago
mcudev	b8ffcadf94	common/defs/fido: add gemini webauthn (#1416)	3 years ago
matejcik	ed628ac4ba	feat(core): make usb endpoints registration nicer	3 years ago
matejcik	fc4e15fe77	feat(core): introduce and enforce limit on label length (fixes #1399)	3 years ago
matejcik	e4b113b4bb	fix(core/monero): make sure to pass strings to rendering	3 years ago
matejcik	fd502f122f	feat(core): implement pagination for sign/verify	3 years ago
matejcik	bbef9c650b	refactor(core): improve render_text behavior ... * use less memory due to copy-less rendering * implement linebreaking on embedded \n	3 years ago
Martin Milata	fa2e672f98	chore(core): monero: drop extraneous async/await	3 years ago
Pavol Rusnak	5728f54b78	core: return root_fingerprint in PublicKey	3 years ago
Pavol Rusnak	92452d54e5	feat(core): implement GetPublicKey.ignore_xpub_magic behaviour	3 years ago
Pavol Rusnak	e660a518c6	fix(core): show xpub instead of pubkey in GetPublicKey dialog	3 years ago
Andrew Kozlik	a609eb5e90	docs(core): Add comment about "Invalid original TXID" message.	4 years ago
Andrew Kozlik	06ce14096c	chore(core): Reject replacement transactions which involve negative ... fees.	4 years ago
Andrew Kozlik	aeb021b159	chore(core): Improve naming of SLIP39's T9 mask lookup.	4 years ago
Pavol Rusnak	1e8673bf5f	style(core/apps): use new syntax for typing	4 years ago
Martin Milata	ee64b65b26	refactor(core): call super().__init__() in subclasses	4 years ago
Martin Milata	fa1566cb71	refactor(core): call super().__init__() in Component and Layout subclasses	4 years ago
Pavol Rusnak	952adc5961	style(core): use PEP515 Underscores in Numeric Literals	4 years ago
matejcik	58387a5f04	fix(common): drop Zilliqa token (fixes #1318)	4 years ago
matejcik	a89494f60c	chore(core): regenerate network and tokens lists	4 years ago
matejcik	4628c774aa	feat(core): re-allow unknown Ethereum networks, using Ethereum or Testnet paths (fixes #1335)	4 years ago
matejcik	7abe70e484	feat(core): improve ethereum tokens ui (fixes #800)	4 years ago
Rafael Korbas	b311bd4d4a	Add displaying of TTL to cardano transaction, align url validation with Ledger	4 years ago
Rafael Korbas	b261f789f3	Add support for stakepool registration to Cardano	4 years ago
Andrew Kozlik	f421a213fd	feat(core): Inform user about transaction finalization in Bitcoin replacement transactions.	4 years ago
Pavol Rusnak	c6e78e525a	fix: remove PIVX (#1359)	4 years ago
matejcik	e6a1bf840f	fix(core): do not subclass `range` ... micropython on real hw dislikes it for some reason also it's completely unnecessary	4 years ago
Pavol Rusnak	50fdd183c2	ci: enable editorconfig checks, fix whitespace issues	4 years ago
matejcik	37d3bf56fa	fix(core): make sure run-time settings are reset after wipe (fixes #1322)	4 years ago
matejcik	50e648636f	doc(core): add references to schema specifications, add Purpose48 document	4 years ago
matejcik	665abe1e02	fix(core/bitcoin): validate path before asking to sign message (which could otherwise fail)	4 years ago
matejcik	f10084117b	feat(core/bitcoin): do not show path warning when GetAddress is called silently (fixes #1206)	4 years ago
matejcik	5a97a5111b	feat(core/ethereum): add SEP5 path schema as well as the compat schema	4 years ago
matejcik	a367426480	feat(core/bitcoin): use path schemas	4 years ago
matejcik	c0879f8625	feat(core/cardano): use path schemas	4 years ago
matejcik	f5c8138df6	feat(core): update most apps to use path schemas	4 years ago
matejcik	4ca8f7b0d6	style(core): use relative imports everywhere ... except Monero, which has a rather complex structure and I don't want to search&replace mess with it in case some of the things break memory layout	4 years ago
matejcik	7fe5c804ff	feat(core): implement BIP-32 path schemas	4 years ago
Andrew Kozlik	70975008cd	chore (core): In apps.bitcoin skip confirmation of fee in PayJoin if the user is not increasing their contribution.	4 years ago
Andrew Kozlik	b213a55428	chore(core): In apps.bitcoin move h_inputs back to bitcoin class.	4 years ago
Andrew Kozlik	4a0c5c371a	feat(core): In apps.bitcoin implement replacement transaction flow.	4 years ago
Andrew Kozlik	bd3fe1d789	chore(core): In apps.bitcoin create a separate class for transaction information.	4 years ago
Andrew Kozlik	469c131678	chore(core): In apps.bitcoin add confirm_replacement and confirm_modify_fee layouts.	4 years ago
Andrew Kozlik	7c2d690e45	chore(core): In apps.bitcoin allow get_tx_digest() to be used for original transactions.	4 years ago
Andrew Kozlik	5fc491c597	chore(core): In apps.bitcoin move BIP143 hashing back to a separate class.	4 years ago
Andrew Kozlik	9a594f4784	fix(core): Fix CoinJoin anonymity gain check in bitcoin approver.	4 years ago
Martin Milata	830592f2d9	feat(core): add experimental_features setting ... The setting is off by default. When it is enabled protobuf messages marked UNSTABLE are rejected after decoding.	4 years ago
Pavol Rusnak	d8534b5ee6	perf(core/extmod): replace HMAC Python implementation with C ... We keep Python implementation of HMAC for Monero in core/src/apps/monero/xmr/crypto/__init__.py	4 years ago
Martin Milata	542f32d3b1	feat(core): add auto_lock_delay and display_rotation to Features	4 years ago
matejcik	e4785d47e0	style: apply black 20.8b1	4 years ago
Rafael Korbas	2173ad97bc	Refactor t<page number> to page<page_number> in cardano get_address call	4 years ago
Rafael Korbas	66dbdc2462	Enforce network id/protocol magic consistency for cardano show address	4 years ago
Juraj Muravsky	638977db7d	Swap path with address type on screen in cardano get address	4 years ago
matejcik	0eed360037	chore: make tx type names shorter ... as suggested by @andrewkozlik: TxAckInputType -> TxInput TxAckOutputType -> TxOutput TxAckPrevTxType -> PrevTx TxAckPrevInputType -> PrevInput TxAckPrevOutputType -> PrevOutput	4 years ago
matejcik	244b264b47	chore(core): fix typing and kwargs usage	4 years ago
matejcik	37025e2a84	feat(core): use specialized protobufs in apps.bitcoin, enable typing	4 years ago
matejcik	6ba08526e1	fix(core): fix type annotations on CoinInfo	4 years ago
Pavol Rusnak	f8489f16e4	fix(common/defs): remove FSN, ICX which migrated to mainnet	4 years ago
Martin Milata	cff4955f93	core: implement SafetyChecks.PromptTemporarily ... Also reword safety checks confirmation dialogs.	4 years ago
Martin Milata	9d2ad96ad4	core: add SafetyCheckLevel to Features	4 years ago
Andrew Kozlik	295710c37d	core/bitcoin: Check ownership proofs using the provided commitment data.	4 years ago
Dusan Klinec	9d7b0bf50c	xmr: fix new transaction type for CLSAG, HF=13	4 years ago
Andrew Kozlik	dad2852db9	core/bitcoin: Stream prev_tx after confirmation.	4 years ago
Tomas Susanka	ebc99435ab	Revert "core: remove ownership messages from the public api for now" ... This reverts commit 0d5f00668f.	4 years ago
Tomas Susanka	b99b8b3df3	Merge remote-tracking branch 'origin/release/2020-09'	4 years ago
Tomas Susanka	19461398d7	core/cardano: reuse derived Shamir seed (fixes #1007)	4 years ago
Tomas Susanka	0d5f00668f	core: remove ownership messages from the public api for now	4 years ago
matejcik	4909821f35	core: implement EndSession	4 years ago
Martin Milata	df5421e7d6	common/defs: update maxfee_kb to 10USD/tx ... Except bitcoin. (cherry picked from commit f51fac3410)	4 years ago
Martin Milata	f51fac3410	common/defs: update maxfee_kb to 10USD/tx ... Except bitcoin.	4 years ago
Pavol Rusnak	41f5237967	common/defs: enable extra_data for FLO ... (cherry picked from commit 534695313c)	4 years ago
Pavol Rusnak	534695313c	common/defs: enable extra_data for FLO	4 years ago
Andrew Kozlik	f2d669ecdc	core/bitcoin: Use dynamic dispatch for confirmation dialogs in sign_tx.	4 years ago
Andrew Kozlik	02da5b7593	core/bitcoin: Show warning if nLockTime is set but ineffective due to all nSequence values being 0xffffffff.	4 years ago
Pavol Rusnak	cdf0f68bb0	core: show passphrase on device	4 years ago
Martin Milata	1b982659c4	core: fix boot loop after uploading invalid homescreen (#1205)	4 years ago
Pavol Rusnak	0620911e46	core: allow spending coins from Bitcoin paths if the coin ... ... has implemented strong replay protection via SIGHASH_FORKID	4 years ago
Alexis Hernandez	96c38315df	common/defs: enable extra_data for XSN (#1208)	4 years ago
gabrielkerekes	431a25b119	Add Cardano README.md	4 years ago
Pavol Rusnak	c3ce9de3ea	core: regenerate coins+tokens	4 years ago
Martin Milata	3f21e8f400	core: display coin name when signing message ... Also when verifying message.	4 years ago
Martin Milata	927ee0812b	core: add hard limit for transaction fees ... The hard limit is set to 10*fee_warning_threshold. The limit is not enforced when `safety_checks` is set to "Prompt".	4 years ago
Tomas Susanka	c9dc38c9f3	core: allow 49/x not 49/x' for Casa	4 years ago
Pavol Rusnak	4e11735d22	core/modtrezorui: remove prefill from text functions ... use display.bar where needed to prefill the areas	4 years ago
matejcik	51ea8ccecd	common: update token support	4 years ago
matejcik	cea634158a	core: make sure Homescreen is properly initialized (fixes #1095)	4 years ago
Tomas Susanka	16827c3135	core: make templates	4 years ago
gabrielkerekes	afa26e7560	Use correct paths for Cardano Byron witnesses	4 years ago
Andrew Kozlik	292d909235	core/base: Implement CancelAuthorization message.	4 years ago
matejcik	cd86f9f477	core/bitcoin: make change check more robust against short paths	4 years ago
Andrew Kozlik	07d9b780a6	core/bitcoin: Change CoinJoin round ID length to 32 bytes and remove rate limiting.	4 years ago
Andrew Kozlik	377bff68f4	core/bitcoin: Implement DoPreauthorized message.	4 years ago
Andrew Kozlik	b9cfecb8b8	core/bitcoin: Support preauthorization in SignTx message for CoinJoin.	4 years ago
Andrew Kozlik	97fc9b74ab	core/bitcoin: Implement CoinJoinApprover.	4 years ago
Andrew Kozlik	d6ee542deb	core/bitcoin: Move transaction confirmation logic from Bitcoin to BasicApprover class.	4 years ago
Andrew Kozlik	00258f2d4d	core/bitcoin: Support preauthorization in GetOwnershipProof message.	4 years ago
Andrew Kozlik	c772de9d3c	core/bitcoin: Support preauthorization in @with_keychain decorator.	4 years ago
Andrew Kozlik	208283e13e	core/bitcoin: Implement AuthorizeCoinJoin message.	4 years ago
Andrew Kozlik	48a331aa1d	core/bitcoin: Add CoinJoinAuthorization class.	4 years ago
Andrew Kozlik	dc32a17335	core/bitcoin: Move BIP32_WALLET_DEPTH to common.	4 years ago
gabrielkerekes	683d7420ff	Fix Cardano Shelley public key validation ... In Shelley Cardano started using the purpose 1852'. Unfortunately, we completely missed that the public key path validation fuction checks for purpose 44' explicitly, which means that the user is shown a warning when deriving public key with the purpose 1852'. Which is always when "logging in" to a wallet. This commit should fix that. I've also updated type hinting in get_public_key.	4 years ago
Gabriel Kerekeš	c0eba979c6	Fix bare 'except' style error - catch Exception instead ... Co-authored-by: Pavol Rusnak <pavol@rusnak.io>	4 years ago
gabrielkerekes	7a1e773b49	Validate transaction metadata	4 years ago
gabrielkerekes	f2ee450410	Include metadata in transaction signing	4 years ago
gabrielkerekes	0438f318b4	Bring back cbor.Raw - to be used for metadata	4 years ago
gabrielkerekes	1ed8b56b7c	Include Byron witness once for each input path	4 years ago
gabrielkerekes	7bf5cab840	Update sign_tx ... Add certificates, withdrawals and metadata hash	4 years ago
gabrielkerekes	a25444efd1	Move to_account_path() to utils	4 years ago
Andrew Kozlik	7d07161efe	common/fido: Unify application labeling between U2F and FIDO2.	4 years ago
Martin Milata	d955e3f1e5	core: rename class Overwintered to Zcashlike	4 years ago
Martin Milata	10387e1869	core: drop zcash v3 tx signing support	4 years ago
gabrielkerekes	6d02aa23d9	Raise wire.DataError when deriving invalid address type	4 years ago
gabrielkerekes	b5f3511c1c	Add support for script addresses in tx outputs	4 years ago
gabrielkerekes	f1b6056edb	Fix staking key hash message ... When deriving an address with a foreign staking key Trezor would crash due to forgotten `decode()` on hexlified staking key hash which was to be displayed. This wasn't discovered while testing because it weirdly would pass with a `aaff00` string, but not with longer ones.	4 years ago
matejcik	c008600d08	core/debug: fail if wait_layout is sent without watch_layout	4 years ago
Martin Milata	3021233eaf	core: remove unimports from bitcoin sign_tx layouts	4 years ago
Pavol Rusnak	cec87bba50	core: remove mono bold font variant (not used anywhere)	4 years ago
matejcik	4eb5b927c0	core/cardano: simplify keychain implementation	4 years ago
Gabriel Kerekeš	d2c1624602	Cardano shelley update 2/3 (#1112)	4 years ago
gabrielkerekes	e1615e60ec	Update Cardano to support Shelley era 1/3 ... Update protobuf - Previous transactions don't need to be sent anymore, because fee is included in the transaction now. Thus transactions_count can be removed from CardanoSignTx message and the CardanoTxAck and CardanoTxRequest messages can be removed altogether. - CardanoTxInputType.type is unused so remove it Add NULL (None type) serialisation to CBOR - Transaction metada must either have a valid structure or CBOR NULL must be used (if metadata is empty) - it can't be simply left out. Add protocol_magics file - Just to have a nicer way of representing protocol magics Update transaction signing - Previous transactions no longer need to be requested - Output building is simplified, since fee doesn't need to be calculated - Remove transaction class since it is no longer needed (only functions remained) - Reorder functions so it reads top to bottom Add protocol magic to byron address on testnet - This has always been a part of the spec, but it hasn't been implemented before, because it wasn't really needed. Update trezorlib Update tests - Transaction messages are no longer required - Expected values are different since tx format changed - Common values in test cases have been extracted Remove unused file - Progress was used when receiving previous transactions Add CRC check to output address validation	4 years ago
matejcik	fdcb64ac24	all: rename protobuf `unsafe_prompts` to `safety_checks`	4 years ago
matejcik	19ad1dae8b	core/bitcoin: allow compatibility namespaces for Casa/Greenaddress	4 years ago
matejcik	b741560997	core/bitcoin: drop unused validate_path_for_bitcoin_public_key	4 years ago
matejcik	407375b0c4	core/bitcoin: move BITCOIN_NAMES to common	4 years ago
matejcik	fd8cb0e061	core/keychain: differentiate error message for ed25519 derivation	4 years ago
matejcik	57b08c98ed	core: raise error on setting passphrase-on-device without passphrase	4 years ago
matejcik	c85d768b81	core: update references to keychain everywhere	4 years ago
matejcik	ff4ec2185e	core: refactor keychain to only support one curve at a time ... also make a cleaner distinction between keychain, seed, path This enables using `unsafe_prompts`, because with the original code, if there was no namespace match, we wouldn't know which curve to use. For ease of implementation, we use a LRU cache for derived keys, instead of the original design "one cache entry per namespace". SLIP21 is now treated completely separately, via `slip21_namespaces` and `derive_slip21` method. If more slip21-like things come in the future, we can instead hang them on the keychain: put a per-curve Keychain object accessible by `keychain[curve_name].derive()`, and the majority usecase will just pass around `keychain[curve_name]` instead of having to specify the curve in every `derive()` call. Or alternately we'll just specify the curve in every `derive()` call, whichever seems more appropriate.	4 years ago
matejcik	8e44132d3c	core: replace load_settings with individual setters	4 years ago
matejcik	1109250dcf	core: add option to allow unsafe prompts	4 years ago
Martin Milata	03f2dab6bc	core: reduce gc.collect calls during bitcon sign_tx	4 years ago
matejcik	5e7fd3aea6	core: use utils.BufferReader instead of apps.common.BytearrayReader	4 years ago
matejcik	a000ea5ec8	core/monero: update Monero app to use synchronous protobuf	4 years ago
matejcik	d568afa80d	core: improve protobuf field caching	4 years ago
Martin Milata	fd117a0c9f	core: raise error on auto-lock value out of range	4 years ago
matejcik	051763575d	core: touch idle timer in keyboards (fixes #1099)	4 years ago
Andrew Kozlik	eb28998f98	core/bitcoin: Support multiple change-outputs.	4 years ago
Andrew Kozlik	37f4dcc7e5	core/bitcoin: Rename witness_p2wsh() to witness_multisig().	4 years ago
Andrew Kozlik	9cd600f79e	core/bitcoin: Add special confirmation screen for transactions with external inputs.	4 years ago
Andrew Kozlik	64d9350de2	core/bitcoin: Implement GetOwnershipId message.	4 years ago
Andrew Kozlik	712ec68c1b	core/bitcoin: Add support for external inputs with proof of non-ownership.	4 years ago
Andrew Kozlik	d4317d1536	core/bitcoin: Implement generation and verification of SLIP-0019 proofs of ownership.	4 years ago
Andrew Kozlik	d52de28704	core/bitcoin: Implement BIP-322 SignatureProof container.	4 years ago
Andrew Kozlik	d48a372ca7	core/sign_tx: Implement support for signed external inputs.	4 years ago
Andrew Kozlik	78f14d286e	core/sign_tx: Factor out get_legacy_tx_digest() from sign_nonsegwit_input().	4 years ago
Andrew Kozlik	61e2d4d5e5	core/bitcoin: Implement signature verifier.	4 years ago
Andrew Kozlik	5378e12ba2	core/bitcoin: Clarify hash_type vs. sighash_type terminology.	4 years ago
Andrew Kozlik	d1e043f417	core/bitcoin: Implement parsing of scripts and witnesses for signature verification.	4 years ago
Andrew Kozlik	173bb7ed13	core/bitcoin: Replace TxInputType parameter in input_derive_script.	4 years ago
Andrew Kozlik	a901573ea2	core/bitcoin: Move script types from helpers to common.	4 years ago
Andrew Kozlik	3b6c1e5e6b	core/crypto: Add functions for verifying DER encoded signatures.	4 years ago
Andrew Kozlik	9459c5a5c2	core/common: Add BytearrayReader and basic reader functions.	4 years ago
Andrew Kozlik	99f01cd316	core/sign_tx: Check script_pubkeys of inputs.	4 years ago
Andrew Kozlik	e7f230d66e	core/sign_tx: Use varint length encoding for witness stack items.	4 years ago
Tomas Susanka	0f9a2459d3	core: make QR code smaller for Monero	4 years ago
matejcik	e6e3043096	all: implement support for pre-overwinter prevtx (fixes #1030)	4 years ago
Tomas Susanka	e534ae3ad7	legacy, core: rename Features.pin_cached to unlocked and unify	4 years ago
Tomas Susanka	a6acefbdf5	core: wipe before reset and recovery; introduce 'intialized' field	4 years ago
Andrey	1eeaa1e5cf	Enable extra_data for Zcoin. Changed coininfo.py	4 years ago
Tomas Susanka	b67be7dd9e	core: forbid all settings if not initialized	4 years ago
Tomas Susanka	981d079d7f	core/signverify: add failsafe for an empty message header	4 years ago
Tomas Susanka	56fe5adcfc	Merge branch 'release/2020-06'	4 years ago
Pavol Rusnak	5262ef84cf	common/defs/fido: add aws and tutanota	4 years ago
matejcik	7579ac5274	core: fix rendering issues in homescreens	4 years ago
matejcik	872e0fb0e0	core: lower scheduler resolution to milliseconds ... This avoids problems with large timeouts causing the scheduler queue to think the time counter has overflown, and ordering the autolock task before immediate tasks. The maximum reasonable time difference is 0x20000000, which in microseconds is ~8 minutes, but in milliseconds a more reasonable ~6 days.	4 years ago
matejcik	847691798b	core: simplify homescreen and lockscreen implementations	4 years ago
matejcik	4bc865794f	core: only unlock storage if it is locked (solves determinism issue in tests)	4 years ago
matejcik	70f67883c5	core: fix artifacts in click-based UI tests	4 years ago
matejcik	bc9247e18d	core: add Cancel to a list of allowed messages while locked	4 years ago
matejcik	f32c2f9e23	core: replace workflow.kill_default with workflow.close_others	4 years ago