190 Commits (426eae4dfcb853041419030bbb104cc2bbf6629f)

Author	SHA1	Message	Date
Andrew Kozlik	a17cdb7cfa	feat(core): Implement Taproot signing.	3 years ago
Andrew Kozlik	381e8bc85a	feat(core): Implement the BIP-341 common signature message computation.	3 years ago
Andrew Kozlik	99e4ed6f42	chore(core): Support script_pubkey parameter for Bitcoin inputs.	3 years ago
Andrew Kozlik	630c06e782	feat(core): Support Taproot scripts.	3 years ago
Andrew Kozlik	68ad1b07d2	feat(core): Recognize Taproot inputs.	3 years ago
Pavol Rusnak	57fddcfd9d	feat(core): recognize Taproot change-outputs	3 years ago
Andrew Kozlik	dd7ed61939	feat(core): Implement GetAddress for taproot.	3 years ago
Pavol Rusnak	6406f0640d	feat(core): introduce PATTERN_BIP86 to keychain	3 years ago
Andrew Kozlik	cf14e06aa0	feat(core): Show address confirmation in SignMessage.	3 years ago
Andrew Kozlik	bc4a56b2c0	feat(core): Support no_script_type option in SignMessage.	3 years ago
matejcik	f7c340f333	feat(core/bitcoin): show lock_time as human readable datetime	3 years ago
matejcik	e972839ac7	style(all): fix pylint complaints ... [no changelog]	3 years ago
Andrew Kozlik	9d03112846	feat(core): Implement sending to taproot addresses.	3 years ago
Pavol Rusnak	ea0fb08fed	feat(core): add witness version to encode_bech32_address()	3 years ago
Pavol Rusnak	fea240ed40	feat(core): add support for Taproot descriptors	3 years ago
amadejpapez	85ba7c12ba	style(all): use f-strings for formatting ... [no changelog]	3 years ago
Martin Milata	b5710b820a	docs(core): replace Purpose48 with BIP-48 ... https://github.com/bitcoin/bips/blob/master/bip-0048.mediawiki	3 years ago
Martin Milata	2a91052b02	refactor(core/ui): move altcoin and webauthn layouts to separate file ... Also fix types.	3 years ago
Martin Milata	574dcbc8a3	refactor(core): convert apps.common to layouts	3 years ago
matejcik	fcb5f88318	fix(core/bitcoin): nicer UI for ownership proofs	3 years ago
matejcik	ad6976e01f	refactor(core): use confirm_blob instead of confirm_hex in apps	3 years ago
Andrew Kozlik	7811204ed5	refactor(core/bitcoin): Use HashWriter in address derivation.	3 years ago
Andrew Kozlik	2c003052f5	refactor(core/bitcoin): Change CoinInfo.script_hash to be a HashContext.	3 years ago
Andrew Kozlik	27e6f35f78	refactor(core/bitcoin): Change scripts to use writer semantics.	3 years ago
Andrew Kozlik	8538f55edc	refactor(core/bitcoin): Use global static buffer for Tx serialization.	3 years ago
Andrew Kozlik	3e9f8a32ac	fix(core): Fix insufficient BIP-32 path checks. ... - Disable testnet coins from accessing Bitcoin paths. - Restrict BIP-45 paths to Bitcoin and coins with strong replay protection.	3 years ago
Martin Milata	ffb400180d	refactor(core/ui): more consistent layout parameter names	3 years ago
Martin Milata	16094df0c5	refactor(core): convert most of apps.monero to layouts ... Progress popups are not ported yet as they're unlike anything else. Introduces paginate_paragraphs.	3 years ago
Jan Pochyla	a8623c4b59	refactor(core): fix imports and use new protobuf API in apps	3 years ago
matejcik	f1a54f2108	refactor(core): remove more global imports	3 years ago
matejcik	aaa3ce6117	fix(core/bitcoin): fix CoinJoin authorization with new cache	3 years ago
matejcik	1822aebdb4	feat(core): prefill field_cache in bitcoin app	3 years ago
matejcik	f3db4f2dd3	refactor(core): defragment PathSchema memory usage	3 years ago
matejcik	e629a72c3a	refactor(core): move app registrations to a single handler function ... apps.webauthn.boot() does not need an if-condition because it's only called from session.py when the usb interface is enabled This means that they do not need to be stored in RAM at all. The obvious drawback is that we need to hand-edit the if/elif sequence, but we don't register new handlers all that often so 🤷	3 years ago
matejcik	ea505b592c	refactor(core): move empty_bytearray to trezor.utils	3 years ago
Martin Milata	ac711fb8ee	style(core): use more recent type annotation syntax ... https://www.python.org/dev/peps/pep-0585/ - Type Hinting Generics In Standard Collections https://www.python.org/dev/peps/pep-0604/ - Allow writing union types as X | Y	3 years ago
Martin Milata	8b3ac659a0	style(core): mypy: disable implicit Optional for function arguments ... https://www.python.org/dev/peps/pep-0484/#union-types	3 years ago
Martin Milata	c0174ff217	refactor(core/ui): raise exception on dialog cancel by default	3 years ago
Martin Milata	2b6ea25712	refactor(core): convert rest of apps.bitcoin to layouts	3 years ago
Andrew Kozlik	b10acbe153	feat(core): Allow decreasing output amount in RBF transactions.	3 years ago
Andrew Kozlik	6de20a7dcd	chore(core/bitcoin): Add DecredApprover.	3 years ago
Andrew Kozlik	523b1051c5	chore(core/bitcoin): Add stricter script_type checks in sanitizers.	3 years ago
Andrew Kozlik	6e8eebfc9c	chore(core/bitcoin): Separate Decred-specific scripts from Bitcoin scripts.	3 years ago
JoeGruff	e3ea32a986	multi: Add decred staking. ... Add two new input and four output script types. Decred ticket purchases consist of a stake submission, op returns, and change addresses. Although change addresses are allowed by consensus, they are no longer used in practice and so have been given the restrictions of a null pubkey and no value. Stake scripts are almost identical to p2pkh or p2sh except for an extra opcode in front. Inputs are currently only used in the form of one input three outputs with the first output, or stake submission, paying to a public key hash, or with two inputs and five outputs with the stake submission paying to a multisig script hash. The op returns are directed to the user in the case of one and the voting service provider and user in the case of two. One of the sstx commitment for a ticket must pay back to the trezor wallet. This is checked and an error is thrown if we don't find the expected public key hash. Because this adds the ability to create new types of outputs once the ticket votes, two new input script types are also needed. A successful vote will lead to a stake generation script that must be spent, and an unsuccessful vote will lead to a revocation script that must be spent. If we allowed stake change scripts to have a valid pubkey, that too would require another op code, but we disallow those for output.	3 years ago
Andrew Kozlik	850aa56691	docs(core): Add references to SLIPs in the code.	3 years ago
Buck Perley	682298d7bb	fix(core): add exceptions for unchained capital paths	3 years ago
Andrew Kozlik	78a2ff16d4	fix(core): In apps.bitcoin ensure that get_address() fails for multisig if user's public key is not included. ... (cherry picked from commit 77f5e90466)	3 years ago
Martin Milata	391602ae99	refactor(core): turn show_address, show_pubkey, show_xpub into layouts	3 years ago
Martin Milata	f38abf9d89	refactor(core): introduce layouts ... Layouts can be used by the application code to interact with user using small number of dialogs or other groups of UI components. Each layout is identified by name and takes some parameters. Most layouts will have an implementation for each hardware model, mechanism is provided to import the correct version so that application code can be oblivious to the model. This commit introduces the layout concept and converts a couple of dialogs to use it.	3 years ago
Martin Milata	f1382bf892	refactor(core): model-dependent UI component directories ... They now live under trezor.ui.components.tt. Later trezor.ui.components.t1 will be added and application code will be rewritten to not use them directly in order to work on both TT and T1.	3 years ago
Andrew Kozlik	79fad70b05	fix: Improve wording when showing multisig XPUBS.	3 years ago
Pavol Rusnak	7f0e939359	feat(core): implement amount_unit for AuthorizeCoinJoin and SignTx	3 years ago
Pavol Rusnak	e85ed74f8f	core: implement GetAddress.ignore_xpub_magic	3 years ago
Pavol Rusnak	5728f54b78	core: return root_fingerprint in PublicKey	3 years ago
Pavol Rusnak	92452d54e5	feat(core): implement GetPublicKey.ignore_xpub_magic behaviour	3 years ago
Pavol Rusnak	e660a518c6	fix(core): show xpub instead of pubkey in GetPublicKey dialog	3 years ago
Andrew Kozlik	a609eb5e90	docs(core): Add comment about "Invalid original TXID" message.	4 years ago
Andrew Kozlik	06ce14096c	chore(core): Reject replacement transactions which involve negative ... fees.	4 years ago
Pavol Rusnak	1e8673bf5f	style(core/apps): use new syntax for typing	4 years ago
Martin Milata	ee64b65b26	refactor(core): call super().__init__() in subclasses	4 years ago
Pavol Rusnak	952adc5961	style(core): use PEP515 Underscores in Numeric Literals	4 years ago
Andrew Kozlik	f421a213fd	feat(core): Inform user about transaction finalization in Bitcoin replacement transactions.	4 years ago
matejcik	50e648636f	doc(core): add references to schema specifications, add Purpose48 document	4 years ago
matejcik	665abe1e02	fix(core/bitcoin): validate path before asking to sign message (which could otherwise fail)	4 years ago
matejcik	f10084117b	feat(core/bitcoin): do not show path warning when GetAddress is called silently (fixes #1206)	4 years ago
matejcik	a367426480	feat(core/bitcoin): use path schemas	4 years ago
Andrew Kozlik	70975008cd	chore (core): In apps.bitcoin skip confirmation of fee in PayJoin if the user is not increasing their contribution.	4 years ago
Andrew Kozlik	b213a55428	chore(core): In apps.bitcoin move h_inputs back to bitcoin class.	4 years ago
Andrew Kozlik	4a0c5c371a	feat(core): In apps.bitcoin implement replacement transaction flow.	4 years ago
Andrew Kozlik	bd3fe1d789	chore(core): In apps.bitcoin create a separate class for transaction information.	4 years ago
Andrew Kozlik	469c131678	chore(core): In apps.bitcoin add confirm_replacement and confirm_modify_fee layouts.	4 years ago
Andrew Kozlik	7c2d690e45	chore(core): In apps.bitcoin allow get_tx_digest() to be used for original transactions.	4 years ago
Andrew Kozlik	5fc491c597	chore(core): In apps.bitcoin move BIP143 hashing back to a separate class.	4 years ago
Andrew Kozlik	9a594f4784	fix(core): Fix CoinJoin anonymity gain check in bitcoin approver.	4 years ago
Pavol Rusnak	d8534b5ee6	perf(core/extmod): replace HMAC Python implementation with C ... We keep Python implementation of HMAC for Monero in core/src/apps/monero/xmr/crypto/__init__.py	4 years ago
matejcik	e4785d47e0	style: apply black 20.8b1	4 years ago
matejcik	0eed360037	chore: make tx type names shorter ... as suggested by @andrewkozlik: TxAckInputType -> TxInput TxAckOutputType -> TxOutput TxAckPrevTxType -> PrevTx TxAckPrevInputType -> PrevInput TxAckPrevOutputType -> PrevOutput	4 years ago
matejcik	37025e2a84	feat(core): use specialized protobufs in apps.bitcoin, enable typing	4 years ago
Martin Milata	cff4955f93	core: implement SafetyChecks.PromptTemporarily ... Also reword safety checks confirmation dialogs.	4 years ago
Andrew Kozlik	295710c37d	core/bitcoin: Check ownership proofs using the provided commitment data.	4 years ago
Andrew Kozlik	dad2852db9	core/bitcoin: Stream prev_tx after confirmation.	4 years ago
Tomas Susanka	ebc99435ab	Revert "core: remove ownership messages from the public api for now" ... This reverts commit 0d5f00668f.	4 years ago
Tomas Susanka	0d5f00668f	core: remove ownership messages from the public api for now	4 years ago
Andrew Kozlik	f2d669ecdc	core/bitcoin: Use dynamic dispatch for confirmation dialogs in sign_tx.	4 years ago
Andrew Kozlik	02da5b7593	core/bitcoin: Show warning if nLockTime is set but ineffective due to all nSequence values being 0xffffffff.	4 years ago
Pavol Rusnak	0620911e46	core: allow spending coins from Bitcoin paths if the coin ... ... has implemented strong replay protection via SIGHASH_FORKID	4 years ago
Martin Milata	3f21e8f400	core: display coin name when signing message ... Also when verifying message.	4 years ago
Martin Milata	927ee0812b	core: add hard limit for transaction fees ... The hard limit is set to 10*fee_warning_threshold. The limit is not enforced when `safety_checks` is set to "Prompt".	4 years ago
Tomas Susanka	c9dc38c9f3	core: allow 49/x not 49/x' for Casa	4 years ago
matejcik	cd86f9f477	core/bitcoin: make change check more robust against short paths	4 years ago
Andrew Kozlik	07d9b780a6	core/bitcoin: Change CoinJoin round ID length to 32 bytes and remove rate limiting.	4 years ago
Andrew Kozlik	377bff68f4	core/bitcoin: Implement DoPreauthorized message.	4 years ago
Andrew Kozlik	b9cfecb8b8	core/bitcoin: Support preauthorization in SignTx message for CoinJoin.	4 years ago
Andrew Kozlik	97fc9b74ab	core/bitcoin: Implement CoinJoinApprover.	4 years ago
Andrew Kozlik	d6ee542deb	core/bitcoin: Move transaction confirmation logic from Bitcoin to BasicApprover class.	4 years ago
Andrew Kozlik	00258f2d4d	core/bitcoin: Support preauthorization in GetOwnershipProof message.	4 years ago
Andrew Kozlik	c772de9d3c	core/bitcoin: Support preauthorization in @with_keychain decorator.	4 years ago
Andrew Kozlik	208283e13e	core/bitcoin: Implement AuthorizeCoinJoin message.	4 years ago
Andrew Kozlik	48a331aa1d	core/bitcoin: Add CoinJoinAuthorization class.	4 years ago
Andrew Kozlik	dc32a17335	core/bitcoin: Move BIP32_WALLET_DEPTH to common.	4 years ago