1787 Commits

Author	SHA1	Message	Date
Andrew Kozlik	07d9b780a6	core/bitcoin: Change CoinJoin round ID length to 32 bytes and remove rate limiting.	2020-08-04 17:32:44 +02:00
Andrew Kozlik	377bff68f4	core/bitcoin: Implement DoPreauthorized message.	2020-08-04 17:32:44 +02:00
Andrew Kozlik	2c30dd62fc	common: Add DoPreauthorized message.	2020-08-04 17:32:44 +02:00
Andrew Kozlik	b9cfecb8b8	core/bitcoin: Support preauthorization in SignTx message for CoinJoin.	2020-08-04 17:32:44 +02:00
Andrew Kozlik	97fc9b74ab	core/bitcoin: Implement CoinJoinApprover.	2020-08-04 17:32:44 +02:00
Andrew Kozlik	472e853f0a	core/tests: Fix unit tests to work with BasicApprover in sign_tx.	2020-08-04 17:32:44 +02:00
Andrew Kozlik	d6ee542deb	core/bitcoin: Move transaction confirmation logic from Bitcoin to BasicApprover class.	2020-08-04 17:32:44 +02:00
Andrew Kozlik	00258f2d4d	core/bitcoin: Support preauthorization in GetOwnershipProof message.	2020-08-04 17:32:44 +02:00
Andrew Kozlik	c772de9d3c	core/bitcoin: Support preauthorization in @with_keychain decorator.	2020-08-04 17:32:44 +02:00
Andrew Kozlik	208283e13e	core/bitcoin: Implement AuthorizeCoinJoin message.	2020-08-04 17:32:44 +02:00
Andrew Kozlik	48a331aa1d	core/bitcoin: Add CoinJoinAuthorization class.	2020-08-04 17:32:44 +02:00
Andrew Kozlik	dc32a17335	core/bitcoin: Move BIP32_WALLET_DEPTH to common.	2020-08-04 17:32:44 +02:00
Andrew Kozlik	bbab13f6e7	common/protob: Add AuthorizeCoinJoin message.	2020-08-04 17:32:44 +02:00
Ondřej Vejpustek	59002118c0	core/extmod: explicitly initialize automatic variables	2020-08-04 14:50:07 +02:00
gabrielkerekes	683d7420ff	Fix Cardano Shelley public key validation ... In Shelley Cardano started using the purpose 1852'. Unfortunately, we completely missed that the public key path validation fuction checks for purpose 44' explicitly, which means that the user is shown a warning when deriving public key with the purpose 1852'. Which is always when "logging in" to a wallet. This commit should fix that. I've also updated type hinting in get_public_key.	2020-08-04 13:03:57 +02:00
matejcik	c3afb93837	core/tests: improve test harness (fixes #1157)	2020-08-04 10:27:44 +02:00
Pavol Rusnak	efc5ccdaf0	core: remove src1	2020-08-03 15:59:57 +02:00
Tomas Susanka	16a5858544	core: add Casa/Greenaddress paths exceptions to Changelog	2020-08-03 15:51:35 +02:00
Martin Milata	e5bdca655a	core: don't scale emulator background image ... Makes the emulator look nicer in tiling window managers.	2020-07-31 12:27:43 +02:00
Gabriel Kerekeš	c0eba979c6	Fix bare 'except' style error - catch Exception instead ... Co-authored-by: Pavol Rusnak <pavol@rusnak.io>	2020-07-30 17:17:03 +02:00
gabrielkerekes	7a1e773b49	Validate transaction metadata	2020-07-30 17:17:03 +02:00
gabrielkerekes	f2ee450410	Include metadata in transaction signing	2020-07-30 17:17:03 +02:00
gabrielkerekes	0438f318b4	Bring back cbor.Raw - to be used for metadata	2020-07-30 17:17:03 +02:00
gabrielkerekes	1ed8b56b7c	Include Byron witness once for each input path	2020-07-30 17:17:03 +02:00
gabrielkerekes	7bf5cab840	Update sign_tx ... Add certificates, withdrawals and metadata hash	2020-07-30 17:17:03 +02:00
gabrielkerekes	a25444efd1	Move to_account_path() to utils	2020-07-30 17:17:03 +02:00
gabrielkerekes	e92baf5b02	Update protobuf	2020-07-30 17:17:03 +02:00
Andrew Kozlik	7d07161efe	common/fido: Unify application labeling between U2F and FIDO2.	2020-07-30 15:29:54 +02:00
Pavol Rusnak	063aba910d	core: rename emulator to trezor-emu-core	2020-07-30 15:27:34 +02:00
matejcik	8502412dbc	core/emulator: assume -m main when no arguments are provided ... fixes #1115	2020-07-30 15:27:34 +02:00
Martin Milata	d955e3f1e5	core: rename class Overwintered to Zcashlike	2020-07-30 15:14:18 +02:00
Martin Milata	10387e1869	core: drop zcash v3 tx signing support	2020-07-30 15:14:18 +02:00
gabrielkerekes	6d02aa23d9	Raise wire.DataError when deriving invalid address type	2020-07-30 14:43:32 +02:00
gabrielkerekes	b5f3511c1c	Add support for script addresses in tx outputs	2020-07-30 14:43:32 +02:00
gabrielkerekes	f1b6056edb	Fix staking key hash message ... When deriving an address with a foreign staking key Trezor would crash due to forgotten `decode()` on hexlified staking key hash which was to be displayed. This wasn't discovered while testing because it weirdly would pass with a `aaff00` string, but not with longer ones.	2020-07-30 14:43:32 +02:00
matejcik	c008600d08	core/debug: fail if wait_layout is sent without watch_layout	2020-07-29 11:50:47 +02:00
Pavol Rusnak	9a673db647	core: fix build on T1 ... file src/apps/base.py was added unconditionally breaking the T1 build	2020-07-28 12:12:53 +02:00
Pavol Rusnak	a6451dad46	core/fonts: update headers	2020-07-28 10:56:41 +02:00
Martin Milata	3021233eaf	core: remove unimports from bitcoin sign_tx layouts	2020-07-28 10:51:28 +02:00
Pavol Rusnak	47e7550423	core/extmod: add font_pixeloperator{,mono}, use this font for T1	2020-07-28 09:40:30 +02:00
Pavol Rusnak	cec87bba50	core: remove mono bold font variant (not used anywhere)	2020-07-27 23:22:34 +02:00
Pavol Rusnak	e6baaa7ed9	core/src1: use display.text instead of display.print	2020-07-27 17:40:34 +02:00
Pavol Rusnak	de43dde1e9	core: make emu.sh respect TREZOR_MODEL env variable	2020-07-27 17:38:55 +02:00
Pavol Rusnak	8bc32d035b	core/extmod: enable display_text* methods for other models than T	2020-07-27 17:24:13 +02:00
Pavol Rusnak	df03534955	core: print inverted question mark for nonprintable characters	2020-07-27 16:29:11 +02:00
Pavol Rusnak	89d701ed08	core+legacy: bump versions (also in changelogs)	2020-07-27 13:59:49 +02:00
matejcik	4eb5b927c0	core/cardano: simplify keychain implementation	2020-07-27 13:24:51 +02:00
Gabriel Kerekeš	d2c1624602	Cardano shelley update 2/3 (#1112)	2020-07-27 13:11:23 +02:00
gabrielkerekes	e1615e60ec	Update Cardano to support Shelley era 1/3 ... Update protobuf - Previous transactions don't need to be sent anymore, because fee is included in the transaction now. Thus transactions_count can be removed from CardanoSignTx message and the CardanoTxAck and CardanoTxRequest messages can be removed altogether. - CardanoTxInputType.type is unused so remove it Add NULL (None type) serialisation to CBOR - Transaction metada must either have a valid structure or CBOR NULL must be used (if metadata is empty) - it can't be simply left out. Add protocol_magics file - Just to have a nicer way of representing protocol magics Update transaction signing - Previous transactions no longer need to be requested - Output building is simplified, since fee doesn't need to be calculated - Remove transaction class since it is no longer needed (only functions remained) - Reorder functions so it reads top to bottom Add protocol magic to byron address on testnet - This has always been a part of the spec, but it hasn't been implemented before, because it wasn't really needed. Update trezorlib Update tests - Transaction messages are no longer required - Expected values are different since tx format changed - Common values in test cases have been extracted Remove unused file - Progress was used when receiving previous transactions Add CRC check to output address validation	2020-07-27 13:04:49 +02:00
Pavol Rusnak	88aa3cf168	core: convert old changelogs to new format	2020-07-27 12:14:00 +02:00
Pavol Rusnak	8dacad0782	core/bootloader: update protobuf definitions	2020-07-26 00:00:37 +02:00
matejcik	fdcb64ac24	all: rename protobuf unsafe_prompts to safety_checks	2020-07-24 16:37:58 +02:00
matejcik	19ad1dae8b	core/bitcoin: allow compatibility namespaces for Casa/Greenaddress	2020-07-24 16:37:58 +02:00
matejcik	b741560997	core/bitcoin: drop unused validate_path_for_bitcoin_public_key	2020-07-24 16:37:58 +02:00
matejcik	407375b0c4	core/bitcoin: move BITCOIN_NAMES to common	2020-07-24 16:37:58 +02:00
matejcik	8f8e793155	core, python: add changelogs	2020-07-24 16:37:58 +02:00
matejcik	fd8cb0e061	core/keychain: differentiate error message for ed25519 derivation	2020-07-24 16:37:58 +02:00
matejcik	0438f83a94	core: use public as named argument instead of comment	2020-07-24 16:37:58 +02:00
matejcik	57b08c98ed	core: raise error on setting passphrase-on-device without passphrase	2020-07-24 16:37:58 +02:00
matejcik	58f460627f	core/tests: add unit tests for new functionality	2020-07-24 16:37:58 +02:00
matejcik	a461853cf6	core/tests: fix bitcoin unit tests	2020-07-24 16:37:58 +02:00
matejcik	c85d768b81	core: update references to keychain everywhere	2020-07-24 16:37:58 +02:00
matejcik	ff4ec2185e	core: refactor keychain to only support one curve at a time ... also make a cleaner distinction between keychain, seed, path This enables using `unsafe_prompts`, because with the original code, if there was no namespace match, we wouldn't know which curve to use. For ease of implementation, we use a LRU cache for derived keys, instead of the original design "one cache entry per namespace". SLIP21 is now treated completely separately, via `slip21_namespaces` and `derive_slip21` method. If more slip21-like things come in the future, we can instead hang them on the keychain: put a per-curve Keychain object accessible by `keychain[curve_name].derive()`, and the majority usecase will just pass around `keychain[curve_name]` instead of having to specify the curve in every `derive()` call. Or alternately we'll just specify the curve in every `derive()` call, whichever seems more appropriate.	2020-07-24 16:37:58 +02:00
matejcik	fa757f4b7f	core: improve type annotation for bip32.derive_path	2020-07-24 16:37:58 +02:00
matejcik	8e44132d3c	core: replace load_settings with individual setters	2020-07-24 16:37:58 +02:00
matejcik	1109250dcf	core: add option to allow unsafe prompts	2020-07-24 16:37:58 +02:00
Martin Milata	03f2dab6bc	core: reduce gc.collect calls during bitcon sign_tx	2020-07-24 15:35:09 +02:00
matejcik	c3a61998cb	core: generate resdata by Mako, use if/elif trick to save RAM	2020-07-24 14:09:31 +02:00
matejcik	125079a8a4	core: add changelog entry for synchronous protobuf	2020-07-24 14:09:31 +02:00
matejcik	7befdd07e4	core/tests: update unit tests	2020-07-24 14:09:31 +02:00
matejcik	5e7fd3aea6	core: use utils.BufferReader instead of apps.common.BytearrayReader	2020-07-24 14:09:31 +02:00
matejcik	1ff4a0d239	core: separate BufferIO into Reader (read-only) and Writer ... also integrates BytearrayReader API into BufferReader	2020-07-24 14:09:31 +02:00
matejcik	3514a31bc9	core: make USB codec resilient to OOM conditions	2020-07-24 14:09:31 +02:00
matejcik	0a758b8181	core/tests: add synchronous protobuf tests	2020-07-24 14:09:31 +02:00
matejcik	31e2170766	core: make protobuf buffer smaller, dynamically allocate bigger if necessary	2020-07-24 14:09:31 +02:00
matejcik	a000ea5ec8	core/monero: update Monero app to use synchronous protobuf	2020-07-24 14:09:31 +02:00
matejcik	01d695283f	core: make protobuf buffer bigger	2020-07-24 14:09:31 +02:00
matejcik	0c3bc53aee	core: clean up types for field caching, fix count_message	2020-07-24 14:09:31 +02:00
matejcik	f723dca7b1	core: enable PYSTACK	2020-07-24 14:09:31 +02:00
matejcik	d568afa80d	core: improve protobuf field caching	2020-07-24 14:09:31 +02:00
matejcik	85d74ece76	core: implement synchronous v1 codec	2020-07-24 14:09:31 +02:00
Tomas Susanka	34bd57006f	core, legacy: set version of the upcoming release in Changelog	2020-07-24 12:33:46 +02:00
Martin Milata	fd117a0c9f	core: raise error on auto-lock value out of range	2020-07-22 21:38:42 +02:00
Andrew Kozlik	4005f4832f	core/embed: Set VCP write timeout to 0.	2020-07-16 09:34:58 +02:00
Ondrej Mikle	33d2bf417b	core: replace bootloader only in production. Fix device for T1 core port JLink upload	2020-07-13 10:45:32 +02:00
matejcik	051763575d	core: touch idle timer in keyboards (fixes #1099)	2020-07-10 14:05:52 +02:00
matejcik	2c4ecff0a4	core: fix synthetic events breaking io.poll delay calculation	2020-07-10 14:05:52 +02:00
Andrew Kozlik	eb28998f98	core/bitcoin: Support multiple change-outputs.	2020-07-09 15:51:23 +02:00
matejcik	2c8e5f527b	all: rename changelogs to .md for highlighting	2020-07-08 10:43:40 +02:00
matejcik	a19a9a318a	all: improve changelog formatting	2020-07-08 10:43:40 +02:00
matejcik	476cf2ee8f	core, legacy: more changelog entries	2020-07-08 10:43:40 +02:00
Pavol Rusnak	57ae902aed	core/monero: don't download test binary even if hash is different	2020-07-03 15:18:38 +02:00
Pavol Rusnak	5d666376f0	core/monero: update tests binary	2020-07-03 15:18:38 +02:00
Andrew Kozlik	37f4dcc7e5	core/bitcoin: Rename witness_p2wsh() to witness_multisig().	2020-07-03 11:17:19 +02:00
Andrew Kozlik	91b615c217	core: Update changelog.	2020-07-03 11:17:19 +02:00
Andrew Kozlik	9cd600f79e	core/bitcoin: Add special confirmation screen for transactions with external inputs.	2020-07-03 11:17:19 +02:00
Andrew Kozlik	64d9350de2	core/bitcoin: Implement GetOwnershipId message.	2020-07-03 11:17:19 +02:00
Andrew Kozlik	533de50588	common/protob: Add GetOwnershipId message.	2020-07-03 11:17:19 +02:00
Andrew Kozlik	712ec68c1b	core/bitcoin: Add support for external inputs with proof of non-ownership.	2020-07-03 11:17:19 +02:00
Andrew Kozlik	956ea9a94f	common: Add ownership_proof field to TxInputType.	2020-07-03 11:17:19 +02:00
Andrew Kozlik	791ff3fe06	core/tests: Add unit tests for SLIP-0019 proofs of ownership.	2020-07-03 11:17:19 +02:00
Andrew Kozlik	d4317d1536	core/bitcoin: Implement generation and verification of SLIP-0019 proofs of ownership.	2020-07-03 11:17:19 +02:00
Andrew Kozlik	d52de28704	core/bitcoin: Implement BIP-322 SignatureProof container.	2020-07-03 11:17:19 +02:00
Andrew Kozlik	c723c78529	common/protob: Add GetOwnershipProof message.	2020-07-03 11:17:19 +02:00
Andrew Kozlik	d48a372ca7	core/sign_tx: Implement support for signed external inputs.	2020-07-03 11:17:19 +02:00
Andrew Kozlik	78f14d286e	core/sign_tx: Factor out get_legacy_tx_digest() from sign_nonsegwit_input().	2020-07-03 11:17:19 +02:00
Andrew Kozlik	61e2d4d5e5	core/bitcoin: Implement signature verifier.	2020-07-03 11:17:19 +02:00
Andrew Kozlik	5378e12ba2	core/bitcoin: Clarify hash_type vs. sighash_type terminology.	2020-07-03 11:17:19 +02:00
Andrew Kozlik	d1e043f417	core/bitcoin: Implement parsing of scripts and witnesses for signature verification.	2020-07-03 11:17:19 +02:00
Andrew Kozlik	173bb7ed13	core/bitcoin: Replace TxInputType parameter in input_derive_script.	2020-07-03 11:17:19 +02:00
Andrew Kozlik	a901573ea2	core/bitcoin: Move script types from helpers to common.	2020-07-03 11:17:19 +02:00
Andrew Kozlik	3b6c1e5e6b	core/crypto: Add functions for verifying DER encoded signatures.	2020-07-03 11:17:19 +02:00
Andrew Kozlik	9459c5a5c2	core/common: Add BytearrayReader and basic reader functions.	2020-07-03 11:17:19 +02:00
Andrew Kozlik	99f01cd316	core/sign_tx: Check script_pubkeys of inputs.	2020-07-03 11:17:19 +02:00
Andrew Kozlik	cc655575c8	common: Add witness field to TxInputType.	2020-07-03 11:17:19 +02:00
Andrew Kozlik	872768928b	core/crypto: Fix endianity in DER length encoding.	2020-07-03 11:17:19 +02:00
Andrew Kozlik	e7f230d66e	core/sign_tx: Use varint length encoding for witness stack items.	2020-07-03 11:17:19 +02:00
Tomas Susanka	3a3e5739b0	core, legacy: update changelogs	2020-07-02 09:09:34 +00:00
Tomas Susanka	fc9eb63114	core: add previous commit to changelog	2020-07-01 17:37:47 +00:00
Tomas Susanka	0f9a2459d3	core: make QR code smaller for Monero	2020-07-01 17:20:04 +00:00
Tomas Susanka	ca3dd2bfb9	common: skip deprecated fields during generation; deprecate overwintered field in Zcash	2020-06-30 16:02:21 +02:00
matejcik	e6e3043096	all: implement support for pre-overwinter prevtx (fixes #1030)	2020-06-30 15:19:31 +02:00
Andrew Kozlik	f382f77c89	core/ui: Fix repaint bug in QR code rendering #1067.	2020-06-25 12:25:41 +02:00
Tomas Susanka	e534ae3ad7	legacy, core: rename Features.pin_cached to unlocked and unify	2020-06-19 21:26:36 +02:00
Tomas Susanka	b6c8cbc24c	core: add 'initialized' to changelog	2020-06-16 11:31:29 +02:00
Tomas Susanka	a6acefbdf5	core: wipe before reset and recovery; introduce 'intialized' field	2020-06-16 11:31:29 +02:00
Andrey	1eeaa1e5cf	Enable extra_data for Zcoin. Changed coininfo.py	2020-06-15 09:53:00 +02:00
Tomas Susanka	b67be7dd9e	core: forbid all settings if not initialized	2020-06-11 18:47:01 +02:00
Tomas Susanka	f8b2f0bb7b	changelogs: change also bootloader changelogs to the new format	2020-06-11 15:48:38 +00:00
Tomas Susanka	9979af3cd2	changelogs: start using more detailed changelog	2020-06-11 17:43:40 +02:00
Tomas Susanka	981d079d7f	core/signverify: add failsafe for an empty message header	2020-06-11 09:08:50 +02:00
Tomas Susanka	56fe5adcfc	Merge branch 'release/2020-06'	2020-06-10 06:51:18 +00:00
Andrew Kozlik	d1690f4317	core/tools: fix pixel-perfect mode for centered text in dialog-designer	2020-06-09 13:31:42 +02:00
Pavol Rusnak	179645e3ad	core: unify usage of TREZOR_MODEL	2020-06-06 21:06:15 +02:00
Ondrej Mikle	c877dc8dd6	core: port storage to T1	2020-06-06 21:06:15 +02:00
Pavol Rusnak	2815b62838	core/tools: implement "pixel-perfect" mode for dialog-designer tool	2020-06-05 14:11:59 +00:00
Pavol Rusnak	5262ef84cf	common/defs/fido: add aws and tutanota	2020-06-05 14:53:13 +02:00
Andrew Kozlik	9c61257e8e	core: Use the Lock icon in the PIN entry dialog only when the device is actually locked.	2020-06-05 11:52:56 +02:00
Pavol Rusnak	5ed64a0736	core/tools: refactor dialog-designer tool	2020-06-04 21:39:47 +02:00
Pavol Rusnak	d9d5511858	core/tools: add quick'n'dirty dialog-designer tool	2020-06-04 19:56:42 +02:00
matejcik	7579ac5274	core: fix rendering issues in homescreens	2020-06-04 16:18:46 +02:00
matejcik	9df7c84c56	core/ui: lower lockscreen brightness	2020-06-04 16:18:46 +02:00
matejcik	8fa7684a9c	core: set a scheduler-safe maximum for autolock	2020-06-04 16:18:46 +02:00
matejcik	872e0fb0e0	core: lower scheduler resolution to milliseconds ... This avoids problems with large timeouts causing the scheduler queue to think the time counter has overflown, and ordering the autolock task before immediate tasks. The maximum reasonable time difference is 0x20000000, which in microseconds is ~8 minutes, but in milliseconds a more reasonable ~6 days.	2020-06-04 16:18:46 +02:00
matejcik	847691798b	core: simplify homescreen and lockscreen implementations	2020-06-04 16:18:46 +02:00
matejcik	4bc865794f	core: only unlock storage if it is locked (solves determinism issue in tests)	2020-06-04 16:18:46 +02:00
matejcik	ffa7790ed5	core: start USB after booting apps ... This prevents a race condition where sometimes an Initialize message could arrive before the homescreen was fully booted -- and Recovery homescreen would cancel it as part of its bootup sequence.	2020-06-04 16:18:46 +02:00
matejcik	70f67883c5	core: fix artifacts in click-based UI tests	2020-06-04 16:18:46 +02:00
matejcik	a9d8fd3992	core: debuglink interface avoids workflow management ... This will have unintended consequences if you call a wirelink function on the debulink interface. TT allows this ... and will behave badly.	2020-06-04 16:18:46 +02:00
matejcik	bc9247e18d	core: add Cancel to a list of allowed messages while locked	2020-06-04 16:18:46 +02:00
matejcik	f32c2f9e23	core: replace workflow.kill_default with workflow.close_others	2020-06-04 16:18:46 +02:00
matejcik	01832d5ae9	core: call close_others() in place of ButtonRequest ... this makes sense, really: close_others() requests UI exclusivity, and that is something that generally happens at the same places we emit a ButtonRequest	2020-06-04 16:18:46 +02:00
matejcik	6f53ca0ac6	core: rework wait_layout() ... The original wait_layout was unreliable, because there are no guarantees re order of arrival of the respective events. Still, TT's event handling is basically deterministic, so as long as the host sent its messages close enough to each other, the order worked out. This is no longer the case with the introduction of loop.spawn: TT's behavior is still deterministic, but now ButtonAck is processed *before* the corresponding wait_layout, so the waiting side waits forever. In the new process, the host must first register to receive layout events, and then receives all of them (so the number of calls to wait_layout must match the number of layout changes). DebugLinkWatchLayout message must be version-gated, because of an unfortunate collection of bugs in previous versions wrt unknown message handling; and this interests us because upgrade-tests are using wait_layout feature.	2020-06-04 16:18:46 +02:00
matejcik	5d823ff5ea	core: use ButtonRequestType.PinEntry for PIN entry	2020-06-04 16:18:46 +02:00
matejcik	bbfce4e303	common: introduce ButtonRequestType.PinEntry	2020-06-04 16:18:46 +02:00
matejcik	3dbd9c9eca	core/loop: prevent finalizers from doing things when task is closed externally	2020-06-04 16:18:46 +02:00
matejcik	42e7c43c7c	core: make sure that auto-lock shuts down running workflows	2020-06-04 16:18:46 +02:00
matejcik	2d0206c043	core: replace workflow.on_start/on_close with workflow.spawn	2020-06-04 16:18:46 +02:00
matejcik	02565f3bfb	core/loop: introduce spawn syscall	2020-06-04 16:18:46 +02:00
matejcik	a4f47ddd21	core/lockscreen: ignore exception when user taps "unlock" and then cancels	2020-06-04 16:18:46 +02:00
matejcik	7ff1251ee1	core: dim lockscreen (fixes #974)	2020-06-04 16:18:46 +02:00
matejcik	4035aad51b	core: implement auto-lock after a configurable timeout (fixes #75)	2020-06-04 16:18:46 +02:00
matejcik	67b723e4ca	core: add a global idle timer	2020-06-04 16:18:46 +02:00
Andrew Kozlik	5469acfabf	core/webauthn: Cache user verification for 3 minutes.	2020-06-04 16:18:46 +02:00
Andrew Kozlik	b867ac1d01	core/webauthn: Implement FIDO2 unlocking from softlock.	2020-06-04 16:18:46 +02:00
Andrew Kozlik	0f81886c9f	core/webauthn: Allow confirm_dialog() to return a new state as an alternative to the user response.	2020-06-04 16:18:46 +02:00
Andrew Kozlik	c8ae5c157e	core/webauthn: Implement U2F unlocking from softlock.	2020-06-04 16:18:46 +02:00
matejcik	06aed7135a	core: do not prompt for PIN just to lock the device again	2020-06-04 16:18:46 +02:00
matejcik	2cedc687e6	core: disable trezor-crypto BIP32 cache	2020-06-04 16:18:46 +02:00
matejcik	246998910a	core: refactor usage of input_signals ... this prevents a certain class of UI test failure. It also localizes the use of debuglink signals into the layout classes instead of call sites, which is a design we were already using for confirm_signals	2020-06-04 16:18:46 +02:00
matejcik	afeeafd5cd	core: hide some fields when softlocked	2020-06-04 16:18:46 +02:00
matejcik	b9bd9ea3d0	core: only softlock when PIN is set	2020-06-04 16:18:46 +02:00
matejcik	a9ddc2a8e2	core/boot: modify initial lockscreen label	2020-06-04 16:18:46 +02:00
matejcik	09af8aed4e	core: consider lockscreen to be a separate homescreen ... this involves some changes to the workflow defaults: * workflow.start_default() takes no arguments * workflow.set_default() (originally replace_default) configures the default that will be started by next call to start_default(). The intended usecase is to set_default() first and then start it separately. * apps.base.set_homescreen() factors out the logic originally in main.py, that decides which homescreen should be launched. This uses set_default() call. start_default() is then used explicitly in main.py	2020-06-04 16:18:46 +02:00
matejcik	d73480bc9d	core: introduce PIN soft-locking	2020-06-04 16:18:46 +02:00
matejcik	04c8b2803d	core: refactor homescreen app, include lockscreen in it	2020-06-04 16:18:46 +02:00
matejcik	9197623d83	core: factor out the decision whether to lock the device	2020-06-04 16:18:46 +02:00
matejcik	0600d87c8c	common: rename ClearSession to LockDevice, introduce EndSession	2020-06-04 16:18:46 +02:00
matejcik	32fcc4ad9c	core: make verify_user_pin accept a Context argument	2020-06-04 16:18:46 +02:00
matejcik	8ca7ffc3b8	core: use wire.PinCancelled/PinInvalid instead of custom versions ... also refactor show_pin_invalid and its usages so that it raises directly note that we are now using PinCancelled instead of ActionCancelled where appropriate	2020-06-04 16:18:46 +02:00
matejcik	eabfcab9b9	core: add default messages to some error codes	2020-06-04 16:18:46 +02:00
matejcik	341c5b7d10	core/wire: make handler lookup pluggable	2020-06-04 16:18:46 +02:00
matejcik	837c4df61f	core: expose storage_is_unlocked() as config.is_unlocked()	2020-06-04 16:18:46 +02:00
matejcik	87433995b0	core: add BITCOIN_ONLY to mock file	2020-06-04 16:18:46 +02:00
matejcik	d5e45c02bb	core: move base functions from "homescreen" app to "base"	2020-06-04 16:18:46 +02:00
Tomas Susanka	8859d103f4	core, legacy: bump versions	2020-06-03 15:39:25 +00:00
Tomas Susanka	e2629eb921	core, legacy: update Changelogs to reflect the release	2020-06-03 15:35:30 +00:00
matejcik	bd5b3a3f21	common: drop Theta and VeChain ERC tokens, refresh market caps ... fixes #1022 fixes #1023	2020-05-29 12:12:30 +02:00
matejcik	5209804fc3	core: relax path checks on GetPublicKey ... (cherry picked from commit 554d8949f5)	2020-05-27 06:58:30 +00:00
matejcik	554d8949f5	core: relax path checks on GetPublicKey	2020-05-27 08:56:50 +02:00
matejcik	d59ffe553f	make gen	2020-05-25 16:14:05 +02:00
Ondřej Vejpustek	24ceb0ab6b	crypto/bignum: change limb size to 29, add tests	2020-05-24 14:36:38 +00:00
Andrew Kozlik	cb32ae2e4b	core/tests: add request_meta queries to unit tests (needed for transaction streaming)	2020-05-24 14:36:38 +00:00
Andrew Kozlik	42eddf8e04	core/sign_tx: validate prevout amount in all cases	2020-05-24 14:36:38 +00:00
Andrew Kozlik	7db3e930d4	core/sign_tx: Add further message sanitization checks.	2020-05-24 14:36:37 +00:00
matejcik	72ef86d79a	all: enable extra_data for komodo	2020-05-24 14:36:37 +00:00
matejcik	7a3637d5b0	core/sign_tx: add checks for version_group_id and branch_id fields	2020-05-24 14:36:37 +00:00
Ondrej Mikle	b01b24f090	core: change startup firmware file from .s to .S which enables preprocessing and fixes TT boot	2020-05-24 12:28:38 +02:00
Tomas Susanka	675ff459db	core, legacy: update changelogs	2020-05-22 11:55:55 +00:00
Tomas Susanka	9dfc08ca61	core/bitcoin: drop decred_script_version	2020-05-21 19:14:39 +02:00
matejcik	eeb46eabca	common: refresh token list	2020-05-21 13:29:13 +02:00
matejcik	2f665c8f84	core: add exception to GetPublicKey for PSBT master fingerprint (fixes #999)	2020-05-21 13:26:53 +02:00
Ondrej Mikle	10f0f107e0	core: Adds T1 core port FW flashing options for for openocd and jlink	2020-05-21 10:05:12 +02:00
Ondrej Mikle	0d65d684f0	core: T1 port can run on T1 bootloader with MEMORY_PROTECT=0	2020-05-21 08:49:59 +02:00
Tomas Susanka	a2f790167d	core/bitcoin: fix step 1 and 2 comments in signing	2020-05-19 12:58:45 +00:00
Tomas Susanka	1ac0f60550	core: update isort config to place relative imports last	2020-05-18 14:31:51 +02:00
Tomas Susanka	aa115b6320	core: move decred writers to decred.py	2020-05-18 14:31:51 +02:00
Tomas Susanka	3084ee1eed	core/bitcoin: move write_bitcoin_varint to common writers	2020-05-18 14:31:51 +02:00
Tomas Susanka	445f56d387	core/bitcoin: finalize bitcoin refactor ... - core/bitcoin: move common files to the app's root - core/bitcoin: use require_confirm instead of confirm - core: move bitcoin unrelated functions from 'bitcoin' to a new 'misc' app - core/bitcoin: use relative imports inside the app - core: rename wallet app to bitcoin - core/wallet: replace SigningErrors and the other exception classes with wire.Errors	2020-05-18 14:31:51 +02:00
matejcik	aa52fc3903	core/extmod: drop unused rfc6979 module	2020-05-18 14:31:00 +02:00
matejcik	050936d0d7	core: enable finalizers on extmod classes	2020-05-18 14:31:00 +02:00
matejcik	123b07e3ad	core: drop support for pre-registering keychain namespaces	2020-05-15 16:30:41 +02:00
matejcik	3e06f4779a	core/tests: add new keychain tests	2020-05-15 14:08:29 +02:00
matejcik	de9e73dcbc	core/tests: update unit tests for new keychain API	2020-05-15 14:08:29 +02:00
matejcik	f3f6e2101a	core/cardano: explanation about seed derivation	2020-05-15 14:08:29 +02:00
matejcik	a31b2cd1bc	core/wallet: implement keychain for apps.wallet	2020-05-15 14:08:29 +02:00
matejcik	0dff3853a7	core/ethereum: introduce custom keychain decorators	2020-05-15 14:08:29 +02:00
matejcik	b594248ac2	core: use new keychain decorators where appropriate	2020-05-15 14:08:29 +02:00
matejcik	fd9e945308	core/cardano: use caching decorators and new Keychain API for Cardano as well	2020-05-15 14:08:29 +02:00
matejcik	7541d529a3	core: refactor keychain API, introduce SLIP44 decorator	2020-05-15 14:08:29 +02:00
matejcik	8c4cb58098	core: introduce caching decorators	2020-05-15 14:08:29 +02:00
matejcik	63dfcb17a7	core: make mypy happy about importing fatfs	2020-05-15 14:08:29 +02:00
matejcik	7f2e7b0003	core: add Ethereum constants to mocks	2020-05-15 14:08:29 +02:00
Pavol Rusnak	6704ed86a1	Merge pull request #995 from trezor/omikle/t1-core-port ... core port to Trezor One	2020-05-14 16:48:18 +02:00
Ondrej Mikle	7eddafe487	core: better formatting for common parts of T1 and TT header	2020-05-14 16:10:42 +02:00
Ondrej Mikle	c4c341b3f9	core: setup stack when running core on T1	2020-05-14 12:46:25 +02:00
Dusan Klinec	6b8fc9c894	xmr: major protocol upgrade, CLSAG support added ... - CLSAG signature scheme added - type hints added xmr: optimize protocol, send only required data - real_out_additional_tx_keys contains only one element as nothing more is needed during signature - only src_entr.outputs[index] is HMACed and always present. Other outputs are present only if needed which reduces comm and CPU overhead. - getting rid of subaddresses dictionary (memory requirements), now subaddr indices are present per source entry so keys are computed when needed xmr: prepare for permutation sending removal, specify index - specify source entry ordering index prior sorting by key images as original HMAC keys are generated based on these. - permutation checked just by valid HMACs, size of the set, key image sort order - sending permutation is now deprecated, will be removed in the following protocol versions - more strict state transition checks, guard strict check with respect to steps ordering	2020-05-13 11:13:19 +02:00
Tomas Susanka	25d2d130a0	tests: use maxfail option for fido2 tests	2020-05-12 09:48:23 +00:00
Ondrej Mikle	fb5a220b46	core: use legacy sign script for T1 core port binary to be flashable	2020-05-11 18:05:46 +02:00
Ondrej Mikle	e429085e96	core: copy firmware header for T1 port into final binary	2020-05-11 17:33:47 +02:00
Ondrej Mikle	d8115a7992	core: firmware header for T1 port	2020-05-11 15:43:43 +02:00
Tomas Susanka	53c43ac305	core/tests: initialize emu with slip14 before running fido2 test suite	2020-05-06 14:36:04 +00:00
Andrew Kozlik	3de565c33c	core/sign_tx: In write_tx_header() rename has_segwit parameter to witness_marker and clarify usage.	2020-05-06 13:18:32 +02:00
Andrew Kozlik	846116a666	core/sign_tx: Improve comments.	2020-05-06 13:18:32 +02:00
Andrew Kozlik	7370077d0c	core/sign_tx: Get rid of internal TxOutputBinType messages.	2020-05-06 13:18:32 +02:00
Andrew Kozlik	9f9618944a	core/sign_tx: Explicitly pass script to write_tx_input() instead of setting it in txi.	2020-05-06 13:18:32 +02:00
Andrew Kozlik	04bdf1dc6c	core/sign_tx: Remove unused index parameters.	2020-05-06 13:18:32 +02:00
Andrew Kozlik	c9814e50ba	core/sign_tx: Set decred_script_version to 0 by default for decred coins.	2020-05-06 13:18:32 +02:00
Andrew Kozlik	dccf415e0b	core/sign_tx: Add write_tx_output() to signer class and override it in Decred.	2020-05-06 13:18:32 +02:00
Andrew Kozlik	bdd1d25979	core/sign_tx: Require change-outputs to be for a non-zero amount.	2020-05-06 13:18:32 +02:00
Andrew Kozlik	d5faeb3f51	core/sign_tx: Clarify sign_nonsegwit_input().	2020-05-06 13:18:32 +02:00
matejcik	9005093435	core/sign_tx: improve documentation on MatchCheckers	2020-05-06 13:18:32 +02:00
matejcik	0209768ff2	core/sign_tx: improve type hints	2020-05-06 13:18:32 +02:00
matejcik	ff41e5c304	core/sign_tx: improve signer selection readability	2020-05-06 13:18:32 +02:00
Andrew Kozlik	8b89a30955	core/sign_tx: Remove get_prevouts_hash(), get_sequence_hash(), get_outputs_hash() methods from signer classes, because they are only used internally.	2020-05-06 13:18:32 +02:00
Andrew Kozlik	22933587be	core/sign_tx: Merge bip143 classes into signer classes.	2020-05-06 13:18:32 +02:00
Andrew Kozlik	6ad3baeab2	core/sign_tx: Refactor BIP-143 signing.	2020-05-06 13:18:32 +02:00
Andrew Kozlik	d58cd3987b	core/sign_tx: Minor updates based on code review.	2020-05-06 13:18:32 +02:00
Andrew Kozlik	be39f271b0	core/sign_tx: Rework transaction footer writing.	2020-05-06 13:18:32 +02:00
Andrew Kozlik	b60f267da9	core/sign_tx: Rework transaction header writing.	2020-05-06 13:18:32 +02:00
Andrew Kozlik	c1effcc374	core/sign_tx: Updates based on code review.	2020-05-06 13:18:32 +02:00
Andrew Kozlik	c2a0f83558	core/sign_tx: Move script derivation to scripts module.	2020-05-06 13:18:32 +02:00
Andrew Kozlik	d0b80bddc8	core/tests: Fix unit tests after sign_tx refactor.	2020-05-06 13:18:32 +02:00
Andrew Kozlik	be7e98aa47	core/sign_tx: Move Bitcoin class to bitcoin.py.	2020-05-06 13:18:32 +02:00
Andrew Kozlik	a07e125793	core/sign_tx: Consolidate wallet path and multisig fingerprint checking.	2020-05-06 13:18:32 +02:00
Andrew Kozlik	27e6720f3d	core/sign_tx: cleanup	2020-05-06 13:18:32 +02:00
Andrew Kozlik	987b70f1f5	core/sign_tx: Move header prepending up by one level.	2020-05-06 13:18:32 +02:00
Andrew Kozlik	2ceb091d68	core/sign_tx: Use a preallocated buffer for transaction serialization.	2020-05-06 13:18:32 +02:00
Andrew Kozlik	555259d6a9	core/sign_tx: Remove last_output_bytes in Decred, which is no longer needed.	2020-05-06 13:18:32 +02:00
Andrew Kozlik	f1801764a1	core/sign_tx: Fix segwit/non-segwit input interleaving bug.	2020-05-06 13:18:32 +02:00
Andrew Kozlik	514f2ac649	core/sign_tx: Refactor to use template method.	2020-05-06 13:18:32 +02:00
Andrew Kozlik	95fad83024	core/sign_tx: Derive Zip143 and DecredPrefixHasher from Bip143.	2020-05-06 13:18:32 +02:00
Andrew Kozlik	e9900df18d	core/sign_tx: Move Overwintered class to zcash.	2020-05-06 13:18:32 +02:00
Andrew Kozlik	60dbec95ac	core/sign_tx: Reuse get_prevtx_output_value() in Decred.	2020-05-06 13:18:32 +02:00
Andrew Kozlik	2b74513e49	core: Fix mypy.	2020-05-06 13:18:32 +02:00
Andrew Kozlik	50c08274b9	core/sign_tx: Move overwintered functionality to separate class.	2020-05-06 13:18:32 +02:00
Andrew Kozlik	c190eed7fc	core/sign_tx: Move non-Bitcoin functionality to Bitcoinlike class.	2020-05-06 13:18:32 +02:00
Andrew Kozlik	613c81ea66	core/sign_tx: Refactor wallet_path functions and input_check_multisig_fingerprint.	2020-05-06 13:18:32 +02:00
Andrew Kozlik	0d9984671e	core/sign_tx: Fix typing.	2020-05-06 13:18:32 +02:00
Andrew Kozlik	79c60615de	core: Fix typing.	2020-05-06 13:18:32 +02:00
Andrew Kozlik	ba8b34b2d7	core: Refactor signing.	2020-05-06 13:18:32 +02:00
Pavol Rusnak	066866488b	core: add temporary "src1" folder	2020-05-04 16:00:29 +00:00
matejcik	a623799a11	core: remove f-strings from headertool (python 3.5 compatibility)	2020-05-04 11:29:03 +02:00
Pavol Rusnak	25cc836660	core/extmod: fix build of modtrezorui when TREZOR_MODEL is set to '1'	2020-04-30 15:07:26 +00:00
Tomas Susanka	20d66adddd	core: disable passphrase_always_on_device when turning off passphrase	2020-04-28 14:54:18 +02:00
Tomas Susanka	47f104bceb	core, legacy: bump versions	2020-04-24 17:12:20 +00:00
Pavol Rusnak	4b5a84eab7	core+legacy: update changelogs	2020-04-16 14:20:18 +02:00
Ondřej Vejpustek	c461692f3a	core: implement random delay interrupts	2020-04-16 11:51:28 +02:00
Ondřej Vejpustek	d5bfe6b32f	crypto: add chacha_drbg	2020-04-16 11:51:28 +02:00
matejcik	72cde5a57d	core: disallow parsing options after command (fixes #951)	2020-04-16 11:24:15 +02:00
matejcik	5885978c83	Merge branch 'release/2020-04'	2020-04-15 15:00:23 +02:00
Andrew Kozlik	9e4a8ca785	core/webauthn: Improve error codes for uninitialized device. Return ERR_OPERATION_DENIED only upon user decline or timeout, otherwise it cancels the operation on all connected authenticators.	2020-04-14 12:24:17 +02:00
matejcik	2ccebd3175	core: raise SystemExit when exitting emulator (now that sys.exit is removed)	2020-04-14 10:17:37 +02:00
matejcik	4bddeefea0	core: unify mpconfigports for emulator and board ... Changes in firmware/mpconfigport.h are minimal: * $VFS_FAT is dropped because it is irrelevant without $VFS * $REVERSE_SPECIAL_METHODS is added, to push down on code size * $THREAD is disabled unconditionally unix/mpconfigport.h is reordered and modified to match firmware/mpconfigport.h as much as possible, while selectively enabling some needed features. Notably, $USE_READLINE is enabled unconditionally	2020-04-14 10:17:37 +02:00
matejcik	d0f709b8cc	core: fix and use MAKEMODULEDEFS instead of explicit registration	2020-04-14 10:17:37 +02:00
matejcik	a6976355c3	core: remove readline from built firmware	2020-04-14 10:17:37 +02:00
Dusan Klinec	25b6e9058f	xmr: proto - add fields for protocol optimization	2020-04-13 22:19:56 +02:00
Andrew Kozlik	bc4e8eaa16	core/webauth: Update readme with Ed25519 algorithm and certificates.	2020-04-09 21:05:28 +02:00
Pavol Rusnak	197218338a	Merge pull request #936 from trezor/rework-serialize-deserialize ... crypto: rework serialize/deserialize API	2020-04-09 09:53:23 +02:00
matejcik	eec0615444	core: drop sys.pyi from mocks (fixes #934) ... A change introduced in mypy 0.770 disallows overriding some system modules, including `sys`. We only need the override for `sys.print_exception`, and the simplest solution is to make mypy ignore that particular call.	2020-04-08 11:19:26 +02:00
Andrew Kozlik	c57bc62a05	core/tools: Add attestation certificate generator for FIDO2.	2020-04-06 18:29:05 +02:00
Andrew Kozlik	fca92d7344	core/webauthn: Update attestation certificate to comply with WebAuthn requirements.	2020-04-06 18:29:05 +02:00
Pavol Rusnak	a7806d08d7	core/crypto: remove unused bip32.deserialize function	2020-04-06 18:04:24 +02:00
Pavol Rusnak	1695228d80	core/crypto: remove unused serialize_private function	2020-04-06 15:49:36 +00:00
Pavol Rusnak	f07ff17fad	core/crypto: add missing field to Blake2b constructor	2020-04-06 12:28:36 +00:00
Andrew Kozlik	25a39ea729	core/webauthn: Fix handling of interleaving frames to comply with the U2F HID specification.	2020-04-06 09:53:42 +02:00
jagdeep sidhu	e58c5f63d5	common/defs: update SYS (#928)	2020-04-02 00:22:47 +02:00
Tomas Susanka	0b7a8449f8	core: style	2020-03-30 16:04:05 +00:00
Tomas Susanka	bf20537f41	core: add option to omit cancel button in HoldToConfirm; add it to reset	2020-03-30 16:00:12 +00:00
Pavol Rusnak	336a417233	core/bootloader: distinguish between a vendor change and downgrade with wipe	2020-03-25 15:15:12 +01:00
Andrew Kozlik	8ae0535e69	core/webauthn: Fix attestation statement format to use a list in the x5c field.	2020-03-24 16:18:37 +01:00
Tomas Susanka	aa71c20f2c	core: require hold to confirm	2020-03-24 09:20:10 +00:00
Ondrej Mikle	634ed5aabc	core: commands for flashing via JLink (#911)	2020-03-23 10:40:06 +01:00
Tomas Susanka	025436db47	core/changelog: add FIDO2's Ed25519	2020-03-23 08:00:31 +00:00
Tomas Susanka	f786d75a6f	core: drop obsolete check for ANYONECANSPEND segwit outputs	2020-03-20 14:19:31 +00:00
Tomas Susanka	d0d41c884e	legacy: move script type checks to separate functions and unify with core	2020-03-20 14:19:31 +00:00
matejcik	bd9e15bb8c	core/tests: add unit tests for prevhash writers	2020-03-20 14:19:31 +00:00
matejcik	a9faa4d4ab	core/tests: fix inline variant of assertRaises ... otherwise code like the following would fail: >>> self.assertRaises(AssertionError, ensure, False) because the AssertionError raised internally by `ensure` would be conflated with the AssertionError raised by the tested function	2020-03-20 14:19:31 +00:00
matejcik	da89a17ce5	all: add checks for prev_hash size	2020-03-20 14:19:31 +00:00
matejcik	c15519f707	core/sign_tx: modify get_tx_header to avoid writing unchecked bytes	2020-03-20 14:19:31 +00:00
matejcik	9cab61fbd3	core/sign_tx: remove write_bytes_unchecked where appropriate	2020-03-20 14:19:31 +00:00
matejcik	27f6306e1d	core: introduce safer write_bytes functions	2020-03-20 14:19:30 +00:00
matejcik	9a5f6b025a	core/tezos: factor out writing Michelson instructions	2020-03-20 14:19:30 +00:00
matejcik	694f714719	core/ripple: rename write_bytes to avoid name collision	2020-03-20 14:19:30 +00:00
Tomas Susanka	64584e271c	legacy, core: add and unify validation checks	2020-03-20 14:19:30 +00:00
matejcik	ffdb299c61	all: drop Capricoin support [NO BACKPORT]	2020-03-20 14:19:30 +00:00
matejcik	adea7d6b35	all: make timestamp mandatory on timestamp-enabled coins	2020-03-20 14:19:07 +00:00
matejcik	e2035b4972	all: drop Horizen and BIP-115 support [NO BACKPORT]	2020-03-20 14:19:07 +00:00
matejcik	6f9c6361ea	core: remove negative_fee and cashaddr_prefix from bitcoin-only fw	2020-03-20 14:18:27 +00:00
matejcik	7d5771911c	core: flip condition for force_bip143 ... this should be equivalent because Bitcoin does not have force_bip143 set	2020-03-20 14:18:27 +00:00
matejcik	ed464f3d47	all: ensure expiry, timestamp and extra_data are blocked as appropriate	2020-03-20 14:18:27 +00:00
matejcik	27803ee8c1	all: drop overwintered field from transaction	2020-03-20 14:18:27 +00:00
matejcik	c9fd3f77a5	all: add overwintered field to coin specification	2020-03-20 14:18:27 +00:00
Pavol Rusnak	817b922850	all: add extra_data and timestamp fields to coin specification	2020-03-20 14:18:27 +00:00
matejcik	136307bcae	core: propagate coin info to all sanitize functions	2020-03-20 14:17:44 +00:00
matejcik	303c05aba7	core/sign_tx: check if prev_tx has enough outputs to match prev_index	2020-03-20 14:17:44 +00:00
Andrew Kozlik	a34637c0f2	core/sign_tx: Check multisig fingerprint before signing inputs.	2020-03-20 14:17:44 +00:00
Tomas Susanka	163220e4b7	core/wallet: properly check decred input	2020-03-20 14:17:44 +00:00
Ondřej Vejpustek	6274cfdf8b	core: remove unreachable zcash code	2020-03-20 14:17:44 +00:00
Ondřej Vejpustek	d61181d7e8	core: fix transaction header for mixed segwit inputs	2020-03-20 14:17:44 +00:00
Tomas Susanka	f0a39df75d	core/wallet: check inputs and outputs right after receiving them	2020-03-20 14:17:44 +00:00
Tomas Susanka	0903159d9b	core, legacy: make sure OPRETURN ouput is not marked as change	2020-03-20 14:17:44 +00:00
Tomas Susanka	4af9aa547e	core: forbid unnecessary fields in OPRETURN output	2020-03-20 14:17:44 +00:00
Andrew Kozlik	d800fcbf9f	core/sign_tx: If there is a non-multisig input, then change output cannot be multisig. ... (cherry picked from commit 8eb6ce0899)	2020-03-20 14:17:44 +00:00
Andrew Kozlik	b3cd760df0	core/webauthn: Disable CTAPHID_WINK function.	2020-03-20 15:07:06 +01:00
Andrew Kozlik	e5008eb332	core/webauthn: Remove indistinguishable credentials from the allow list.	2020-03-20 15:07:06 +01:00
Andrew Kozlik	cda9de8dd1	core/webauthn: Add maxCredentialCountInList and maxCredentialIdLength to authenticatorGetInfo response.	2020-03-20 15:07:06 +01:00
Andrew Kozlik	0af0e06d5b	core/webauthn: Truncate names in credential data to at most 100 bytes.	2020-03-20 15:07:06 +01:00
matejcik	ccffefd667	core/boot: do not catch OSError in boot wait	2020-03-20 14:03:28 +01:00
matejcik	f6f041e269	core/sdcard: also catch OSError in the formatting phase	2020-03-20 14:03:28 +01:00
matejcik	3a71a5a05c	core/sdcard: show "Wrong SD card" when unlocking SD protect with unformatted card	2020-03-20 14:03:28 +01:00
matejcik	3789a3372b	core/sdcard: modify exception handling in fatfs ... expose ff.c constants, raise them as arguments to FatFSError introduce NotMounted and NoFilesystem as subclasses of FatFSError with the appropriate error code set	2020-03-20 14:03:28 +01:00
Andrew Kozlik	8ee0026637	core: Allow PIN entry even when SD protect is enabled and the card is not present.	2020-03-19 15:04:33 +01:00
Andrew Kozlik	bfd834d1de	storage: Add storage_ensure_not_wipe_code().	2020-03-19 15:04:33 +01:00
Konnor Klashinsky	70a1f957ed	Fix BackupDevice layout on 18-word seed wallets	2020-03-13 13:41:04 +13:00
Andrew Kozlik	2f905a1157	core/webauthn: Add algorithm and curve to WebAuthnListResidentCredentials response.	2020-03-12 15:45:26 +01:00
Andrew Kozlik	f610787f8d	core/webauthn: Clean up bytes/bytearray typing around uctypes.	2020-03-12 15:45:26 +01:00
Andrew Kozlik	e378820f7f	core/webauthn: Implement support for Ed25519 signatures in FIDO2.	2020-03-12 15:45:26 +01:00
Pavol Rusnak	624b639ba8	Merge pull request #886 from trezor/onvej-sl/monero-optimizations-squashed ... xmr/bp: memory optimizations and improvements, fixed style	2020-03-02 17:54:30 +01:00
Tomas Susanka	f8de140271	core: add cancel to hold to confirm dialogs	2020-03-02 13:58:41 +00:00
Dusan Klinec	2658e253fa	xmr/bp: memory optimizations and improvements ... - different approach to vector manipulation - more on the fly operations. Prepared for fully offloaded operations, BP on Trezor with constant memory. - memory requirements reduced from (4MN + const) to (2MN + const) - more raw methods to avoid unnecessary encoding/decoding - chunking improved, chunk size set as a constant, changed from 64 to 32, missing pieces implemented to cover also BP 16 - proof_v8 support discontinued, old hardfork, not needed anymore - get_exponent register clash fixed (for large vectors) - reduced heap fragmentation by removing some temporary allocations - hashing with len and offset to reduce heap fragmentation by creating a sliced arrays - use to() wherever possible to avoid allocations and return of mutable private object - global functions start with _ prefix, reduce import footprint - use __slots__ in classes to minimize footprint	2020-03-02 12:17:03 +01:00
Tomas Susanka	21676a0662	ore/tezos: better wording in delegation cancel	2020-03-02 08:49:34 +00:00
matejcik	7f91bc571c	core: ensure default task restarts after a passphrase workflow (fixes #883)	2020-02-28 15:55:40 +01:00
Tomas Susanka	5ee6e56f56	Merge pull request #880 from trezor/tsusanka/sign-verify-ui ... Unify sign/verify message dialogs and fix text overflow	2020-02-28 15:47:48 +01:00
matejcik	bd9663af79	common/defs: update token reference, add new tokens to 2.3.0/1.9.0, regenerate coins_details	2020-02-27 19:13:17 +01:00
Tomas Susanka	86b010a18b	Merge pull request #878 from trezor/matejcik/fatfs-corruption ... FatFS API rework	2020-02-27 15:58:38 +01:00
Tomas Susanka	c8b7d3fb56	core/changelog: SD card protection is part of 2.3.0	2020-02-27 13:57:48 +00:00
Tomas Susanka	a63e6fc4ef	core+legacy: update changelogs	2020-02-27 13:21:17 +00:00
Tomas Susanka	a8af9feebe	core: fix text overflow in some dialogs	2020-02-27 12:43:33 +00:00
Tomas Susanka	744c32991f	core: unify sign/verify functions ... The UI records are modified because of two changes: - Added a coin name to the Sign/Verify screen (ETH/Lisk). - Unified to use mono.	2020-02-27 12:43:33 +00:00
Tomas Susanka	b317613d63	Merge pull request #874 from trezor/tsusanka/test ... Use wire errors where applicable	2020-02-27 13:38:30 +01:00
Tomas Susanka	495a59c282	core: use wire errors instead of ValueErrors where applicable	2020-02-27 10:46:01 +00:00
matejcik	18ac4fc9ca	core: update Python facing APIs	2020-02-27 10:56:23 +01:00
matejcik	9ab84d2455	core/tests: thoroughly test modified APIs	2020-02-27 10:56:23 +01:00
matejcik	b24411b900	core/sdcard: unmount instance when powering off sdcard	2020-02-27 10:56:23 +01:00
matejcik	c81be584fb	core/fatfs: ensure functions can only be called on a mounted filesystem ... ff.c has a lazy-mounting feature, where any filesystem call will mount the volume if it can. This messes with predictability of the mounted state, so all (except mount/unmount/mkfs) Python functions will first check if the fs is mounted.	2020-02-27 10:56:23 +01:00
matejcik	fa746e2990	core/fatfs: rework low-level FatFS API ... Instead of having possibly multiple FatFS objects, each with its own `fs` struct, there is one global static fs_instance. This is to match the mode of operation of ff.c, which assumes a global list of mounts, and all functions operate on the global based on path. Methods of FatFS were converted to functions on the fatfs module. fatfs.unmount() does not call ff.c's unmount, but simply invalidates fs_instance. This is basically what ff.c would do, except without messing with ff.c's global list of mounts.	2020-02-26 14:18:41 +01:00
Pavol Rusnak	c896f02eb3	core/boardloader: use SRAM as SD card read buffer ... because DMA can't access the CCMRAM	2020-02-25 17:59:16 +01:00
Andrew Kozlik	2133f7cf29	core: Prevent data loss when writing to USB VCP.	2020-02-25 12:08:07 +01:00
matejcik	b916072389	common: restore PassphraseAck.state	2020-02-24 15:15:09 +01:00
matejcik	d7b9582386	core/sdcard: add ensure_filesystem option (fixes #868) ... It is possible to call `ensure_sdcard` in a way that requires only SD card be inserted, but not necessarily formatted. This is useful for SD-protect and possibly other use-cases where the SD card is read-only, and "not formatted" is identical to "not containing the right files".	2020-02-24 13:28:44 +01:00
matejcik	e9c275c24f	core/sdcard: fix invalid state when filesystem mounting fails	2020-02-24 13:28:44 +01:00
Pavol Rusnak	39ce100608	Merge pull request #864 from trezor/prusnak/bootloader-text-break ... core/bootloader: split long vendor string	2020-02-21 18:39:20 +01:00
Tomas Susanka	6c47bf8230	core: store multiple sessions/caches at the same time	2020-02-21 14:40:42 +01:00
Pavol Rusnak	562671401e	Merge pull request #860 from trezor/prusnak/multisig-show-yours-others ... core: show yours/others in get_address for multisig	2020-02-20 13:49:13 +01:00
matejcik	918603ad5c	core: add unit test for sdcard wrapper	2020-02-20 12:51:48 +01:00
matejcik	7983fd34d6	core: fix unit tests	2020-02-20 12:51:48 +01:00
matejcik	4ed6487a19	core/sdcard: add out-of-bounds checks to emulator	2020-02-20 12:51:48 +01:00
matejcik	ddee77ecb6	core: add SD clearing via debuglink	2020-02-20 12:51:48 +01:00
matejcik	d0b1b171f1	core/sdcard: ensure emulator initializes the SD card when first needed	2020-02-20 12:51:48 +01:00
matejcik	5bd8d9b5bb	core/sdcard: make allocating new SD card for emulator fast	2020-02-20 12:51:48 +01:00
matejcik	1e9352b9e0	core: add SD format dialog, generalize sdcard usage	2020-02-20 12:51:48 +01:00
matejcik	5bac85f260	core: use filesystem wrapper instead of the ensure_filesystem decorator	2020-02-20 12:51:48 +01:00
matejcik	d08942be4a	core: introduce filesystem wrapper	2020-02-20 12:51:48 +01:00
matejcik	b2084a19be	core/trezorio: move sdcard functions to a submodule	2020-02-20 12:51:48 +01:00
matejcik	30529d218d	core/sdcard: change SDCard methods to plain functions	2020-02-20 12:51:48 +01:00
matejcik	06b89c57c5	core/sdcard: return proper disk status flags to fatfs	2020-02-20 12:51:48 +01:00
Tomas Susanka	ff1bb67abc	common: return the PasshraseType button request	2020-02-20 08:04:35 +00:00
Pavol Rusnak	dc66bbe3d5	core/bootloader: split long vendor string	2020-02-19 21:40:28 +00:00
Pavol Rusnak	74802a107e	core/modtrezorui: add display_text_split	2020-02-19 21:40:28 +00:00
Pavol Rusnak	c4babd3c0b	Merge pull request #846 from trezor/bootloader-read-retry ... core/bootloader: make read more benevolent and read error more helpful	2020-02-19 19:45:34 +01:00
Pavol Rusnak	581e46ff87	Merge pull request #845 from trezor/prusnak/webusb-popup ... Don't show WebUSB popup in firmware, in bootloader only if no firmware present	2020-02-19 18:18:01 +01:00
Pavol Rusnak	7944c1a837	core/monero: add confirmation dialog for unlock_time	2020-02-19 14:31:45 +00:00
Pavol Rusnak	a808cc9190	core/apps: await require_confirm should be called without return	2020-02-19 14:31:45 +00:00
Pavol Rusnak	b9486c0b33	core: show yours/others in get_address for multisig	2020-02-18 22:39:55 +00:00
Tomas Susanka	577daf09fe	tests: introduce --ui-check-missing to test/remove missing tests	2020-02-18 09:33:21 +01:00
matejcik	1d41141a1f	core/emulator: properly ignore inotify problems (fixes #854)	2020-02-17 12:33:38 +01:00
Pavol Rusnak	2958a97c87	Merge pull request #830 from trezor/tsusanka/fw-upgrade ... FW Update: Request a small chunk first to make the UI smoother	2020-02-15 13:08:33 +01:00
matejcik	e61b7d28e9	all: do not send state in PassphraseAck (not needed for compatibility)	2020-02-13 15:44:50 +01:00
Pavol Rusnak	63dfd6c6ab	core/bootloader: make read more benevolent and read error more helpful	2020-02-12 22:05:29 +01:00
Pavol Rusnak	07cd73ce57	core: show webusb popup only in bootloader and only if firmware is not installed	2020-02-12 20:47:05 +00:00
matejcik	4c8c96272c	emu: fix flag options with defaults ... Click REALLY INSISTS you provide on/off switches for your options. You can use is_flag, but then the presence of the option changes based on the default value. Which makes sense, really: @option("-f", "foobar", is_flag=True, default=False) you would expect `./cli -f` to have `foobar is True` whereas with @option("-f", "foobar", is_flag=True, default=True) you would expect `./cli -f` to have `foobar is False`, otherwise it's a no-op this becomes fun with `default=os.environ.get("SOMETHING")`, because then the effect of the option CHANGES with a value of environment variable! there's two ways around this: a) don't use defaults, update the flag explicitly, like: foobar = foobar or os.environ.get("FOOBAR") == "1" b) forget about is_flag and specify an on/off switch, where the default value works as intended since the latter is also technically speaking more correct, i'm doing it	2020-02-12 13:32:05 +01:00
matejcik	271da3fa39	python: add detailed logging to emulator runner	2020-02-12 13:31:58 +01:00
matejcik	c14429c445	all: shut down emulator on error_shutdown	2020-02-12 13:31:31 +01:00
matejcik	d3b88a37be	core: do not catch SystemExit in handle_session (#826)	2020-02-12 10:36:42 +01:00
Tomas Susanka	f947fe97cc	core: fix style	2020-02-11 16:41:43 +01:00
Tomas Susanka	0a13f7a441	core: properly limit passphrase to 50 bytes	2020-02-11 15:39:08 +00:00
Tomas Susanka	2c0504ad1c	Merge pull request #803 from trezor/passphrase ... Passphrase Redesign	2020-02-11 16:01:59 +01:00
matejcik	05a1d6f771	core/debug: add "show arbitrary screen" capability, for easier prototyping	2020-02-11 11:53:34 +01:00
matejcik	c01d04f26e	common/protob: drop a default field declaration ... which triggers nanopb bug https://github.com/nanopb/nanopb/issues/487	2020-02-11 11:53:34 +01:00
matejcik	741c0c8888	core: improve stability of Monero test runner	2020-02-11 11:16:28 +01:00
matejcik	4c9689d7a7	common: return deprecated fields to protobuf, to allow cross-version compatible code	2020-02-10 12:35:28 +01:00
Pavol Rusnak	e58225fe02	core/boot: don't call mkfs in emulator	2020-02-07 15:30:21 +00:00
Pavol Rusnak	fdfa64ac2a	core/ui: fix HoldToConfirm redraw	2020-02-07 15:21:16 +00:00
Pavol Rusnak	32f8f1cb61	core/embed: update fatfs to 0.14; use upstream version	2020-02-07 15:21:16 +00:00
Tomas Susanka	56dc952495	common: fix PassphraseAck.on_device id	2020-02-07 14:19:01 +00:00
Pavol Rusnak	73ed2f3450	legacy: small nitpicks related to the new passphrase handling	2020-02-07 11:41:03 +00:00
Tomas Susanka	15ed5cd19e	core: do not clear cache on ClearSession	2020-02-07 11:41:03 +00:00
Tomas Susanka	fd0dc8ed66	core/passphrase: merge 'get from user' functions	2020-02-07 11:41:03 +00:00
Tomas Susanka	7d7ffe3b67	cardano: derive the root and then cache	2020-02-07 11:41:02 +00:00
matejcik	3fa99c0c6a	core/tests: add storage.cache tests	2020-02-07 11:41:02 +00:00
matejcik	938f347514	core: use DUMMY_CONTEXT constant instead of own instance	2020-02-07 11:41:02 +00:00
matejcik	d4171aaedc	core/tests: extract common await_result() method	2020-02-07 11:41:02 +00:00
matejcik	1f50a13edf	core: use cache for Monero live refresh confirmation	2020-02-07 11:41:02 +00:00
Tomas Susanka	b96d7cafbb	core: rework cache and fix cardano caching	2020-02-07 11:41:01 +00:00
Tomas Susanka	aa6988a556	core/ui: introduce draw_simple	2020-02-07 11:41:01 +00:00
Tomas Susanka	d5763d9cab	all: implement code review comments	2020-02-07 11:41:01 +00:00
Tomas Susanka	f3553f63f1	common: remove PassphraseRequest.on_device completely	2020-02-07 11:41:00 +00:00
Tomas Susanka	c65b57affb	core, legacy: remove passphrase_cached	2020-02-07 11:41:00 +00:00
Tomas Susanka	1343583d21	core: bump version to 2.3.0	2020-02-07 11:41:00 +00:00
Tomas Susanka	8fa0d8f098	core/passphrase: show dialog to enter the passphrase on host	2020-02-07 11:41:00 +00:00
Tomas Susanka	a3f3d4fcdb	remove ping.passphrase/pin	2020-02-07 11:41:00 +00:00
Tomas Susanka	b5d6aaf77c	tests: test PassphraseAck options	2020-02-07 11:41:00 +00:00
Tomas Susanka	ece351c5e5	core: do not prompt for passphrase if 'always' setting is enabled	2020-02-07 11:40:59 +00:00
Tomas Susanka	466dc4732d	core/passphrase: add button requests	2020-02-07 11:40:59 +00:00
Tomas Susanka	4a0f727f13	core: fix monero	2020-02-07 11:40:59 +00:00
Tomas Susanka	cd09f9ce94	all: modify passphrase source to always on device	2020-02-07 11:40:59 +00:00
Tomas Susanka	eafd57c301	common, core: add passphrase entry capability	2020-02-07 11:40:58 +00:00
Tomas Susanka	90d5cdfd5b	all: rework passphrase ... The `on_device` field is being moved to PassphraseAck, State messages are removed. Features newly contain `session_id`.	2020-02-07 11:40:58 +00:00
Tomas Susanka	a02d7e3daf	core/bootloader: request vendor header first	2020-02-06 12:22:32 +00:00
matejcik	d28e33ef02	core/headertool: support generating vendor headers with explicit size	2020-02-05 12:23:34 +01:00
Pavol Rusnak	6dbed1424f	core+legacy: update nanopb api to version 0.4	2020-02-04 17:18:27 +00:00
Pavol Rusnak	3eb7775659	core/bootloader: regenerate protobuf messages	2020-02-04 17:18:17 +00:00
Pavol Rusnak	4647e7d686	core+legacy: use nanopb generator from pipenv	2020-02-04 17:15:25 +00:00
Pavol Rusnak	5bf8eca350	legacy+core: accept only valid UTF-8 strings via nanopb	2020-02-04 17:15:25 +00:00
Tomas Susanka	277e494ffa	core/recovery: end dry run before showing success ... updates #815	2020-02-03 12:12:49 +00:00
Tomas Susanka	4850eaf534	emu.py: remove frozen variable	2020-01-30 14:47:11 +00:00
EtherCore Contributor	c03caaf76a	common/defs: switch ERE logo (#808)	2020-01-29 10:49:21 +01:00
matejcik	5d052678a6	build: make sure resources are built for 'make mypy'	2020-01-28 16:42:24 +01:00
matejcik	0df3c64855	core: fix unexpected messages in debug mode (fixes #809)	2020-01-27 19:41:41 +01:00
Tomas Susanka	bf1514d1ac	core/test/strings: add test for words ending with 'hsxz'	2020-01-27 09:11:11 +00:00
matejcik	4e82e69070	core: add missing type annotation	2020-01-24 16:55:24 +01:00
Tomas Susanka	0053511c66	utils: introduce format_plural and move format functions to strings.py	2020-01-24 16:25:14 +01:00
matejcik	75264a07a8	Emulator launcher scripts (#796) ... Emulator launcher scripts	2020-01-24 16:18:18 +01:00
Pavol Rusnak	4868afcf51	core: add upy 1.12 to changelog	2020-01-24 14:34:06 +01:00
Pavol Rusnak	3de1b3aa54	core/embed: switch to unprivileged in main.c	2020-01-24 12:29:46 +00:00
Pavol Rusnak	7a2e0c3412	core/embed: don't call functions via supervisor if in privileged mode	2020-01-23 18:18:59 +00:00
matejcik	0496e49507	core/tests: fix monero runner script	2020-01-23 18:43:20 +01:00
matejcik	a3d309eca2	core/prof: make sure coverage data is generated with absolute paths	2020-01-23 18:43:20 +01:00
matejcik	e2fd2c35ff	core: modify profiling wrapper to work with frozen builds	2020-01-23 18:43:20 +01:00
matejcik	6cf48bf485	ci: use explicit trezor.log location	2020-01-23 18:43:20 +01:00
matejcik	85f2e18828	core: convert emu.sh to a simple dependency-less compat wrapper	2020-01-23 18:43:20 +01:00
matejcik	22c8b2569b	core: simplify monero test use of emulator	2020-01-23 18:43:20 +01:00
matejcik	ec192e9406	core: use better emulator test wrappers (fixes #468)	2020-01-23 18:43:20 +01:00
matejcik	2294fb0453	core: drop unused env variables (TREZOR_TEST, TREZOR_SAVE_SCREEN)	2020-01-23 18:43:20 +01:00
matejcik	8dce2cf98c	core: introduce emulator runner (fixes #466)	2020-01-23 18:43:20 +01:00
matejcik	27c4c2dd50	core: do not let frozen emulator import live files	2020-01-23 15:50:28 +01:00
matejcik	29e883ab59	core/monero: fix usage of ctx.wait in pagination	2020-01-23 15:46:09 +01:00
matejcik	a79279115e	core: move confirm_signal evaluation into concrete Layout implementations ... Apart from making the code more correct for its users in apps.common.confirm and elsewhere, this fixes a problem where the confirm_signal would be scheduled before the dialog is rendered. By making sure that handle_rendering is scheduled (i.e., listed in create_tasks) before confirm_signal, we can be sure to render at least once and thus appear in the UI test results.	2020-01-23 15:45:10 +01:00
Pavol Rusnak	4b1159b94d	tools/keyctl-proxy: blue is not readable on my display :)	2020-01-22 16:06:38 +00:00
matejcik	8a5242ed0f	core/tools: make keyctl remote signing more resilient	2020-01-20 17:33:50 +01:00
matejcik	611b734d21	add Pyro4 to pipenv, and make headertool work without it	2020-01-20 17:33:50 +01:00
matejcik	3f85db1b62	core/tools: retain client handle, only ask for passphrase once	2020-01-20 17:33:00 +01:00
matejcik	ccacada37c	core/tools: cleanly shut down keyctl-proxy after signing	2020-01-20 17:32:59 +01:00
matejcik	e9c68d7397	core/tools: pass fw instance properly in keyctl-proxy	2020-01-20 17:32:59 +01:00
matejcik	388843f772	core/tools: make keyctl-proxy output nicer	2020-01-20 17:32:59 +01:00
matejcik	7c56a1296f	core/tools: add help texts to headertool	2020-01-20 17:32:59 +01:00
matejcik	1b04d1caa7	core/tools: drop tools obsoleted by headertool	2020-01-20 17:32:59 +01:00
matejcik	9341f0d584	core: improve building of vendor headers	2020-01-20 17:32:59 +01:00
matejcik	c03ac3f8dd	core/tools: update keyctl-proxy to work with headertool	2020-01-20 17:32:59 +01:00
matejcik	5b48505b88	core/tools: fold keyctl-coordinator into headertool	2020-01-20 17:32:59 +01:00
matejcik	cc29b22f91	core/tools: introduce headertool	2020-01-20 17:32:58 +01:00
matejcik	fe4ef336aa	core/keyctl: get rid of serpent conversions	2020-01-20 17:32:58 +01:00
matejcik	15bd35824b	python/cosi: improve API ... cosi.verify was renamed to verify_combined, because it is pretty much ed25519.verify, and the new name implies what it does in terms of the CoSi scheme: verify a signature with already-combined public keys. cosi.verify_m_of_n signature was simplified by not requiring the `n` parameter, which is not important for verification. The updated function was renamed to cosi.verify, because this is the standard CoSi verification operation: given signature, digest, required number of signatures, sigmask, and a list of public keys, verify that enough signatures are indicated and that they sign the digest.	2020-01-20 17:32:58 +01:00
Pavol Rusnak	500156b9ba	core/embed: don't use local copy of inflate	2020-01-18 17:09:52 +01:00
Pavol Rusnak	8a36ead915	common/defs: add Faceboook to recognized apps	2020-01-16 15:35:45 +00:00
Dušan Klinec	af6a607b39	common/xmr: message changes optimizing runtime and memory (#786)	2020-01-12 22:24:18 +01:00
Andrew Kozlik	289d8276eb	core/fido2: check for HID timeout in send_cmd() (#791)	2020-01-11 14:33:24 +01:00
Tomas Susanka	7c41b40dff	tests: introduce UI tests for core with diffs (#784) ... tests: introduce UI tests for core with diffs	2020-01-10 20:39:31 +01:00
Tomas Susanka	30858c4969	tests/ui: omit the red square from screenshots ... except the first one on homescreen because it gets rendered only once	2020-01-10 08:25:12 +00:00
matejcik	d4eed4b8ff	core/tests: update tests for modified slip39 API	2020-01-09 16:00:33 +01:00
matejcik	f90ba10af3	core: modify function signatures to match python-shamir-mnemonic	2020-01-09 16:00:33 +01:00
Milan Rossa	33b7e378c2	core/ci: add coverage target, introduce posttest stage	2020-01-09 15:26:40 +01:00
Milan Rossa	62e9ff0ad2	core: introduce coverage wrapper	2020-01-09 15:26:40 +01:00
Milan Rossa	8b31c6fcf4	core: increase stack size for unix port	2020-01-09 15:26:40 +01:00
Pavol Rusnak	9bc3af08b2	core: update mpconfigport.h from upstream (for both stm32 and unix)	2020-01-09 15:20:22 +01:00
Milan Rossa	42f1af3aa4	core: add build target for debug unix build	2020-01-09 13:44:46 +01:00
Jan Pochyla	655ec0a70c	core/unix: update main.c from upy 1.12	2020-01-07 20:52:43 +01:00
Jan Pochyla	87e7d43068	core/firmware: gchelper.s moved to different directory	2020-01-07 20:52:43 +01:00
Jan Pochyla	7deade5a10	core/firmware: PendSV_Handler is defined in pendsv.c	2020-01-07 20:52:43 +01:00
Jan Pochyla	ecc4313a34	core/usb: avoid naks in hid/webusb rx interfaces	2020-01-07 20:52:43 +01:00
Jan Pochyla	6afff3cc0e	core/loop: remove unused code	2020-01-07 20:52:43 +01:00
Jan Pochyla	f526818603	core: remove qstr blacklist ... As its no longer needed. Mirrors micropython change a09fd0475.	2020-01-07 20:52:43 +01:00
Jan Pochyla	5aca68e50c	core: generate moduledefs.h for micropython	2020-01-07 20:52:42 +01:00
Tomas Susanka	8796ca96b9	tests/ui: rename test-screen to ui	2020-01-07 09:13:08 +00:00
Tomas Susanka	47419c7768	core/ui: simplify swipe if animation is disabled	2020-01-06 14:57:01 +00:00
Tomas Susanka	56257eb6a5	tests/ui: code review fixes	2020-01-06 14:44:30 +00:00
Tomas Susanka	3a035a0ef8	tests: save screens directly to ui_tests; introduce recorded/actual dir	2020-01-03 14:28:27 +00:00
Tomas Susanka	eabd0da196	core/make; legacy: style	2020-01-03 14:28:27 +00:00
Tomas Susanka	51ef963738	tests: introduce UI tests for core	2020-01-03 14:28:27 +00:00
Tomas Susanka	a28f29708f	ci: add junit for a nice tests overview	2020-01-03 12:44:12 +00:00
Tomas Susanka	ffea791658	Merge pull request #774 from trezor/tsusanka/shamir-word-checks ... Recovery: refactor word checks and add a test	2019-12-30 13:26:07 +01:00
Tomas Susanka	d8e956fc6d	core/recovery: change exceptions types; modifications in tests	2019-12-30 11:35:56 +00:00
Tomas Susanka	7f730cb6f9	core/recovery: refactor to exceptions	2019-12-27 19:02:30 +00:00
Tomas Susanka	f4e11a9176	core/recovery: rework arguments	2019-12-27 18:46:22 +00:00
Tomas Susanka	20bcc68926	core/tests: remove utest.py	2019-12-27 13:28:15 +01:00
Tomas Susanka	faa9078c2b	core/recovery: refactor word checks and add a test	2019-12-23 13:40:45 +01:00
Tomas Susanka	a316347bf1	core/tests: test debug is on	2019-12-23 12:01:00 +00:00
Tomas Susanka	5677c254b1	core/tests: remove PYOPT settings	2019-12-23 11:51:29 +00:00
Tomas Susanka	6594ee9368	core/recovery: correctly inform about share already entered inside first group	2019-12-19 17:07:44 +00:00
Pavol Rusnak	8572a5a942	core: fix interrupt usage in usbd_conf	2019-12-18 16:30:57 +00:00
Ondrej Mikle	0064fda203	core: check whether USB structures are correct to avoid faults in shutdown	2019-12-18 17:16:36 +01:00
Pavol Rusnak	6198509948	core: bump version to 2.2.1; update changelog	2019-12-16 19:06:33 +01:00
Pavol Rusnak	d6a3725955	common: remove coins with no trezor compatible wallets	2019-12-15 18:19:36 +00:00
Milan Rossa	6d932a8a1d	core/embed/unix/flash: Don't reopen flash emulation file.	2019-12-15 10:21:29 +01:00
Pavol Rusnak	a9454b216d	core: move delay.c from trezorhal to firmware, fix prodtest build	2019-12-15 08:59:47 +00:00
Pavol Rusnak	a9e5149b95	core: reorganize source code to allow boardloader build ... (after DMA changes)	2019-12-15 08:43:00 +00:00
Tomas Susanka	e75e77a5b2	core/changelog: add info about broken fw upgrades on 2.1.3	2019-12-13 14:36:15 +00:00
Pavol Rusnak	e5bdf0d51b	Merge pull request #742 from trezor/language ... common: change language field to IETF BCP 47 language tag	2019-12-12 18:07:54 +01:00
Pavol Rusnak	046ff607d3	Merge branch 'sdcard-dma'	2019-12-12 18:00:01 +01:00
Milan Rossa	91007bafe9	core/unix/main: Print memory info (peak memory) when TREZOR_LOG_MEMORY env var is set. Part of #194	2019-12-12 17:58:35 +01:00
Pavol Rusnak	43da0d754a	core/embed: decrease SD card operations timeout to 5s	2019-12-11 17:24:28 +00:00
Pavol Rusnak	b34675401c	core/embed: add explicit fault handlers	2019-12-11 16:40:58 +00:00
Pavol Rusnak	c8c27dcd2f	core/embed: enable/disable SDIO/DMA interrupts via supervisor calls	2019-12-11 15:28:49 +00:00
Pavol Rusnak	990a91cd13	core/embed: enable DMA for SDIO operations	2019-12-11 15:28:49 +00:00
Andrew Kozlik	0432f5e801	webauthn: Add use_self_attestation flag to FIDO apps.	2019-12-11 15:29:52 +01:00
Andrew Kozlik	2e9db44434	core/webauthn: Add AAGUID to README.md.	2019-12-10 15:56:41 +01:00
Pavol Rusnak	7646b97dca	common: divisibility -> decimals	2019-12-09 17:43:47 +01:00
matejcik	8cced84bc4	core: fix build-icons	2019-12-09 16:31:46 +01:00
matejcik	3a132e594e	core/stellar: make sure function that awaits is async	2019-12-09 16:31:46 +01:00
matejcik	ac6e23fb87	mako: improve local variable name	2019-12-09 16:31:46 +01:00
matejcik	558020be01	common: drop lastpass from FIDO apps ... as it doesn't actually support FIDO/U2F	2019-12-09 16:31:46 +01:00
matejcik	61e4f79c90	core: use common implementation for toif_convert	2019-12-09 16:31:46 +01:00
matejcik	67b2ba558b	core: auto-generate list of FIDO known apps ... and improve code for loading icons	2019-12-09 16:31:46 +01:00
matejcik	a46fd6f508	core: auto-generate FIDO icons	2019-12-09 16:31:46 +01:00
Pavol Rusnak	bb8d809a6d	common: change language field to IETF BCP 47 language tag	2019-12-08 11:27:10 +01:00
Tomas Susanka	0f3466bf01	core, legacy: update changelog	2019-12-06 12:53:25 +00:00
Tomas Susanka	1b88840f53	docs: move docs to root	2019-12-06 12:24:20 +00:00
Tomas Susanka	61430d800e	core/stellar: add screen for timebounds	2019-12-05 14:31:28 +00:00
Pavol Rusnak	3d50bb5ed8	common: add Peercoin, regenerate coins	2019-12-05 09:43:32 +00:00
Pavol Rusnak	5301c03607	common: add coin.divisibility attribute ... legacy: remove has_address_type/has_address_type_p2sh	2019-12-05 04:30:51 +01:00
Andrew Kozlik	6ca0288092	Merge pull request #720 from trezor/andrewkozlik/wipe-code ... Implement wipe code feature.	2019-12-04 15:24:49 +01:00
Andrew Kozlik	420a4b8ba7	core/webauthn: Close U2F confirmation screen if browser stops polling for more than 3 seconds.	2019-12-03 14:48:59 +01:00
Andrew Kozlik	0b851d6959	core/webauthn: Reply with ERR_CHANNEL_BUSY once a U2F request has been declined to stop Chrome from polling.	2019-12-03 14:48:59 +01:00
Andrew Kozlik	4d3c634732	core/webauthn: Use different return code when user verification is requested but PIN is not set to get better browser behavior. Related to cf6949332f.	2019-12-03 14:48:59 +01:00
Andrew Kozlik	a63ff8f9b4	core/webauthn: Add bogus app ID used by Firefox to indicate error in U2F. Figure out which error to display based on past U2F_AUTHENTICATE check-only requests on the same channel.	2019-12-03 14:48:59 +01:00
Andrew Kozlik	a704bfe184	core/webauthn: Allow only one CTAPHID_WINK command at a time on any given channel ID to fix continuous display blinking with Android.	2019-12-03 14:18:43 +01:00
Andrew Kozlik	3a4e9bd25c	core/ui: Ignore any new alert requests if an alert is already in progress in order to avoid multiple alerts overlapping.	2019-12-03 14:18:43 +01:00
Andrew Kozlik	7c39e2f142	core/webauthn: Specify the exception raised by res.load().	2019-11-26 15:44:05 +01:00
Andrew Kozlik	790178a442	fixup! core/webauthn: Allow new workflow to be set after a command response is sent, so that in device tests the next test doesn't fail with ERR_CHANNEL_BUSY while the previous workflow is closing.	2019-11-26 15:18:14 +01:00
Andrew Kozlik	c463069895	core/webauthn: Don't log an exception when a relying party is not listed in knownapps.	2019-11-26 15:18:14 +01:00
Andrew Kozlik	5bdd523b91	vendor: Update fido2-tests submodule to fix issues with random ordering.	2019-11-26 15:18:14 +01:00
Andrew Kozlik	203853faed	core/webauthn: Allow new workflow to be set after a command response is sent, so that in device tests the next test doesn't fail with ERR_CHANNEL_BUSY while the previous workflow is closing.	2019-11-26 15:18:14 +01:00
Andrew Kozlik	1bc8226a50	common, core: Add wipe_code_protection to the Features message.	2019-11-25 12:32:20 +01:00
Andrew Kozlik	a3b608d8dd	storage, core: Reveal the wipe code status after the device is unlocked.	2019-11-25 12:32:20 +01:00
Andrew Kozlik	a168d661cf	core: Add support for ChangeWipeCode message.	2019-11-25 12:32:20 +01:00
Andrew Kozlik	4381511930	common: Add ChangeWipeCode message.	2019-11-25 12:32:20 +01:00
Tomas Susanka	11f8da2f2d	core: remove .sconsign.dblite on make clean	2019-11-21 14:01:15 +00:00
Andrew Kozlik	2ae1d9a935	webauthn: Disable signature counter in FIDO2 for dropbox.com, gandi.net, secure.login.gov.	2019-11-21 13:59:45 +01:00
matejcik	1f6cc77dec	upgrade black to 19.10b0	2019-11-20 16:02:47 +01:00
matejcik	e25a7ebb7f	core: add changelog for RecoveryDevice fix	2019-11-20 12:27:57 +01:00
matejcik	34913a328a	all: disallow most RecoveryDevice fields in dry-run (fixes #666)	2019-11-20 12:27:57 +01:00
Pavol Rusnak	d029920540	core/webauthn: update metadata	2019-11-16 10:53:10 +00:00
Pavol Rusnak	33ecdeb193	core+legacy: remove confusing changelog entries	2019-11-13 19:47:35 +01:00
Pavol Rusnak	e1e081fb7a	core/webauthn: fix metadata	2019-11-13 17:16:23 +01:00
matejcik	09962708d3	core: move load_device to the debug app	2019-11-13 16:48:35 +01:00
matejcik	fd8aed6105	all: drop XPRV feature of LoadDevice	2019-11-13 16:48:35 +01:00
Pavol Rusnak	16af7f1353	common: add {needs,no}_backup flags to LoadDevice, make it debug only	2019-11-13 16:48:35 +01:00
Pavol Rusnak	0a0cd797e3	ci/tests: use new Monero tests binary	2019-11-13 16:29:06 +01:00
Pavol Rusnak	cde944b565	Merge branch 'reorder-usb'	2019-11-13 16:23:07 +01:00
Pavol Rusnak	908c0fb8c0	core/docs: add info about enabling VCP for non-Bitcoin-only FW	2019-11-13 16:22:42 +01:00
Tomas Susanka	20a30ae521	tests/monero: print hash of the monero binary	2019-11-13 14:44:40 +00:00
Tomas Susanka	85d7215bf3	Merge pull request #700 from trezor/tsusanka/upgrade-u2f-check ... Get next u2f counter and add tests for it	2019-11-13 15:19:22 +01:00
Pavol Rusnak	2652936c16	core/tests: adapt device_emu_fido2/u2f to reordered usb endpoints	2019-11-13 13:21:39 +01:00
Pavol Rusnak	df273bf836	core/usb: reorder endpoints	2019-11-13 13:21:39 +01:00
Pavol Rusnak	3b5a113304	core/usb: small reformat	2019-11-13 11:33:58 +00:00
Tomas Susanka	a8b82975a1	core/management: get next u2f counter	2019-11-13 10:55:52 +00:00
Tomas Susanka	2a20287882	common/protobuf: add message for retrieving an increased u2f counter	2019-11-13 10:55:52 +00:00
Dusan Klinec	d81f43f7a4	tests: use new monero testing binary v0.15.0.0	2019-11-12 22:53:47 +01:00
Pavol Rusnak	d761a57689	storage: introduce FLAGS_APPID	2019-11-11 19:47:48 +01:00
Pavol Rusnak	1caae698ca	storage: make FLAG_PUBLIC and FLAGS_WRITE part of public API	2019-11-11 19:47:48 +01:00
matejcik	c96d5ab1bc	core/sd_salt: check if sd_salt is enabled before asking for SD card	2019-11-11 16:16:42 +01:00
matejcik	0c4fa03575	core/sd_salt: properly await ensure_sd_card	2019-11-11 16:14:43 +01:00
matejcik	c9fca25531	core: add storage module to frozen build	2019-11-11 15:52:46 +01:00
matejcik	75622d92d2	Merge branch 'master' into matejcik/storage-relocation	2019-11-11 14:39:00 +01:00
matejcik	dee47a06f2	core/sd_salt: ensure ProcessErrors are propagated properly	2019-11-11 14:37:20 +01:00
Tomas Susanka	597277725e	core/recovery: end progress before showing success ... This fixes #695. This was the default behaviour but we have changed it because of Wallet, which was doing the polling. Since Wallet can now send RecoveryDevice again and acquire Context this is no more needed.	2019-11-11 10:39:07 +00:00
Tomas Susanka	f4385ede2a	core/changelog: add note on Recovery rework	2019-11-10 13:07:23 +01:00
Pavol Rusnak	4462fb522c	core/nem: don't use mp_obj_new_str_of_type	2019-11-09 12:06:12 +00:00
matejcik	8225e5d8b2	core/sd_salt: remove forgotten fs.mount	2019-11-08 14:23:58 +01:00
matejcik	18ab677124	core/webauthn: rename storage.webauthn to storage.resident_credentials	2019-11-08 12:47:54 +01:00
matejcik	f03562cca0	core/sd_salt: decorate sd_salt functions to ensure proper finalization and power-off	2019-11-08 12:42:30 +01:00
matejcik	33bd4d3ba9	Merge branch 'master' into matejcik/storage-relocation	2019-11-07 12:51:02 +01:00
matejcik	51a5d8e30a	core/boot: do not pass useless argument to request_sd_salt	2019-11-07 11:31:29 +01:00
matejcik	7de5cec4b0	core: halt if the script ever runs out of the loop in main.py	2019-11-07 11:27:45 +01:00
matejcik	5ffa395dec	core: catch more exceptions for the purpose of halting	2019-11-07 11:27:45 +01:00
matejcik	7cb125d1cb	core/recovery: properly replace homescreens	2019-11-07 11:27:45 +01:00
matejcik	1c59ba9423	core/workflow: improve comments and logic	2019-11-07 11:27:45 +01:00
matejcik	a3930d4bdb	core: rename close_default to a more appropriate kill_default	2019-11-07 11:27:45 +01:00
Tomas Susanka	ca484b2c06	core: remove persistence boot and set recovery as a default workflow	2019-11-07 11:27:45 +01:00
matejcik	e9fe6c2943	core/boot: remove leftover print	2019-11-06 13:57:00 +01:00
matejcik	28d30ffd2f	core/webauthn: unify signatures of Credential.from_bytes and friends	2019-11-06 13:56:52 +01:00
Tomas Susanka	7dba12cb6d	core/log: print received message's name	2019-11-06 11:20:46 +01:00
Pavol Rusnak	8928e891c6	core/Changelog: add entry	2019-11-05 15:57:43 +01:00
Pavol Rusnak	0040b916d2	common/defs: remove inactive coins	2019-11-03 10:44:22 +00:00
Pavol Rusnak	2d8f70d49a	common/defs: add mojeid.cz definition to webauthn	2019-11-01 12:54:28 +00:00
Tomas Susanka	c261427d73	Merge pull request #667 from malinah/malinah/confirmbtn ... core/trezor/ui/loader: fixes #655 Button hold-to-confirm press detection.	2019-11-01 11:39:31 +01:00
apollo	18c926a34b	common/defs: fix zcore signing (#669)	2019-11-01 00:18:03 +01:00
Milan Rossa	2143978b12	core/trezor/ui/loader: fixes #655 Button hold-to-confirm press detection.	2019-10-31 23:04:46 +01:00
matejcik	1397bbfeb5	core/tests: fix test suite after storage move	2019-10-31 16:34:16 +01:00
matejcik	5c93ecd53a	core: create top-level storage module ... This is to avoid including app-specific functionality in storage and avoid circular imports. The following policy is now in effect: modules from `storage` namespace must not import from `apps` namespace. In most files, the change only involves changing import paths. A minor refactor was needed in case of webauthn: basic get/set/delete functionality was left in storage.webauthn, and more advanced logic on top of it was moved to apps.webauthn.resident_credentials. A significant refactor was needed for sd_salt, where application (and UI) logic was tightly coupled with the IO code. This is now separated, and storage.sd_salt deals exclusively with the IO side, while the app/UI logic is implemented on top of it in apps.common.sd_salt and apps.management.sd_protect.	2019-10-31 16:21:56 +01:00
Pavol Rusnak	39a532c8b1	core/webauthn: increase limit for resident credentials to 100	2019-10-31 14:27:46 +00:00
Pavol Rusnak	4979e17e86	core/webauthn: improve metadata	2019-10-30 17:53:09 +01:00
Tomas Susanka	1d1e9da1d3	Merge pull request #661 from trezor/tsusanka/webauthn-move-iface ... core/webauthn: set webauthn interface in its app not in main.py	2019-10-30 15:37:33 +01:00
Tomas Susanka	26e2960532	core/webauthn: move boot to regular firmware block	2019-10-30 15:20:21 +01:00
Pavol Rusnak	58a865dd05	core/embed/unix: fix sdcard_init behaviour	2019-10-30 14:43:10 +01:00
Tomas Susanka	809b30ddcf	core/webauthn: set webauthn interface in its app not in main.py ... This way the other messages (WebAuthnListResidentCredentials etc.) get registered in device debug build and can be tested. Updates #591	2019-10-30 14:38:04 +01:00
Pavol Rusnak	727b7f8cd3	core/webauthn: add u2f/ctap2 metadata	2019-10-28 21:33:15 +01:00
Tomas Susanka	64a218eea0	bitcoin: simplify if expression	2019-10-28 15:35:58 +00:00
Tomas Susanka	c1f7239c2d	ci: add click and persistence tests	2019-10-25 12:04:14 +00:00
matejcik	93062c4cc2	docs: improve docs, add random.md	2019-10-24 13:36:54 +02:00
Pavol Rusnak	0f1e30b235	core: fix typo in get_address	2019-10-24 11:42:40 +02:00
Pavol Rusnak	c617035a3e	core: bump version to 2.1.9	2019-10-24 09:16:24 +00:00
Pavol Rusnak	e67a359279	core: update changelog	2019-10-24 09:15:17 +00:00
Pavol Rusnak	5fe2f7e59c	common/protob: remove ButtonRequest.data field	2019-10-24 11:11:43 +02:00
Pavol Rusnak	9a3d8ef2c4	core: show xpubs in GetAddress for multisig ... also fix not showing MultisigRedeemScriptType.nodes correctly	2019-10-24 09:11:01 +00:00
Pavol Rusnak	322417d9ed	core/tezos: refactor bytes constants	2019-10-23 16:29:21 +00:00
Adrian Nagy	384275ac73	core/tezos: support the new protocol update (005-BABYLON)	2019-10-23 17:53:10 +02:00
matejcik	a5ccf95260	core: fix mypy problems	2019-10-22 17:06:49 +02:00
matejcik	8d2ae142f3	core/debug: at start, wait for first layout to show up	2019-10-22 17:06:49 +02:00
matejcik	a8fc569016	debug: add support for general layout waiting	2019-10-22 17:06:49 +02:00
matejcik	97525654bb	core/debug: avoid running a handler when waiting for layout change ... otherwise a running handler would prevent the default task from starting, which would deadlock a test waiting for the default task	2019-10-22 17:06:49 +02:00
matejcik	3664a5f06f	core/debug: reading layouts, inserting synthetic events	2019-10-22 17:06:49 +02:00
matejcik	8c3d93619e	core: allow inserting synthetic touch events into event loop	2019-10-22 16:55:30 +02:00
matejcik	a1a543f781	core: boot debuglink in recovery homescreen	2019-10-22 16:55:30 +02:00
matejcik	06e10f948d	protobuf: send x/y coordinates, allow waiting for layout change	2019-10-22 16:55:30 +02:00
matejcik	b25537f6b0	core: nicer output for cancellations	2019-10-22 16:54:49 +02:00
matejcik	d17f879d97	mypy: use GenericContext protocol to work-around DummyContext	2019-10-22 14:36:25 +00:00
matejcik	ed190c772c	core: avoid circular import in sd_salt	2019-10-22 14:36:25 +00:00
Tomas Susanka	0511cc8b8c	core: add final mypy fixes!	2019-10-22 14:36:25 +00:00