445 Commits (5c4703c9bbfb962fbbe409c2e40030f30161e4f0)

Author	SHA1	Message	Date
Martin Milata	767e7b8e8d	fix(core): spaces in Shamir info texts	3 years ago
matejcik	86089fa5ad	feat(core): avoid restarting session for select messages (fixes #1631)	3 years ago
Martin Milata	c54077a714	fix(core): imports needed for T1 startup ... Now debug build booted on wiped T1 connects to USB and shows square in top right corner.	3 years ago
matejcik	411a7bb802	fix(core/wire): handle codec errors better	3 years ago
matejcik	231a1fe229	refactor(core): do not cache reverse-mapping of message types in RAM ... Instead, walk the module for every message. Also remove the custom wire type registration facility, which is not used.	3 years ago
matejcik	93db39ad70	fix(core/wire): drop unused reader, clarify writer usage	3 years ago
matejcik	94521a2065	feat(core): presize some modules to account for their sub-imports	3 years ago
matejcik	5f4240d93c	feat(core): preallocate sys.modules to an appropriate size	3 years ago
matejcik	f6f3c7ffcf	fix(core): prevent flickering when homescreen does not need to redraw	3 years ago
matejcik	5d12b943b3	feat(core): ensure all module names are interned	3 years ago
matejcik	aaa3ce6117	fix(core/bitcoin): fix CoinJoin authorization with new cache	3 years ago
matejcik	dd655422f1	refactor(core/wire): simplify the message handling loop	3 years ago
matejcik	b1ca6ca848	refactor(core/debug): offload debug configuration from apps.debug	3 years ago
matejcik	e859c13d70	refactor(core): limit global imports in key places ... so that by importing `apps.base`, we don't pull in the whole circus	3 years ago
matejcik	7ca67cc4d9	feat(core): clear out memory space after every workflow ... A small fixed list of modules is kept pre-loaded in the GC arena. These must not keep references to anything else, as all other modules are unloaded and the memory is cleared.	3 years ago
matejcik	e629a72c3a	refactor(core): move app registrations to a single handler function ... apps.webauthn.boot() does not need an if-condition because it's only called from session.py when the usb interface is enabled This means that they do not need to be stored in RAM at all. The obvious drawback is that we need to hand-edit the if/elif sequence, but we don't register new handlers all that often so 🤷	3 years ago
matejcik	3cdb09c294	refactor(core): modify cache to preallocate all its data ... also get rid of expensive "wire" import	3 years ago
matejcik	ea505b592c	refactor(core): move empty_bytearray to trezor.utils	3 years ago
matejcik	b0116d0bdc	refactor(core): modify wire to preallocate its buffers	3 years ago
gabrielkerekes	bf3e64ff20	fix(common): add isort:skip_file to files generated by pb2py	3 years ago
gabrielkerekes	2313293477	feat(core/cardano): add support for catalyst voting registration	3 years ago
gabrielkerekes	2c503b16f5	fix(common): fix one value enums in pb2py	3 years ago
Martin Milata	ac711fb8ee	style(core): use more recent type annotation syntax ... https://www.python.org/dev/peps/pep-0585/ - Type Hinting Generics In Standard Collections https://www.python.org/dev/peps/pep-0604/ - Allow writing union types as X | Y	3 years ago
Martin Milata	0278998f72	style(common): mypy: disable implicit Optional for function arguments	3 years ago
Martin Milata	8b3ac659a0	style(core): mypy: disable implicit Optional for function arguments ... https://www.python.org/dev/peps/pep-0484/#union-types	3 years ago
Martin Milata	f97af2af1b	chore(core/ui): typing: no implicit Optional	3 years ago
Martin Milata	da72482c2f	refactor(core/ui): get rid of confirm_wipe	3 years ago
Martin Milata	c0174ff217	refactor(core/ui): raise exception on dialog cancel by default	3 years ago
Martin Milata	2b6ea25712	refactor(core): convert rest of apps.bitcoin to layouts	3 years ago
Martin Milata	b1e38fe382	refactor(core): no implicit spaces in render_text	3 years ago
Martin Milata	01900b8536	refactor(core): convert parts of apps.webauthn to layouts	3 years ago
Martin Milata	ffe6d65f72	refactor(core): convert parts of apps.management to layouts	3 years ago
Martin Milata	c09a142e2a	refactor(core): convert apps.misc.* to layouts	3 years ago
Martin Milata	0b5d17bf49	refactor(core/ui): merge confirm_hexdata and show_pubkey	3 years ago
Martin Milata	6ded531f8f	refactor(core): convert apps.common.sdcard to layouts	3 years ago
Martin Milata	035f114125	fix(core/ui): don't return CONFIRMED/CANCELLED from layouts	3 years ago
Rafael Korbas	a9b8b0e119	feat(core/cardano): chunked serialization of signed transaction	3 years ago
Andrew Kozlik	3084d1196d	feat(core): Support 50 digit PIN and wipe code.	3 years ago
Pavol Rusnak	4649b80b44	feat(core): allow secp256k1-zkp for bitcoin-only build ... (but keep it disabled)	3 years ago
matejcik	cb7152542d	feat: drop DebugLinkShowText functionality	3 years ago
Andrew Kozlik	b10acbe153	feat(core): Allow decreasing output amount in RBF transactions.	3 years ago
Andrew Kozlik	5593862dc1	fix(core): Disable hold-to-confirm animation when animations are disabled.	3 years ago
JoeGruff	e3ea32a986	multi: Add decred staking. ... Add two new input and four output script types. Decred ticket purchases consist of a stake submission, op returns, and change addresses. Although change addresses are allowed by consensus, they are no longer used in practice and so have been given the restrictions of a null pubkey and no value. Stake scripts are almost identical to p2pkh or p2sh except for an extra opcode in front. Inputs are currently only used in the form of one input three outputs with the first output, or stake submission, paying to a public key hash, or with two inputs and five outputs with the stake submission paying to a multisig script hash. The op returns are directed to the user in the case of one and the voting service provider and user in the case of two. One of the sstx commitment for a ticket must pay back to the trezor wallet. This is checked and an error is thrown if we don't find the expected public key hash. Because this adds the ability to create new types of outputs once the ticket votes, two new input script types are also needed. A successful vote will lead to a stake generation script that must be spent, and an unsuccessful vote will lead to a revocation script that must be spent. If we allowed stake change scripts to have a valid pubkey, that too would require another op code, but we disallow those for output.	3 years ago
Pavol Rusnak	6c11bc60d7	common/defs/fido: add namecheap	3 years ago
Martin Milata	ee2ec85983	fix(core): fix title shown for multisig address	3 years ago
Roman Zeyde	b2877afa7f	feat(common): add public_key to ECDHSessionKey	3 years ago
Pavol Rusnak	4b0f41d41e	fix(common): change msg_id of RebootToBootloader from 804 to 87	3 years ago
Ondrej Mikle	77e99078c3	chore(trezorlib): add generated message files	3 years ago
Ondrej Mikle	1579c62332	chore(legacy): reboot to bootloader protobuf generated messages	3 years ago
Martin Milata	9b60cc0098	feat(core): restart loader from current position ... On "hold to confirm" dialogs, when you hold your finger, lift it, and quickly hold again, the progress bar jumps to the beginning. This commit changes the behavior so the progress continues from its current position of the reverse animation.	3 years ago
Martin Milata	192d0dcf87	feat(core): hold homescreen to lock	3 years ago
Martin Milata	db2db8e6f3	feat(common): add hold_ms to DebugLinkDecision	3 years ago
Pavol Rusnak	b4daf2f3e3	chore(core): run make gen to regenerate fido2 icons ... updated here - https://github.com/trezor/trezor-firmware/pull/1456	3 years ago
Martin Milata	391602ae99	refactor(core): turn show_address, show_pubkey, show_xpub into layouts	3 years ago
Martin Milata	03699f5639	refactor(core): turn show_success, show_warning into layouts	3 years ago
Martin Milata	f38abf9d89	refactor(core): introduce layouts ... Layouts can be used by the application code to interact with user using small number of dialogs or other groups of UI components. Each layout is identified by name and takes some parameters. Most layouts will have an implementation for each hardware model, mechanism is provided to import the correct version so that application code can be oblivious to the model. This commit introduces the layout concept and converts a couple of dialogs to use it.	3 years ago
Martin Milata	18cb429610	feat(core): introduce Text.format_parametrized()	3 years ago
Martin Milata	f1382bf892	refactor(core): model-dependent UI component directories ... They now live under trezor.ui.components.tt. Later trezor.ui.components.t1 will be added and application code will be rewritten to not use them directly in order to work on both TT and T1.	3 years ago
matejcik	14037d0c31	chore: regenerate protobuf classes	3 years ago
matejcik	637ccadcb6	style(core): remove unused type:ignore comment after mypy upgrade	3 years ago
Rafael Korbas	e4c406822c	Add multiasset sending and min validity to Cardano transactions	3 years ago
Pavol Rusnak	345ef52949	feat(proto): add amount_unit to AuthorizeCoinJoin and SignTx	3 years ago
Pavol Rusnak	f3d5de15ef	refactor(core): turn SECP256K1_ZKP into a firmware feature flag	3 years ago
Pavol Rusnak	6689b9c22f	common/protob: add GetAddress.ignore_xpub_magic field	3 years ago
mcudev	b8ffcadf94	common/defs/fido: add gemini webauthn (#1416)	3 years ago
matejcik	2d3a4d15fa	fix(core/ui): render_text uses correct font and color with item_offset	3 years ago
matejcik	24195d7c3e	fix(core/ui): use full line_width for content	3 years ago
matejcik	bbef9c650b	refactor(core): improve render_text behavior ... * use less memory due to copy-less rendering * implement linebreaking on embedded \n	3 years ago
Pavol Rusnak	edb1243f64	feat(proto): add descriptors related fields to GetPublicKey/PublicKey	3 years ago
Andrew Kozlik	aeb021b159	chore(core): Improve naming of SLIP39's T9 mask lookup.	4 years ago
Pavol Rusnak	1187e4ddaf	style(common): use new syntax for typing in autogenerated protobuf enums	4 years ago
Pavol Rusnak	a1dda836ec	style(core/src): use new syntax for typing	4 years ago
Martin Milata	ee64b65b26	refactor(core): call super().__init__() in subclasses	4 years ago
Martin Milata	fa1566cb71	refactor(core): call super().__init__() in Component and Layout subclasses	4 years ago
Pavol Rusnak	952adc5961	style(core): use PEP515 Underscores in Numeric Literals	4 years ago
matejcik	faa57e29db	build(core): include generated resources.py in repo	4 years ago
Rafael Korbas	b261f789f3	Add support for stakepool registration to Cardano	4 years ago
Andrew Kozlik	ad6a0bc2a2	chore(common): Add new request types TXORIGINPUT and TXORIGOUTPUT.	4 years ago
Andrew Kozlik	443e0c101e	chore(common): Add orig_hash and orig_index fields to TxInput and TxOutput.	4 years ago
Martin Milata	830592f2d9	feat(core): add experimental_features setting ... The setting is off by default. When it is enabled protobuf messages marked UNSTABLE are rejected after decoding.	4 years ago
Martin Milata	0376670404	feat(common): expose 'unstable' option in generated code	4 years ago
Martin Milata	314cd260eb	feat(common): add experimental_features setting	4 years ago
Pavol Rusnak	d8534b5ee6	perf(core/extmod): replace HMAC Python implementation with C ... We keep Python implementation of HMAC for Monero in core/src/apps/monero/xmr/crypto/__init__.py	4 years ago
Andrew Kozlik	d90c3af6ea	docs(core): Fix typos in slip39.py.	4 years ago
Martin Milata	b2c4bbdaa2	feat(common): add auto_lock_delay and display_rotation to Features	4 years ago
matejcik	0eed360037	chore: make tx type names shorter ... as suggested by @andrewkozlik: TxAckInputType -> TxInput TxAckOutputType -> TxOutput TxAckPrevTxType -> PrevTx TxAckPrevInputType -> PrevInput TxAckPrevOutputType -> PrevOutput	4 years ago
matejcik	244b264b47	chore(core): fix typing and kwargs usage	4 years ago
matejcik	ef4022fbf5	auto: regenerate protobuf classes	4 years ago
matejcik	b0a2297b14	feat(core): convert protobuf decoding errors to DataErrors	4 years ago
Martin Milata	7d37b2c90f	common: add PromptTemporarily to SafetyChecks enum	4 years ago
Martin Milata	9f066e877d	common: add SafetyCheckLevel to Features	4 years ago
Andrew Kozlik	5d745d5d04	common/protob: Add commitment_data to TxInputType.	4 years ago
Martin Milata	b8bb63fbef	core: drop unused FONT_SIZE constant	4 years ago
matejcik	e0583dd5cb	all: use a specific error code for "invalid session"	4 years ago
Andrew Kozlik	dd540a2ccd	core/ui: Initialize Qr class properly.	4 years ago
Pavol Rusnak	d1973b7486	pipenv: update Pipfile	4 years ago
Pavol Rusnak	4e11735d22	core/modtrezorui: remove prefill from text functions ... use display.bar where needed to prefill the areas	4 years ago
Pavol Rusnak	65805c9145	core: fix non-determinism in resources.py.mako	4 years ago
Andrew Kozlik	5c1f197602	common/protob: Add CancelAuthorization message.	4 years ago
Andrew Kozlik	2c30dd62fc	common: Add DoPreauthorized message.	4 years ago
Andrew Kozlik	bbab13f6e7	common/protob: Add AuthorizeCoinJoin message.	4 years ago
gabrielkerekes	f2ee450410	Include metadata in transaction signing	4 years ago
gabrielkerekes	e92baf5b02	Update protobuf	4 years ago
gabrielkerekes	b5f3511c1c	Add support for script addresses in tx outputs	4 years ago
Pavol Rusnak	cec87bba50	core: remove mono bold font variant (not used anywhere)	4 years ago
Gabriel Kerekeš	d2c1624602	Cardano shelley update 2/3 (#1112)	4 years ago
gabrielkerekes	e1615e60ec	Update Cardano to support Shelley era 1/3 ... Update protobuf - Previous transactions don't need to be sent anymore, because fee is included in the transaction now. Thus transactions_count can be removed from CardanoSignTx message and the CardanoTxAck and CardanoTxRequest messages can be removed altogether. - CardanoTxInputType.type is unused so remove it Add NULL (None type) serialisation to CBOR - Transaction metada must either have a valid structure or CBOR NULL must be used (if metadata is empty) - it can't be simply left out. Add protocol_magics file - Just to have a nicer way of representing protocol magics Update transaction signing - Previous transactions no longer need to be requested - Output building is simplified, since fee doesn't need to be calculated - Remove transaction class since it is no longer needed (only functions remained) - Reorder functions so it reads top to bottom Add protocol magic to byron address on testnet - This has always been a part of the spec, but it hasn't been implemented before, because it wasn't really needed. Update trezorlib Update tests - Transaction messages are no longer required - Expected values are different since tx format changed - Common values in test cases have been extracted Remove unused file - Progress was used when receiving previous transactions Add CRC check to output address validation	4 years ago
matejcik	fdcb64ac24	all: rename protobuf `unsafe_prompts` to `safety_checks`	4 years ago
matejcik	1109250dcf	core: add option to allow unsafe prompts	4 years ago
matejcik	c3a61998cb	core: generate resdata by Mako, use if/elif trick to save RAM	4 years ago
matejcik	5e7fd3aea6	core: use utils.BufferReader instead of apps.common.BytearrayReader	4 years ago
matejcik	1ff4a0d239	core: separate BufferIO into Reader (read-only) and Writer ... also integrates BytearrayReader API into BufferReader	4 years ago
matejcik	3514a31bc9	core: make USB codec resilient to OOM conditions	4 years ago
matejcik	31e2170766	core: make protobuf buffer smaller, dynamically allocate bigger if necessary	4 years ago
matejcik	01d695283f	core: make protobuf buffer bigger	4 years ago
matejcik	0c3bc53aee	core: clean up types for field caching, fix count_message	4 years ago
matejcik	d568afa80d	core: improve protobuf field caching	4 years ago
matejcik	85d74ece76	core: implement synchronous v1 codec	4 years ago
Martin Milata	fd117a0c9f	core: raise error on auto-lock value out of range	4 years ago
matejcik	051763575d	core: touch idle timer in keyboards (fixes #1099)	4 years ago
matejcik	2c4ecff0a4	core: fix synthetic events breaking io.poll delay calculation	4 years ago
Andrew Kozlik	533de50588	common/protob: Add GetOwnershipId message.	4 years ago
Andrew Kozlik	956ea9a94f	common: Add ownership_proof field to TxInputType.	4 years ago
Andrew Kozlik	c723c78529	common/protob: Add GetOwnershipProof message.	4 years ago
Andrew Kozlik	3b6c1e5e6b	core/crypto: Add functions for verifying DER encoded signatures.	4 years ago
Andrew Kozlik	cc655575c8	common: Add witness field to TxInputType.	4 years ago
Andrew Kozlik	872768928b	core/crypto: Fix endianity in DER length encoding.	4 years ago
Tomas Susanka	ca3dd2bfb9	common: skip deprecated fields during generation; deprecate overwintered field in Zcash	4 years ago
Andrew Kozlik	f382f77c89	core/ui: Fix repaint bug in QR code rendering #1067.	4 years ago
Tomas Susanka	e534ae3ad7	legacy, core: rename Features.pin_cached to unlocked and unify	4 years ago
Andrew Kozlik	9c61257e8e	core: Use the Lock icon in the PIN entry dialog only when the device is actually locked.	4 years ago
matejcik	9df7c84c56	core/ui: lower lockscreen brightness	4 years ago
matejcik	872e0fb0e0	core: lower scheduler resolution to milliseconds ... This avoids problems with large timeouts causing the scheduler queue to think the time counter has overflown, and ordering the autolock task before immediate tasks. The maximum reasonable time difference is 0x20000000, which in microseconds is ~8 minutes, but in milliseconds a more reasonable ~6 days.	4 years ago
matejcik	847691798b	core: simplify homescreen and lockscreen implementations	4 years ago
matejcik	70f67883c5	core: fix artifacts in click-based UI tests	4 years ago
matejcik	a9d8fd3992	core: debuglink interface avoids workflow management ... This will have unintended consequences if you call a wirelink function on the debulink interface. TT allows this ... and will behave badly.	4 years ago
matejcik	f32c2f9e23	core: replace workflow.kill_default with workflow.close_others	4 years ago
matejcik	6f53ca0ac6	core: rework wait_layout() ... The original wait_layout was unreliable, because there are no guarantees re order of arrival of the respective events. Still, TT's event handling is basically deterministic, so as long as the host sent its messages close enough to each other, the order worked out. This is no longer the case with the introduction of loop.spawn: TT's behavior is still deterministic, but now ButtonAck is processed *before* the corresponding wait_layout, so the waiting side waits forever. In the new process, the host must first register to receive layout events, and then receives all of them (so the number of calls to wait_layout must match the number of layout changes). DebugLinkWatchLayout message must be version-gated, because of an unfortunate collection of bugs in previous versions wrt unknown message handling; and this interests us because upgrade-tests are using wait_layout feature.	4 years ago
matejcik	bbfce4e303	common: introduce ButtonRequestType.PinEntry	4 years ago
matejcik	3dbd9c9eca	core/loop: prevent finalizers from doing things when task is closed externally	4 years ago
matejcik	42e7c43c7c	core: make sure that auto-lock shuts down running workflows	4 years ago
matejcik	2d0206c043	core: replace workflow.on_start/on_close with workflow.spawn	4 years ago
matejcik	02565f3bfb	core/loop: introduce spawn syscall	4 years ago
matejcik	7ff1251ee1	core: dim lockscreen (fixes #974)	4 years ago
matejcik	67b723e4ca	core: add a global idle timer	4 years ago
matejcik	246998910a	core: refactor usage of input_signals ... this prevents a certain class of UI test failure. It also localizes the use of debuglink signals into the layout classes instead of call sites, which is a design we were already using for confirm_signals	4 years ago
matejcik	09af8aed4e	core: consider lockscreen to be a separate homescreen ... this involves some changes to the workflow defaults: * workflow.start_default() takes no arguments * workflow.set_default() (originally replace_default) configures the default that will be started by next call to start_default(). The intended usecase is to set_default() first and then start it separately. * apps.base.set_homescreen() factors out the logic originally in main.py, that decides which homescreen should be launched. This uses set_default() call. start_default() is then used explicitly in main.py	4 years ago
matejcik	0600d87c8c	common: rename ClearSession to LockDevice, introduce EndSession	4 years ago
matejcik	eabfcab9b9	core: add default messages to some error codes	4 years ago
matejcik	341c5b7d10	core/wire: make handler lookup pluggable	4 years ago