2606 Commits

Author	SHA1	Message	Date
Martin Milata	d69b23e3c5	chore(core/emulator): ignore MICROPY_UNIX_COVERAGE ... Seems to be micropython internal flag that hasn't been working in our emulator for some time. Relevant micropython commits: b9a35bebf75be53a817bf6341af14b882093e345 py/qstr.h: Remove QSTR_FROM_STR_STATIC macro. [no changelog]	2021-09-17 11:18:14 +02:00
Pavol Rusnak	d153082c9c	chore(vendor): bump micropython to 1.14 ... Relevant micropython commits: 4559bcb4679e04e0a5e24030675676ff6a9803f2 unix: Make mp_hal_delay_ms run MICROPY_EVENT_POLL_HOOK.	2021-09-17 11:18:14 +02:00
Martin Milata	53e2573691	docs(core): fix dates in changelog	2021-09-16 18:41:06 +02:00
Martin Milata	35a41fd957	Merge branch 'release/21.09' into master ... Conflicts: core/src/apps/ethereum/tokens.py	2021-09-16 17:28:36 +02:00
Martin Milata	a7a7570496	ci(core): enable rust unit tests ... [no changelog]	2021-09-16 14:57:06 +02:00
Martin Milata	a007e062ab	style(core): apply rustfmt ... [no changelog]	2021-09-16 14:57:06 +02:00
matejcik	ae4dd42d18	refactor(core/ethereum): reorganize sanity checks, disallow chain_id 0	2021-09-10 15:09:03 +02:00
matejcik	8931450d21	chore(common): enable Palm network	2021-09-10 15:09:03 +02:00
matejcik	e80077e0a4	feat(core/ethereum): enable type-checking for Ethereum app	2021-09-10 15:09:03 +02:00
matejcik	0c2863fc8d	feat(core/ethereum): use TokenInfo object instead of tuples	2021-09-10 15:09:03 +02:00
matejcik	4b34e4c001	fix(core): allow AnyStr as parameter for unhexlify	2021-09-10 15:09:03 +02:00
matejcik	30b08d949b	feat(common): add default values to EthereumSignTx fields ... so that we can avoid Optional types for fields	2021-09-10 15:09:03 +02:00
matejcik	96ed53cc1c	refactor(core,legacy): remove Wanchain special handling ... now that Wanchain has proper chainID and we don't need to detect it by magic. [no changelog]	2021-09-10 15:09:03 +02:00
matejcik	639406b01f	feat(all): make chain_id mandatory	2021-09-10 15:09:03 +02:00
arbitrarylink	f051225730	feat(core,legacy): add support for Ethereum 64-bit chain_id ... * Changes from original PR * Now that we are rejecting chain_ids of 0, we need to have the tests set the chain_ids to at least 1. * Ran 'make gen' and uploaded changed files. * Ran make style_check and fixed reported errors * Added changelog files * Reverted changes concerning chain_id 0 being rejected. * Adds tests for MAX_CHAIN_ID and MAX_CHAIN_ID+1. Also reverts MAX_CHAIN_ID to the previous value. * Added missing whitespace around arithmetic operator. Co-authored-by: Michael Hatton <michaelhatton@Michaels-Mini.fios-router.home>	2021-09-10 15:09:03 +02:00
Tomas Susanka	cec1f39a90	chore(core, legacy): bump versions ... [no changelog]	2021-08-31 12:55:37 +02:00
matejcik	9276b17023	fix(common): regenerate support data ... [no changelog] (cherry picked from commit eb34c0850e)	2021-08-27 13:40:20 +02:00
matejcik	eb34c0850e	fix(common): regenerate support data ... [no changelog]	2021-08-27 13:38:45 +02:00
Tomas Susanka	9a6451342a	chore(core): generate Changelog	2021-08-26 14:52:52 +02:00
matejcik	174985619d	chore(common): bump chains and tokens for release	2021-08-24 13:14:06 +02:00
matejcik	7aed8d535d	feat(all): re-enable Firo (fixes #1767)	2021-08-23 11:43:57 +02:00
Martin Milata	f37ca13f1a	refactor(core): disable SD, SBU, fatfs for T1 build	2021-08-20 12:22:13 +02:00
gabrielkerekes	2c65b00951	chore(cardano): add changelog entries	2021-08-20 11:50:13 +02:00
gabrielkerekes	8e3bc39b56	chore(cardano): update and format README	2021-08-20 11:50:13 +02:00
gabrielkerekes	7c3b5c86a5	fix(cardano): forbid mixing paths from multiple accounts in a single transaction	2021-08-20 11:50:13 +02:00
gabrielkerekes	28f0f60295	feat(cardano): update tests for streamed tx signing	2021-08-20 11:50:13 +02:00
gabrielkerekes	b0c8590f00	feat(cardano): streamed transaction signing	2021-08-20 11:50:13 +02:00
gabrielkerekes	d2a5be4e38	feat(cardano): prepare protobuf messages for streamed tx signing	2021-08-20 11:50:13 +02:00
matejcik	d33d61d84e	chore(core): remove Lisk	2021-08-19 10:25:41 +02:00
Frederik Bolding	38fa9197ca	feat(core,python): support for Ethereum EIP1559 transactions ... Initial EIP1559 implementation Fix a few small issues Progress on Python lib implementation and firmware Fix RLP length Start fixing tests Fix legacy transactions Simplify API and logic Add EIP1559 tests Fix access list formatting Fix UI visiblity issue Fix commented out code fix: correct linting issues Fix access_list protobuf formatting Remove unneeded code Remove dead code Check tx_type bounds for EIP 2718 Reduce code duplication Prefer eip2718_type over re-using tx_type Add more tests Simplify format_access_list Simplify sign_tx slightly Change Access List format and add logic to encode it Fix a bunch of small PR comments Fix a linting issue Move tests out of class and regenerate Remove copy-pasted comments Add access list to CLI Simplify _parse_access_list_item Fix small mistakes following rebase Fix linting Refactor to use a separate message for EIP 1559 tx Simplify changed legacy code Fix a few small PR comments Fix linting fix(legacy): recognize SignTxEIP1559 on legacy build Fix PR comments	2021-08-10 11:00:29 +02:00
Martin Milata	b5710b820a	docs(core): replace Purpose48 with BIP-48 ... https://github.com/bitcoin/bips/blob/master/bip-0048.mediawiki	2021-08-06 12:50:42 +02:00
gabrielkerekes	4f7c6b3586	feat(common): change all protobuf message type hints to strings ... In order to support recursive protobuf messages, which will be needed by Cardano's native scripts. [no changelog]	2021-08-05 12:10:30 +02:00
matejcik	725d1bd961	docs(core): add changelog entry	2021-08-04 15:03:11 +02:00
matejcik	f78363ecdc	refactor(core/ui): do not use parameter for styling in get_next_u2f_counter	2021-08-04 15:03:11 +02:00
Martin Milata	2a91052b02	refactor(core/ui): move altcoin and webauthn layouts to separate file ... Also fix types.	2021-08-04 15:03:11 +02:00
Martin Milata	31052007ff	refactor(core): enable mypy for apps.management	2021-08-04 15:03:11 +02:00
Martin Milata	e57027fc5c	refactor(core): convert apps.management.change_wipe_code to layouts	2021-08-04 15:03:11 +02:00
Martin Milata	5a0ea3f146	refactor(core): convert apps.management.recovery_device to layouts	2021-08-04 15:03:11 +02:00
Martin Milata	312876ab67	refactor(core): convert apps.management.reset_device to layouts	2021-08-04 15:03:11 +02:00
Martin Milata	574dcbc8a3	refactor(core): convert apps.common to layouts	2021-08-04 15:03:11 +02:00
Martin Milata	875cc0cb1a	refactor(core): convert apps.webauthn to layouts	2021-08-04 15:03:11 +02:00
matejcik	9ab1891b22	feat(common): more required fields in messages-management ... [no changelog]	2021-08-04 15:03:11 +02:00
matejcik	5dcb51458f	chore(core/ui): drop no longer used confirm_proposals_tezos	2021-07-26 14:48:35 +02:00
matejcik	fcb5f88318	fix(core/bitcoin): nicer UI for ownership proofs	2021-07-26 14:48:35 +02:00
matejcik	b30c9f7584	refactor(core/stellar): use semantically appropriate layouts everywhere	2021-07-26 14:48:35 +02:00
matejcik	16b87e4d50	fix(core/stellar): fail cleanly when asset code has wrong length	2021-07-26 14:48:35 +02:00
matejcik	ad6976e01f	refactor(core): use confirm_blob instead of confirm_hex in apps	2021-07-26 14:48:35 +02:00
matejcik	dcc38f5267	refactor(core/ui): replace confirm_hex, clarify API ... Truncation options were removed. Subtitle distinct from description was removed. confirm_hex was replaced by confirm_blob. You should use confirm_blob when displaying data that is not human readable and can be broken at any character. Also it is now possible to pass bytes, which are automatically converted to hex. For displaying addresses, a separate confirm_address is introduced, which simply delegates to confirm_blob, but has a more limited signature. Analogously, there is confirm_text for text data (should maybe be used in many places where we currently use confirm_metadata) and a specialized confirm_amount.	2021-07-26 14:48:35 +02:00
matejcik	6d15e90ed3	refactor(core/ui): reorganize line width constants	2021-07-26 14:48:35 +02:00
matejcik	cb882df100	feat(core): in debug mode, dump contents of received protobuf messages ... [no changelog]	2021-07-23 11:46:24 +02:00
Martin Milata	8da978981e	perf(core): share wire buffer between wire and debuglink ... [no changelog]	2021-07-22 15:12:22 +02:00
Martin Milata	582e1318c4	feat(core/emulator): support protobuf messages in memory dumps ... [no changelog]	2021-07-22 13:31:11 +02:00
Andrew Kozlik	334103b089	refactor(core/crypto): Optimize DER encoding of signatures.	2021-07-22 10:54:49 +02:00
Andrew Kozlik	2964f2e855	refactor(core/cardano): Clean up variable_length_encode().	2021-07-22 10:54:49 +02:00
Andrew Kozlik	97ca1e3341	chore(core): Add offset parameter to cbor.decode().	2021-07-22 10:54:49 +02:00
Andrew Kozlik	7811204ed5	refactor(core/bitcoin): Use HashWriter in address derivation.	2021-07-22 10:54:49 +02:00
Andrew Kozlik	2c003052f5	refactor(core/bitcoin): Change CoinInfo.script_hash to be a HashContext.	2021-07-22 10:54:49 +02:00
Andrew Kozlik	27e6f35f78	refactor(core/bitcoin): Change scripts to use writer semantics.	2021-07-22 10:54:49 +02:00
Andrew Kozlik	8538f55edc	refactor(core/bitcoin): Use global static buffer for Tx serialization.	2021-07-22 10:54:49 +02:00
Martin Milata	412d06fdfe	docs(core+legacy): use towncrier for generating CHANGELOG.md ... core/embed/boardloader/CHANGELOG.md core/embed/bootloader/CHANGELOG.md core/embed/bootloader_ci/CHANGELOG.md legacy/intermediate_fw/CHANGELOG.md	2021-07-21 14:27:20 +02:00
Pavol Rusnak	d35071d732	docs(core+legacy): update changelogs to new format	2021-07-21 14:27:20 +02:00
Andrew Kozlik	7277a49047	fix(common): Add new rpId to Binance's FIDO definition.	2021-07-21 13:19:16 +02:00
Pavol Rusnak	f740515c85	fix(core,crypto): add more test cases from bip-173	2021-07-21 11:20:11 +02:00
Martin Milata	ceaf4da617	fix(core): explicitly refresh display on T1 ... [no changelog]	2021-07-20 22:00:42 +02:00
matejcik	2b3c75c4de	fix(core): properly respond to USB events while on a paginated screen	2021-07-20 12:59:26 +02:00
matejcik	cf15dce326	refactor(core/ethereum): improve API of the rlp module	2021-07-19 13:59:28 +02:00
Pavol Rusnak	9a9b0eb052	fix(core): rename fw_or_type to image_type in keyctl-proxy to avoid confusion ... part 2 somehow I did miss 3 more occurences	2021-07-18 23:11:09 +02:00
Martin Milata	0d251fc01a	Merge branch 'release/21.07'	2021-07-16 14:34:20 +02:00
Pavol Rusnak	ff21ea3d5c	fix(core): rename fw_or_type to image_type in keyctl-proxy to avoid confusion	2021-07-16 14:23:43 +02:00
Pavol Rusnak	cd9c4e478d	docs(core): fix typo in keyctl-proxy help	2021-07-16 14:23:43 +02:00
Pavol Rusnak	0a951b8a77	fix(core): don't use format strings in keyctl-proxy	2021-07-16 14:23:43 +02:00
Pavol Rusnak	3d69ca1b1b	chore(vendor): update nanopb to 0.4.5	2021-07-14 17:34:12 +02:00
matejcik	b41d4c71f0	feat(core/emulator): JSON memory map dump ... use `trezor.utils.mem_dump("somefile.json")` in a key place, then `analyze.py src/somefile.json` to look at what is going on	2021-07-14 13:50:24 +02:00
matejcik	fe6c131b14	feat(core/emulator): build emulator with -DSTATIC= ... This is perhaps a cleaner way to expose all relevant structures for memory analysis.	2021-07-14 13:50:24 +02:00
Andrew Kozlik	24bb401638	fix(legacy,core): Fix operation source account encoding in Stellar.	2021-07-13 17:24:16 +02:00
matejcik	46e0530764	fix(tests): auto-swipe by using only ButtonRequest.pages ... (cherry picked from commit f8bb90366a)	2021-07-12 00:39:58 +02:00
matejcik	8e6a647e89	fix(core): do not send ButtonRequest on every paging event ... partial revert of 54db2291f2 from #1671 (cherry picked from commit 1e1963f1ee)	2021-07-12 00:39:54 +02:00
matejcik	f8bb90366a	fix(tests): auto-swipe by using only ButtonRequest.pages	2021-07-09 21:01:07 +02:00
matejcik	1e1963f1ee	fix(core): do not send ButtonRequest on every paging event ... partial revert of 54db2291f2 from #1671	2021-07-09 15:00:29 +02:00
Martin Milata	81869fc4b0	chore(core): bump version to 2.4.2 ... [skip_ci]	2021-07-08 13:38:29 +02:00
Martin Milata	f06a57237b	style(core): trezorhal/random_delays.c	2021-07-07 14:39:24 +02:00
Martin Milata	01c1ae426f	docs: add security fixes to changelogs	2021-06-30 18:32:58 +02:00
Andrew Kozlik	c067618828	fix(common): Fix incorrect SLIP-44 coin type for Bgold and SmartCash Testnets.	2021-06-30 18:25:58 +02:00
Andrew Kozlik	3e9f8a32ac	fix(core): Fix insufficient BIP-32 path checks. ... - Disable testnet coins from accessing Bitcoin paths. - Restrict BIP-45 paths to Bitcoin and coins with strong replay protection.	2021-06-30 18:25:58 +02:00
Martin Milata	e67b3ab214	docs(core): changelog for 2.4.1 ... [skip_ci]	2021-06-30 18:21:56 +02:00
Pavol Rusnak	8cfa5da1ce	docs: fix typos in comments ... [skip_ci]	2021-06-30 15:41:55 +02:00
Ondřej Vejpustek	24200e7424	fixup! fix(legacy): make RDI work on T1	2021-06-24 17:34:24 +02:00
Ondrej Mikle	daa94ac941	fix(legacy): make RDI work on T1	2021-06-24 17:34:24 +02:00
gabrielkerekes	cc14ffb3e3	docs(core): add changelog entries for Cardano	2021-06-24 11:09:32 +02:00
gabrielkerekes	db657615f4	fix(cardano): use OrderedMap for output tokens and withdrawals	2021-06-24 08:24:47 +02:00
gabrielkerekes	4e5772662c	fix(cardano): don't allow duplicate withdrawals	2021-06-24 08:24:42 +02:00
gabrielkerekes	3cd2182b69	feat(core): introduce OrderedMap into CBOR serialisation ... Items of an OrderedMap are included in CBOR as they come without sorting them in any way.	2021-06-24 08:22:39 +02:00
Ondřej Vejpustek	b8b0ae09d9	fix(core): use unprivileged shutdown where needed	2021-06-23 16:40:45 +02:00
Ondřej Vejpustek	5984fd6ad7	feat(core): jump to unprivileged mode after shutdown	2021-06-23 16:40:45 +02:00
Ondřej Vejpustek	40b4f679f9	feat(core): implement wrapper for svc_shutdown	2021-06-23 16:40:45 +02:00
Ondřej Vejpustek	311288407e	docs(core): document shutdown_privileged	2021-06-23 16:40:45 +02:00
Ondřej Vejpustek	4968d7da53	feat(core): implement svc shutdown	2021-06-23 16:40:45 +02:00
Ondřej Vejpustek	cca9d4b1c4	refactor(core): rename shutdown to shutdown_privileged	2021-06-23 16:40:45 +02:00
Ondřej Vejpustek	7686eb355a	fix(core): fix import of random delays	2021-06-23 16:40:45 +02:00
matejcik	47c2be9f13	docs(core): add changelog entry for altcoin layouts	2021-06-23 11:51:18 +02:00
matejcik	015c47d564	chore(core): export PropertyType to fix mypy errors	2021-06-23 11:51:18 +02:00
matejcik	da4442bbd7	feat(core): auto-hexlify in confirm_properties	2021-06-23 11:51:18 +02:00
matejcik	41c5d773e2	refactor(core): put property key+value on the same screen	2021-06-23 11:51:18 +02:00
matejcik	3c4eb04346	feat(core/monero): cache Monero testing chain between runs	2021-06-23 11:51:18 +02:00
Martin Milata	178b575465	refactor(core): convert apps.nem to layouts	2021-06-23 11:51:18 +02:00
Martin Milata	dd3b689ded	refactor(core): convert apps.eos to layouts	2021-06-23 11:51:18 +02:00
Martin Milata	3ffbae5d17	refactor(core): convert apps.binance to layouts	2021-06-23 11:51:18 +02:00
Martin Milata	ddac852acf	refactor(core): convert apps.cardano to layouts	2021-06-23 11:51:18 +02:00
Martin Milata	ffb400180d	refactor(core/ui): more consistent layout parameter names	2021-06-23 11:51:18 +02:00
Martin Milata	a143fe34d0	refactor(core): convert apps.lisk to layouts	2021-06-23 11:51:18 +02:00
Martin Milata	ebf6ef1666	refactor(core): convert apps.tezos to layouts	2021-06-23 11:51:18 +02:00
Martin Milata	12478b1716	refactor(core): convert apps.stellar to layouts	2021-06-23 11:51:18 +02:00
Martin Milata	6aeaadfe16	refactor(core): convert apps.ripple to layouts	2021-06-23 11:51:18 +02:00
Martin Milata	16094df0c5	refactor(core): convert most of apps.monero to layouts ... Progress popups are not ported yet as they're unlike anything else. Introduces paginate_paragraphs.	2021-06-23 11:51:18 +02:00
Martin Milata	6c926ad82e	refactor(core): convert apps.ethereum to layouts	2021-06-23 11:51:18 +02:00
Martin Milata	b7cab90e3c	refactor(core/ui): use new_lines=False in layouts	2021-06-23 11:51:18 +02:00
matejcik	1012ee8497	feat(core): send ButtonRequests for paging events	2021-06-22 11:25:12 +02:00
Pavol Rusnak	69d1465e08	refactor(core): pass invert_colors to send_init_seq_ST7789V as argument ... to make the call more flexible	2021-06-19 19:57:42 +02:00
Pavol Rusnak	18e103bb94	style(core): refactor style of display-stm32_T	2021-06-19 19:54:19 +02:00
Martin Milata	bc7fb32db9	docs(core): Fix dates in changelog	2021-06-11 20:22:42 +02:00
matejcik	52c34c7364	fix(core): allow caching empty values (fixes #1659)	2021-06-11 12:32:13 +02:00
gabrielkerekes	ae831abb75	docs(core): add changelog entries for cardano updates	2021-06-08 15:02:24 +02:00
gabrielkerekes	b2de8909d1	fix(core/cardano): reintroduce max tx output size ... Output size is currently limited to 4000 bytes at protocol level. Given the maximum transaction size Trezor can handle (~9kB), we also want to enforce this size limit here so that when the limit is raised at protocol level again, Trezor would still not be able to produce larger outputs than it could reliably spend. Once Cardano-transaction signing is refactored to be completely streamed and maximum supported transaction size is thus raised, this limit can be lifted.	2021-06-08 15:02:24 +02:00
gabrielkerekes	a92b5fc333	fix(core/cardano): forbid tx outputs with both address and address parameters	2021-06-08 15:02:24 +02:00
gabrielkerekes	597402eab8	refactor(core/cardano): decouple address parameters validation	2021-06-08 15:02:24 +02:00
matejcik	d6776d988e	docs(core): add changelog entry for Rust protobuf	2021-06-08 09:55:19 +02:00
matejcik	aa4227fa84	ci: update coverage exclusion list	2021-06-08 09:55:19 +02:00
matejcik	cbe4e0e725	fix(core): properly exclude altcoins from all_modules	2021-06-08 09:55:19 +02:00
matejcik	729414e606	fix(core): exclude get/set U2F counter from BITCOIN_ONLY	2021-06-08 09:55:19 +02:00
matejcik	c06a93cba5	feat(core/rust): propagate bitcoin_only flag to Rust build	2021-06-08 09:55:19 +02:00
matejcik	1382246977	fix(core/tests): fix equality testing for new message types	2021-06-08 09:55:19 +02:00
matejcik	da2ef8ed41	refactor(core): create and use protobuf uvarint writer	2021-06-08 09:55:19 +02:00
Jan Pochyla	a8623c4b59	refactor(core): fix imports and use new protobuf API in apps	2021-06-08 09:55:19 +02:00
Martin Milata	72557614c4	build(core): update build process for new protobuf ... - properly exclude in the trezor/enums folder - generate Rust protobuf blobs in scons Split from "tools: Generate special Protobuf blobs for the Rust codec"	2021-06-08 09:55:19 +02:00
Jan Pochyla	02aa14fc04	refactor(core): Switch to new Protobuf API	2021-06-08 09:55:19 +02:00
matejcik	8a5cb41060	chore(core): regenerate with new templates	2021-06-08 09:55:19 +02:00
matejcik	d42bc8a4c0	refactor(core): prepare new templates for enums and messages	2021-06-08 09:55:19 +02:00
matejcik	266955ba65	refactor: rework pb2py generator ... This also includes the capability to build Rust protobuf blobs.	2021-06-08 09:55:19 +02:00
Jan Pochyla	8a21e3fc73	feat(core): Add Rust Protobuf codec	2021-06-08 09:55:19 +02:00
Pavol Rusnak	23aa69caea	fix(core): unify Features.revision reporting with legacy	2021-06-04 12:50:49 +02:00
matejcik	2fac964a29	chore(common): disable Firo support	2021-06-04 11:38:18 +02:00
Pavol Rusnak	fce3640848	fix(common): remove dead coin Hatch	2021-06-04 10:10:26 +02:00
Martin Milata	767e7b8e8d	fix(core): spaces in Shamir info texts	2021-06-03 16:54:42 +02:00
Martin Milata	ca836b2e45	chore(core): bump version to 2.4.1	2021-06-02 12:50:22 +02:00
matejcik	86089fa5ad	feat(core): avoid restarting session for select messages (fixes #1631)	2021-06-01 14:07:29 +02:00
Martin Milata	e77082f34f	docs(core): changelog for 2.4.0	2021-05-24 20:46:41 +02:00
Martin Milata	8c6b93e0bd	build(core): account for ARM unwinding info in memory layout ... Currently the 8-byte section is inserted under semi-random name like .ARM.exidx.text._ZN50_$LT$T$u20$as$u20$core..convert..Into$LT$U$GT$$GT$4into17h79ccbc4bdfe3f200E. This makes it hard to include it in _codelen that is later baked into firmware header. This change adds new section because including it in .flash causes linker error due to mixing "ordered" and "unordered" sections. By renaming .exidx to /DISCARD/ we'd drop this info, there may also exist compiler flag to do that.	2021-05-21 13:49:42 +02:00
Martin Milata	20fe8552ca	build(core/rust): use correct architecture for T1 ... TT is Cortex-M4 is Armv7E-M while T1 is Cortex-M3 is Armv7-M: https://community.arm.com/developer/ip-products/processors/b/processors-ip-blog/posts/armv6-m-vs-armv7-m---unpacking-the-microcontrollers	2021-05-21 13:49:42 +02:00
Ondřej Vejpustek	6fd4739c5c	feat(core): make random delays use chacha_drbg	2021-05-21 13:42:53 +02:00
Ondřej Vejpustek	e1a5f42c81	feat(core): make chacha_drbg more robust	2021-05-21 13:42:53 +02:00
Ondřej Vejpustek	8ee17f69b3	refactor(core): move wait_random and rdi into separate file	2021-05-21 13:42:53 +02:00
matejcik	e015bc0856	build(core/rust): disable nightly-only features ... When we need them, we will re-enable.	2021-05-21 13:42:10 +02:00
Pavol Rusnak	155fc7ac67	fix(core): remove tcDisplay from metadata/trezor-ctap2.json	2021-05-19 14:49:54 +02:00
Pavol Rusnak	d358503676	fix(core): remove txAuthSimple from metadata/trezor-ctap2.json	2021-05-19 14:45:02 +02:00
Martin Milata	c54077a714	fix(core): imports needed for T1 startup ... Now debug build booted on wiped T1 connects to USB and shows square in top right corner.	2021-05-17 18:03:07 +02:00
matejcik	1e0a23c133	fix(core/paths): make sure containers are copied along with the numbers they contain	2021-05-06 13:14:21 +02:00
matejcik	f05215f4ff	chore(core): add changelog entry	2021-05-06 13:14:21 +02:00
matejcik	ed5c357b78	fix(core): properly cache last successful unlock time	2021-05-06 13:14:21 +02:00
matejcik	959cf7d515	fix(core/homescreen): properly redraw when an outside process kills homescreen ... This happens with FIDO which does not use the normal workflow management and so `workflow.close_others()` is never called.	2021-05-06 13:14:21 +02:00
matejcik	411a7bb802	fix(core/wire): handle codec errors better	2021-05-06 13:14:21 +02:00
matejcik	231a1fe229	refactor(core): do not cache reverse-mapping of message types in RAM ... Instead, walk the module for every message. Also remove the custom wire type registration facility, which is not used.	2021-05-06 13:14:21 +02:00
matejcik	f1a54f2108	refactor(core): remove more global imports	2021-05-06 13:14:21 +02:00
matejcik	2cb379108c	refactor(core/homescreen): load homescreen image on-demand	2021-05-06 13:14:21 +02:00
matejcik	f61d7fffa8	fix(core): fix top-level imports in apps.common.passphrase	2021-05-06 13:14:21 +02:00
matejcik	93db39ad70	fix(core/wire): drop unused reader, clarify writer usage	2021-05-06 13:14:21 +02:00
matejcik	1c32cbcc1c	ci(core): exclude more things from coverage report	2021-05-06 13:14:21 +02:00
matejcik	5ee85b6ed9	refactor(core): improve clarity in main.py	2021-05-06 13:14:21 +02:00
matejcik	25385af159	feat(core/emu.py): erase profile when running emu.py -e	2021-05-06 13:14:21 +02:00
matejcik	94521a2065	feat(core): presize some modules to account for their sub-imports	2021-05-06 13:14:21 +02:00
matejcik	5f4240d93c	feat(core): preallocate sys.modules to an appropriate size	2021-05-06 13:14:21 +02:00
matejcik	b5c1b37a56	chore(core/tests): bump heap size for core unit tests	2021-05-06 13:14:21 +02:00
matejcik	b1e4246b46	refactor(core/webauthn): make sure KEY_AGREEMENT_*KEY is generated once per power-up ... This is what the spec recommends and it has been the case before workflow-restarts, when `apps.webauthn.fido2` was imported exactly once per lifetime. With workflow-restarts, `fido2` is being imported repeatedly and the keys regenerated. This does not seem to be a problem per the spec -- a FIDO workflow will retain the same keys, and non-FIDO workflows can be seen as unplugs/replugs as far as the FIDO functionality is concerned. However, regenerating the keys is slow, which is a problem for the hardware-based unit tests. We can avoid the slowness by returning to the spec-mandated behavior and generating once per power-up.	2021-05-06 13:14:21 +02:00
matejcik	f6f3c7ffcf	fix(core): prevent flickering when homescreen does not need to redraw	2021-05-06 13:14:21 +02:00
matejcik	5d12b943b3	feat(core): ensure all module names are interned	2021-05-06 13:14:21 +02:00
matejcik	96fd347ca8	fix(core): keep value of experimental_features cached across workflow restarts	2021-05-06 13:14:21 +02:00
matejcik	aaa3ce6117	fix(core/bitcoin): fix CoinJoin authorization with new cache	2021-05-06 13:14:21 +02:00
matejcik	dd655422f1	refactor(core/wire): simplify the message handling loop	2021-05-06 13:14:21 +02:00
matejcik	b387970468	refactor(core/debug): move "wipe with debug build" to boot.py ... otherwise it gets wiped after every workflow	2021-05-06 13:14:21 +02:00
matejcik	1822aebdb4	feat(core): prefill field_cache in bitcoin app	2021-05-06 13:14:21 +02:00
matejcik	f3db4f2dd3	refactor(core): defragment PathSchema memory usage	2021-05-06 13:14:21 +02:00
matejcik	b1ca6ca848	refactor(core/debug): offload debug configuration from apps.debug	2021-05-06 13:14:21 +02:00
matejcik	e859c13d70	refactor(core): limit global imports in key places ... so that by importing `apps.base`, we don't pull in the whole circus	2021-05-06 13:14:21 +02:00
matejcik	7ca67cc4d9	feat(core): clear out memory space after every workflow ... A small fixed list of modules is kept pre-loaded in the GC arena. These must not keep references to anything else, as all other modules are unloaded and the memory is cleared.	2021-05-06 13:14:21 +02:00
matejcik	e629a72c3a	refactor(core): move app registrations to a single handler function ... apps.webauthn.boot() does not need an if-condition because it's only called from session.py when the usb interface is enabled This means that they do not need to be stored in RAM at all. The obvious drawback is that we need to hand-edit the if/elif sequence, but we don't register new handlers all that often so 🤷	2021-05-06 13:14:21 +02:00
matejcik	391976bcda	refactor(core/usb): do not require serial number on instantiaton of USB ... On a cleanly wiped device, storage must be unlocked in order to create and retrieve the serial number. However, storage unlocking happens in boot.py, which is imported _after_ usb.py We must therefore sidestep asking for the serial number.	2021-05-06 13:14:21 +02:00
matejcik	276bb59dba	refactor(core/cardano): update caching mechanism	2021-05-06 13:14:21 +02:00
matejcik	3cdb09c294	refactor(core): modify cache to preallocate all its data ... also get rid of expensive "wire" import	2021-05-06 13:14:21 +02:00
matejcik	ea505b592c	refactor(core): move empty_bytearray to trezor.utils	2021-05-06 13:14:21 +02:00
matejcik	b0116d0bdc	refactor(core): modify wire to preallocate its buffers	2021-05-06 13:14:21 +02:00
Jan Pochyla	6257584951	feat(core): Add Rust bindings to MicroPython and trezorhal ... core: Remove dangling module decls core: Use new Cargo feature resolver, use external MacOS debug info core: Rust docs improvements core: Upgrade bindgen core: Add test target to Rust ci: build rust sources build(core): .ARM.exidx.text.__aeabi_ui2f in t1 firmware size It's an unwind table for softfloat function inserted by rustc, probably can be removed to save 8 bytes: 599c58db70/link.x.in (L175-L182) scons: Remove dead code core: Move Rust target to build/rust core: Replace extern with a FFI version core: Add some explanatory Rust comments core: Use correct path for the Rust lib core: Remove Buffer::as_mut() Mutable buffer access needs MP_BUFFER_WRITE flag. TBD in the Protobuf PR. core: Improve docs for micropython::Buffer core: Minor Rust docs changes core: Rewrite trezor_obj_get_ll_checked core: Fix incorrect doc comment core: Remove cc from deps fixup! core: Rewrite trezor_obj_get_ll_checked core: update safety comments	2021-05-05 16:00:21 +02:00
Martin Milata	f58c1634c6	docs(core): use towncrier for generating CHANGELOG.md	2021-05-04 14:18:01 +02:00
gabrielkerekes	bf3e64ff20	fix(common): add isort:skip_file to files generated by pb2py	2021-04-23 11:09:29 +02:00
gabrielkerekes	6f59892824	refactor(core/cardano): introduce derive_public_key to simplify pub key derivation	2021-04-23 11:09:29 +02:00
gabrielkerekes	905970fd6a	refactor(core/cardano): generalise _paginate_lines	2021-04-23 11:09:29 +02:00
gabrielkerekes	2313293477	feat(core/cardano): add support for catalyst voting registration	2021-04-23 11:09:29 +02:00
gabrielkerekes	2c503b16f5	fix(common): fix one value enums in pb2py	2021-04-23 11:09:29 +02:00
mcudev	e3539b0a73	core/embed/usb: add back usb fs code for t1 and redo fifo sizing	2021-04-14 23:03:29 +02:00
mcudev	6137a55b06	core/embed/usb: use all available usb endpoints and update the usb fifo sizing	2021-04-09 12:50:40 +02:00
Pavol Rusnak	2852b947ec	chore(core): regenerate coins	2021-04-08 14:17:43 +02:00
Martin Milata	720eaa3abd	ci: run monero tests on hardware	2021-04-06 22:06:12 +02:00
Martin Milata	ac711fb8ee	style(core): use more recent type annotation syntax ... https://www.python.org/dev/peps/pep-0585/ - Type Hinting Generics In Standard Collections https://www.python.org/dev/peps/pep-0604/ - Allow writing union types as X | Y	2021-04-01 11:12:30 +02:00
Martin Milata	0278998f72	style(common): mypy: disable implicit Optional for function arguments	2021-04-01 11:12:30 +02:00
Martin Milata	8b3ac659a0	style(core): mypy: disable implicit Optional for function arguments ... https://www.python.org/dev/peps/pep-0484/#union-types	2021-04-01 11:12:30 +02:00
Martin Milata	f97af2af1b	chore(core/ui): typing: no implicit Optional	2021-03-30 22:34:01 +02:00
Martin Milata	da72482c2f	refactor(core/ui): get rid of confirm_wipe	2021-03-30 22:34:01 +02:00
Martin Milata	c0174ff217	refactor(core/ui): raise exception on dialog cancel by default	2021-03-30 22:34:01 +02:00
Martin Milata	2b6ea25712	refactor(core): convert rest of apps.bitcoin to layouts	2021-03-30 22:34:01 +02:00
Martin Milata	b1e38fe382	refactor(core): no implicit spaces in render_text	2021-03-30 22:34:01 +02:00
Martin Milata	2a5f5c1c20	refactor(core): convert parts of apps.monero to layouts	2021-03-30 22:34:01 +02:00
Martin Milata	6668921a4f	refactor(core): convert apps.common.request_pin to layouts	2021-03-30 22:34:01 +02:00
Martin Milata	01900b8536	refactor(core): convert parts of apps.webauthn to layouts	2021-03-30 22:34:01 +02:00
Martin Milata	ffe6d65f72	refactor(core): convert parts of apps.management to layouts	2021-03-30 22:34:01 +02:00
Martin Milata	c09a142e2a	refactor(core): convert apps.misc.* to layouts	2021-03-30 22:34:01 +02:00
Martin Milata	0b5d17bf49	refactor(core/ui): merge confirm_hexdata and show_pubkey	2021-03-30 22:34:01 +02:00
Martin Milata	6ded531f8f	refactor(core): convert apps.common.sdcard to layouts	2021-03-30 22:34:01 +02:00
Martin Milata	035f114125	fix(core/ui): don't return CONFIRMED/CANCELLED from layouts	2021-03-30 22:34:01 +02:00
Rafael Korbas	a9b8b0e119	feat(core/cardano): chunked serialization of signed transaction	2021-03-26 11:15:19 +01:00
gabrielkerekes	3cb686d452	fix(core/cardano): make witnesses order deterministic	2021-03-26 11:15:19 +01:00
Andrew Kozlik	25411e22c9	test(core): Add unit test for modtrezorconfig counter.	2021-03-26 10:54:56 +01:00
Andrew Kozlik	2836bfc64c	fix(core): Improve error handling and range checking in modtrezorconfig.	2021-03-26 10:54:56 +01:00
Andrew Kozlik	66823e2893	chore(core,legacy): Bump FIX_VERSIONs due to upgrade to storage version 3.	2021-03-25 14:24:41 +01:00
Andrew Kozlik	3084d1196d	feat(core): Support 50 digit PIN and wipe code.	2021-03-25 14:24:41 +01:00
Pavol Rusnak	da7214d82f	fix(common): update support.json to include Firo	2021-03-25 13:39:59 +01:00
Pavol Rusnak	dfbdcf5b2b	feat(core): add support for olimex-arm-usb-tiny-h via openocd ... [skip_ci]	2021-03-24 18:01:50 +01:00
Pavol Rusnak	b37e5c916f	fix(core): add missing targets to make clean ... [skip_ci]	2021-03-22 22:06:29 +01:00
Pavol Rusnak	4649b80b44	feat(core): allow secp256k1-zkp for bitcoin-only build ... (but keep it disabled)	2021-03-18 15:42:52 +01:00
matejcik	cb7152542d	feat: drop DebugLinkShowText functionality	2021-03-18 10:59:51 +01:00
matejcik	56ee7d33a9	chore: add cardano changelogs	2021-03-18 10:30:03 +01:00
Rafael Korbas	74ed5b7018	feat(core/cardano): Implement bech32 asset ids based on CIP-0014	2021-03-18 09:53:33 +01:00
Rafael Korbas	bd4512b53a	fix(core/cardano): Allow stake pool registrations with zero margin	2021-03-18 09:35:08 +01:00
Andrew Kozlik	b10acbe153	feat(core): Allow decreasing output amount in RBF transactions.	2021-03-17 15:15:50 +01:00
Andrew Kozlik	5593862dc1	fix(core): Disable hold-to-confirm animation when animations are disabled.	2021-03-17 15:15:50 +01:00
Andrew Kozlik	6de20a7dcd	chore(core/bitcoin): Add DecredApprover.	2021-03-17 12:16:08 +01:00
Andrew Kozlik	523b1051c5	chore(core/bitcoin): Add stricter script_type checks in sanitizers.	2021-03-17 12:16:08 +01:00
Andrew Kozlik	6e8eebfc9c	chore(core/bitcoin): Separate Decred-specific scripts from Bitcoin scripts.	2021-03-17 12:16:08 +01:00
JoeGruff	e3ea32a986	multi: Add decred staking. ... Add two new input and four output script types. Decred ticket purchases consist of a stake submission, op returns, and change addresses. Although change addresses are allowed by consensus, they are no longer used in practice and so have been given the restrictions of a null pubkey and no value. Stake scripts are almost identical to p2pkh or p2sh except for an extra opcode in front. Inputs are currently only used in the form of one input three outputs with the first output, or stake submission, paying to a public key hash, or with two inputs and five outputs with the stake submission paying to a multisig script hash. The op returns are directed to the user in the case of one and the voting service provider and user in the case of two. One of the sstx commitment for a ticket must pay back to the trezor wallet. This is checked and an error is thrown if we don't find the expected public key hash. Because this adds the ability to create new types of outputs once the ticket votes, two new input script types are also needed. A successful vote will lead to a stake generation script that must be spent, and an unsuccessful vote will lead to a revocation script that must be spent. If we allowed stake change scripts to have a valid pubkey, that too would require another op code, but we disallow those for output.	2021-03-17 12:16:08 +01:00
Pavol Rusnak	6c11bc60d7	common/defs/fido: add namecheap	2021-03-15 17:22:12 +01:00
Martin Milata	ee2ec85983	fix(core): fix title shown for multisig address	2021-03-11 14:21:03 +01:00
Pavol Rusnak	d211e3af07	fix(core): switch define to invert display colors into const volatile ... using define causes compiler to over-optimize the code in display_init_seq leading to larger differences in the resulting binaries when the flag changes we want to keep the difference to minimum (1 byte) and using const volatile instead of define achieves that	2021-03-11 12:29:00 +01:00
Pavol Rusnak	e7966cc804	refactor(core): rework color definitions in bootloader	2021-03-10 18:33:00 +01:00
Pavol Rusnak	3294a49cec	fix(core): don't assert reset flags to allow "reboot to bootloader"	2021-03-10 18:31:51 +01:00
Pavol Rusnak	1e2bb337a9	refactor(core): drop buttons argument for ui_screen_firmware_info	2021-03-10 17:42:52 +01:00
Pavol Rusnak	814db111b2	feat(core): add define to invert display colors on ST7789V	2021-03-10 16:06:18 +01:00
Andrew Kozlik	850aa56691	docs(core): Add references to SLIPs in the code.	2021-03-09 20:01:59 +01:00
Pavol Rusnak	5cff6ac964	doc(core): update comments around UDP emulator ... drop unused define	2021-03-09 16:19:03 +01:00
Andrew Kozlik	a8c500bffd	feat(core): Ensure that WebAuthn runs on port 21326 by default for both production and debug emulator.	2021-03-09 16:13:21 +01:00
mcudev	b50f1e0b89	openocd: separate stlink configs deprecated - now combined	2021-03-09 11:41:55 +01:00
Pavol Rusnak	a36d0c0fbe	docs(changelog): add public key to ECDHSessionKey	2021-03-08 16:52:44 +01:00
Roman Zeyde	7ce4e13bcf	feat(core): add public_key to ECDHSessionKey	2021-03-08 15:59:00 +01:00
Roman Zeyde	b2877afa7f	feat(common): add public_key to ECDHSessionKey	2021-03-08 15:59:00 +01:00
Pavol Rusnak	ebfd51d818	fix(core): stay_in_bootloader should default to false, not true	2021-03-06 20:09:56 +01:00
Pavol Rusnak	efac5d56f5	fix(core): change touch i2c clock speed to 200 kHz ... fixes #1519	2021-03-06 20:02:11 +01:00
Pavol Rusnak	cc42af28fd	docs(changelog): next FW version will be 2.4.0	2021-03-05 18:32:05 +01:00
Martin Milata	7c1d72c254	style(core): fix bootloader formatting	2021-03-04 19:21:56 +01:00
Pavol Rusnak	29a3e91f09	feat(core): refactor display_init_seq from display_init	2021-03-04 17:04:35 +01:00
Pavol Rusnak	5dd3d73d00	fix(core): remove unused stuff from bootloader_ci ... plus minor ui function renames	2021-03-04 17:01:01 +01:00
Ondrej Mikle	a4ba24645b	feat(core): remove connect to host dialog in the bootloader	2021-03-04 16:34:30 +01:00
Pavol Rusnak	f3ae3615c7	fix(core): unify bootloader_ci with bootloader	2021-03-04 15:59:25 +01:00
Pavol Rusnak	b074404dcf	fix(core): small secbool refactor for bootloader_ci	2021-03-04 12:14:26 +01:00
Pavol Rusnak	2dc094bd3e	fix(core): small secbool refactors	2021-03-04 11:59:38 +01:00
Pavol Rusnak	4b0f41d41e	fix(common): change msg_id of RebootToBootloader from 804 to 87	2021-03-03 12:07:00 +01:00
Ondrej Mikle	77e99078c3	chore(trezorlib): add generated message files	2021-03-03 12:07:00 +01:00
Ondrej Mikle	1579c62332	chore(legacy): reboot to bootloader protobuf generated messages	2021-03-03 12:06:59 +01:00
matejcik	ed0ac98970	fix(common/tools): strip "mainnet" from Ethereum network names	2021-03-01 12:05:54 +01:00
Pavol Rusnak	17fa6ab4ec	chore(common): update chains+tokens	2021-03-01 12:05:54 +01:00
Rafael Korbas	ceea21ec1f	feat(cardano): Format stake pool ids as bech32 instead of hex	2021-02-25 16:49:19 +01:00
Rafael Korbas	3197741795	fix(core/Cardano): account index validation in _should_hide_output()	2021-02-25 16:41:12 +01:00
Rafael Korbas	cf871ee754	fix(core/Cardano): do not show change output in byron-shelley transfers	2021-02-25 16:41:12 +01:00
Martin Milata	040d0212f6	chore(core): changelog for hold to lock	2021-02-24 00:10:10 +01:00
Martin Milata	c28763c169	refactor(core): use reload_settings_from_storage on boot	2021-02-24 00:10:10 +01:00
Martin Milata	9b60cc0098	feat(core): restart loader from current position ... On "hold to confirm" dialogs, when you hold your finger, lift it, and quickly hold again, the progress bar jumps to the beginning. This commit changes the behavior so the progress continues from its current position of the reverse animation.	2021-02-24 00:10:10 +01:00
Martin Milata	06b9d1314d	fix(core): do not autolock when already locked ... Gets rid of unnecessary screen redraw.	2021-02-24 00:10:10 +01:00
Martin Milata	192d0dcf87	feat(core): hold homescreen to lock	2021-02-24 00:10:10 +01:00
Martin Milata	db2db8e6f3	feat(common): add hold_ms to DebugLinkDecision	2021-02-24 00:10:10 +01:00
Martin Milata	c42850f997	chore(core): show total allocations in memperf report	2021-02-18 13:07:19 +01:00
Pavol Rusnak	de72cfb804	chore(core): update changelog ... [skip_ci]	2021-02-16 23:33:18 +01:00
Ondrej Mikle	ed57320c86	build(flashing): nogui flag for flashing for newer JLink versions (#1482)	2021-02-16 14:35:06 +01:00
Pavol Rusnak	b4daf2f3e3	chore(core): run make gen to regenerate fido2 icons ... updated here - https://github.com/trezor/trezor-firmware/pull/1456	2021-02-16 11:20:21 +01:00
Martin Milata	48627b7f0f	fix(core): bootloader_ci build ... See also f46380147f.	2021-02-15 20:55:54 +01:00
Pavol Rusnak	5395c542c1	chore(core): update changelog, bump version to 2.3.7	2021-02-13 11:16:11 +01:00
Buck Perley	682298d7bb	fix(core): add exceptions for unchained capital paths	2021-02-12 21:56:03 +01:00
gabrielkerekes	d4dcd7bff9	fix(core/cardano): allow staking accounts beyond 100'	2021-02-11 09:55:23 +01:00
Andrew Kozlik	e5741ac308	chore(core): Use BufferReader for CBOR decoding.	2021-02-10 23:20:56 +01:00
Andrew Kozlik	ac939c94aa	fix(core/tezos): Implement strict length checking. ... (cherry picked from commit e7f44ebee8)	2021-02-10 16:37:26 +01:00
matejcik	6fd355756c	fix(core/stellar): review usages of write_bytes_unchecked ... (cherry picked from commit 781e9f4db8)	2021-02-10 16:37:26 +01:00
matejcik	08edbca428	fix(core/eos): review usages of write_bytes_unchecked ... (cherry picked from commit 5b5ed8cce1)	2021-02-10 16:37:26 +01:00
matejcik	2231fe6842	feat(core): make protobuf.dump_uvarint more reusable ... (cherry picked from commit 6acc1cd6ab)	2021-02-10 16:37:26 +01:00
Andrew Kozlik	78a2ff16d4	fix(core): In apps.bitcoin ensure that get_address() fails for multisig if user's public key is not included. ... (cherry picked from commit 77f5e90466)	2021-02-10 16:37:26 +01:00
Martin Milata	391602ae99	refactor(core): turn show_address, show_pubkey, show_xpub into layouts	2021-02-10 13:57:19 +01:00
Martin Milata	03699f5639	refactor(core): turn show_success, show_warning into layouts	2021-02-10 13:57:19 +01:00
Martin Milata	f38abf9d89	refactor(core): introduce layouts ... Layouts can be used by the application code to interact with user using small number of dialogs or other groups of UI components. Each layout is identified by name and takes some parameters. Most layouts will have an implementation for each hardware model, mechanism is provided to import the correct version so that application code can be oblivious to the model. This commit introduces the layout concept and converts a couple of dialogs to use it.	2021-02-10 13:57:19 +01:00
Martin Milata	18cb429610	feat(core): introduce Text.format_parametrized()	2021-02-10 13:57:19 +01:00
Martin Milata	f1382bf892	refactor(core): model-dependent UI component directories ... They now live under trezor.ui.components.tt. Later trezor.ui.components.t1 will be added and application code will be rewritten to not use them directly in order to work on both TT and T1.	2021-02-10 13:57:19 +01:00
Pavol Rusnak	f46380147f	fix(core): update sync protobuf messages in bootloader	2021-02-10 10:56:52 +01:00
matejcik	73a28e12f2	fix(core): create protobuf messages correctly	2021-02-10 10:56:52 +01:00
matejcik	14037d0c31	chore: regenerate protobuf classes	2021-02-10 10:56:52 +01:00
matejcik	bf562cfd4b	feat(core/misc): enable typing for misc app	2021-02-10 10:56:52 +01:00
matejcik	ccd241fe55	feat(core/cardano): enable typing for Cardano app	2021-02-10 10:56:52 +01:00
Pavol Rusnak	18b51b856b	common/fido: update icons for github, mojeid and slushpool (#1456)	2021-02-08 16:51:49 +01:00
matejcik	637ccadcb6	style(core): remove unused type:ignore comment after mypy upgrade	2021-02-05 10:44:09 +01:00
Ondrej Mikle	22d01b6ff4	chore(core): bootloader_ci - decouple file links from original bootloader	2021-01-27 23:43:38 +01:00
Rafael Korbas	e4c406822c	Add multiasset sending and min validity to Cardano transactions	2021-01-27 18:26:40 +01:00
Pavol Rusnak	c25e5daad2	chore(core): use SYSTEM_VIEW as feature flag, not make flag	2021-01-26 20:53:38 +01:00
Pavol Rusnak	a11cb11ba3	chore(core): rework SYSTEMVIEW_DEST_SYSTEMVIEW ... to work with ifdef instead of if	2021-01-26 20:53:38 +01:00
Ondrej Mikle	d99127771c	chore(core): reorder includes	2021-01-26 20:53:38 +01:00
Ondrej Mikle	a628b9a92d	chore(core): remove unneeded include	2021-01-26 20:53:38 +01:00
Ondrej Mikle	3b0f269e0d	build(core): consider systemview disabled by default	2021-01-26 20:53:38 +01:00
Ondrej Mikle	4cf91b128d	style(core): systemview editorconfig reformat	2021-01-26 20:53:38 +01:00
Ondrej Mikle	9411756c42	style(core): systemview reformat	2021-01-26 20:53:38 +01:00
Ondrej Mikle	550216354b	chore(core): more systematic systemview function definitions	2021-01-26 20:53:38 +01:00
Ondrej Mikle	869cfbbd1c	style(core): style for systemview	2021-01-26 20:53:38 +01:00
Ondrej Mikle	0abcb57840	feat(core): place systemview buffers into CCMRAM	2021-01-26 20:53:38 +01:00
Ondrej Mikle	5a4166ea93	feat(core): increase systemview buffers	2021-01-26 20:53:38 +01:00
Ondrej Mikle	f591ce6789	feat(core): update systemview sources to 3.20	2021-01-26 20:53:38 +01:00
Ondrej Mikle	8fa3745838	feat(core): define RTT locking by enabling/disabling interrupts	2021-01-26 20:53:38 +01:00
Ondrej Mikle	ce3a6b649c	feat(core): systemview header	2021-01-26 20:53:38 +01:00
Ondrej Mikle	4a692cc63b	feat(core): segger dependencies	2021-01-26 20:53:38 +01:00
Ondrej Mikle	5f837e12b9	feat(core): send messaged through systemview	2021-01-26 20:53:38 +01:00
Ondrej Mikle	60e4e06aa5	feat(core): measure systick with systemview	2021-01-26 20:53:38 +01:00
Ondrej Mikle	c5e986b1ba	feat(core): enable SystemView at firmware start	2021-01-26 20:53:38 +01:00
Ondrej Mikle	b51ed55ea8	build(core): parameters for SystemView instrumentation	2021-01-26 20:53:38 +01:00
Martin Milata	c293b52bd6	feat(core): bootloader_ci: do not ui_fadein/ui_fadeout	2021-01-26 17:21:16 +01:00
Martin Milata	2643ee2ab8	feat(core): bootloader_ci: wipe device without confirmation	2021-01-26 17:21:16 +01:00
Andrew Kozlik	79fad70b05	fix: Improve wording when showing multisig XPUBS.	2021-01-26 15:09:37 +01:00
Tomas Susanka	1006c8a0f1	chore(core,legacy): change versions to 1.9.5 and 2.3.6 ... This reverts commit 92535dc090.	2021-01-22 15:42:55 +01:00
Rafael Korbas	44c7d23741	Cardano: map account paths to account numbers	2021-01-22 14:45:29 +01:00
Pavol Rusnak	33df274458	docs(core): update changelog ... [skip_ci]	2021-01-22 14:30:57 +01:00
Pavol Rusnak	92535dc090	chore(core,legacy): change versions back to 1.9.4 and 2.3.5 ... [skip_ci]	2021-01-22 14:23:11 +01:00
Pavol Rusnak	7f0e939359	feat(core): implement amount_unit for AuthorizeCoinJoin and SignTx	2021-01-22 14:07:36 +01:00
Pavol Rusnak	345ef52949	feat(proto): add amount_unit to AuthorizeCoinJoin and SignTx	2021-01-22 14:07:36 +01:00
Pavol Rusnak	43ed13b323	feat(core): disable SECP256K1_ZKP feature flag	2021-01-22 14:06:29 +01:00
Pavol Rusnak	f3d5de15ef	refactor(core): turn SECP256K1_ZKP into a firmware feature flag	2021-01-22 14:06:29 +01:00
Pavol Rusnak	6508d0a3c7	refactor(core): turn RDI into a firmware feature flag	2021-01-22 14:06:29 +01:00
Pavol Rusnak	e85ed74f8f	core: implement GetAddress.ignore_xpub_magic	2021-01-21 23:46:29 +01:00
Pavol Rusnak	4ed714ba47	common/defs: add xpub_magic_multisig_segwit_{native,p2sh} fields to coins	2021-01-21 23:46:29 +01:00
Pavol Rusnak	6689b9c22f	common/protob: add GetAddress.ignore_xpub_magic field	2021-01-21 23:46:29 +01:00
Pavol Rusnak	bf2e4023d8	fix(core): fix reflash build, remove qrcodegen where not used	2021-01-21 15:58:54 +01:00
Rafael Korbas	3a7a8e4d77	Disable "at least one output" restriction for Cardano, warn instead	2021-01-20 16:00:30 +01:00
Jan Pochyla	f3a64435f1	fix(core): root ui callback for trezorconfig mod (#1412) ... Co-authored-by: Pavol Rusnak <pavol@rusnak.io>	2021-01-19 14:17:16 +01:00
mcudev	b8ffcadf94	common/defs/fido: add gemini webauthn (#1416)	2021-01-19 14:15:19 +01:00
matejcik	ed628ac4ba	feat(core): make usb endpoints registration nicer	2021-01-12 14:18:13 +01:00
matejcik	fc4e15fe77	feat(core): introduce and enforce limit on label length (fixes #1399)	2021-01-12 11:22:58 +01:00
matejcik	58708cd70e	docs(core): update changelog for #1271/#1384	2021-01-11 16:47:59 +01:00
matejcik	2d3a4d15fa	fix(core/ui): render_text uses correct font and color with item_offset	2021-01-11 16:47:59 +01:00
matejcik	e23e35332d	tests(core): add test cases for Span	2021-01-11 16:47:59 +01:00
matejcik	24195d7c3e	fix(core/ui): use full line_width for content	2021-01-11 16:47:59 +01:00
matejcik	e4b113b4bb	fix(core/monero): make sure to pass strings to rendering	2021-01-11 16:47:59 +01:00
matejcik	fd502f122f	feat(core): implement pagination for sign/verify	2021-01-11 16:47:59 +01:00
matejcik	bbef9c650b	refactor(core): improve render_text behavior ... * use less memory due to copy-less rendering * implement linebreaking on embedded \n	2021-01-11 16:47:59 +01:00
Martin Milata	db5b65a420	perf(core): enable rendering of substrings to avoid slicing	2021-01-11 16:47:59 +01:00
Martin Milata	fa2e672f98	chore(core): monero: drop extraneous async/await	2021-01-11 12:14:13 +01:00
Pavol Rusnak	1e6259a476	docs: update changelogs ... [skip_ci]	2021-01-08 14:33:28 +01:00
Pavol Rusnak	5728f54b78	core: return root_fingerprint in PublicKey	2021-01-08 14:17:09 +01:00
Pavol Rusnak	92452d54e5	feat(core): implement GetPublicKey.ignore_xpub_magic behaviour	2021-01-08 14:17:09 +01:00
Pavol Rusnak	e660a518c6	fix(core): show xpub instead of pubkey in GetPublicKey dialog	2021-01-08 14:17:09 +01:00
Pavol Rusnak	edb1243f64	feat(proto): add descriptors related fields to GetPublicKey/PublicKey	2021-01-08 14:17:09 +01:00
Pavol Rusnak	9ba1c9aa50	docs: mention that nanopb was bumped to 0.4.4 in changelogs ... [skip_ci]	2021-01-06 13:52:09 +01:00
Pavol Rusnak	6739e4e5e1	docs: push releases 1.9.4 and 2.3.5 to February 2021 ... [skip_ci]	2021-01-06 09:10:06 +01:00
Pavol Rusnak	93215ae3c7	style: reformat with clang-format 11	2021-01-04 14:40:16 +01:00
Rafael Korbas	edf9b4ee85	Refactor mnemonic_to_entropy to not (misleadingly) return checksum	2020-12-19 20:17:16 +01:00
Tomas Susanka	d2e3269ede	chore(core): bump version to 2.3.6	2020-12-18 19:36:25 +01:00
Andrew Kozlik	a609eb5e90	docs(core): Add comment about "Invalid original TXID" message.	2020-12-17 16:33:33 +01:00
Andrew Kozlik	06ce14096c	chore(core): Reject replacement transactions which involve negative ... fees.	2020-12-17 16:33:33 +01:00
Andrew Kozlik	389f14d6c4	feat(legacy): Implement replacement transaction signing flow.	2020-12-17 16:33:33 +01:00
Andrew Kozlik	aeb021b159	chore(core): Improve naming of SLIP39's T9 mask lookup.	2020-12-15 13:41:42 +01:00
Andrew Kozlik	7fc1851279	fix(crypto): Improve naming and robustness of SLIP39's T9 mask lookup.	2020-12-15 13:41:42 +01:00
matejcik	48024de685	chore: gitignore memperf results	2020-12-11 11:37:56 +01:00
Pavol Rusnak	1187e4ddaf	style(common): use new syntax for typing in autogenerated protobuf enums	2020-12-01 15:52:29 +01:00
Pavol Rusnak	1e8673bf5f	style(core/apps): use new syntax for typing	2020-12-01 15:52:29 +01:00
Pavol Rusnak	0036686588	style(core/mocks): use new syntax for typing	2020-12-01 15:52:29 +01:00
Pavol Rusnak	a1dda836ec	style(core/src): use new syntax for typing	2020-12-01 15:52:29 +01:00
Martin Milata	ee64b65b26	refactor(core): call super().__init__() in subclasses	2020-11-30 14:48:08 +01:00
Martin Milata	fa1566cb71	refactor(core): call super().__init__() in Component and Layout subclasses	2020-11-30 14:48:08 +01:00
Pavol Rusnak	624220b5da	core: update release date for 2.3.5	2020-11-26 16:51:40 +01:00
Pavol Rusnak	0519c8bd13	Revert "chore(core): bump version to 2.3.6" ... This reverts commit 01d1058048.	2020-11-26 16:48:47 +01:00
Tomas Susanka	01d1058048	chore(core): bump version to 2.3.6	2020-11-25 20:14:30 +01:00
Pavol Rusnak	952adc5961	style(core): use PEP515 Underscores in Numeric Literals	2020-11-23 14:30:16 +01:00
matejcik	fe55f0c1f0	build(core): do not regenerate resources for a mypy run	2020-11-20 18:55:35 +01:00
matejcik	faa57e29db	build(core): include generated resources.py in repo	2020-11-20 18:55:35 +01:00
matejcik	58387a5f04	fix(common): drop Zilliqa token (fixes #1318)	2020-11-20 18:55:35 +01:00
matejcik	a89494f60c	chore(core): regenerate network and tokens lists	2020-11-20 18:55:35 +01:00
matejcik	4628c774aa	feat(core): re-allow unknown Ethereum networks, using Ethereum or Testnet paths (fixes #1335)	2020-11-20 18:55:35 +01:00
matejcik	7abe70e484	feat(core): improve ethereum tokens ui (fixes #800)	2020-11-20 18:55:35 +01:00
Rafael Korbas	b311bd4d4a	Add displaying of TTL to cardano transaction, align url validation with Ledger	2020-11-20 15:58:50 +01:00
Rafael Korbas	b261f789f3	Add support for stakepool registration to Cardano	2020-11-20 15:58:50 +01:00
Martin Milata	22cfcd1aed	chore(core): missing changelog entry, formatting	2020-11-20 14:47:08 +01:00
Martin Milata	93d45f1aba	fix(core): increase minimum auto-lock delay to 1 minute	2020-11-20 13:57:51 +01:00
Andrew Kozlik	f421a213fd	feat(core): Inform user about transaction finalization in Bitcoin replacement transactions.	2020-11-20 13:52:48 +01:00
Pavol Rusnak	c6e78e525a	fix: remove PIVX (#1359)	2020-11-20 12:12:42 +01:00
Pavol Rusnak	b9c0b3969b	legacy+core: unify error codes in bootloaders (#1347)	2020-11-18 11:21:57 +01:00
matejcik	e6a1bf840f	fix(core): do not subclass range ... micropython on real hw dislikes it for some reason also it's completely unnecessary	2020-11-13 16:01:35 +01:00
Pavol Rusnak	50fdd183c2	ci: enable editorconfig checks, fix whitespace issues	2020-11-11 14:43:50 +01:00
matejcik	37d3bf56fa	fix(core): make sure run-time settings are reset after wipe (fixes #1322)	2020-11-05 15:33:38 +01:00
matejcik	e62f6184a8	chore(core): add changelog entries	2020-11-05 14:30:11 +01:00
matejcik	50e648636f	doc(core): add references to schema specifications, add Purpose48 document	2020-11-05 14:30:11 +01:00
matejcik	665abe1e02	fix(core/bitcoin): validate path before asking to sign message (which could otherwise fail)	2020-11-05 14:30:11 +01:00
matejcik	f10084117b	feat(core/bitcoin): do not show path warning when GetAddress is called silently (fixes #1206)	2020-11-05 14:30:11 +01:00
matejcik	eadf8ab25f	chore(core/tests): update unit tests for new APIs, drop unnecessary ones	2020-11-05 14:30:11 +01:00
matejcik	5a97a5111b	feat(core/ethereum): add SEP5 path schema as well as the compat schema	2020-11-05 14:30:11 +01:00
matejcik	a367426480	feat(core/bitcoin): use path schemas	2020-11-05 14:30:11 +01:00
matejcik	c0879f8625	feat(core/cardano): use path schemas	2020-11-05 14:30:11 +01:00
matejcik	f5c8138df6	feat(core): update most apps to use path schemas	2020-11-05 14:30:11 +01:00
matejcik	4ca8f7b0d6	style(core): use relative imports everywhere ... except Monero, which has a rather complex structure and I don't want to search&replace mess with it in case some of the things break memory layout	2020-11-05 14:30:11 +01:00
matejcik	7fe5c804ff	feat(core): implement BIP-32 path schemas	2020-11-05 14:30:11 +01:00
Tomas Susanka	e611a4a110	chore: bump changelog	2020-11-02 20:08:28 +01:00
Martin Milata	62a80e1332	feat(core): tools/alloc.py: generate html	2020-11-02 14:14:00 +01:00
Martin Milata	c89a8b7bd5	ci(core): add memory profiler job	2020-11-02 14:14:00 +01:00
matejcik	93efe3ab63	feat(core): add alloc data analysis tool ... Modified by mmilata, was: add alloc data from test suite run, and an analysis tool	2020-11-02 14:14:00 +01:00
matejcik	af4463412f	feat(core): count allocations per line	2020-11-02 14:14:00 +01:00
Andrew Kozlik	70975008cd	chore (core): In apps.bitcoin skip confirmation of fee in PayJoin if the user is not increasing their contribution.	2020-10-23 15:07:15 +02:00
Andrew Kozlik	9e5d5bd5f9	feat: Add support for experimental field flag in protobuf.	2020-10-23 15:07:15 +02:00
Andrew Kozlik	b213a55428	chore(core): In apps.bitcoin move h_inputs back to bitcoin class.	2020-10-23 15:07:15 +02:00
Andrew Kozlik	4a0c5c371a	feat(core): In apps.bitcoin implement replacement transaction flow.	2020-10-23 15:07:15 +02:00
Andrew Kozlik	bd3fe1d789	chore(core): In apps.bitcoin create a separate class for transaction information.	2020-10-23 15:07:15 +02:00
Andrew Kozlik	469c131678	chore(core): In apps.bitcoin add confirm_replacement and confirm_modify_fee layouts.	2020-10-23 15:07:15 +02:00
Andrew Kozlik	7c2d690e45	chore(core): In apps.bitcoin allow get_tx_digest() to be used for original transactions.	2020-10-23 15:07:15 +02:00
Andrew Kozlik	ad6a0bc2a2	chore(common): Add new request types TXORIGINPUT and TXORIGOUTPUT.	2020-10-23 15:07:15 +02:00
Andrew Kozlik	5fc491c597	chore(core): In apps.bitcoin move BIP143 hashing back to a separate class.	2020-10-23 15:07:15 +02:00
Andrew Kozlik	443e0c101e	chore(common): Add orig_hash and orig_index fields to TxInput and TxOutput.	2020-10-23 15:07:15 +02:00
Andrew Kozlik	9a594f4784	fix(core): Fix CoinJoin anonymity gain check in bitcoin approver.	2020-10-16 19:16:37 +02:00
Pavol Rusnak	ded61a4ccf	chore(vendor): update micropython to v1.13	2020-10-16 14:19:35 +02:00
Martin Milata	830592f2d9	feat(core): add experimental_features setting ... The setting is off by default. When it is enabled protobuf messages marked UNSTABLE are rejected after decoding.	2020-10-16 13:53:31 +02:00
Martin Milata	0376670404	feat(common): expose 'unstable' option in generated code	2020-10-16 13:53:31 +02:00
Martin Milata	314cd260eb	feat(common): add experimental_features setting	2020-10-16 13:53:31 +02:00
Pavol Rusnak	bf6e9b4cad	fix(core): always recalculate header hashes	2020-10-15 16:28:12 +02:00
Martin Milata	9ed25a718a	ci: handle full dependencies in shell.nix ... Handling of full dependencies (multiple python versions, Monero tests) was moved from Dockerfile to shell.nix. The Python packages are installed from the pinned nixpkgs revision and do not depend on channel state at the time of docker build anymore. The Monero test binary is now downloaded using fetchurl which fails the build if checksum doesn't match.	2020-10-15 15:59:20 +02:00
Andrew Kozlik	c67ecb984b	chore(crypto): Move XPUB_MAXLEN and ADDRESS_MAXLEN from modtrezorcrypto to bip32.h.	2020-10-13 13:13:49 +02:00
Andrew Kozlik	c21ca81a1e	fix(core): Prevent sensitive data from being left on the call stack in modtrezorcrypto.	2020-10-13 13:13:49 +02:00
Pavol Rusnak	d8534b5ee6	perf(core/extmod): replace HMAC Python implementation with C ... We keep Python implementation of HMAC for Monero in core/src/apps/monero/xmr/crypto/__init__.py	2020-10-12 16:33:13 +02:00
Andrew Kozlik	d90c3af6ea	docs(core): Fix typos in slip39.py.	2020-10-11 00:31:24 +02:00
Tomas Susanka	b9dc44a849	docs(core): note 2.3.4 as released in Changelog	2020-10-08 09:02:52 +02:00
Martin Milata	542f32d3b1	feat(core): add auto_lock_delay and display_rotation to Features	2020-10-02 11:06:16 +02:00
Martin Milata	b2c4bbdaa2	feat(common): add auto_lock_delay and display_rotation to Features	2020-10-02 11:06:16 +02:00
matejcik	e4785d47e0	style: apply black 20.8b1	2020-09-29 11:30:40 +02:00
Rafael Korbas	2173ad97bc	Refactor t<page number> to page<page_number> in cardano get_address call	2020-09-29 08:55:28 +02:00
Rafael Korbas	66dbdc2462	Enforce network id/protocol magic consistency for cardano show address	2020-09-29 08:55:28 +02:00
Juraj Muravsky	638977db7d	Swap path with address type on screen in cardano get address	2020-09-29 08:55:28 +02:00
Pavol Rusnak	649e31cef0	chore(core/bootloader): regenerate messages with nanopb 0.4.3	2020-09-24 10:52:31 +02:00
Pavol Rusnak	71058eedd5	chore(vendor/nanopb): update nanopb from 0.4.1 to 0.4.3	2020-09-24 10:52:31 +02:00
Tomas Susanka	0317877297	chore(core): bump version to 2.3.5	2020-09-24 10:17:32 +02:00
matejcik	0eed360037	chore: make tx type names shorter ... as suggested by @andrewkozlik: TxAckInputType -> TxInput TxAckOutputType -> TxOutput TxAckPrevTxType -> PrevTx TxAckPrevInputType -> PrevInput TxAckPrevOutputType -> PrevOutput	2020-09-23 16:00:10 +02:00
matejcik	b6b65bffff	docs(core): update changelog	2020-09-23 16:00:10 +02:00
matejcik	35035dabcb	ci: omit generated protobuf classes from coverage report	2020-09-23 16:00:10 +02:00
matejcik	8b2e46eb2d	chore(core): update unit tests to kwargs usage and new TxAck subtypes	2020-09-23 16:00:10 +02:00
matejcik	d89c42e139	feat(core): add more mypy targets	2020-09-23 16:00:10 +02:00
matejcik	244b264b47	chore(core): fix typing and kwargs usage	2020-09-23 16:00:10 +02:00
matejcik	ef4022fbf5	auto: regenerate protobuf classes	2020-09-23 16:00:10 +02:00
matejcik	37025e2a84	feat(core): use specialized protobufs in apps.bitcoin, enable typing	2020-09-23 16:00:10 +02:00
matejcik	b0a2297b14	feat(core): convert protobuf decoding errors to DataErrors	2020-09-23 16:00:10 +02:00
matejcik	6ba08526e1	fix(core): fix type annotations on CoinInfo	2020-09-23 16:00:10 +02:00
matejcik	7e5d9e295b	fix(core): help mypy understand micropython's module management	2020-09-23 16:00:10 +02:00
matejcik	90ee5f3d38	feat!: implement protobuf required fields and default values ... BREAKING CHANGE: this makes arguments to protobuf constructors keyword-only, and arguments corresponding to required fields are now mandatory	2020-09-23 16:00:10 +02:00
Pavol Rusnak	f8489f16e4	fix(common/defs): remove FSN, ICX which migrated to mainnet	2020-09-23 11:31:09 +02:00
Martin Milata	cff4955f93	core: implement SafetyChecks.PromptTemporarily ... Also reword safety checks confirmation dialogs.	2020-09-18 09:02:40 +02:00
Martin Milata	7d37b2c90f	common: add PromptTemporarily to SafetyChecks enum	2020-09-18 09:02:40 +02:00
Martin Milata	9d2ad96ad4	core: add SafetyCheckLevel to Features	2020-09-18 09:02:40 +02:00
Martin Milata	9f066e877d	common: add SafetyCheckLevel to Features	2020-09-18 09:02:40 +02:00
Martin Milata	163ccedb39	core: allow const() values to have Literal type	2020-09-18 09:02:40 +02:00
Tomas Susanka	cd1d5195fd	docs(core): add changelog for Oct release	2020-09-16 15:24:15 +02:00
Pavol Rusnak	65e20119ea	docs(changelog): fix typo	2020-09-15 14:25:02 +02:00
Andrew Kozlik	295710c37d	core/bitcoin: Check ownership proofs using the provided commitment data.	2020-09-08 19:36:10 +02:00
Andrew Kozlik	5d745d5d04	common/protob: Add commitment_data to TxInputType.	2020-09-08 19:36:10 +02:00
Dusan Klinec	9d7b0bf50c	xmr: fix new transaction type for CLSAG, HF=13	2020-09-07 17:50:38 +02:00
Andrew Kozlik	9774c99e90	core/tests: Fix unit tests for streamimg prev_tx after confirmation.	2020-09-04 14:36:39 +02:00
Andrew Kozlik	dad2852db9	core/bitcoin: Stream prev_tx after confirmation.	2020-09-04 14:36:39 +02:00
Tomas Susanka	ebc99435ab	Revert "core: remove ownership messages from the public api for now" ... This reverts commit 0d5f00668f.	2020-09-03 14:56:27 +02:00
Tomas Susanka	b99b8b3df3	Merge remote-tracking branch 'origin/release/2020-09'	2020-09-03 13:17:23 +02:00
Pavol Rusnak	c1dd07a2e4	core+legacy: update dates in changelogs	2020-09-02 15:36:36 +02:00
Martin Milata	f3fd98a7ba	core: remove 1px of space on the left of each glyph ... For PixelOperator (T1) fonts only.	2020-09-01 19:57:46 +02:00
Martin Milata	b8bb63fbef	core: drop unused FONT_SIZE constant	2020-09-01 19:57:46 +02:00
Tomas Susanka	19461398d7	core/cardano: reuse derived Shamir seed (fixes #1007)	2020-09-01 16:14:41 +02:00
Tomas Susanka	0d5f00668f	core: remove ownership messages from the public api for now	2020-09-01 15:56:57 +02:00
Ondřej Vejpustek	09667a676e	core/tools: update hid-bridge readme	2020-09-01 14:18:57 +02:00
matejcik	e0583dd5cb	all: use a specific error code for "invalid session"	2020-08-28 15:37:06 +02:00
matejcik	4909821f35	core: implement EndSession	2020-08-28 15:37:06 +02:00
Martin Milata	c7934116ec	core: introduce TREZOR_MODEL flag (#1233)	2020-08-28 14:50:38 +02:00
Martin Milata	df5421e7d6	common/defs: update maxfee_kb to 10USD/tx ... Except bitcoin. (cherry picked from commit f51fac3410)	2020-08-25 18:06:54 +02:00
Martin Milata	f51fac3410	common/defs: update maxfee_kb to 10USD/tx ... Except bitcoin.	2020-08-25 18:05:29 +02:00
matejcik	032a65e1cf	python: export toif as public module	2020-08-25 11:30:33 +02:00
Pavol Rusnak	41f5237967	common/defs: enable extra_data for FLO ... (cherry picked from commit 534695313c)	2020-08-24 11:08:02 +02:00
Pavol Rusnak	534695313c	common/defs: enable extra_data for FLO	2020-08-24 11:06:12 +02:00
Tomas Susanka	d080464cc5	core, legacy: bump versions (also in changelogs)	2020-08-24 09:31:49 +02:00
Tomas Susanka	e137f196f8	core/changelog: update	2020-08-21 21:30:15 +02:00
Andrew Kozlik	f2d669ecdc	core/bitcoin: Use dynamic dispatch for confirmation dialogs in sign_tx.	2020-08-21 21:30:15 +02:00
Andrew Kozlik	02da5b7593	core/bitcoin: Show warning if nLockTime is set but ineffective due to all nSequence values being 0xffffffff.	2020-08-21 21:30:15 +02:00
Pavol Rusnak	146ee7af89	update changelogs	2020-08-21 21:30:15 +02:00
Pavol Rusnak	cdf0f68bb0	core: show passphrase on device	2020-08-21 21:30:15 +02:00
Pavol Rusnak	21b4c5b60e	core/bootloader_ci: fix typos in the previous commit	2020-08-21 14:47:35 +02:00
Ondrej Mikle	8d3d3be09c	core/bootloader_ic: introduce CI bootloader for TT device tests (#1182)	2020-08-21 14:39:56 +02:00
Martin Milata	1b982659c4	core: fix boot loop after uploading invalid homescreen (#1205)	2020-08-21 12:00:42 +02:00
Pavol Rusnak	0620911e46	core: allow spending coins from Bitcoin paths if the coin ... ... has implemented strong replay protection via SIGHASH_FORKID	2020-08-21 11:49:03 +02:00
Alexis Hernandez	96c38315df	common/defs: enable extra_data for XSN (#1208)	2020-08-20 20:40:30 +02:00
Andrew Kozlik	dd540a2ccd	core/ui: Initialize Qr class properly.	2020-08-20 18:13:09 +02:00
gabrielkerekes	431a25b119	Add Cardano README.md	2020-08-20 16:02:10 +02:00
Pavol Rusnak	c3ce9de3ea	core: regenerate coins+tokens	2020-08-19 19:29:18 +02:00
Pavol Rusnak	fd87c62b68	common/defs: remove coins with no Trezor-compatible wallets	2020-08-19 19:29:18 +02:00
Martin Milata	71c5bc4e3b	ci: fail if coverage falls under threshold	2020-08-18 21:08:46 +02:00
Martin Milata	3f21e8f400	core: display coin name when signing message ... Also when verifying message.	2020-08-18 13:45:49 +02:00
Martin Milata	927ee0812b	core: add hard limit for transaction fees ... The hard limit is set to 10*fee_warning_threshold. The limit is not enforced when `safety_checks` is set to "Prompt".	2020-08-17 16:12:33 +02:00
Tomas Susanka	c9dc38c9f3	core: allow 49/x not 49/x' for Casa	2020-08-17 08:54:08 +02:00
Pavol Rusnak	5536fbb98a	python: use stdlib blake2s on python 3.6+ ... commit 6d407c84d7 did not replace everything	2020-08-10 23:35:38 +02:00
Pavol Rusnak	d1973b7486	pipenv: update Pipfile	2020-08-08 18:03:32 +02:00
Pavol Rusnak	02b6656471	core: update changelog	2020-08-07 15:09:48 +02:00
Pavol Rusnak	4e11735d22	core/modtrezorui: remove prefill from text functions ... use display.bar where needed to prefill the areas	2020-08-07 15:08:14 +02:00
matejcik	2e5771db79	core: add changelog entry	2020-08-07 13:54:32 +02:00
matejcik	5385617eda	core: increase address length limit to accomodate CRW (fixes #1139)	2020-08-07 12:45:43 +02:00
matejcik	51ea8ccecd	common: update token support	2020-08-07 11:49:26 +02:00
Pavol Rusnak	fd2ddbfb03	core+legacy: expand month names in changelogs	2020-08-05 23:07:11 +02:00
Pavol Rusnak	65805c9145	core: fix non-determinism in resources.py.mako	2020-08-05 17:10:22 +02:00
matejcik	cea634158a	core: make sure Homescreen is properly initialized (fixes #1095)	2020-08-05 14:22:06 +02:00
Tomas Susanka	16827c3135	core: make templates	2020-08-05 13:55:36 +02:00
Pavol Rusnak	3fffa9ae68	common/defs: enable XVG	2020-08-05 12:10:52 +02:00
gabrielkerekes	afa26e7560	Use correct paths for Cardano Byron witnesses	2020-08-04 20:35:13 +02:00
Andrew Kozlik	292d909235	core/base: Implement CancelAuthorization message.	2020-08-04 17:32:44 +02:00
Andrew Kozlik	8bcb3d8fb6	core/storage: Add delete() method to storage.cache.	2020-08-04 17:32:44 +02:00
Andrew Kozlik	5c1f197602	common/protob: Add CancelAuthorization message.	2020-08-04 17:32:44 +02:00
Andrew Kozlik	a6c06b5c5f	core: Update changelog with CoinJoin flow.	2020-08-04 17:32:44 +02:00
Andrew Kozlik	791a74aeb2	core/tests: Add unit tests for CoinJoinApprover and CoinJoinAuthorization.	2020-08-04 17:32:44 +02:00
matejcik	cd86f9f477	core/bitcoin: make change check more robust against short paths	2020-08-04 17:32:44 +02:00
Andrew Kozlik	07d9b780a6	core/bitcoin: Change CoinJoin round ID length to 32 bytes and remove rate limiting.	2020-08-04 17:32:44 +02:00
Andrew Kozlik	377bff68f4	core/bitcoin: Implement DoPreauthorized message.	2020-08-04 17:32:44 +02:00
Andrew Kozlik	2c30dd62fc	common: Add DoPreauthorized message.	2020-08-04 17:32:44 +02:00
Andrew Kozlik	b9cfecb8b8	core/bitcoin: Support preauthorization in SignTx message for CoinJoin.	2020-08-04 17:32:44 +02:00
Andrew Kozlik	97fc9b74ab	core/bitcoin: Implement CoinJoinApprover.	2020-08-04 17:32:44 +02:00
Andrew Kozlik	472e853f0a	core/tests: Fix unit tests to work with BasicApprover in sign_tx.	2020-08-04 17:32:44 +02:00
Andrew Kozlik	d6ee542deb	core/bitcoin: Move transaction confirmation logic from Bitcoin to BasicApprover class.	2020-08-04 17:32:44 +02:00
Andrew Kozlik	00258f2d4d	core/bitcoin: Support preauthorization in GetOwnershipProof message.	2020-08-04 17:32:44 +02:00
Andrew Kozlik	c772de9d3c	core/bitcoin: Support preauthorization in @with_keychain decorator.	2020-08-04 17:32:44 +02:00
Andrew Kozlik	208283e13e	core/bitcoin: Implement AuthorizeCoinJoin message.	2020-08-04 17:32:44 +02:00
Andrew Kozlik	48a331aa1d	core/bitcoin: Add CoinJoinAuthorization class.	2020-08-04 17:32:44 +02:00
Andrew Kozlik	dc32a17335	core/bitcoin: Move BIP32_WALLET_DEPTH to common.	2020-08-04 17:32:44 +02:00
Andrew Kozlik	bbab13f6e7	common/protob: Add AuthorizeCoinJoin message.	2020-08-04 17:32:44 +02:00
Ondřej Vejpustek	59002118c0	core/extmod: explicitly initialize automatic variables	2020-08-04 14:50:07 +02:00
gabrielkerekes	683d7420ff	Fix Cardano Shelley public key validation ... In Shelley Cardano started using the purpose 1852'. Unfortunately, we completely missed that the public key path validation fuction checks for purpose 44' explicitly, which means that the user is shown a warning when deriving public key with the purpose 1852'. Which is always when "logging in" to a wallet. This commit should fix that. I've also updated type hinting in get_public_key.	2020-08-04 13:03:57 +02:00
matejcik	c3afb93837	core/tests: improve test harness (fixes #1157)	2020-08-04 10:27:44 +02:00
Pavol Rusnak	efc5ccdaf0	core: remove src1	2020-08-03 15:59:57 +02:00
Tomas Susanka	16a5858544	core: add Casa/Greenaddress paths exceptions to Changelog	2020-08-03 15:51:35 +02:00
Martin Milata	e5bdca655a	core: don't scale emulator background image ... Makes the emulator look nicer in tiling window managers.	2020-07-31 12:27:43 +02:00
Gabriel Kerekeš	c0eba979c6	Fix bare 'except' style error - catch Exception instead ... Co-authored-by: Pavol Rusnak <pavol@rusnak.io>	2020-07-30 17:17:03 +02:00
gabrielkerekes	7a1e773b49	Validate transaction metadata	2020-07-30 17:17:03 +02:00
gabrielkerekes	f2ee450410	Include metadata in transaction signing	2020-07-30 17:17:03 +02:00
gabrielkerekes	0438f318b4	Bring back cbor.Raw - to be used for metadata	2020-07-30 17:17:03 +02:00
gabrielkerekes	1ed8b56b7c	Include Byron witness once for each input path	2020-07-30 17:17:03 +02:00
gabrielkerekes	7bf5cab840	Update sign_tx ... Add certificates, withdrawals and metadata hash	2020-07-30 17:17:03 +02:00
gabrielkerekes	a25444efd1	Move to_account_path() to utils	2020-07-30 17:17:03 +02:00
gabrielkerekes	e92baf5b02	Update protobuf	2020-07-30 17:17:03 +02:00
Andrew Kozlik	7d07161efe	common/fido: Unify application labeling between U2F and FIDO2.	2020-07-30 15:29:54 +02:00
Pavol Rusnak	063aba910d	core: rename emulator to trezor-emu-core	2020-07-30 15:27:34 +02:00
matejcik	8502412dbc	core/emulator: assume -m main when no arguments are provided ... fixes #1115	2020-07-30 15:27:34 +02:00
Martin Milata	d955e3f1e5	core: rename class Overwintered to Zcashlike	2020-07-30 15:14:18 +02:00
Martin Milata	10387e1869	core: drop zcash v3 tx signing support	2020-07-30 15:14:18 +02:00
gabrielkerekes	6d02aa23d9	Raise wire.DataError when deriving invalid address type	2020-07-30 14:43:32 +02:00
gabrielkerekes	b5f3511c1c	Add support for script addresses in tx outputs	2020-07-30 14:43:32 +02:00
gabrielkerekes	f1b6056edb	Fix staking key hash message ... When deriving an address with a foreign staking key Trezor would crash due to forgotten `decode()` on hexlified staking key hash which was to be displayed. This wasn't discovered while testing because it weirdly would pass with a `aaff00` string, but not with longer ones.	2020-07-30 14:43:32 +02:00
matejcik	c008600d08	core/debug: fail if wait_layout is sent without watch_layout	2020-07-29 11:50:47 +02:00
Pavol Rusnak	9a673db647	core: fix build on T1 ... file src/apps/base.py was added unconditionally breaking the T1 build	2020-07-28 12:12:53 +02:00
Pavol Rusnak	a6451dad46	core/fonts: update headers	2020-07-28 10:56:41 +02:00
Martin Milata	3021233eaf	core: remove unimports from bitcoin sign_tx layouts	2020-07-28 10:51:28 +02:00
Pavol Rusnak	47e7550423	core/extmod: add font_pixeloperator{,mono}, use this font for T1	2020-07-28 09:40:30 +02:00
Pavol Rusnak	cec87bba50	core: remove mono bold font variant (not used anywhere)	2020-07-27 23:22:34 +02:00
Pavol Rusnak	e6baaa7ed9	core/src1: use display.text instead of display.print	2020-07-27 17:40:34 +02:00
Pavol Rusnak	de43dde1e9	core: make emu.sh respect TREZOR_MODEL env variable	2020-07-27 17:38:55 +02:00
Pavol Rusnak	8bc32d035b	core/extmod: enable display_text* methods for other models than T	2020-07-27 17:24:13 +02:00
Pavol Rusnak	df03534955	core: print inverted question mark for nonprintable characters	2020-07-27 16:29:11 +02:00
Pavol Rusnak	89d701ed08	core+legacy: bump versions (also in changelogs)	2020-07-27 13:59:49 +02:00
matejcik	4eb5b927c0	core/cardano: simplify keychain implementation	2020-07-27 13:24:51 +02:00
Gabriel Kerekeš	d2c1624602	Cardano shelley update 2/3 (#1112)	2020-07-27 13:11:23 +02:00
gabrielkerekes	e1615e60ec	Update Cardano to support Shelley era 1/3 ... Update protobuf - Previous transactions don't need to be sent anymore, because fee is included in the transaction now. Thus transactions_count can be removed from CardanoSignTx message and the CardanoTxAck and CardanoTxRequest messages can be removed altogether. - CardanoTxInputType.type is unused so remove it Add NULL (None type) serialisation to CBOR - Transaction metada must either have a valid structure or CBOR NULL must be used (if metadata is empty) - it can't be simply left out. Add protocol_magics file - Just to have a nicer way of representing protocol magics Update transaction signing - Previous transactions no longer need to be requested - Output building is simplified, since fee doesn't need to be calculated - Remove transaction class since it is no longer needed (only functions remained) - Reorder functions so it reads top to bottom Add protocol magic to byron address on testnet - This has always been a part of the spec, but it hasn't been implemented before, because it wasn't really needed. Update trezorlib Update tests - Transaction messages are no longer required - Expected values are different since tx format changed - Common values in test cases have been extracted Remove unused file - Progress was used when receiving previous transactions Add CRC check to output address validation	2020-07-27 13:04:49 +02:00
Pavol Rusnak	88aa3cf168	core: convert old changelogs to new format	2020-07-27 12:14:00 +02:00
Pavol Rusnak	8dacad0782	core/bootloader: update protobuf definitions	2020-07-26 00:00:37 +02:00
matejcik	fdcb64ac24	all: rename protobuf unsafe_prompts to safety_checks	2020-07-24 16:37:58 +02:00
matejcik	19ad1dae8b	core/bitcoin: allow compatibility namespaces for Casa/Greenaddress	2020-07-24 16:37:58 +02:00
matejcik	b741560997	core/bitcoin: drop unused validate_path_for_bitcoin_public_key	2020-07-24 16:37:58 +02:00
matejcik	407375b0c4	core/bitcoin: move BITCOIN_NAMES to common	2020-07-24 16:37:58 +02:00
matejcik	8f8e793155	core, python: add changelogs	2020-07-24 16:37:58 +02:00
matejcik	fd8cb0e061	core/keychain: differentiate error message for ed25519 derivation	2020-07-24 16:37:58 +02:00
matejcik	0438f83a94	core: use public as named argument instead of comment	2020-07-24 16:37:58 +02:00
matejcik	57b08c98ed	core: raise error on setting passphrase-on-device without passphrase	2020-07-24 16:37:58 +02:00
matejcik	58f460627f	core/tests: add unit tests for new functionality	2020-07-24 16:37:58 +02:00
matejcik	a461853cf6	core/tests: fix bitcoin unit tests	2020-07-24 16:37:58 +02:00
matejcik	c85d768b81	core: update references to keychain everywhere	2020-07-24 16:37:58 +02:00
matejcik	ff4ec2185e	core: refactor keychain to only support one curve at a time ... also make a cleaner distinction between keychain, seed, path This enables using `unsafe_prompts`, because with the original code, if there was no namespace match, we wouldn't know which curve to use. For ease of implementation, we use a LRU cache for derived keys, instead of the original design "one cache entry per namespace". SLIP21 is now treated completely separately, via `slip21_namespaces` and `derive_slip21` method. If more slip21-like things come in the future, we can instead hang them on the keychain: put a per-curve Keychain object accessible by `keychain[curve_name].derive()`, and the majority usecase will just pass around `keychain[curve_name]` instead of having to specify the curve in every `derive()` call. Or alternately we'll just specify the curve in every `derive()` call, whichever seems more appropriate.	2020-07-24 16:37:58 +02:00
matejcik	fa757f4b7f	core: improve type annotation for bip32.derive_path	2020-07-24 16:37:58 +02:00
matejcik	8e44132d3c	core: replace load_settings with individual setters	2020-07-24 16:37:58 +02:00
matejcik	1109250dcf	core: add option to allow unsafe prompts	2020-07-24 16:37:58 +02:00
Martin Milata	03f2dab6bc	core: reduce gc.collect calls during bitcon sign_tx	2020-07-24 15:35:09 +02:00
matejcik	c3a61998cb	core: generate resdata by Mako, use if/elif trick to save RAM	2020-07-24 14:09:31 +02:00
matejcik	125079a8a4	core: add changelog entry for synchronous protobuf	2020-07-24 14:09:31 +02:00
matejcik	7befdd07e4	core/tests: update unit tests	2020-07-24 14:09:31 +02:00
matejcik	5e7fd3aea6	core: use utils.BufferReader instead of apps.common.BytearrayReader	2020-07-24 14:09:31 +02:00
matejcik	1ff4a0d239	core: separate BufferIO into Reader (read-only) and Writer ... also integrates BytearrayReader API into BufferReader	2020-07-24 14:09:31 +02:00
matejcik	3514a31bc9	core: make USB codec resilient to OOM conditions	2020-07-24 14:09:31 +02:00
matejcik	0a758b8181	core/tests: add synchronous protobuf tests	2020-07-24 14:09:31 +02:00
matejcik	31e2170766	core: make protobuf buffer smaller, dynamically allocate bigger if necessary	2020-07-24 14:09:31 +02:00
matejcik	a000ea5ec8	core/monero: update Monero app to use synchronous protobuf	2020-07-24 14:09:31 +02:00
matejcik	01d695283f	core: make protobuf buffer bigger	2020-07-24 14:09:31 +02:00
matejcik	0c3bc53aee	core: clean up types for field caching, fix count_message	2020-07-24 14:09:31 +02:00
matejcik	f723dca7b1	core: enable PYSTACK	2020-07-24 14:09:31 +02:00
matejcik	d568afa80d	core: improve protobuf field caching	2020-07-24 14:09:31 +02:00
matejcik	85d74ece76	core: implement synchronous v1 codec	2020-07-24 14:09:31 +02:00
Tomas Susanka	34bd57006f	core, legacy: set version of the upcoming release in Changelog	2020-07-24 12:33:46 +02:00
Martin Milata	fd117a0c9f	core: raise error on auto-lock value out of range	2020-07-22 21:38:42 +02:00
Andrew Kozlik	4005f4832f	core/embed: Set VCP write timeout to 0.	2020-07-16 09:34:58 +02:00
Ondrej Mikle	33d2bf417b	core: replace bootloader only in production. Fix device for T1 core port JLink upload	2020-07-13 10:45:32 +02:00
matejcik	051763575d	core: touch idle timer in keyboards (fixes #1099)	2020-07-10 14:05:52 +02:00
matejcik	2c4ecff0a4	core: fix synthetic events breaking io.poll delay calculation	2020-07-10 14:05:52 +02:00
Andrew Kozlik	eb28998f98	core/bitcoin: Support multiple change-outputs.	2020-07-09 15:51:23 +02:00
matejcik	2c8e5f527b	all: rename changelogs to .md for highlighting	2020-07-08 10:43:40 +02:00
matejcik	a19a9a318a	all: improve changelog formatting	2020-07-08 10:43:40 +02:00
matejcik	476cf2ee8f	core, legacy: more changelog entries	2020-07-08 10:43:40 +02:00
Pavol Rusnak	57ae902aed	core/monero: don't download test binary even if hash is different	2020-07-03 15:18:38 +02:00
Pavol Rusnak	5d666376f0	core/monero: update tests binary	2020-07-03 15:18:38 +02:00
Andrew Kozlik	37f4dcc7e5	core/bitcoin: Rename witness_p2wsh() to witness_multisig().	2020-07-03 11:17:19 +02:00
Andrew Kozlik	91b615c217	core: Update changelog.	2020-07-03 11:17:19 +02:00
Andrew Kozlik	9cd600f79e	core/bitcoin: Add special confirmation screen for transactions with external inputs.	2020-07-03 11:17:19 +02:00
Andrew Kozlik	64d9350de2	core/bitcoin: Implement GetOwnershipId message.	2020-07-03 11:17:19 +02:00
Andrew Kozlik	533de50588	common/protob: Add GetOwnershipId message.	2020-07-03 11:17:19 +02:00
Andrew Kozlik	712ec68c1b	core/bitcoin: Add support for external inputs with proof of non-ownership.	2020-07-03 11:17:19 +02:00
Andrew Kozlik	956ea9a94f	common: Add ownership_proof field to TxInputType.	2020-07-03 11:17:19 +02:00
Andrew Kozlik	791ff3fe06	core/tests: Add unit tests for SLIP-0019 proofs of ownership.	2020-07-03 11:17:19 +02:00
Andrew Kozlik	d4317d1536	core/bitcoin: Implement generation and verification of SLIP-0019 proofs of ownership.	2020-07-03 11:17:19 +02:00
Andrew Kozlik	d52de28704	core/bitcoin: Implement BIP-322 SignatureProof container.	2020-07-03 11:17:19 +02:00
Andrew Kozlik	c723c78529	common/protob: Add GetOwnershipProof message.	2020-07-03 11:17:19 +02:00
Andrew Kozlik	d48a372ca7	core/sign_tx: Implement support for signed external inputs.	2020-07-03 11:17:19 +02:00
Andrew Kozlik	78f14d286e	core/sign_tx: Factor out get_legacy_tx_digest() from sign_nonsegwit_input().	2020-07-03 11:17:19 +02:00
Andrew Kozlik	61e2d4d5e5	core/bitcoin: Implement signature verifier.	2020-07-03 11:17:19 +02:00
Andrew Kozlik	5378e12ba2	core/bitcoin: Clarify hash_type vs. sighash_type terminology.	2020-07-03 11:17:19 +02:00
Andrew Kozlik	d1e043f417	core/bitcoin: Implement parsing of scripts and witnesses for signature verification.	2020-07-03 11:17:19 +02:00
Andrew Kozlik	173bb7ed13	core/bitcoin: Replace TxInputType parameter in input_derive_script.	2020-07-03 11:17:19 +02:00
Andrew Kozlik	a901573ea2	core/bitcoin: Move script types from helpers to common.	2020-07-03 11:17:19 +02:00
Andrew Kozlik	3b6c1e5e6b	core/crypto: Add functions for verifying DER encoded signatures.	2020-07-03 11:17:19 +02:00
Andrew Kozlik	9459c5a5c2	core/common: Add BytearrayReader and basic reader functions.	2020-07-03 11:17:19 +02:00
Andrew Kozlik	99f01cd316	core/sign_tx: Check script_pubkeys of inputs.	2020-07-03 11:17:19 +02:00
Andrew Kozlik	cc655575c8	common: Add witness field to TxInputType.	2020-07-03 11:17:19 +02:00
Andrew Kozlik	872768928b	core/crypto: Fix endianity in DER length encoding.	2020-07-03 11:17:19 +02:00
Andrew Kozlik	e7f230d66e	core/sign_tx: Use varint length encoding for witness stack items.	2020-07-03 11:17:19 +02:00
Tomas Susanka	3a3e5739b0	core, legacy: update changelogs	2020-07-02 09:09:34 +00:00
Tomas Susanka	fc9eb63114	core: add previous commit to changelog	2020-07-01 17:37:47 +00:00
Tomas Susanka	0f9a2459d3	core: make QR code smaller for Monero	2020-07-01 17:20:04 +00:00
Tomas Susanka	ca3dd2bfb9	common: skip deprecated fields during generation; deprecate overwintered field in Zcash	2020-06-30 16:02:21 +02:00
matejcik	e6e3043096	all: implement support for pre-overwinter prevtx (fixes #1030)	2020-06-30 15:19:31 +02:00
Andrew Kozlik	f382f77c89	core/ui: Fix repaint bug in QR code rendering #1067.	2020-06-25 12:25:41 +02:00
Tomas Susanka	e534ae3ad7	legacy, core: rename Features.pin_cached to unlocked and unify	2020-06-19 21:26:36 +02:00
Tomas Susanka	b6c8cbc24c	core: add 'initialized' to changelog	2020-06-16 11:31:29 +02:00
Tomas Susanka	a6acefbdf5	core: wipe before reset and recovery; introduce 'intialized' field	2020-06-16 11:31:29 +02:00
Andrey	1eeaa1e5cf	Enable extra_data for Zcoin. Changed coininfo.py	2020-06-15 09:53:00 +02:00
Tomas Susanka	b67be7dd9e	core: forbid all settings if not initialized	2020-06-11 18:47:01 +02:00
Tomas Susanka	f8b2f0bb7b	changelogs: change also bootloader changelogs to the new format	2020-06-11 15:48:38 +00:00
Tomas Susanka	9979af3cd2	changelogs: start using more detailed changelog	2020-06-11 17:43:40 +02:00
Tomas Susanka	981d079d7f	core/signverify: add failsafe for an empty message header	2020-06-11 09:08:50 +02:00
Tomas Susanka	56fe5adcfc	Merge branch 'release/2020-06'	2020-06-10 06:51:18 +00:00
Andrew Kozlik	d1690f4317	core/tools: fix pixel-perfect mode for centered text in dialog-designer	2020-06-09 13:31:42 +02:00
Pavol Rusnak	179645e3ad	core: unify usage of TREZOR_MODEL	2020-06-06 21:06:15 +02:00
Ondrej Mikle	c877dc8dd6	core: port storage to T1	2020-06-06 21:06:15 +02:00
Pavol Rusnak	2815b62838	core/tools: implement "pixel-perfect" mode for dialog-designer tool	2020-06-05 14:11:59 +00:00
Pavol Rusnak	5262ef84cf	common/defs/fido: add aws and tutanota	2020-06-05 14:53:13 +02:00
Andrew Kozlik	9c61257e8e	core: Use the Lock icon in the PIN entry dialog only when the device is actually locked.	2020-06-05 11:52:56 +02:00
Pavol Rusnak	5ed64a0736	core/tools: refactor dialog-designer tool	2020-06-04 21:39:47 +02:00
Pavol Rusnak	d9d5511858	core/tools: add quick'n'dirty dialog-designer tool	2020-06-04 19:56:42 +02:00
matejcik	7579ac5274	core: fix rendering issues in homescreens	2020-06-04 16:18:46 +02:00
matejcik	9df7c84c56	core/ui: lower lockscreen brightness	2020-06-04 16:18:46 +02:00
matejcik	8fa7684a9c	core: set a scheduler-safe maximum for autolock	2020-06-04 16:18:46 +02:00
matejcik	872e0fb0e0	core: lower scheduler resolution to milliseconds ... This avoids problems with large timeouts causing the scheduler queue to think the time counter has overflown, and ordering the autolock task before immediate tasks. The maximum reasonable time difference is 0x20000000, which in microseconds is ~8 minutes, but in milliseconds a more reasonable ~6 days.	2020-06-04 16:18:46 +02:00
matejcik	847691798b	core: simplify homescreen and lockscreen implementations	2020-06-04 16:18:46 +02:00
matejcik	4bc865794f	core: only unlock storage if it is locked (solves determinism issue in tests)	2020-06-04 16:18:46 +02:00
matejcik	ffa7790ed5	core: start USB after booting apps ... This prevents a race condition where sometimes an Initialize message could arrive before the homescreen was fully booted -- and Recovery homescreen would cancel it as part of its bootup sequence.	2020-06-04 16:18:46 +02:00
matejcik	70f67883c5	core: fix artifacts in click-based UI tests	2020-06-04 16:18:46 +02:00
matejcik	a9d8fd3992	core: debuglink interface avoids workflow management ... This will have unintended consequences if you call a wirelink function on the debulink interface. TT allows this ... and will behave badly.	2020-06-04 16:18:46 +02:00
matejcik	bc9247e18d	core: add Cancel to a list of allowed messages while locked	2020-06-04 16:18:46 +02:00
matejcik	f32c2f9e23	core: replace workflow.kill_default with workflow.close_others	2020-06-04 16:18:46 +02:00
matejcik	01832d5ae9	core: call close_others() in place of ButtonRequest ... this makes sense, really: close_others() requests UI exclusivity, and that is something that generally happens at the same places we emit a ButtonRequest	2020-06-04 16:18:46 +02:00
matejcik	6f53ca0ac6	core: rework wait_layout() ... The original wait_layout was unreliable, because there are no guarantees re order of arrival of the respective events. Still, TT's event handling is basically deterministic, so as long as the host sent its messages close enough to each other, the order worked out. This is no longer the case with the introduction of loop.spawn: TT's behavior is still deterministic, but now ButtonAck is processed *before* the corresponding wait_layout, so the waiting side waits forever. In the new process, the host must first register to receive layout events, and then receives all of them (so the number of calls to wait_layout must match the number of layout changes). DebugLinkWatchLayout message must be version-gated, because of an unfortunate collection of bugs in previous versions wrt unknown message handling; and this interests us because upgrade-tests are using wait_layout feature.	2020-06-04 16:18:46 +02:00
matejcik	5d823ff5ea	core: use ButtonRequestType.PinEntry for PIN entry	2020-06-04 16:18:46 +02:00
matejcik	bbfce4e303	common: introduce ButtonRequestType.PinEntry	2020-06-04 16:18:46 +02:00
matejcik	3dbd9c9eca	core/loop: prevent finalizers from doing things when task is closed externally	2020-06-04 16:18:46 +02:00
matejcik	42e7c43c7c	core: make sure that auto-lock shuts down running workflows	2020-06-04 16:18:46 +02:00
matejcik	2d0206c043	core: replace workflow.on_start/on_close with workflow.spawn	2020-06-04 16:18:46 +02:00
matejcik	02565f3bfb	core/loop: introduce spawn syscall	2020-06-04 16:18:46 +02:00
matejcik	a4f47ddd21	core/lockscreen: ignore exception when user taps "unlock" and then cancels	2020-06-04 16:18:46 +02:00
matejcik	7ff1251ee1	core: dim lockscreen (fixes #974)	2020-06-04 16:18:46 +02:00
matejcik	4035aad51b	core: implement auto-lock after a configurable timeout (fixes #75)	2020-06-04 16:18:46 +02:00
matejcik	67b723e4ca	core: add a global idle timer	2020-06-04 16:18:46 +02:00
Andrew Kozlik	5469acfabf	core/webauthn: Cache user verification for 3 minutes.	2020-06-04 16:18:46 +02:00
Andrew Kozlik	b867ac1d01	core/webauthn: Implement FIDO2 unlocking from softlock.	2020-06-04 16:18:46 +02:00
Andrew Kozlik	0f81886c9f	core/webauthn: Allow confirm_dialog() to return a new state as an alternative to the user response.	2020-06-04 16:18:46 +02:00
Andrew Kozlik	c8ae5c157e	core/webauthn: Implement U2F unlocking from softlock.	2020-06-04 16:18:46 +02:00
matejcik	06aed7135a	core: do not prompt for PIN just to lock the device again	2020-06-04 16:18:46 +02:00
matejcik	2cedc687e6	core: disable trezor-crypto BIP32 cache	2020-06-04 16:18:46 +02:00
matejcik	246998910a	core: refactor usage of input_signals ... this prevents a certain class of UI test failure. It also localizes the use of debuglink signals into the layout classes instead of call sites, which is a design we were already using for confirm_signals	2020-06-04 16:18:46 +02:00
matejcik	afeeafd5cd	core: hide some fields when softlocked	2020-06-04 16:18:46 +02:00
matejcik	b9bd9ea3d0	core: only softlock when PIN is set	2020-06-04 16:18:46 +02:00
matejcik	a9ddc2a8e2	core/boot: modify initial lockscreen label	2020-06-04 16:18:46 +02:00
matejcik	09af8aed4e	core: consider lockscreen to be a separate homescreen ... this involves some changes to the workflow defaults: * workflow.start_default() takes no arguments * workflow.set_default() (originally replace_default) configures the default that will be started by next call to start_default(). The intended usecase is to set_default() first and then start it separately. * apps.base.set_homescreen() factors out the logic originally in main.py, that decides which homescreen should be launched. This uses set_default() call. start_default() is then used explicitly in main.py	2020-06-04 16:18:46 +02:00
matejcik	d73480bc9d	core: introduce PIN soft-locking	2020-06-04 16:18:46 +02:00
matejcik	04c8b2803d	core: refactor homescreen app, include lockscreen in it	2020-06-04 16:18:46 +02:00
matejcik	9197623d83	core: factor out the decision whether to lock the device	2020-06-04 16:18:46 +02:00
matejcik	0600d87c8c	common: rename ClearSession to LockDevice, introduce EndSession	2020-06-04 16:18:46 +02:00
matejcik	32fcc4ad9c	core: make verify_user_pin accept a Context argument	2020-06-04 16:18:46 +02:00
matejcik	8ca7ffc3b8	core: use wire.PinCancelled/PinInvalid instead of custom versions ... also refactor show_pin_invalid and its usages so that it raises directly note that we are now using PinCancelled instead of ActionCancelled where appropriate	2020-06-04 16:18:46 +02:00
matejcik	eabfcab9b9	core: add default messages to some error codes	2020-06-04 16:18:46 +02:00
matejcik	341c5b7d10	core/wire: make handler lookup pluggable	2020-06-04 16:18:46 +02:00
matejcik	837c4df61f	core: expose storage_is_unlocked() as config.is_unlocked()	2020-06-04 16:18:46 +02:00
matejcik	87433995b0	core: add BITCOIN_ONLY to mock file	2020-06-04 16:18:46 +02:00
matejcik	d5e45c02bb	core: move base functions from "homescreen" app to "base"	2020-06-04 16:18:46 +02:00
Tomas Susanka	8859d103f4	core, legacy: bump versions	2020-06-03 15:39:25 +00:00
Tomas Susanka	e2629eb921	core, legacy: update Changelogs to reflect the release	2020-06-03 15:35:30 +00:00
matejcik	bd5b3a3f21	common: drop Theta and VeChain ERC tokens, refresh market caps ... fixes #1022 fixes #1023	2020-05-29 12:12:30 +02:00
matejcik	5209804fc3	core: relax path checks on GetPublicKey ... (cherry picked from commit 554d8949f5)	2020-05-27 06:58:30 +00:00
matejcik	554d8949f5	core: relax path checks on GetPublicKey	2020-05-27 08:56:50 +02:00
matejcik	d59ffe553f	make gen	2020-05-25 16:14:05 +02:00
Ondřej Vejpustek	24ceb0ab6b	crypto/bignum: change limb size to 29, add tests	2020-05-24 14:36:38 +00:00
Andrew Kozlik	cb32ae2e4b	core/tests: add request_meta queries to unit tests (needed for transaction streaming)	2020-05-24 14:36:38 +00:00
Andrew Kozlik	42eddf8e04	core/sign_tx: validate prevout amount in all cases	2020-05-24 14:36:38 +00:00
Andrew Kozlik	7db3e930d4	core/sign_tx: Add further message sanitization checks.	2020-05-24 14:36:37 +00:00
matejcik	72ef86d79a	all: enable extra_data for komodo	2020-05-24 14:36:37 +00:00
matejcik	7a3637d5b0	core/sign_tx: add checks for version_group_id and branch_id fields	2020-05-24 14:36:37 +00:00
Ondrej Mikle	b01b24f090	core: change startup firmware file from .s to .S which enables preprocessing and fixes TT boot	2020-05-24 12:28:38 +02:00
Tomas Susanka	675ff459db	core, legacy: update changelogs	2020-05-22 11:55:55 +00:00
Tomas Susanka	9dfc08ca61	core/bitcoin: drop decred_script_version	2020-05-21 19:14:39 +02:00
matejcik	eeb46eabca	common: refresh token list	2020-05-21 13:29:13 +02:00
matejcik	2f665c8f84	core: add exception to GetPublicKey for PSBT master fingerprint (fixes #999)	2020-05-21 13:26:53 +02:00
Ondrej Mikle	10f0f107e0	core: Adds T1 core port FW flashing options for for openocd and jlink	2020-05-21 10:05:12 +02:00
Ondrej Mikle	0d65d684f0	core: T1 port can run on T1 bootloader with MEMORY_PROTECT=0	2020-05-21 08:49:59 +02:00
Tomas Susanka	a2f790167d	core/bitcoin: fix step 1 and 2 comments in signing	2020-05-19 12:58:45 +00:00
Tomas Susanka	1ac0f60550	core: update isort config to place relative imports last	2020-05-18 14:31:51 +02:00
Tomas Susanka	aa115b6320	core: move decred writers to decred.py	2020-05-18 14:31:51 +02:00
Tomas Susanka	3084ee1eed	core/bitcoin: move write_bitcoin_varint to common writers	2020-05-18 14:31:51 +02:00
Tomas Susanka	445f56d387	core/bitcoin: finalize bitcoin refactor ... - core/bitcoin: move common files to the app's root - core/bitcoin: use require_confirm instead of confirm - core: move bitcoin unrelated functions from 'bitcoin' to a new 'misc' app - core/bitcoin: use relative imports inside the app - core: rename wallet app to bitcoin - core/wallet: replace SigningErrors and the other exception classes with wire.Errors	2020-05-18 14:31:51 +02:00
matejcik	aa52fc3903	core/extmod: drop unused rfc6979 module	2020-05-18 14:31:00 +02:00
matejcik	050936d0d7	core: enable finalizers on extmod classes	2020-05-18 14:31:00 +02:00
matejcik	123b07e3ad	core: drop support for pre-registering keychain namespaces	2020-05-15 16:30:41 +02:00
matejcik	3e06f4779a	core/tests: add new keychain tests	2020-05-15 14:08:29 +02:00
matejcik	de9e73dcbc	core/tests: update unit tests for new keychain API	2020-05-15 14:08:29 +02:00
matejcik	f3f6e2101a	core/cardano: explanation about seed derivation	2020-05-15 14:08:29 +02:00
matejcik	a31b2cd1bc	core/wallet: implement keychain for apps.wallet	2020-05-15 14:08:29 +02:00
matejcik	0dff3853a7	core/ethereum: introduce custom keychain decorators	2020-05-15 14:08:29 +02:00
matejcik	b594248ac2	core: use new keychain decorators where appropriate	2020-05-15 14:08:29 +02:00
matejcik	fd9e945308	core/cardano: use caching decorators and new Keychain API for Cardano as well	2020-05-15 14:08:29 +02:00
matejcik	7541d529a3	core: refactor keychain API, introduce SLIP44 decorator	2020-05-15 14:08:29 +02:00
matejcik	8c4cb58098	core: introduce caching decorators	2020-05-15 14:08:29 +02:00
matejcik	63dfcb17a7	core: make mypy happy about importing fatfs	2020-05-15 14:08:29 +02:00
matejcik	7f2e7b0003	core: add Ethereum constants to mocks	2020-05-15 14:08:29 +02:00
Pavol Rusnak	6704ed86a1	Merge pull request #995 from trezor/omikle/t1-core-port ... core port to Trezor One	2020-05-14 16:48:18 +02:00
Ondrej Mikle	7eddafe487	core: better formatting for common parts of T1 and TT header	2020-05-14 16:10:42 +02:00
Ondrej Mikle	c4c341b3f9	core: setup stack when running core on T1	2020-05-14 12:46:25 +02:00
Dusan Klinec	6b8fc9c894	xmr: major protocol upgrade, CLSAG support added ... - CLSAG signature scheme added - type hints added xmr: optimize protocol, send only required data - real_out_additional_tx_keys contains only one element as nothing more is needed during signature - only src_entr.outputs[index] is HMACed and always present. Other outputs are present only if needed which reduces comm and CPU overhead. - getting rid of subaddresses dictionary (memory requirements), now subaddr indices are present per source entry so keys are computed when needed xmr: prepare for permutation sending removal, specify index - specify source entry ordering index prior sorting by key images as original HMAC keys are generated based on these. - permutation checked just by valid HMACs, size of the set, key image sort order - sending permutation is now deprecated, will be removed in the following protocol versions - more strict state transition checks, guard strict check with respect to steps ordering	2020-05-13 11:13:19 +02:00
Tomas Susanka	25d2d130a0	tests: use maxfail option for fido2 tests	2020-05-12 09:48:23 +00:00
Ondrej Mikle	fb5a220b46	core: use legacy sign script for T1 core port binary to be flashable	2020-05-11 18:05:46 +02:00
Ondrej Mikle	e429085e96	core: copy firmware header for T1 port into final binary	2020-05-11 17:33:47 +02:00
Ondrej Mikle	d8115a7992	core: firmware header for T1 port	2020-05-11 15:43:43 +02:00
Tomas Susanka	53c43ac305	core/tests: initialize emu with slip14 before running fido2 test suite	2020-05-06 14:36:04 +00:00
Andrew Kozlik	3de565c33c	core/sign_tx: In write_tx_header() rename has_segwit parameter to witness_marker and clarify usage.	2020-05-06 13:18:32 +02:00
Andrew Kozlik	846116a666	core/sign_tx: Improve comments.	2020-05-06 13:18:32 +02:00
Andrew Kozlik	7370077d0c	core/sign_tx: Get rid of internal TxOutputBinType messages.	2020-05-06 13:18:32 +02:00
Andrew Kozlik	9f9618944a	core/sign_tx: Explicitly pass script to write_tx_input() instead of setting it in txi.	2020-05-06 13:18:32 +02:00
Andrew Kozlik	04bdf1dc6c	core/sign_tx: Remove unused index parameters.	2020-05-06 13:18:32 +02:00
Andrew Kozlik	c9814e50ba	core/sign_tx: Set decred_script_version to 0 by default for decred coins.	2020-05-06 13:18:32 +02:00
Andrew Kozlik	dccf415e0b	core/sign_tx: Add write_tx_output() to signer class and override it in Decred.	2020-05-06 13:18:32 +02:00
Andrew Kozlik	bdd1d25979	core/sign_tx: Require change-outputs to be for a non-zero amount.	2020-05-06 13:18:32 +02:00
Andrew Kozlik	d5faeb3f51	core/sign_tx: Clarify sign_nonsegwit_input().	2020-05-06 13:18:32 +02:00
matejcik	9005093435	core/sign_tx: improve documentation on MatchCheckers	2020-05-06 13:18:32 +02:00
matejcik	0209768ff2	core/sign_tx: improve type hints	2020-05-06 13:18:32 +02:00
matejcik	ff41e5c304	core/sign_tx: improve signer selection readability	2020-05-06 13:18:32 +02:00
Andrew Kozlik	8b89a30955	core/sign_tx: Remove get_prevouts_hash(), get_sequence_hash(), get_outputs_hash() methods from signer classes, because they are only used internally.	2020-05-06 13:18:32 +02:00
Andrew Kozlik	22933587be	core/sign_tx: Merge bip143 classes into signer classes.	2020-05-06 13:18:32 +02:00
Andrew Kozlik	6ad3baeab2	core/sign_tx: Refactor BIP-143 signing.	2020-05-06 13:18:32 +02:00
Andrew Kozlik	d58cd3987b	core/sign_tx: Minor updates based on code review.	2020-05-06 13:18:32 +02:00
Andrew Kozlik	be39f271b0	core/sign_tx: Rework transaction footer writing.	2020-05-06 13:18:32 +02:00
Andrew Kozlik	b60f267da9	core/sign_tx: Rework transaction header writing.	2020-05-06 13:18:32 +02:00
Andrew Kozlik	c1effcc374	core/sign_tx: Updates based on code review.	2020-05-06 13:18:32 +02:00
Andrew Kozlik	c2a0f83558	core/sign_tx: Move script derivation to scripts module.	2020-05-06 13:18:32 +02:00
Andrew Kozlik	d0b80bddc8	core/tests: Fix unit tests after sign_tx refactor.	2020-05-06 13:18:32 +02:00
Andrew Kozlik	be7e98aa47	core/sign_tx: Move Bitcoin class to bitcoin.py.	2020-05-06 13:18:32 +02:00
Andrew Kozlik	a07e125793	core/sign_tx: Consolidate wallet path and multisig fingerprint checking.	2020-05-06 13:18:32 +02:00
Andrew Kozlik	27e6720f3d	core/sign_tx: cleanup	2020-05-06 13:18:32 +02:00
Andrew Kozlik	987b70f1f5	core/sign_tx: Move header prepending up by one level.	2020-05-06 13:18:32 +02:00
Andrew Kozlik	2ceb091d68	core/sign_tx: Use a preallocated buffer for transaction serialization.	2020-05-06 13:18:32 +02:00
Andrew Kozlik	555259d6a9	core/sign_tx: Remove last_output_bytes in Decred, which is no longer needed.	2020-05-06 13:18:32 +02:00
Andrew Kozlik	f1801764a1	core/sign_tx: Fix segwit/non-segwit input interleaving bug.	2020-05-06 13:18:32 +02:00
Andrew Kozlik	514f2ac649	core/sign_tx: Refactor to use template method.	2020-05-06 13:18:32 +02:00
Andrew Kozlik	95fad83024	core/sign_tx: Derive Zip143 and DecredPrefixHasher from Bip143.	2020-05-06 13:18:32 +02:00
Andrew Kozlik	e9900df18d	core/sign_tx: Move Overwintered class to zcash.	2020-05-06 13:18:32 +02:00
Andrew Kozlik	60dbec95ac	core/sign_tx: Reuse get_prevtx_output_value() in Decred.	2020-05-06 13:18:32 +02:00
Andrew Kozlik	2b74513e49	core: Fix mypy.	2020-05-06 13:18:32 +02:00
Andrew Kozlik	50c08274b9	core/sign_tx: Move overwintered functionality to separate class.	2020-05-06 13:18:32 +02:00
Andrew Kozlik	c190eed7fc	core/sign_tx: Move non-Bitcoin functionality to Bitcoinlike class.	2020-05-06 13:18:32 +02:00
Andrew Kozlik	613c81ea66	core/sign_tx: Refactor wallet_path functions and input_check_multisig_fingerprint.	2020-05-06 13:18:32 +02:00
Andrew Kozlik	0d9984671e	core/sign_tx: Fix typing.	2020-05-06 13:18:32 +02:00
Andrew Kozlik	79c60615de	core: Fix typing.	2020-05-06 13:18:32 +02:00
Andrew Kozlik	ba8b34b2d7	core: Refactor signing.	2020-05-06 13:18:32 +02:00
Pavol Rusnak	066866488b	core: add temporary "src1" folder	2020-05-04 16:00:29 +00:00
matejcik	a623799a11	core: remove f-strings from headertool (python 3.5 compatibility)	2020-05-04 11:29:03 +02:00
Pavol Rusnak	25cc836660	core/extmod: fix build of modtrezorui when TREZOR_MODEL is set to '1'	2020-04-30 15:07:26 +00:00
Tomas Susanka	20d66adddd	core: disable passphrase_always_on_device when turning off passphrase	2020-04-28 14:54:18 +02:00
Tomas Susanka	47f104bceb	core, legacy: bump versions	2020-04-24 17:12:20 +00:00
Pavol Rusnak	4b5a84eab7	core+legacy: update changelogs	2020-04-16 14:20:18 +02:00
Ondřej Vejpustek	c461692f3a	core: implement random delay interrupts	2020-04-16 11:51:28 +02:00
Ondřej Vejpustek	d5bfe6b32f	crypto: add chacha_drbg	2020-04-16 11:51:28 +02:00
matejcik	72cde5a57d	core: disallow parsing options after command (fixes #951)	2020-04-16 11:24:15 +02:00
matejcik	5885978c83	Merge branch 'release/2020-04'	2020-04-15 15:00:23 +02:00
Andrew Kozlik	9e4a8ca785	core/webauthn: Improve error codes for uninitialized device. Return ERR_OPERATION_DENIED only upon user decline or timeout, otherwise it cancels the operation on all connected authenticators.	2020-04-14 12:24:17 +02:00
matejcik	2ccebd3175	core: raise SystemExit when exitting emulator (now that sys.exit is removed)	2020-04-14 10:17:37 +02:00
matejcik	4bddeefea0	core: unify mpconfigports for emulator and board ... Changes in firmware/mpconfigport.h are minimal: * $VFS_FAT is dropped because it is irrelevant without $VFS * $REVERSE_SPECIAL_METHODS is added, to push down on code size * $THREAD is disabled unconditionally unix/mpconfigport.h is reordered and modified to match firmware/mpconfigport.h as much as possible, while selectively enabling some needed features. Notably, $USE_READLINE is enabled unconditionally	2020-04-14 10:17:37 +02:00
matejcik	d0f709b8cc	core: fix and use MAKEMODULEDEFS instead of explicit registration	2020-04-14 10:17:37 +02:00
matejcik	a6976355c3	core: remove readline from built firmware	2020-04-14 10:17:37 +02:00
Dusan Klinec	25b6e9058f	xmr: proto - add fields for protocol optimization	2020-04-13 22:19:56 +02:00
Andrew Kozlik	bc4e8eaa16	core/webauth: Update readme with Ed25519 algorithm and certificates.	2020-04-09 21:05:28 +02:00
Pavol Rusnak	197218338a	Merge pull request #936 from trezor/rework-serialize-deserialize ... crypto: rework serialize/deserialize API	2020-04-09 09:53:23 +02:00
matejcik	eec0615444	core: drop sys.pyi from mocks (fixes #934) ... A change introduced in mypy 0.770 disallows overriding some system modules, including `sys`. We only need the override for `sys.print_exception`, and the simplest solution is to make mypy ignore that particular call.	2020-04-08 11:19:26 +02:00
Andrew Kozlik	c57bc62a05	core/tools: Add attestation certificate generator for FIDO2.	2020-04-06 18:29:05 +02:00
Andrew Kozlik	fca92d7344	core/webauthn: Update attestation certificate to comply with WebAuthn requirements.	2020-04-06 18:29:05 +02:00
Pavol Rusnak	a7806d08d7	core/crypto: remove unused bip32.deserialize function	2020-04-06 18:04:24 +02:00
Pavol Rusnak	1695228d80	core/crypto: remove unused serialize_private function	2020-04-06 15:49:36 +00:00
Pavol Rusnak	f07ff17fad	core/crypto: add missing field to Blake2b constructor	2020-04-06 12:28:36 +00:00
Andrew Kozlik	25a39ea729	core/webauthn: Fix handling of interleaving frames to comply with the U2F HID specification.	2020-04-06 09:53:42 +02:00
jagdeep sidhu	e58c5f63d5	common/defs: update SYS (#928)	2020-04-02 00:22:47 +02:00
Tomas Susanka	0b7a8449f8	core: style	2020-03-30 16:04:05 +00:00
Tomas Susanka	bf20537f41	core: add option to omit cancel button in HoldToConfirm; add it to reset	2020-03-30 16:00:12 +00:00
Pavol Rusnak	336a417233	core/bootloader: distinguish between a vendor change and downgrade with wipe	2020-03-25 15:15:12 +01:00
Andrew Kozlik	8ae0535e69	core/webauthn: Fix attestation statement format to use a list in the x5c field.	2020-03-24 16:18:37 +01:00
Tomas Susanka	aa71c20f2c	core: require hold to confirm	2020-03-24 09:20:10 +00:00
Ondrej Mikle	634ed5aabc	core: commands for flashing via JLink (#911)	2020-03-23 10:40:06 +01:00
Tomas Susanka	025436db47	core/changelog: add FIDO2's Ed25519	2020-03-23 08:00:31 +00:00
Tomas Susanka	f786d75a6f	core: drop obsolete check for ANYONECANSPEND segwit outputs	2020-03-20 14:19:31 +00:00
Tomas Susanka	d0d41c884e	legacy: move script type checks to separate functions and unify with core	2020-03-20 14:19:31 +00:00
matejcik	bd9e15bb8c	core/tests: add unit tests for prevhash writers	2020-03-20 14:19:31 +00:00
matejcik	a9faa4d4ab	core/tests: fix inline variant of assertRaises ... otherwise code like the following would fail: >>> self.assertRaises(AssertionError, ensure, False) because the AssertionError raised internally by `ensure` would be conflated with the AssertionError raised by the tested function	2020-03-20 14:19:31 +00:00
matejcik	da89a17ce5	all: add checks for prev_hash size	2020-03-20 14:19:31 +00:00
matejcik	c15519f707	core/sign_tx: modify get_tx_header to avoid writing unchecked bytes	2020-03-20 14:19:31 +00:00
matejcik	9cab61fbd3	core/sign_tx: remove write_bytes_unchecked where appropriate	2020-03-20 14:19:31 +00:00
matejcik	27f6306e1d	core: introduce safer write_bytes functions	2020-03-20 14:19:30 +00:00
matejcik	9a5f6b025a	core/tezos: factor out writing Michelson instructions	2020-03-20 14:19:30 +00:00
matejcik	694f714719	core/ripple: rename write_bytes to avoid name collision	2020-03-20 14:19:30 +00:00
Tomas Susanka	64584e271c	legacy, core: add and unify validation checks	2020-03-20 14:19:30 +00:00
matejcik	ffdb299c61	all: drop Capricoin support [NO BACKPORT]	2020-03-20 14:19:30 +00:00
matejcik	adea7d6b35	all: make timestamp mandatory on timestamp-enabled coins	2020-03-20 14:19:07 +00:00
matejcik	e2035b4972	all: drop Horizen and BIP-115 support [NO BACKPORT]	2020-03-20 14:19:07 +00:00
matejcik	6f9c6361ea	core: remove negative_fee and cashaddr_prefix from bitcoin-only fw	2020-03-20 14:18:27 +00:00
matejcik	7d5771911c	core: flip condition for force_bip143 ... this should be equivalent because Bitcoin does not have force_bip143 set	2020-03-20 14:18:27 +00:00
matejcik	ed464f3d47	all: ensure expiry, timestamp and extra_data are blocked as appropriate	2020-03-20 14:18:27 +00:00
matejcik	27803ee8c1	all: drop overwintered field from transaction	2020-03-20 14:18:27 +00:00
matejcik	c9fd3f77a5	all: add overwintered field to coin specification	2020-03-20 14:18:27 +00:00
Pavol Rusnak	817b922850	all: add extra_data and timestamp fields to coin specification	2020-03-20 14:18:27 +00:00
matejcik	136307bcae	core: propagate coin info to all sanitize functions	2020-03-20 14:17:44 +00:00
matejcik	303c05aba7	core/sign_tx: check if prev_tx has enough outputs to match prev_index	2020-03-20 14:17:44 +00:00
Andrew Kozlik	a34637c0f2	core/sign_tx: Check multisig fingerprint before signing inputs.	2020-03-20 14:17:44 +00:00
Tomas Susanka	163220e4b7	core/wallet: properly check decred input	2020-03-20 14:17:44 +00:00
Ondřej Vejpustek	6274cfdf8b	core: remove unreachable zcash code	2020-03-20 14:17:44 +00:00
Ondřej Vejpustek	d61181d7e8	core: fix transaction header for mixed segwit inputs	2020-03-20 14:17:44 +00:00
Tomas Susanka	f0a39df75d	core/wallet: check inputs and outputs right after receiving them	2020-03-20 14:17:44 +00:00
Tomas Susanka	0903159d9b	core, legacy: make sure OPRETURN ouput is not marked as change	2020-03-20 14:17:44 +00:00
Tomas Susanka	4af9aa547e	core: forbid unnecessary fields in OPRETURN output	2020-03-20 14:17:44 +00:00
Andrew Kozlik	d800fcbf9f	core/sign_tx: If there is a non-multisig input, then change output cannot be multisig. ... (cherry picked from commit 8eb6ce0899)	2020-03-20 14:17:44 +00:00
Andrew Kozlik	b3cd760df0	core/webauthn: Disable CTAPHID_WINK function.	2020-03-20 15:07:06 +01:00
Andrew Kozlik	e5008eb332	core/webauthn: Remove indistinguishable credentials from the allow list.	2020-03-20 15:07:06 +01:00
Andrew Kozlik	cda9de8dd1	core/webauthn: Add maxCredentialCountInList and maxCredentialIdLength to authenticatorGetInfo response.	2020-03-20 15:07:06 +01:00
Andrew Kozlik	0af0e06d5b	core/webauthn: Truncate names in credential data to at most 100 bytes.	2020-03-20 15:07:06 +01:00
matejcik	ccffefd667	core/boot: do not catch OSError in boot wait	2020-03-20 14:03:28 +01:00
matejcik	f6f041e269	core/sdcard: also catch OSError in the formatting phase	2020-03-20 14:03:28 +01:00
matejcik	3a71a5a05c	core/sdcard: show "Wrong SD card" when unlocking SD protect with unformatted card	2020-03-20 14:03:28 +01:00
matejcik	3789a3372b	core/sdcard: modify exception handling in fatfs ... expose ff.c constants, raise them as arguments to FatFSError introduce NotMounted and NoFilesystem as subclasses of FatFSError with the appropriate error code set	2020-03-20 14:03:28 +01:00
Andrew Kozlik	8ee0026637	core: Allow PIN entry even when SD protect is enabled and the card is not present.	2020-03-19 15:04:33 +01:00
Andrew Kozlik	bfd834d1de	storage: Add storage_ensure_not_wipe_code().	2020-03-19 15:04:33 +01:00
Konnor Klashinsky	70a1f957ed	Fix BackupDevice layout on 18-word seed wallets	2020-03-13 13:41:04 +13:00
Andrew Kozlik	2f905a1157	core/webauthn: Add algorithm and curve to WebAuthnListResidentCredentials response.	2020-03-12 15:45:26 +01:00
Andrew Kozlik	f610787f8d	core/webauthn: Clean up bytes/bytearray typing around uctypes.	2020-03-12 15:45:26 +01:00
Andrew Kozlik	e378820f7f	core/webauthn: Implement support for Ed25519 signatures in FIDO2.	2020-03-12 15:45:26 +01:00
Pavol Rusnak	624b639ba8	Merge pull request #886 from trezor/onvej-sl/monero-optimizations-squashed ... xmr/bp: memory optimizations and improvements, fixed style	2020-03-02 17:54:30 +01:00
Tomas Susanka	f8de140271	core: add cancel to hold to confirm dialogs	2020-03-02 13:58:41 +00:00
Dusan Klinec	2658e253fa	xmr/bp: memory optimizations and improvements ... - different approach to vector manipulation - more on the fly operations. Prepared for fully offloaded operations, BP on Trezor with constant memory. - memory requirements reduced from (4MN + const) to (2MN + const) - more raw methods to avoid unnecessary encoding/decoding - chunking improved, chunk size set as a constant, changed from 64 to 32, missing pieces implemented to cover also BP 16 - proof_v8 support discontinued, old hardfork, not needed anymore - get_exponent register clash fixed (for large vectors) - reduced heap fragmentation by removing some temporary allocations - hashing with len and offset to reduce heap fragmentation by creating a sliced arrays - use to() wherever possible to avoid allocations and return of mutable private object - global functions start with _ prefix, reduce import footprint - use __slots__ in classes to minimize footprint	2020-03-02 12:17:03 +01:00
Tomas Susanka	21676a0662	ore/tezos: better wording in delegation cancel	2020-03-02 08:49:34 +00:00
matejcik	7f91bc571c	core: ensure default task restarts after a passphrase workflow (fixes #883)	2020-02-28 15:55:40 +01:00
Tomas Susanka	5ee6e56f56	Merge pull request #880 from trezor/tsusanka/sign-verify-ui ... Unify sign/verify message dialogs and fix text overflow	2020-02-28 15:47:48 +01:00
matejcik	bd9663af79	common/defs: update token reference, add new tokens to 2.3.0/1.9.0, regenerate coins_details	2020-02-27 19:13:17 +01:00
Tomas Susanka	86b010a18b	Merge pull request #878 from trezor/matejcik/fatfs-corruption ... FatFS API rework	2020-02-27 15:58:38 +01:00
Tomas Susanka	c8b7d3fb56	core/changelog: SD card protection is part of 2.3.0	2020-02-27 13:57:48 +00:00
Tomas Susanka	a63e6fc4ef	core+legacy: update changelogs	2020-02-27 13:21:17 +00:00
Tomas Susanka	a8af9feebe	core: fix text overflow in some dialogs	2020-02-27 12:43:33 +00:00
Tomas Susanka	744c32991f	core: unify sign/verify functions ... The UI records are modified because of two changes: - Added a coin name to the Sign/Verify screen (ETH/Lisk). - Unified to use mono.	2020-02-27 12:43:33 +00:00
Tomas Susanka	b317613d63	Merge pull request #874 from trezor/tsusanka/test ... Use wire errors where applicable	2020-02-27 13:38:30 +01:00
Tomas Susanka	495a59c282	core: use wire errors instead of ValueErrors where applicable	2020-02-27 10:46:01 +00:00
matejcik	18ac4fc9ca	core: update Python facing APIs	2020-02-27 10:56:23 +01:00
matejcik	9ab84d2455	core/tests: thoroughly test modified APIs	2020-02-27 10:56:23 +01:00
matejcik	b24411b900	core/sdcard: unmount instance when powering off sdcard	2020-02-27 10:56:23 +01:00
matejcik	c81be584fb	core/fatfs: ensure functions can only be called on a mounted filesystem ... ff.c has a lazy-mounting feature, where any filesystem call will mount the volume if it can. This messes with predictability of the mounted state, so all (except mount/unmount/mkfs) Python functions will first check if the fs is mounted.	2020-02-27 10:56:23 +01:00
matejcik	fa746e2990	core/fatfs: rework low-level FatFS API ... Instead of having possibly multiple FatFS objects, each with its own `fs` struct, there is one global static fs_instance. This is to match the mode of operation of ff.c, which assumes a global list of mounts, and all functions operate on the global based on path. Methods of FatFS were converted to functions on the fatfs module. fatfs.unmount() does not call ff.c's unmount, but simply invalidates fs_instance. This is basically what ff.c would do, except without messing with ff.c's global list of mounts.	2020-02-26 14:18:41 +01:00
Pavol Rusnak	c896f02eb3	core/boardloader: use SRAM as SD card read buffer ... because DMA can't access the CCMRAM	2020-02-25 17:59:16 +01:00
Andrew Kozlik	2133f7cf29	core: Prevent data loss when writing to USB VCP.	2020-02-25 12:08:07 +01:00
matejcik	b916072389	common: restore PassphraseAck.state	2020-02-24 15:15:09 +01:00
matejcik	d7b9582386	core/sdcard: add ensure_filesystem option (fixes #868) ... It is possible to call `ensure_sdcard` in a way that requires only SD card be inserted, but not necessarily formatted. This is useful for SD-protect and possibly other use-cases where the SD card is read-only, and "not formatted" is identical to "not containing the right files".	2020-02-24 13:28:44 +01:00
matejcik	e9c275c24f	core/sdcard: fix invalid state when filesystem mounting fails	2020-02-24 13:28:44 +01:00
Pavol Rusnak	39ce100608	Merge pull request #864 from trezor/prusnak/bootloader-text-break ... core/bootloader: split long vendor string	2020-02-21 18:39:20 +01:00
Tomas Susanka	6c47bf8230	core: store multiple sessions/caches at the same time	2020-02-21 14:40:42 +01:00
Pavol Rusnak	562671401e	Merge pull request #860 from trezor/prusnak/multisig-show-yours-others ... core: show yours/others in get_address for multisig	2020-02-20 13:49:13 +01:00
matejcik	918603ad5c	core: add unit test for sdcard wrapper	2020-02-20 12:51:48 +01:00
matejcik	7983fd34d6	core: fix unit tests	2020-02-20 12:51:48 +01:00
matejcik	4ed6487a19	core/sdcard: add out-of-bounds checks to emulator	2020-02-20 12:51:48 +01:00
matejcik	ddee77ecb6	core: add SD clearing via debuglink	2020-02-20 12:51:48 +01:00
matejcik	d0b1b171f1	core/sdcard: ensure emulator initializes the SD card when first needed	2020-02-20 12:51:48 +01:00
matejcik	5bd8d9b5bb	core/sdcard: make allocating new SD card for emulator fast	2020-02-20 12:51:48 +01:00
matejcik	1e9352b9e0	core: add SD format dialog, generalize sdcard usage	2020-02-20 12:51:48 +01:00
matejcik	5bac85f260	core: use filesystem wrapper instead of the ensure_filesystem decorator	2020-02-20 12:51:48 +01:00
matejcik	d08942be4a	core: introduce filesystem wrapper	2020-02-20 12:51:48 +01:00
matejcik	b2084a19be	core/trezorio: move sdcard functions to a submodule	2020-02-20 12:51:48 +01:00
matejcik	30529d218d	core/sdcard: change SDCard methods to plain functions	2020-02-20 12:51:48 +01:00
matejcik	06b89c57c5	core/sdcard: return proper disk status flags to fatfs	2020-02-20 12:51:48 +01:00
Tomas Susanka	ff1bb67abc	common: return the PasshraseType button request	2020-02-20 08:04:35 +00:00
Pavol Rusnak	dc66bbe3d5	core/bootloader: split long vendor string	2020-02-19 21:40:28 +00:00
Pavol Rusnak	74802a107e	core/modtrezorui: add display_text_split	2020-02-19 21:40:28 +00:00
Pavol Rusnak	c4babd3c0b	Merge pull request #846 from trezor/bootloader-read-retry ... core/bootloader: make read more benevolent and read error more helpful	2020-02-19 19:45:34 +01:00
Pavol Rusnak	581e46ff87	Merge pull request #845 from trezor/prusnak/webusb-popup ... Don't show WebUSB popup in firmware, in bootloader only if no firmware present	2020-02-19 18:18:01 +01:00
Pavol Rusnak	7944c1a837	core/monero: add confirmation dialog for unlock_time	2020-02-19 14:31:45 +00:00
Pavol Rusnak	a808cc9190	core/apps: await require_confirm should be called without return	2020-02-19 14:31:45 +00:00
Pavol Rusnak	b9486c0b33	core: show yours/others in get_address for multisig	2020-02-18 22:39:55 +00:00
Tomas Susanka	577daf09fe	tests: introduce --ui-check-missing to test/remove missing tests	2020-02-18 09:33:21 +01:00
matejcik	1d41141a1f	core/emulator: properly ignore inotify problems (fixes #854)	2020-02-17 12:33:38 +01:00
Pavol Rusnak	2958a97c87	Merge pull request #830 from trezor/tsusanka/fw-upgrade ... FW Update: Request a small chunk first to make the UI smoother	2020-02-15 13:08:33 +01:00
matejcik	e61b7d28e9	all: do not send state in PassphraseAck (not needed for compatibility)	2020-02-13 15:44:50 +01:00
Pavol Rusnak	63dfd6c6ab	core/bootloader: make read more benevolent and read error more helpful	2020-02-12 22:05:29 +01:00
Pavol Rusnak	07cd73ce57	core: show webusb popup only in bootloader and only if firmware is not installed	2020-02-12 20:47:05 +00:00
matejcik	4c8c96272c	emu: fix flag options with defaults ... Click REALLY INSISTS you provide on/off switches for your options. You can use is_flag, but then the presence of the option changes based on the default value. Which makes sense, really: @option("-f", "foobar", is_flag=True, default=False) you would expect `./cli -f` to have `foobar is True` whereas with @option("-f", "foobar", is_flag=True, default=True) you would expect `./cli -f` to have `foobar is False`, otherwise it's a no-op this becomes fun with `default=os.environ.get("SOMETHING")`, because then the effect of the option CHANGES with a value of environment variable! there's two ways around this: a) don't use defaults, update the flag explicitly, like: foobar = foobar or os.environ.get("FOOBAR") == "1" b) forget about is_flag and specify an on/off switch, where the default value works as intended since the latter is also technically speaking more correct, i'm doing it	2020-02-12 13:32:05 +01:00
matejcik	271da3fa39	python: add detailed logging to emulator runner	2020-02-12 13:31:58 +01:00
matejcik	c14429c445	all: shut down emulator on error_shutdown	2020-02-12 13:31:31 +01:00
matejcik	d3b88a37be	core: do not catch SystemExit in handle_session (#826)	2020-02-12 10:36:42 +01:00
Tomas Susanka	f947fe97cc	core: fix style	2020-02-11 16:41:43 +01:00
Tomas Susanka	0a13f7a441	core: properly limit passphrase to 50 bytes	2020-02-11 15:39:08 +00:00
Tomas Susanka	2c0504ad1c	Merge pull request #803 from trezor/passphrase ... Passphrase Redesign	2020-02-11 16:01:59 +01:00
matejcik	05a1d6f771	core/debug: add "show arbitrary screen" capability, for easier prototyping	2020-02-11 11:53:34 +01:00
matejcik	c01d04f26e	common/protob: drop a default field declaration ... which triggers nanopb bug https://github.com/nanopb/nanopb/issues/487	2020-02-11 11:53:34 +01:00
matejcik	741c0c8888	core: improve stability of Monero test runner	2020-02-11 11:16:28 +01:00
matejcik	4c9689d7a7	common: return deprecated fields to protobuf, to allow cross-version compatible code	2020-02-10 12:35:28 +01:00
Pavol Rusnak	e58225fe02	core/boot: don't call mkfs in emulator	2020-02-07 15:30:21 +00:00
Pavol Rusnak	fdfa64ac2a	core/ui: fix HoldToConfirm redraw	2020-02-07 15:21:16 +00:00
Pavol Rusnak	32f8f1cb61	core/embed: update fatfs to 0.14; use upstream version	2020-02-07 15:21:16 +00:00
Tomas Susanka	56dc952495	common: fix PassphraseAck.on_device id	2020-02-07 14:19:01 +00:00
Pavol Rusnak	73ed2f3450	legacy: small nitpicks related to the new passphrase handling	2020-02-07 11:41:03 +00:00
Tomas Susanka	15ed5cd19e	core: do not clear cache on ClearSession	2020-02-07 11:41:03 +00:00
Tomas Susanka	fd0dc8ed66	core/passphrase: merge 'get from user' functions	2020-02-07 11:41:03 +00:00
Tomas Susanka	7d7ffe3b67	cardano: derive the root and then cache	2020-02-07 11:41:02 +00:00
matejcik	3fa99c0c6a	core/tests: add storage.cache tests	2020-02-07 11:41:02 +00:00
matejcik	938f347514	core: use DUMMY_CONTEXT constant instead of own instance	2020-02-07 11:41:02 +00:00
matejcik	d4171aaedc	core/tests: extract common await_result() method	2020-02-07 11:41:02 +00:00
matejcik	1f50a13edf	core: use cache for Monero live refresh confirmation	2020-02-07 11:41:02 +00:00
Tomas Susanka	b96d7cafbb	core: rework cache and fix cardano caching	2020-02-07 11:41:01 +00:00
Tomas Susanka	aa6988a556	core/ui: introduce draw_simple	2020-02-07 11:41:01 +00:00
Tomas Susanka	d5763d9cab	all: implement code review comments	2020-02-07 11:41:01 +00:00
Tomas Susanka	f3553f63f1	common: remove PassphraseRequest.on_device completely	2020-02-07 11:41:00 +00:00
Tomas Susanka	c65b57affb	core, legacy: remove passphrase_cached	2020-02-07 11:41:00 +00:00
Tomas Susanka	1343583d21	core: bump version to 2.3.0	2020-02-07 11:41:00 +00:00
Tomas Susanka	8fa0d8f098	core/passphrase: show dialog to enter the passphrase on host	2020-02-07 11:41:00 +00:00