913 Commits (6be367bf8b591d48e1e74d709c34319cff9df1d1)

Author	SHA1	Message	Date
Martin Milata	f51fac3410	common/defs: update maxfee_kb to 10USD/tx ... Except bitcoin.	4 years ago
Pavol Rusnak	41f5237967	common/defs: enable extra_data for FLO ... (cherry picked from commit 534695313c)	4 years ago
Pavol Rusnak	534695313c	common/defs: enable extra_data for FLO	4 years ago
Andrew Kozlik	f2d669ecdc	core/bitcoin: Use dynamic dispatch for confirmation dialogs in sign_tx.	4 years ago
Andrew Kozlik	02da5b7593	core/bitcoin: Show warning if nLockTime is set but ineffective due to all nSequence values being 0xffffffff.	4 years ago
Pavol Rusnak	cdf0f68bb0	core: show passphrase on device	4 years ago
Martin Milata	1b982659c4	core: fix boot loop after uploading invalid homescreen (#1205)	4 years ago
Pavol Rusnak	0620911e46	core: allow spending coins from Bitcoin paths if the coin ... ... has implemented strong replay protection via SIGHASH_FORKID	4 years ago
Alexis Hernandez	96c38315df	common/defs: enable extra_data for XSN (#1208)	4 years ago
Andrew Kozlik	dd540a2ccd	core/ui: Initialize Qr class properly.	4 years ago
gabrielkerekes	431a25b119	Add Cardano README.md	4 years ago
Pavol Rusnak	c3ce9de3ea	core: regenerate coins+tokens	4 years ago
Martin Milata	3f21e8f400	core: display coin name when signing message ... Also when verifying message.	4 years ago
Martin Milata	927ee0812b	core: add hard limit for transaction fees ... The hard limit is set to 10*fee_warning_threshold. The limit is not enforced when `safety_checks` is set to "Prompt".	4 years ago
Tomas Susanka	c9dc38c9f3	core: allow 49/x not 49/x' for Casa	4 years ago
Pavol Rusnak	d1973b7486	pipenv: update Pipfile	4 years ago
Pavol Rusnak	4e11735d22	core/modtrezorui: remove prefill from text functions ... use display.bar where needed to prefill the areas	4 years ago
matejcik	51ea8ccecd	common: update token support	4 years ago
Pavol Rusnak	65805c9145	core: fix non-determinism in resources.py.mako	4 years ago
matejcik	cea634158a	core: make sure Homescreen is properly initialized (fixes #1095)	4 years ago
Tomas Susanka	16827c3135	core: make templates	4 years ago
gabrielkerekes	afa26e7560	Use correct paths for Cardano Byron witnesses	4 years ago
Andrew Kozlik	292d909235	core/base: Implement CancelAuthorization message.	4 years ago
Andrew Kozlik	8bcb3d8fb6	core/storage: Add delete() method to storage.cache.	4 years ago
Andrew Kozlik	5c1f197602	common/protob: Add CancelAuthorization message.	4 years ago
matejcik	cd86f9f477	core/bitcoin: make change check more robust against short paths	4 years ago
Andrew Kozlik	07d9b780a6	core/bitcoin: Change CoinJoin round ID length to 32 bytes and remove rate limiting.	4 years ago
Andrew Kozlik	377bff68f4	core/bitcoin: Implement DoPreauthorized message.	4 years ago
Andrew Kozlik	2c30dd62fc	common: Add DoPreauthorized message.	4 years ago
Andrew Kozlik	b9cfecb8b8	core/bitcoin: Support preauthorization in SignTx message for CoinJoin.	4 years ago
Andrew Kozlik	97fc9b74ab	core/bitcoin: Implement CoinJoinApprover.	4 years ago
Andrew Kozlik	d6ee542deb	core/bitcoin: Move transaction confirmation logic from Bitcoin to BasicApprover class.	4 years ago
Andrew Kozlik	00258f2d4d	core/bitcoin: Support preauthorization in GetOwnershipProof message.	4 years ago
Andrew Kozlik	c772de9d3c	core/bitcoin: Support preauthorization in @with_keychain decorator.	4 years ago
Andrew Kozlik	208283e13e	core/bitcoin: Implement AuthorizeCoinJoin message.	4 years ago
Andrew Kozlik	48a331aa1d	core/bitcoin: Add CoinJoinAuthorization class.	4 years ago
Andrew Kozlik	dc32a17335	core/bitcoin: Move BIP32_WALLET_DEPTH to common.	4 years ago
Andrew Kozlik	bbab13f6e7	common/protob: Add AuthorizeCoinJoin message.	4 years ago
gabrielkerekes	683d7420ff	Fix Cardano Shelley public key validation ... In Shelley Cardano started using the purpose 1852'. Unfortunately, we completely missed that the public key path validation fuction checks for purpose 44' explicitly, which means that the user is shown a warning when deriving public key with the purpose 1852'. Which is always when "logging in" to a wallet. This commit should fix that. I've also updated type hinting in get_public_key.	4 years ago
Gabriel Kerekeš	c0eba979c6	Fix bare 'except' style error - catch Exception instead ... Co-authored-by: Pavol Rusnak <pavol@rusnak.io>	4 years ago
gabrielkerekes	7a1e773b49	Validate transaction metadata	4 years ago
gabrielkerekes	f2ee450410	Include metadata in transaction signing	4 years ago
gabrielkerekes	0438f318b4	Bring back cbor.Raw - to be used for metadata	4 years ago
gabrielkerekes	1ed8b56b7c	Include Byron witness once for each input path	4 years ago
gabrielkerekes	7bf5cab840	Update sign_tx ... Add certificates, withdrawals and metadata hash	4 years ago
gabrielkerekes	a25444efd1	Move to_account_path() to utils	4 years ago
gabrielkerekes	e92baf5b02	Update protobuf	4 years ago
Andrew Kozlik	7d07161efe	common/fido: Unify application labeling between U2F and FIDO2.	4 years ago
Martin Milata	d955e3f1e5	core: rename class Overwintered to Zcashlike	4 years ago
Martin Milata	10387e1869	core: drop zcash v3 tx signing support	4 years ago
gabrielkerekes	6d02aa23d9	Raise wire.DataError when deriving invalid address type	4 years ago
gabrielkerekes	b5f3511c1c	Add support for script addresses in tx outputs	4 years ago
gabrielkerekes	f1b6056edb	Fix staking key hash message ... When deriving an address with a foreign staking key Trezor would crash due to forgotten `decode()` on hexlified staking key hash which was to be displayed. This wasn't discovered while testing because it weirdly would pass with a `aaff00` string, but not with longer ones.	4 years ago
matejcik	c008600d08	core/debug: fail if wait_layout is sent without watch_layout	4 years ago
Martin Milata	3021233eaf	core: remove unimports from bitcoin sign_tx layouts	4 years ago
Pavol Rusnak	cec87bba50	core: remove mono bold font variant (not used anywhere)	4 years ago
matejcik	4eb5b927c0	core/cardano: simplify keychain implementation	4 years ago
Gabriel Kerekeš	d2c1624602	Cardano shelley update 2/3 (#1112)	4 years ago
gabrielkerekes	e1615e60ec	Update Cardano to support Shelley era 1/3 ... Update protobuf - Previous transactions don't need to be sent anymore, because fee is included in the transaction now. Thus transactions_count can be removed from CardanoSignTx message and the CardanoTxAck and CardanoTxRequest messages can be removed altogether. - CardanoTxInputType.type is unused so remove it Add NULL (None type) serialisation to CBOR - Transaction metada must either have a valid structure or CBOR NULL must be used (if metadata is empty) - it can't be simply left out. Add protocol_magics file - Just to have a nicer way of representing protocol magics Update transaction signing - Previous transactions no longer need to be requested - Output building is simplified, since fee doesn't need to be calculated - Remove transaction class since it is no longer needed (only functions remained) - Reorder functions so it reads top to bottom Add protocol magic to byron address on testnet - This has always been a part of the spec, but it hasn't been implemented before, because it wasn't really needed. Update trezorlib Update tests - Transaction messages are no longer required - Expected values are different since tx format changed - Common values in test cases have been extracted Remove unused file - Progress was used when receiving previous transactions Add CRC check to output address validation	4 years ago
matejcik	fdcb64ac24	all: rename protobuf `unsafe_prompts` to `safety_checks`	4 years ago
matejcik	19ad1dae8b	core/bitcoin: allow compatibility namespaces for Casa/Greenaddress	4 years ago
matejcik	b741560997	core/bitcoin: drop unused validate_path_for_bitcoin_public_key	4 years ago
matejcik	407375b0c4	core/bitcoin: move BITCOIN_NAMES to common	4 years ago
matejcik	fd8cb0e061	core/keychain: differentiate error message for ed25519 derivation	4 years ago
matejcik	0438f83a94	core: use `public` as named argument instead of comment	4 years ago
matejcik	57b08c98ed	core: raise error on setting passphrase-on-device without passphrase	4 years ago
matejcik	c85d768b81	core: update references to keychain everywhere	4 years ago
matejcik	ff4ec2185e	core: refactor keychain to only support one curve at a time ... also make a cleaner distinction between keychain, seed, path This enables using `unsafe_prompts`, because with the original code, if there was no namespace match, we wouldn't know which curve to use. For ease of implementation, we use a LRU cache for derived keys, instead of the original design "one cache entry per namespace". SLIP21 is now treated completely separately, via `slip21_namespaces` and `derive_slip21` method. If more slip21-like things come in the future, we can instead hang them on the keychain: put a per-curve Keychain object accessible by `keychain[curve_name].derive()`, and the majority usecase will just pass around `keychain[curve_name]` instead of having to specify the curve in every `derive()` call. Or alternately we'll just specify the curve in every `derive()` call, whichever seems more appropriate.	4 years ago
matejcik	8e44132d3c	core: replace load_settings with individual setters	4 years ago
matejcik	1109250dcf	core: add option to allow unsafe prompts	4 years ago
Martin Milata	03f2dab6bc	core: reduce gc.collect calls during bitcon sign_tx	4 years ago
matejcik	c3a61998cb	core: generate resdata by Mako, use if/elif trick to save RAM	4 years ago
matejcik	5e7fd3aea6	core: use utils.BufferReader instead of apps.common.BytearrayReader	4 years ago
matejcik	1ff4a0d239	core: separate BufferIO into Reader (read-only) and Writer ... also integrates BytearrayReader API into BufferReader	4 years ago
matejcik	3514a31bc9	core: make USB codec resilient to OOM conditions	4 years ago
matejcik	31e2170766	core: make protobuf buffer smaller, dynamically allocate bigger if necessary	4 years ago
matejcik	a000ea5ec8	core/monero: update Monero app to use synchronous protobuf	4 years ago
matejcik	01d695283f	core: make protobuf buffer bigger	4 years ago
matejcik	0c3bc53aee	core: clean up types for field caching, fix count_message	4 years ago
matejcik	d568afa80d	core: improve protobuf field caching	4 years ago
matejcik	85d74ece76	core: implement synchronous v1 codec	4 years ago
Martin Milata	fd117a0c9f	core: raise error on auto-lock value out of range	4 years ago
matejcik	051763575d	core: touch idle timer in keyboards (fixes #1099)	4 years ago
matejcik	2c4ecff0a4	core: fix synthetic events breaking io.poll delay calculation	4 years ago
Andrew Kozlik	eb28998f98	core/bitcoin: Support multiple change-outputs.	4 years ago
Andrew Kozlik	37f4dcc7e5	core/bitcoin: Rename witness_p2wsh() to witness_multisig().	4 years ago
Andrew Kozlik	9cd600f79e	core/bitcoin: Add special confirmation screen for transactions with external inputs.	4 years ago
Andrew Kozlik	64d9350de2	core/bitcoin: Implement GetOwnershipId message.	4 years ago
Andrew Kozlik	533de50588	common/protob: Add GetOwnershipId message.	4 years ago
Andrew Kozlik	712ec68c1b	core/bitcoin: Add support for external inputs with proof of non-ownership.	4 years ago
Andrew Kozlik	956ea9a94f	common: Add ownership_proof field to TxInputType.	4 years ago
Andrew Kozlik	d4317d1536	core/bitcoin: Implement generation and verification of SLIP-0019 proofs of ownership.	4 years ago
Andrew Kozlik	d52de28704	core/bitcoin: Implement BIP-322 SignatureProof container.	4 years ago
Andrew Kozlik	c723c78529	common/protob: Add GetOwnershipProof message.	4 years ago
Andrew Kozlik	d48a372ca7	core/sign_tx: Implement support for signed external inputs.	4 years ago
Andrew Kozlik	78f14d286e	core/sign_tx: Factor out get_legacy_tx_digest() from sign_nonsegwit_input().	4 years ago
Andrew Kozlik	61e2d4d5e5	core/bitcoin: Implement signature verifier.	4 years ago
Andrew Kozlik	5378e12ba2	core/bitcoin: Clarify hash_type vs. sighash_type terminology.	4 years ago
Andrew Kozlik	d1e043f417	core/bitcoin: Implement parsing of scripts and witnesses for signature verification.	4 years ago
Andrew Kozlik	173bb7ed13	core/bitcoin: Replace TxInputType parameter in input_derive_script.	4 years ago
Andrew Kozlik	a901573ea2	core/bitcoin: Move script types from helpers to common.	4 years ago
Andrew Kozlik	3b6c1e5e6b	core/crypto: Add functions for verifying DER encoded signatures.	4 years ago
Andrew Kozlik	9459c5a5c2	core/common: Add BytearrayReader and basic reader functions.	4 years ago
Andrew Kozlik	99f01cd316	core/sign_tx: Check script_pubkeys of inputs.	4 years ago
Andrew Kozlik	cc655575c8	common: Add witness field to TxInputType.	4 years ago
Andrew Kozlik	872768928b	core/crypto: Fix endianity in DER length encoding.	4 years ago
Andrew Kozlik	e7f230d66e	core/sign_tx: Use varint length encoding for witness stack items.	4 years ago
Tomas Susanka	0f9a2459d3	core: make QR code smaller for Monero	4 years ago
Tomas Susanka	ca3dd2bfb9	common: skip deprecated fields during generation; deprecate overwintered field in Zcash	4 years ago
matejcik	e6e3043096	all: implement support for pre-overwinter prevtx (fixes #1030)	4 years ago
Andrew Kozlik	f382f77c89	core/ui: Fix repaint bug in QR code rendering #1067.	4 years ago
Tomas Susanka	e534ae3ad7	legacy, core: rename Features.pin_cached to unlocked and unify	4 years ago
Tomas Susanka	a6acefbdf5	core: wipe before reset and recovery; introduce 'intialized' field	4 years ago
Andrey	1eeaa1e5cf	Enable extra_data for Zcoin. Changed coininfo.py	4 years ago
Tomas Susanka	b67be7dd9e	core: forbid all settings if not initialized	4 years ago
Tomas Susanka	981d079d7f	core/signverify: add failsafe for an empty message header	4 years ago
Tomas Susanka	56fe5adcfc	Merge branch 'release/2020-06'	4 years ago
Pavol Rusnak	5262ef84cf	common/defs/fido: add aws and tutanota	4 years ago
Andrew Kozlik	9c61257e8e	core: Use the Lock icon in the PIN entry dialog only when the device is actually locked.	4 years ago
matejcik	7579ac5274	core: fix rendering issues in homescreens	4 years ago
matejcik	9df7c84c56	core/ui: lower lockscreen brightness	4 years ago
matejcik	8fa7684a9c	core: set a scheduler-safe maximum for autolock	4 years ago
matejcik	872e0fb0e0	core: lower scheduler resolution to milliseconds ... This avoids problems with large timeouts causing the scheduler queue to think the time counter has overflown, and ordering the autolock task before immediate tasks. The maximum reasonable time difference is 0x20000000, which in microseconds is ~8 minutes, but in milliseconds a more reasonable ~6 days.	4 years ago
matejcik	847691798b	core: simplify homescreen and lockscreen implementations	4 years ago
matejcik	4bc865794f	core: only unlock storage if it is locked (solves determinism issue in tests)	4 years ago
matejcik	ffa7790ed5	core: start USB after booting apps ... This prevents a race condition where sometimes an Initialize message could arrive before the homescreen was fully booted -- and Recovery homescreen would cancel it as part of its bootup sequence.	4 years ago
matejcik	70f67883c5	core: fix artifacts in click-based UI tests	4 years ago
matejcik	a9d8fd3992	core: debuglink interface avoids workflow management ... This will have unintended consequences if you call a wirelink function on the debulink interface. TT allows this ... and will behave badly.	4 years ago
matejcik	bc9247e18d	core: add Cancel to a list of allowed messages while locked	4 years ago
matejcik	f32c2f9e23	core: replace workflow.kill_default with workflow.close_others	4 years ago
matejcik	01832d5ae9	core: call close_others() in place of ButtonRequest ... this makes sense, really: close_others() requests UI exclusivity, and that is something that generally happens at the same places we emit a ButtonRequest	4 years ago
matejcik	6f53ca0ac6	core: rework wait_layout() ... The original wait_layout was unreliable, because there are no guarantees re order of arrival of the respective events. Still, TT's event handling is basically deterministic, so as long as the host sent its messages close enough to each other, the order worked out. This is no longer the case with the introduction of loop.spawn: TT's behavior is still deterministic, but now ButtonAck is processed *before* the corresponding wait_layout, so the waiting side waits forever. In the new process, the host must first register to receive layout events, and then receives all of them (so the number of calls to wait_layout must match the number of layout changes). DebugLinkWatchLayout message must be version-gated, because of an unfortunate collection of bugs in previous versions wrt unknown message handling; and this interests us because upgrade-tests are using wait_layout feature.	4 years ago
matejcik	5d823ff5ea	core: use ButtonRequestType.PinEntry for PIN entry	4 years ago
matejcik	bbfce4e303	common: introduce ButtonRequestType.PinEntry	4 years ago
matejcik	3dbd9c9eca	core/loop: prevent finalizers from doing things when task is closed externally	4 years ago
matejcik	42e7c43c7c	core: make sure that auto-lock shuts down running workflows	4 years ago
matejcik	2d0206c043	core: replace workflow.on_start/on_close with workflow.spawn	4 years ago
matejcik	02565f3bfb	core/loop: introduce spawn syscall	4 years ago
matejcik	a4f47ddd21	core/lockscreen: ignore exception when user taps "unlock" and then cancels	4 years ago
matejcik	7ff1251ee1	core: dim lockscreen (fixes #974)	4 years ago
matejcik	4035aad51b	core: implement auto-lock after a configurable timeout (fixes #75)	4 years ago
matejcik	67b723e4ca	core: add a global idle timer	4 years ago
Andrew Kozlik	5469acfabf	core/webauthn: Cache user verification for 3 minutes.	4 years ago
Andrew Kozlik	b867ac1d01	core/webauthn: Implement FIDO2 unlocking from softlock.	4 years ago
Andrew Kozlik	0f81886c9f	core/webauthn: Allow confirm_dialog() to return a new state as an alternative to the user response.	4 years ago
Andrew Kozlik	c8ae5c157e	core/webauthn: Implement U2F unlocking from softlock.	4 years ago
matejcik	06aed7135a	core: do not prompt for PIN just to lock the device again	4 years ago
matejcik	246998910a	core: refactor usage of input_signals ... this prevents a certain class of UI test failure. It also localizes the use of debuglink signals into the layout classes instead of call sites, which is a design we were already using for confirm_signals	4 years ago
matejcik	afeeafd5cd	core: hide some fields when softlocked	4 years ago
matejcik	b9bd9ea3d0	core: only softlock when PIN is set	4 years ago