476 Commits (892f3e348dacb6c7b9880bc697234a78aaf6d80a)

Author	SHA1	Message	Date
Jan Pochyla	39263144b7	chore(core): Various little improvements in Rust UI	2 years ago
Jan Pochyla	998210d569	feat(core): Add Instant and Duration types	2 years ago
Pavol Rusnak	37bd121394	chore(core/embed): check for negative values in trezor_get_uint ... [no changelog]	2 years ago
Andrew Kozlik	49ae8848db	fix(core): Fix memory leaks in emulator. ... [no changelog]	2 years ago
Andrew Kozlik	39b64b8569	fix(core): Fix stack-use-after-scope in display.c. ... [no changelog]	2 years ago
Pavol Rusnak	4a71d15b1d	chore(core/embed): refactor trezor_obj_get_uint64 into trezorobj.h ... [no changelog]	2 years ago
matejcik	45787307ca	style(core): support AnyStr in all hash function arguments	2 years ago
grdddj	9fc5bb546b	style(core): full pyright-based type-checking ... Changes many fields to required -- as far as we were able to figure out, signing would fail if these fields aren't provided anyway, so this should not pose a compatibility problem. Co-authored-by: matejcik <ja@matejcik.cz>	2 years ago
Pavol Rusnak	b0e0280465	chore: drop obsolete fw_vendor_keys field from Features ... [no changelog]	2 years ago
Pavol Rusnak	35d40cc164	fix(core): change logic of vendor header comparison ... Previously we checked whether the current vendor header and the new vendor header are the same by comparing the embedded keyset. What originally looked like a good idea is not that good, because this disallows us from ever changing the vendor header signing keys without causing erasure of the storage during the version update. This commit fixes that by changing the logic to comparing just the vendor string. Change of function names is purely cosmetic: * vendor_keys_hash -> vendor_header_hash * check_vendor_keys_lock -> check_vendor_header_lock	2 years ago
Pavol Rusnak	56f0e2c5de	fix(core): add missing include ... we were using `FILE` and `fprintf` without including the stdio header	3 years ago
Pavol Rusnak	30a77a76bc	chore(legacy): rename MEMORY_PROTECT flag to PRODUCTION to match core naming (#2003)	3 years ago
Martin Milata	1734957685	build(core): update rust edition to 2021 ... [no changelog]	3 years ago
Martin Milata	38c526719c	chore(core): bump version to 2.4.4 ... [skip_ci]	3 years ago
Martin Milata	7cc9f13605	refactor(core/rust): allow model_t1 and model_tt at once ... [no changelog]	3 years ago
Martin Milata	afd7cb3b01	feat(core/rust): add example layout for T1 ... [no changelog]	3 years ago
Martin Milata	4d60c10330	feat(core/rust): add support for T1 UI ... [no changelog]	3 years ago
Martin Milata	3c49ef2f62	feat(core/rust): exposing vararg functions to uPy ... [no changelog]	3 years ago
Ondrej Mikle	219e08d81e	build(core): keep bootloader image even for non-production builds ... [no changelog]	3 years ago
Martin Milata	aa3784f726	build(core): place secp256k1-zkp in FLASH2 to make space for bootloader ... [no changelog]	3 years ago
Martin Milata	d656f88572	style(all): reformat with clang-format 13.0	3 years ago
Ondřej Vejpustek	ad38d8e324	refactor(crypto,core): make zkp_context_init() return status	3 years ago
Ondřej Vejpustek	f918cf9a27	fix(core): fix typos in modtrezorcrypto-bip340.h	3 years ago
Andrew Kozlik	aaceb5bcc6	chore(core): Remove USE_SECP256K1_ZKP_BIP340 build option.	3 years ago
Andrew Kozlik	ae41f7dec8	fix(core): Fix bip340 module build.	3 years ago
Andrew Kozlik	59c0f4383d	feat(core): Add key tweaking functions to trezorcrypto.bip340.	3 years ago
matejcik	f6f52445bd	feat(core/cardano): support Icarus, Icarus-Trezor, and Ledger derivations	3 years ago
matejcik	387466e073	refactor(core): separate Cardano cryptography into its own module	3 years ago
Pavol Rusnak	a3b83685ef	fix(core): fix emulator build on Apple Silicon ... [no changelog]	3 years ago
Andrew Kozlik	eb90efd914	chore(crypto,core,legacy): Add return code to hdnode_fill_public_key(). ... [no changelog]	3 years ago
Andrew Kozlik	34621a6b6d	fix(crypto,core,legacy): Check private key validity when deriving public key. ... [no changelog]	3 years ago
matejcik	1d72085b5c	feat(core): implement conversion from timestamp to datetime	3 years ago
Ondřej Vejpustek	a924bd4dc6	build(core): do not link gen_context.o to trezor_lib	3 years ago
Ondřej Vejpustek	29ce860d46	refactor(core,crypto): rename schnorr to BIP340	3 years ago
Ondřej Vejpustek	15bb085509	refactor(core,crypto): make public key derivation functions return ... status	3 years ago
Ondřej Vejpustek	172f399b29	style(core): fix style	3 years ago
Ondřej Vejpustek	7ac0bdd215	feat(core): make core use Schnorr signatures	3 years ago
Ondřej Vejpustek	26463eb3ce	feat(core): make core use ecdsa from secp256k1_zkp wherever possible	3 years ago
Pavol Rusnak	9e0cfa6783	fix(core): we don't need separate linker script for zkp	3 years ago
matejcik	32be2c09b9	feat(core): enable f-strings for micropython ... [no changelog]	3 years ago
Jan Pochyla	901580817d	chore(core/rust): fixes and formatting ... [no changelog]	3 years ago
Jan Pochyla	5eefcffc7c	chore(core): prepare for fuzzing targets ... First, we change the Protobuf definition includes to use an exact path relative to our crate's directory, instead of the OUT_DIR. This fixes build when a combination of stable and nightly toolchains is used (nightly is needed for the fuzzing targets). Another change is a slight fix in the panic handler conditional compilation. Fuzzing is using the crate with `features = ["test"]`, but doesn't turn on the `test` cfg. [no changelog]	3 years ago
Jan Pochyla	2703d714c2	feat(core): add Rust UI components, layouts, text rendering ... [no changelog]	3 years ago
Pavol Rusnak	b03b688f2d	fix(core): avoid accidental build with broken stack protector (boardloader)	3 years ago
Ondrej Mikle	a85d2483ff	chore(legacy & core): changelogs added	3 years ago
Ondrej Mikle	0b077fea8a	fix(core & legacy): explicit compiler versions	3 years ago
Ondrej Mikle	e982181148	style(core & legacy): buggy compiler checks	3 years ago
Ondrej Mikle	6ea4b7b211	fix(core & legacy): better styled compiler checks	3 years ago
Ondrej Mikle	6b849b1d4d	fix(core & legacy): avoid accidental build with broken stack protector	3 years ago
Martin Milata	81e66cb024	style(core/rust): enable clippy lints ... [no changelog]	3 years ago
Martin Milata	bd005e33df	refactor(core): decouple T1 button handling from touch ... [no changelog]	3 years ago
Jan Pochyla	2c8dec93a6	feat(core): Split unix main, link core obj into Rust test target	3 years ago
matejcik	7a17124b43	refactor(core/rust): do not rely too much on new_exception helpers	3 years ago
matejcik	5e452dc57c	refactor(core/rust): propagate unsafety of raise_exception	3 years ago
matejcik	806beb77d2	feat(core/rust): improve catch_exception, make use of Rust 1.55	3 years ago
matejcik	795ed2d339	fix(core/rust): fix "unnecessary unsafe" warning ... [no changelog]	3 years ago
matejcik	31de21718f	feat(core/rust): introduce Obj.is_null() ... [no changelog]	3 years ago
matejcik	b666895303	feat(core/rust): catch, handle and propagate uPy exceptions	3 years ago
matejcik	8abcb6f8cc	chore(core/rust): allow unused macros ... [no changelog]	3 years ago
Jan Pochyla	7c65f0357a	feat(core/rust): Implement exception catching in Rust ... chore(core): Add test for Rust exc catching chore(core): Document exception catching in Rust [no changelog]	3 years ago
Martin Milata	aace875fef	chore(vendor): bump micropython to 1.17 ... Relevant micropython commits: d1bfb271d7686708fe8711a177629c8bf6e7f6a6 lib/uzlib: Move uzlib code from extmod to lib. 4d546713ec8858cbf908de45de11cbfc46a20971 shared: Introduce new top-level dir and move 1st party lib code there. ca920f72184c50f61002aa9d5cd01555b1e28b7b py/mpstate: Make exceptions thread-local.	3 years ago
Martin Milata	b062b95348	chore(vendor): bump micropython to 1.15 ... Relevant micropython commits: ad4656b861f94277bed9647ca176e662ce5119e3 all: Rename BYTES_PER_WORD to MP_BYTES_PER_OBJ_WORD. 9fef1c0bde2f9642d383bd56aa112447384a84ba py: Rename remaining object types to be of the form mp_type_xxx. 5fdf351178df9a18df624ae0f5947d8a5a6bce40 py/gc: Don't include mpconfig.h and misc.h in gc.h.	3 years ago
Martin Milata	d69b23e3c5	chore(core/emulator): ignore MICROPY_UNIX_COVERAGE ... Seems to be micropython internal flag that hasn't been working in our emulator for some time. Relevant micropython commits: b9a35bebf75be53a817bf6341af14b882093e345 py/qstr.h: Remove QSTR_FROM_STR_STATIC macro. [no changelog]	3 years ago
Pavol Rusnak	d153082c9c	chore(vendor): bump micropython to 1.14 ... Relevant micropython commits: 4559bcb4679e04e0a5e24030675676ff6a9803f2 unix: Make mp_hal_delay_ms run MICROPY_EVENT_POLL_HOOK.	3 years ago
Martin Milata	a007e062ab	style(core): apply rustfmt ... [no changelog]	3 years ago
Tomas Susanka	cec1f39a90	chore(core, legacy): bump versions ... [no changelog]	3 years ago
Martin Milata	f37ca13f1a	refactor(core): disable SD, SBU, fatfs for T1 build	3 years ago
Martin Milata	582e1318c4	feat(core/emulator): support protobuf messages in memory dumps ... [no changelog]	3 years ago
Martin Milata	412d06fdfe	docs(core+legacy): use towncrier for generating CHANGELOG.md ... core/embed/boardloader/CHANGELOG.md core/embed/bootloader/CHANGELOG.md core/embed/bootloader_ci/CHANGELOG.md legacy/intermediate_fw/CHANGELOG.md	3 years ago
Pavol Rusnak	d35071d732	docs(core+legacy): update changelogs to new format	3 years ago
Martin Milata	ceaf4da617	fix(core): explicitly refresh display on T1 ... [no changelog]	3 years ago
Pavol Rusnak	3d69ca1b1b	chore(vendor): update nanopb to 0.4.5	3 years ago
matejcik	b41d4c71f0	feat(core/emulator): JSON memory map dump ... use `trezor.utils.mem_dump("somefile.json")` in a key place, then `analyze.py src/somefile.json` to look at what is going on	3 years ago
matejcik	fe6c131b14	feat(core/emulator): build emulator with -DSTATIC= ... This is perhaps a cleaner way to expose all relevant structures for memory analysis.	3 years ago
Martin Milata	81869fc4b0	chore(core): bump version to 2.4.2 ... [skip_ci]	3 years ago
Martin Milata	f06a57237b	style(core): trezorhal/random_delays.c	3 years ago
Pavol Rusnak	8cfa5da1ce	docs: fix typos in comments ... [skip_ci]	3 years ago
Ondřej Vejpustek	24200e7424	fixup! fix(legacy): make RDI work on T1	3 years ago
Ondrej Mikle	daa94ac941	fix(legacy): make RDI work on T1	3 years ago
Ondřej Vejpustek	b8b0ae09d9	fix(core): use unprivileged shutdown where needed	3 years ago
Ondřej Vejpustek	5984fd6ad7	feat(core): jump to unprivileged mode after shutdown	3 years ago
Ondřej Vejpustek	40b4f679f9	feat(core): implement wrapper for svc_shutdown	3 years ago
Ondřej Vejpustek	311288407e	docs(core): document shutdown_privileged	3 years ago
Ondřej Vejpustek	4968d7da53	feat(core): implement svc shutdown	3 years ago
Ondřej Vejpustek	cca9d4b1c4	refactor(core): rename shutdown to shutdown_privileged	3 years ago
Ondřej Vejpustek	7686eb355a	fix(core): fix import of random delays	3 years ago
Pavol Rusnak	69d1465e08	refactor(core): pass invert_colors to send_init_seq_ST7789V as argument ... to make the call more flexible	3 years ago
Pavol Rusnak	18e103bb94	style(core): refactor style of display-stm32_T	3 years ago
matejcik	c06a93cba5	feat(core/rust): propagate bitcoin_only flag to Rust build	3 years ago
Jan Pochyla	8a21e3fc73	feat(core): Add Rust Protobuf codec	3 years ago
Pavol Rusnak	23aa69caea	fix(core): unify Features.revision reporting with legacy	3 years ago
Martin Milata	ca836b2e45	chore(core): bump version to 2.4.1	3 years ago
Martin Milata	8c6b93e0bd	build(core): account for ARM unwinding info in memory layout ... Currently the 8-byte section is inserted under semi-random name like .ARM.exidx.text._ZN50_$LT$T$u20$as$u20$core..convert..Into$LT$U$GT$$GT$4into17h79ccbc4bdfe3f200E. This makes it hard to include it in _codelen that is later baked into firmware header. This change adds new section because including it in .flash causes linker error due to mixing "ordered" and "unordered" sections. By renaming .exidx to /DISCARD/ we'd drop this info, there may also exist compiler flag to do that.	3 years ago
Martin Milata	20fe8552ca	build(core/rust): use correct architecture for T1 ... TT is Cortex-M4 is Armv7E-M while T1 is Cortex-M3 is Armv7-M: https://community.arm.com/developer/ip-products/processors/b/processors-ip-blog/posts/armv6-m-vs-armv7-m---unpacking-the-microcontrollers	3 years ago
Ondřej Vejpustek	6fd4739c5c	feat(core): make random delays use chacha_drbg	3 years ago
Ondřej Vejpustek	e1a5f42c81	feat(core): make chacha_drbg more robust	3 years ago
Ondřej Vejpustek	8ee17f69b3	refactor(core): move wait_random and rdi into separate file	3 years ago
matejcik	e015bc0856	build(core/rust): disable nightly-only features ... When we need them, we will re-enable.	3 years ago
matejcik	5f4240d93c	feat(core): preallocate sys.modules to an appropriate size	3 years ago
matejcik	391976bcda	refactor(core/usb): do not require serial number on instantiaton of USB ... On a cleanly wiped device, storage must be unlocked in order to create and retrieve the serial number. However, storage unlocking happens in boot.py, which is imported _after_ usb.py We must therefore sidestep asking for the serial number.	3 years ago
Jan Pochyla	6257584951	feat(core): Add Rust bindings to MicroPython and trezorhal ... core: Remove dangling module decls core: Use new Cargo feature resolver, use external MacOS debug info core: Rust docs improvements core: Upgrade bindgen core: Add test target to Rust ci: build rust sources build(core): .ARM.exidx.text.__aeabi_ui2f in t1 firmware size It's an unwind table for softfloat function inserted by rustc, probably can be removed to save 8 bytes: 599c58db70/link.x.in (L175-L182) scons: Remove dead code core: Move Rust target to build/rust core: Replace extern with a FFI version core: Add some explanatory Rust comments core: Use correct path for the Rust lib core: Remove Buffer::as_mut() Mutable buffer access needs MP_BUFFER_WRITE flag. TBD in the Protobuf PR. core: Improve docs for micropython::Buffer core: Minor Rust docs changes core: Rewrite trezor_obj_get_ll_checked core: Fix incorrect doc comment core: Remove cc from deps fixup! core: Rewrite trezor_obj_get_ll_checked core: update safety comments	3 years ago
mcudev	e3539b0a73	core/embed/usb: add back usb fs code for t1 and redo fifo sizing	3 years ago
mcudev	6137a55b06	core/embed/usb: use all available usb endpoints and update the usb fifo sizing	3 years ago
Martin Milata	ac711fb8ee	style(core): use more recent type annotation syntax ... https://www.python.org/dev/peps/pep-0585/ - Type Hinting Generics In Standard Collections https://www.python.org/dev/peps/pep-0604/ - Allow writing union types as X | Y	3 years ago
Martin Milata	8b3ac659a0	style(core): mypy: disable implicit Optional for function arguments ... https://www.python.org/dev/peps/pep-0484/#union-types	3 years ago
Andrew Kozlik	2836bfc64c	fix(core): Improve error handling and range checking in modtrezorconfig.	3 years ago
Andrew Kozlik	66823e2893	chore(core,legacy): Bump FIX_VERSIONs due to upgrade to storage version 3.	3 years ago
Andrew Kozlik	3084d1196d	feat(core): Support 50 digit PIN and wipe code.	3 years ago
Pavol Rusnak	4649b80b44	feat(core): allow secp256k1-zkp for bitcoin-only build ... (but keep it disabled)	3 years ago
Pavol Rusnak	d211e3af07	fix(core): switch define to invert display colors into const volatile ... using define causes compiler to over-optimize the code in display_init_seq leading to larger differences in the resulting binaries when the flag changes we want to keep the difference to minimum (1 byte) and using const volatile instead of define achieves that	3 years ago
Pavol Rusnak	e7966cc804	refactor(core): rework color definitions in bootloader	3 years ago
Pavol Rusnak	3294a49cec	fix(core): don't assert reset flags to allow "reboot to bootloader"	3 years ago
Pavol Rusnak	1e2bb337a9	refactor(core): drop buttons argument for ui_screen_firmware_info	3 years ago
Pavol Rusnak	814db111b2	feat(core): add define to invert display colors on ST7789V	3 years ago
Pavol Rusnak	5cff6ac964	doc(core): update comments around UDP emulator ... drop unused define	3 years ago
Andrew Kozlik	a8c500bffd	feat(core): Ensure that WebAuthn runs on port 21326 by default for both production and debug emulator.	3 years ago
Pavol Rusnak	ebfd51d818	fix(core): stay_in_bootloader should default to false, not true	3 years ago
Pavol Rusnak	efac5d56f5	fix(core): change touch i2c clock speed to 200 kHz ... fixes #1519	3 years ago
Martin Milata	7c1d72c254	style(core): fix bootloader formatting	3 years ago
Pavol Rusnak	29a3e91f09	feat(core): refactor display_init_seq from display_init	3 years ago
Pavol Rusnak	5dd3d73d00	fix(core): remove unused stuff from bootloader_ci ... plus minor ui function renames	3 years ago
Ondrej Mikle	a4ba24645b	feat(core): remove connect to host dialog in the bootloader	3 years ago
Pavol Rusnak	f3ae3615c7	fix(core): unify bootloader_ci with bootloader	3 years ago
Pavol Rusnak	b074404dcf	fix(core): small secbool refactor for bootloader_ci	3 years ago
Pavol Rusnak	2dc094bd3e	fix(core): small secbool refactors	3 years ago
Martin Milata	48627b7f0f	fix(core): bootloader_ci build ... See also f46380147f.	3 years ago
Pavol Rusnak	5395c542c1	chore(core): update changelog, bump version to 2.3.7	3 years ago
Pavol Rusnak	f46380147f	fix(core): update sync protobuf messages in bootloader	3 years ago
matejcik	ccd241fe55	feat(core/cardano): enable typing for Cardano app	3 years ago
Ondrej Mikle	22d01b6ff4	chore(core): bootloader_ci - decouple file links from original bootloader	3 years ago
Pavol Rusnak	a11cb11ba3	chore(core): rework SYSTEMVIEW_DEST_SYSTEMVIEW ... to work with ifdef instead of if	3 years ago
Ondrej Mikle	d99127771c	chore(core): reorder includes	3 years ago
Ondrej Mikle	a628b9a92d	chore(core): remove unneeded include	3 years ago
Ondrej Mikle	4cf91b128d	style(core): systemview editorconfig reformat	3 years ago
Ondrej Mikle	9411756c42	style(core): systemview reformat	3 years ago
Ondrej Mikle	550216354b	chore(core): more systematic systemview function definitions	3 years ago
Ondrej Mikle	869cfbbd1c	style(core): style for systemview	3 years ago
Ondrej Mikle	0abcb57840	feat(core): place systemview buffers into CCMRAM	3 years ago
Ondrej Mikle	5a4166ea93	feat(core): increase systemview buffers	3 years ago
Ondrej Mikle	f591ce6789	feat(core): update systemview sources to 3.20	3 years ago
Ondrej Mikle	8fa3745838	feat(core): define RTT locking by enabling/disabling interrupts	3 years ago
Ondrej Mikle	ce3a6b649c	feat(core): systemview header	3 years ago
Ondrej Mikle	4a692cc63b	feat(core): segger dependencies	3 years ago
Ondrej Mikle	5f837e12b9	feat(core): send messaged through systemview	3 years ago
Ondrej Mikle	60e4e06aa5	feat(core): measure systick with systemview	3 years ago
Ondrej Mikle	c5e986b1ba	feat(core): enable SystemView at firmware start	3 years ago
Martin Milata	c293b52bd6	feat(core): bootloader_ci: do not ui_fadein/ui_fadeout	3 years ago
Martin Milata	2643ee2ab8	feat(core): bootloader_ci: wipe device without confirmation	3 years ago
Tomas Susanka	1006c8a0f1	chore(core,legacy): change versions to 1.9.5 and 2.3.6 ... This reverts commit 92535dc090.	3 years ago
Pavol Rusnak	92535dc090	chore(core,legacy): change versions back to 1.9.4 and 2.3.5 ... [skip_ci]	3 years ago