334 Commits (a16fbe62374e5fd69b3bc608abefcf0b6fae31c9)

Author	SHA1	Message	Date
gabrielkerekes	1f33ab420d	feat(cardano): update transaction signing for multisig	3 years ago
gabrielkerekes	21281d7cf4	feat(cardano): add support for script addresses derivation	3 years ago
gabrielkerekes	dd9652cd07	feat(cardano): add get-native-script-hash call	3 years ago
matejcik	b666895303	feat(core/rust): catch, handle and propagate uPy exceptions	3 years ago
matejcik	e80077e0a4	feat(core/ethereum): enable type-checking for Ethereum app	3 years ago
matejcik	0c2863fc8d	feat(core/ethereum): use TokenInfo object instead of tuples	3 years ago
matejcik	96ed53cc1c	refactor(core,legacy): remove Wanchain special handling ... now that Wanchain has proper chainID and we don't need to detect it by magic. [no changelog]	3 years ago
matejcik	639406b01f	feat(all): make chain_id mandatory	3 years ago
Martin Milata	f37ca13f1a	refactor(core): disable SD, SBU, fatfs for T1 build	3 years ago
gabrielkerekes	28f0f60295	feat(cardano): update tests for streamed tx signing	3 years ago
gabrielkerekes	b0c8590f00	feat(cardano): streamed transaction signing	3 years ago
Martin Milata	574dcbc8a3	refactor(core): convert apps.common to layouts	3 years ago
Pavol Rusnak	f740515c85	fix(core,crypto): add more test cases from bip-173	3 years ago
matejcik	cf15dce326	refactor(core/ethereum): improve API of the rlp module	3 years ago
Andrew Kozlik	3e9f8a32ac	fix(core): Fix insufficient BIP-32 path checks. ... - Disable testnet coins from accessing Bitcoin paths. - Restrict BIP-45 paths to Bitcoin and coins with strong replay protection.	3 years ago
gabrielkerekes	3cd2182b69	feat(core): introduce OrderedMap into CBOR serialisation ... Items of an OrderedMap are included in CBOR as they come without sorting them in any way.	3 years ago
matejcik	3c4eb04346	feat(core/monero): cache Monero testing chain between runs	3 years ago
matejcik	52c34c7364	fix(core): allow caching empty values (fixes #1659)	3 years ago
gabrielkerekes	597402eab8	refactor(core/cardano): decouple address parameters validation	3 years ago
matejcik	1382246977	fix(core/tests): fix equality testing for new message types	3 years ago
Jan Pochyla	a8623c4b59	refactor(core): fix imports and use new protobuf API in apps	3 years ago
Jan Pochyla	02aa14fc04	refactor(core): Switch to new Protobuf API	3 years ago
matejcik	f1a54f2108	refactor(core): remove more global imports	3 years ago
matejcik	b5c1b37a56	chore(core/tests): bump heap size for core unit tests	3 years ago
matejcik	aaa3ce6117	fix(core/bitcoin): fix CoinJoin authorization with new cache	3 years ago
matejcik	f3db4f2dd3	refactor(core): defragment PathSchema memory usage	3 years ago
matejcik	3cdb09c294	refactor(core): modify cache to preallocate all its data ... also get rid of expensive "wire" import	3 years ago
Martin Milata	720eaa3abd	ci: run monero tests on hardware	3 years ago
Rafael Korbas	a9b8b0e119	feat(core/cardano): chunked serialization of signed transaction	3 years ago
Andrew Kozlik	25411e22c9	test(core): Add unit test for modtrezorconfig counter.	3 years ago
Andrew Kozlik	2836bfc64c	fix(core): Improve error handling and range checking in modtrezorconfig.	3 years ago
Andrew Kozlik	3084d1196d	feat(core): Support 50 digit PIN and wipe code.	3 years ago
Rafael Korbas	74ed5b7018	feat(core/cardano): Implement bech32 asset ids based on CIP-0014	3 years ago
Andrew Kozlik	6de20a7dcd	chore(core/bitcoin): Add DecredApprover.	3 years ago
JoeGruff	e3ea32a986	multi: Add decred staking. ... Add two new input and four output script types. Decred ticket purchases consist of a stake submission, op returns, and change addresses. Although change addresses are allowed by consensus, they are no longer used in practice and so have been given the restrictions of a null pubkey and no value. Stake scripts are almost identical to p2pkh or p2sh except for an extra opcode in front. Inputs are currently only used in the form of one input three outputs with the first output, or stake submission, paying to a public key hash, or with two inputs and five outputs with the stake submission paying to a multisig script hash. The op returns are directed to the user in the case of one and the voting service provider and user in the case of two. One of the sstx commitment for a ticket must pay back to the trezor wallet. This is checked and an error is thrown if we don't find the expected public key hash. Because this adds the ability to create new types of outputs once the ticket votes, two new input script types are also needed. A successful vote will lead to a stake generation script that must be spent, and an unsuccessful vote will lead to a revocation script that must be spent. If we allowed stake change scripts to have a valid pubkey, that too would require another op code, but we disallow those for output.	3 years ago
Rafael Korbas	3197741795	fix(core/Cardano): account index validation in _should_hide_output()	3 years ago
Andrew Kozlik	e5741ac308	chore(core): Use BufferReader for CBOR decoding.	3 years ago
Andrew Kozlik	ac939c94aa	fix(core/tezos): Implement strict length checking. ... (cherry picked from commit e7f44ebee8)	3 years ago
matejcik	2231fe6842	feat(core): make protobuf.dump_uvarint more reusable ... (cherry picked from commit 6acc1cd6ab)	3 years ago
Martin Milata	f1382bf892	refactor(core): model-dependent UI component directories ... They now live under trezor.ui.components.tt. Later trezor.ui.components.t1 will be added and application code will be rewritten to not use them directly in order to work on both TT and T1.	3 years ago
matejcik	ccd241fe55	feat(core/cardano): enable typing for Cardano app	3 years ago
Pavol Rusnak	7f0e939359	feat(core): implement amount_unit for AuthorizeCoinJoin and SignTx	4 years ago
Pavol Rusnak	f3d5de15ef	refactor(core): turn SECP256K1_ZKP into a firmware feature flag	4 years ago
matejcik	e23e35332d	tests(core): add test cases for Span	4 years ago
Martin Milata	db5b65a420	perf(core): enable rendering of substrings to avoid slicing	4 years ago
Rafael Korbas	edf9b4ee85	Refactor mnemonic_to_entropy to not (misleadingly) return checksum	4 years ago
Martin Milata	ee64b65b26	refactor(core): call super().__init__() in subclasses	4 years ago
matejcik	4628c774aa	feat(core): re-allow unknown Ethereum networks, using Ethereum or Testnet paths (fixes #1335)	4 years ago
matejcik	e6a1bf840f	fix(core): do not subclass `range` ... micropython on real hw dislikes it for some reason also it's completely unnecessary	4 years ago
Pavol Rusnak	50fdd183c2	ci: enable editorconfig checks, fix whitespace issues	4 years ago
matejcik	eadf8ab25f	chore(core/tests): update unit tests for new APIs, drop unnecessary ones	4 years ago
matejcik	7fe5c804ff	feat(core): implement BIP-32 path schemas	4 years ago
Andrew Kozlik	4a0c5c371a	feat(core): In apps.bitcoin implement replacement transaction flow.	4 years ago
Andrew Kozlik	bd3fe1d789	chore(core): In apps.bitcoin create a separate class for transaction information.	4 years ago
Andrew Kozlik	5fc491c597	chore(core): In apps.bitcoin move BIP143 hashing back to a separate class.	4 years ago
Martin Milata	9ed25a718a	ci: handle full dependencies in shell.nix ... Handling of full dependencies (multiple python versions, Monero tests) was moved from Dockerfile to shell.nix. The Python packages are installed from the pinned nixpkgs revision and do not depend on channel state at the time of docker build anymore. The Monero test binary is now downloaded using fetchurl which fails the build if checksum doesn't match.	4 years ago
Pavol Rusnak	d8534b5ee6	perf(core/extmod): replace HMAC Python implementation with C ... We keep Python implementation of HMAC for Monero in core/src/apps/monero/xmr/crypto/__init__.py	4 years ago
matejcik	0eed360037	chore: make tx type names shorter ... as suggested by @andrewkozlik: TxAckInputType -> TxInput TxAckOutputType -> TxOutput TxAckPrevTxType -> PrevTx TxAckPrevInputType -> PrevInput TxAckPrevOutputType -> PrevOutput	4 years ago
matejcik	8b2e46eb2d	chore(core): update unit tests to kwargs usage and new TxAck subtypes	4 years ago
matejcik	90ee5f3d38	feat!: implement protobuf required fields and default values ... BREAKING CHANGE: this makes arguments to protobuf constructors keyword-only, and arguments corresponding to required fields are now mandatory	4 years ago
Martin Milata	cff4955f93	core: implement SafetyChecks.PromptTemporarily ... Also reword safety checks confirmation dialogs.	4 years ago
Andrew Kozlik	9774c99e90	core/tests: Fix unit tests for streamimg prev_tx after confirmation.	4 years ago
Tomas Susanka	b99b8b3df3	Merge remote-tracking branch 'origin/release/2020-09'	4 years ago
matejcik	e0583dd5cb	all: use a specific error code for "invalid session"	4 years ago
matejcik	4909821f35	core: implement EndSession	4 years ago
Andrew Kozlik	02da5b7593	core/bitcoin: Show warning if nLockTime is set but ineffective due to all nSequence values being 0xffffffff.	4 years ago
Pavol Rusnak	0620911e46	core: allow spending coins from Bitcoin paths if the coin ... ... has implemented strong replay protection via SIGHASH_FORKID	4 years ago
Andrew Kozlik	791a74aeb2	core/tests: Add unit tests for CoinJoinApprover and CoinJoinAuthorization.	4 years ago
Andrew Kozlik	472e853f0a	core/tests: Fix unit tests to work with BasicApprover in sign_tx.	4 years ago
matejcik	c3afb93837	core/tests: improve test harness (fixes #1157)	4 years ago
Pavol Rusnak	063aba910d	core: rename emulator to trezor-emu-core	4 years ago
Martin Milata	d955e3f1e5	core: rename class Overwintered to Zcashlike	4 years ago
Martin Milata	10387e1869	core: drop zcash v3 tx signing support	4 years ago
Gabriel Kerekeš	d2c1624602	Cardano shelley update 2/3 (#1112)	4 years ago
gabrielkerekes	e1615e60ec	Update Cardano to support Shelley era 1/3 ... Update protobuf - Previous transactions don't need to be sent anymore, because fee is included in the transaction now. Thus transactions_count can be removed from CardanoSignTx message and the CardanoTxAck and CardanoTxRequest messages can be removed altogether. - CardanoTxInputType.type is unused so remove it Add NULL (None type) serialisation to CBOR - Transaction metada must either have a valid structure or CBOR NULL must be used (if metadata is empty) - it can't be simply left out. Add protocol_magics file - Just to have a nicer way of representing protocol magics Update transaction signing - Previous transactions no longer need to be requested - Output building is simplified, since fee doesn't need to be calculated - Remove transaction class since it is no longer needed (only functions remained) - Reorder functions so it reads top to bottom Add protocol magic to byron address on testnet - This has always been a part of the spec, but it hasn't been implemented before, because it wasn't really needed. Update trezorlib Update tests - Transaction messages are no longer required - Expected values are different since tx format changed - Common values in test cases have been extracted Remove unused file - Progress was used when receiving previous transactions Add CRC check to output address validation	4 years ago
matejcik	b741560997	core/bitcoin: drop unused validate_path_for_bitcoin_public_key	4 years ago
matejcik	58f460627f	core/tests: add unit tests for new functionality	4 years ago
matejcik	a461853cf6	core/tests: fix bitcoin unit tests	4 years ago
matejcik	7befdd07e4	core/tests: update unit tests	4 years ago
matejcik	3514a31bc9	core: make USB codec resilient to OOM conditions	4 years ago
matejcik	0a758b8181	core/tests: add synchronous protobuf tests	4 years ago
Martin Milata	fd117a0c9f	core: raise error on auto-lock value out of range	4 years ago
Pavol Rusnak	57ae902aed	core/monero: don't download test binary even if hash is different	4 years ago
Pavol Rusnak	5d666376f0	core/monero: update tests binary	4 years ago
Andrew Kozlik	791ff3fe06	core/tests: Add unit tests for SLIP-0019 proofs of ownership.	4 years ago
Andrew Kozlik	d48a372ca7	core/sign_tx: Implement support for signed external inputs.	4 years ago
Andrew Kozlik	3b6c1e5e6b	core/crypto: Add functions for verifying DER encoded signatures.	4 years ago
Andrew Kozlik	99f01cd316	core/sign_tx: Check script_pubkeys of inputs.	4 years ago
Tomas Susanka	a6acefbdf5	core: wipe before reset and recovery; introduce 'intialized' field	4 years ago
Tomas Susanka	56fe5adcfc	Merge branch 'release/2020-06'	4 years ago
matejcik	d5e45c02bb	core: move base functions from "homescreen" app to "base"	4 years ago
Andrew Kozlik	cb32ae2e4b	core/tests: add request_meta queries to unit tests (needed for transaction streaming)	4 years ago
Andrew Kozlik	42eddf8e04	core/sign_tx: validate prevout amount in all cases	4 years ago
Tomas Susanka	445f56d387	core/bitcoin: finalize bitcoin refactor ... - core/bitcoin: move common files to the app's root - core/bitcoin: use require_confirm instead of confirm - core: move bitcoin unrelated functions from 'bitcoin' to a new 'misc' app - core/bitcoin: use relative imports inside the app - core: rename wallet app to bitcoin - core/wallet: replace SigningErrors and the other exception classes with wire.Errors	4 years ago
matejcik	aa52fc3903	core/extmod: drop unused rfc6979 module	4 years ago
matejcik	3e06f4779a	core/tests: add new keychain tests	4 years ago
matejcik	de9e73dcbc	core/tests: update unit tests for new keychain API	4 years ago
matejcik	fd9e945308	core/cardano: use caching decorators and new Keychain API for Cardano as well	4 years ago
matejcik	8c4cb58098	core: introduce caching decorators	4 years ago
Dusan Klinec	6b8fc9c894	xmr: major protocol upgrade, CLSAG support added ... - CLSAG signature scheme added - type hints added xmr: optimize protocol, send only required data - real_out_additional_tx_keys contains only one element as nothing more is needed during signature - only src_entr.outputs[index] is HMACed and always present. Other outputs are present only if needed which reduces comm and CPU overhead. - getting rid of subaddresses dictionary (memory requirements), now subaddr indices are present per source entry so keys are computed when needed xmr: prepare for permutation sending removal, specify index - specify source entry ordering index prior sorting by key images as original HMAC keys are generated based on these. - permutation checked just by valid HMACs, size of the set, key image sort order - sending permutation is now deprecated, will be removed in the following protocol versions - more strict state transition checks, guard strict check with respect to steps ordering	4 years ago
Andrew Kozlik	7370077d0c	core/sign_tx: Get rid of internal TxOutputBinType messages.	4 years ago
Andrew Kozlik	9f9618944a	core/sign_tx: Explicitly pass script to write_tx_input() instead of setting it in txi.	4 years ago
Andrew Kozlik	8b89a30955	core/sign_tx: Remove get_prevouts_hash(), get_sequence_hash(), get_outputs_hash() methods from signer classes, because they are only used internally.	4 years ago
Andrew Kozlik	22933587be	core/sign_tx: Merge bip143 classes into signer classes.	4 years ago
Andrew Kozlik	c1effcc374	core/sign_tx: Updates based on code review.	4 years ago
Andrew Kozlik	c2a0f83558	core/sign_tx: Move script derivation to scripts module.	4 years ago
Andrew Kozlik	d0b80bddc8	core/tests: Fix unit tests after sign_tx refactor.	4 years ago
matejcik	5885978c83	Merge branch 'release/2020-04'	4 years ago
Pavol Rusnak	a7806d08d7	core/crypto: remove unused bip32.deserialize function	4 years ago
Pavol Rusnak	1695228d80	core/crypto: remove unused serialize_private function	4 years ago
matejcik	bd9e15bb8c	core/tests: add unit tests for prevhash writers	4 years ago
matejcik	a9faa4d4ab	core/tests: fix inline variant of assertRaises ... otherwise code like the following would fail: >>> self.assertRaises(AssertionError, ensure, False) because the AssertionError raised internally by `ensure` would be conflated with the AssertionError raised by the tested function	4 years ago
matejcik	27f6306e1d	core: introduce safer write_bytes functions	4 years ago
matejcik	e2035b4972	all: drop Horizen and BIP-115 support [NO BACKPORT]	4 years ago
matejcik	27803ee8c1	all: drop overwintered field from transaction	4 years ago
Andrew Kozlik	e5008eb332	core/webauthn: Remove indistinguishable credentials from the allow list.	4 years ago
Andrew Kozlik	0af0e06d5b	core/webauthn: Truncate names in credential data to at most 100 bytes.	4 years ago
matejcik	3789a3372b	core/sdcard: modify exception handling in fatfs ... expose ff.c constants, raise them as arguments to FatFSError introduce NotMounted and NoFilesystem as subclasses of FatFSError with the appropriate error code set	4 years ago
Andrew Kozlik	e378820f7f	core/webauthn: Implement support for Ed25519 signatures in FIDO2.	4 years ago
Dusan Klinec	2658e253fa	xmr/bp: memory optimizations and improvements ... - different approach to vector manipulation - more on the fly operations. Prepared for fully offloaded operations, BP on Trezor with constant memory. - memory requirements reduced from (4MN + const) to (2MN + const) - more raw methods to avoid unnecessary encoding/decoding - chunking improved, chunk size set as a constant, changed from 64 to 32, missing pieces implemented to cover also BP 16 - proof_v8 support discontinued, old hardfork, not needed anymore - get_exponent register clash fixed (for large vectors) - reduced heap fragmentation by removing some temporary allocations - hashing with len and offset to reduce heap fragmentation by creating a sliced arrays - use to() wherever possible to avoid allocations and return of mutable private object - global functions start with _ prefix, reduce import footprint - use __slots__ in classes to minimize footprint	4 years ago
Tomas Susanka	86b010a18b	Merge pull request #878 from trezor/matejcik/fatfs-corruption ... FatFS API rework	4 years ago
Tomas Susanka	495a59c282	core: use wire errors instead of ValueErrors where applicable	4 years ago
matejcik	18ac4fc9ca	core: update Python facing APIs	4 years ago
matejcik	9ab84d2455	core/tests: thoroughly test modified APIs	4 years ago
matejcik	e9c275c24f	core/sdcard: fix invalid state when filesystem mounting fails	4 years ago
Tomas Susanka	6c47bf8230	core: store multiple sessions/caches at the same time	4 years ago
matejcik	918603ad5c	core: add unit test for sdcard wrapper	4 years ago
matejcik	7983fd34d6	core: fix unit tests	4 years ago
Pavol Rusnak	07cd73ce57	core: show webusb popup only in bootloader and only if firmware is not installed	4 years ago
Tomas Susanka	2c0504ad1c	Merge pull request #803 from trezor/passphrase ... Passphrase Redesign	4 years ago
matejcik	741c0c8888	core: improve stability of Monero test runner	4 years ago
Tomas Susanka	15ed5cd19e	core: do not clear cache on ClearSession	4 years ago
matejcik	3fa99c0c6a	core/tests: add storage.cache tests	4 years ago
matejcik	d4171aaedc	core/tests: extract common await_result() method	4 years ago
Tomas Susanka	bf1514d1ac	core/test/strings: add test for words ending with 'hsxz'	5 years ago
Tomas Susanka	0053511c66	utils: introduce format_plural and move format functions to strings.py	5 years ago
matejcik	0496e49507	core/tests: fix monero runner script	5 years ago
matejcik	6cf48bf485	ci: use explicit trezor.log location	5 years ago
matejcik	22c8b2569b	core: simplify monero test use of emulator	5 years ago
matejcik	ec192e9406	core: use better emulator test wrappers (fixes #468)	5 years ago
Tomas Susanka	7c41b40dff	tests: introduce UI tests for core with diffs (#784) ... tests: introduce UI tests for core with diffs	5 years ago
matejcik	d4eed4b8ff	core/tests: update tests for modified slip39 API	5 years ago
Tomas Susanka	51ef963738	tests: introduce UI tests for core	5 years ago
Tomas Susanka	a28f29708f	ci: add junit for a nice tests overview	5 years ago
Tomas Susanka	ffea791658	Merge pull request #774 from trezor/tsusanka/shamir-word-checks ... Recovery: refactor word checks and add a test	5 years ago
Tomas Susanka	d8e956fc6d	core/recovery: change exceptions types; modifications in tests	5 years ago
Tomas Susanka	7f730cb6f9	core/recovery: refactor to exceptions	5 years ago
Tomas Susanka	f4e11a9176	core/recovery: rework arguments	5 years ago
Tomas Susanka	20bcc68926	core/tests: remove utest.py	5 years ago
Tomas Susanka	faa9078c2b	core/recovery: refactor word checks and add a test	5 years ago