80 Commits (becb31c4fc09c5ed8dcb1f1f8f642dde33c39613)

Author	SHA1	Message	Date
Saleem Rashid	ba5b44d0c5	emulator: Initial commit	7 years ago
Saleem Rashid	6e25e0b363	coins: Use curve_info instead of HasherType	7 years ago
Saleem Rashid	268e7de109	Update trezor-crypto	7 years ago
Saleem Rashid	a1e911aa4c	transaction: Do not hardcode HASHER_SHA2	7 years ago
Saleem Rashid	54b0869535	signing: Use Hasher instead of SHA256_CTX	7 years ago
Tomas Susanka	cfe8a98c68	signing segwit change output typo	7 years ago
Jochen Hoenicke	e1fa7af1da	Byte-precise size estimate for fees ... Fixes issue #232. It assumes largest possible signature size for all inputs. For segwit multisig it can be .25 bytes off due to difference between segwit encoding (varint) vs. non-segwit encoding (op_push) of the multisig script.	7 years ago
Jochen Hoenicke	b8bca1c444	Fix segwit forkid signatures	7 years ago
Jochen Hoenicke	a8bc3cb6bd	Remove add_hash_type fields. ... The 4 byte hash_type/forkid is part of the signed message, but not part of the transaction. Instead of hacking it into the transaction, add it after the transaction when computing the signature.	7 years ago
Saleem Rashid	d39e4be1c8	signing: Use force_bip143 instead of has_forkid	7 years ago
Saleem Rashid	b6f11c9f93	signing: Add signing_hash_type function ... This also enables SIGHASH_FORKID for SegWit	7 years ago
Jochen Hoenicke	97581928de	Enable Segwit Bech32 addresses ... Increase the size of the addresses in protobuf. Fix layout2.c to handle longer addresses. Add a field bech32_prefix to coins.h Adapted the coins-gen script. Added bech32 support in signing.c and transaction.c	7 years ago
Jochen Hoenicke	b5fa8a266a	New CoinInfo separated from protobuf structures ... Having CoinType using the protobuf structures has several disadvantages. - We always need to change trezor-common if we need a new field (like bech32 prefix) - Every time Trezor initializes it sends all this information out and nobody cares. - The protobuf structures add storage overhead due to their fixed size. I also removed most of the `has_` fields except for forkid: - `has_segwit` was merged with segwit - `has_coin_shortcut` can be replaced by test for NULL if necessary. The fields were reordered for better padding.	7 years ago
Pavol Rusnak	18d8cb3c56	add project website (trezor.io) to license header	7 years ago
Jochen Hoenicke	a24e8a0484	Remove magic constants ... Use defines for wallet depth and change chain. Updated some comments to clarify what is checked.	7 years ago
Jochen Hoenicke	4805f27e8c	Fix checking change address ... There was a signed/unsigned problem: size_t is unsigned, but we use -1 to indicate mismatch. The problem was that when checking the input address path, it still did this unintentionally when a mismatch was detected, forbidding to sign with mismatched inputs, even when there is no change address. We now use 1 for mismatch. Also we don't allow change address anymore if the inputs have a path of length 1. This simplifies the code a bit.	7 years ago
Jochen Hoenicke	98e617d874	startup: use custom reset_handler ... + group confidential data in one place + zero all SRAM where needed	7 years ago
Jochen Hoenicke	3440ead4c9	Fix multisig for BCC	7 years ago
Jochen Hoenicke	5f6948e66b	Remove progress update	7 years ago
Jochen Hoenicke	3c75d28c78	Check input bip32 path again on second pass.	7 years ago
Jochen Hoenicke	6b615ce405	No quadratic hashing for hardfork ... Don't hash the whole transaction if forkid is set. Instead use the same codepath as for segwit. Rename segwit_to_spend to authorized_amount and use it for forkid amount and segwit amount validity checks. Removed some duplicated code.	7 years ago
Saleem Rashid	979a6ef266	signing: Skip TX_META with SIGHASH_FORKID	7 years ago
Saleem Rashid	a34554b091	signing: Add SIGHASH_FORKID support	7 years ago
Pavol Rusnak	3d7d0f0734	use C99 for loop where possible	7 years ago
Pavol Rusnak	c6fd70b471	gettext: mark localizable strings as proof-of-concept	7 years ago
Pavol Rusnak	00f6312a81	rename failures, unify strings where possible	7 years ago
Pavol Rusnak	317363f84c	enable mixing of segwit and non-segwit inputs	7 years ago
Pavol Rusnak	391e3940e5	refactor fee computation, but keep ceil logic	7 years ago
Pavol Rusnak	24ac52079f	disable native segwit for now	7 years ago
Pavol Rusnak	49f44d296c	refactor signing_check_output	7 years ago
Pavol Rusnak	1ecbca8338	signing: add option to enable/disable mixing of segwit/non-segwit inputs	7 years ago
Pavol Rusnak	261b8d5e41	multisig: allow mismatched change addresses, show them as non-change	7 years ago
Pavol Rusnak	e31e55e505	simplify bip32 change logic	7 years ago
Pavol Rusnak	b1995bb8d1	remove segwit warning, don't enable segwit on coins that don't have segwit=true in definition	7 years ago
Pavol Rusnak	4183b6cbbc	update logic for change addresses (address_n length 1 is allowed now)	7 years ago
Jochen Hoenicke	d70ac623a4	Small bugfixes in signing ... Segwit progress bar fixed. Call `signing_abort` instead of `layoutHome` on all errors The second `compile_output` does not work for user button and cannot return -1.	8 years ago
Jochen Hoenicke	420471889d	Refactored signing method. ... Put larger pieces of codes into functions of their own. No changes to this code.	8 years ago
Jochen Hoenicke	9d9377438c	Fix missing returns after signing_abort	8 years ago
Jochen Hoenicke	e5c9b361d3	Better error message for segwit without amount	8 years ago
Jochen Hoenicke	7b1381766f	Change address support for segwit. ... Rewrote change address support for segwit. Also checks the bip32 path of change address.	8 years ago
Jochen Hoenicke	8e84a6716c	Merge master into segwit	8 years ago
Jochen Hoenicke	52da2fc5e7	Segwit: Fix problems introduced by rebase	8 years ago
Pavol Rusnak	1763a5b647	use new hdnode_private_ckd_cached API	8 years ago
Pavol Rusnak	810d478f4c	check return values of ecdsa_sign calls	8 years ago
Jochen Hoenicke	2950588271	Fix segwit multisig. ... Tested, see f41cbedd8becee05a830f418d13aa665125464547db5c7a6cd28f21639fe1228 and c9348040bbc2024e12dcb4a0b4806b0398646b91acf314da028c3f03dd0179fc on testnet	8 years ago
Jochen Hoenicke	895da908e0	Simplified InputScriptType ... Distinguish between single signature and multisig via has_multisig.	8 years ago
Jochen Hoenicke	388750f2d1	Support for P2SH compatible segwit	8 years ago
Jochen Hoenicke	b7b9891cb4	Signing for Segnet Transaction works ... see segnet4 txid: aa434a6ef4fcf350e319bacbd725fa7446f797cb3ed0cd0582826a49d3351ffa	8 years ago
Jochen Hoenicke	e5000fb196	segwit sign (completely untested)	8 years ago
Jochen Hoenicke	5c60be9854	hashes for segwit signature	8 years ago