39 Commits (d433401311807305fde7a1fdf4aa6787e99941c8)

Author	SHA1	Message	Date
andrew	4f32cb5083	firmware: integrate trezor-storage	6 years ago
Pavol Rusnak	79779f4da6	replace all usage of memset(_, 0, _) with memzero	6 years ago
matejcik	c17cec93f7	firmware: use flattened protobuf symbols	6 years ago
Pavol Rusnak	0febd07dfc	firmware: update code to use new nested messages in trezor-common	6 years ago
Pavol Rusnak	a685462ee5	firmware: refactor last change in protect.c	6 years ago
Pavol Rusnak	df0bad4f09	firmware: introduce protectAbortedByCancel	6 years ago
Jochen Hoenicke	0127c1a374	Add function storage_getPinWait	7 years ago
Jochen Hoenicke	c09590b54d	Cleaner flash handling using FLASH_PTR ... Use `FLASH_PTR` macro to convert a flash address to a const pointer. For real hardware it is just a cast, for emulator we subtract the `FLASH_ORIGIN` and use it as index into the memory mapped flash file. Make write access to flash with volatile pointers Also use FLASH_PTR in DebugMemory* for now. This allows for reading and writing the flash in the emulator or just crash it by reading outside the flash...	7 years ago
Pavol Rusnak	7834eaba26	protect: passphrase is optional	7 years ago
Pavol Rusnak	7fa8ae136f	firmware: implement behaviour of state (still missing in PassphraseAck)	7 years ago
Pavol Rusnak	bd660655ee	introduce and use memzero instead of explicit_bzero	7 years ago
Pavol Rusnak	4a2d68acb9	use explicit_bzero where possible; update trezor-crypto	7 years ago
Pavol Rusnak	f22c849767	storage: rework storage_commit into storage_update	7 years ago
Pavol Rusnak	57bbcc754a	storage: make storage accessible only via functions ... add calls also for debug build and use them in fsm	7 years ago
Pavol Rusnak	41901a8056	firmware: rework protectChangePin ... bootloader: wait for flash operation to finish	7 years ago
Pavol Rusnak	18d8cb3c56	add project website (trezor.io) to license header	7 years ago
Jochen Hoenicke	33ed08ec32	Fix check for max try and add another check before	7 years ago
Pavol Rusnak	45ca9bd583	protect: change wording	7 years ago
Pavol Rusnak	c778d7b9c3	storage: wipe storage after 15 wrong pins	7 years ago
Pavol Rusnak	73708aa47e	refactor recovery.is_same_mnemonic function to storage_containsMnemonic	7 years ago
Pavol Rusnak	c6fd70b471	gettext: mark localizable strings as proof-of-concept	7 years ago
Pavol Rusnak	00f6312a81	rename failures, unify strings where possible	7 years ago
Saleem Rashid	25b9bfd97b	timer: Use Cortex-M3 SysTick timers ... Removed `usbDelay(uint32_t cycles)`, added `usbSleep(uint32_t millis)` The same method signature could cause silent code breakage at runtime, as opposed to noisy code breakage at compile time which is the better kind.	8 years ago
Pavol Rusnak	5e57a1ceaf	Merge branch 'u2f'	8 years ago
Pavol Rusnak	b1e3c52b08	remove DialogIcon enum, use bitmap structure directly	8 years ago
Jochen Hoenicke	73e7d82e3f	Allow initialize() to abort PIN wait	8 years ago
Jochen Hoenicke	053fe7cb66	Remove Cancel Option ... U2F doesn't allow cancellation on device. Also fix button state in protect. This fixes the following bug: 1. wipe device 2. press and hold right button, click left button to cancel. 3. release all buttons. 4. wipe device again, now automatic.	8 years ago
Jochen Hoenicke	68b34af19e	More standard conform behaviour ... Tested with u2f-ref-code/u2f-tests. Known incompatibility: - changed challenge invalidates button press.	8 years ago
Jochen Hoenicke	da98a3a6fd	Don't reflash storage after each PIN entry ... Instead of reflashing the whole storage, we use a designated area in the second storage block, where we mark each PIN failure by a single zero bit. This is because one can set bits in flash to zero but not to one. If the PIN was entered successfully the whole word is set to zero and the next word stores the new PIN failure counter.	9 years ago
Jochen Hoenicke	218b9984bb	New usbDelay that delays and handles USB requests ... Added usbDelay that polls usb port (for system requests) while delaying. This is called instead of delay in the button and pin delay functions. Experimental evaluation gave that the cycle count should be roughly divided by 28.5.	10 years ago
Pavol Rusnak	7d8fb375f0	seconds counter during pin lockdown	10 years ago
Jochen Hoenicke	286ee0525c	PIN handling - constant time. ... This diff contains three changes. 1. Make timing isPinCorrect independent of storage.pin, to avoid timing attacks 2. Only update failed PIN counter if the user entered a PIN. Of course, the fail counter is still incremented, before the PIN is checked. 3. Don't cache the PIN, but just the fact that the PIN was entered. The cache should be in sync with storage.pin in any case.	10 years ago
Pavol Rusnak	40efefc571	rework pin handling	10 years ago
Pavol Rusnak	012d38a9a0	increasePinFails before asking PIN	10 years ago
Pavol Rusnak	849e758eb4	double the delay before buttonupdate	10 years ago
Pavol Rusnak	465ec2104b	throw UnexpectedMessage failure on unknown messages	10 years ago
Pavol Rusnak	2b68813a4c	adjust script_sig size for use with multisig ... adjust delays used when wrong pin is entered	10 years ago
Pavol Rusnak	d7169a342c	fix initialize handling in interactive mode	10 years ago
Pavol Rusnak	0d0a1ab5f2	import v1.0.0	11 years ago