Go to file

Pavol Rusnak 25598229a8 Merge pull request #90 from romanz/master crypto: add ECDH session key generation		8 years ago
bootloader	Faster flashing, smoother animation.	8 years ago
demo	fix demo	8 years ago
firmware	crypto: add ECDH session key generation	8 years ago
gen	fix python shebangs	8 years ago
gitian	…
vendor	handle various signed_message_headers correctly	8 years ago
.gitignore	…
.gitmodules	…
.travis.yml	fix travis build failure	8 years ago
COPYING	…
Dockerfile	use the latest ubuntu lts in docker build	8 years ago
Makefile	fix ar usage	8 years ago
Makefile.include	fix ar usage	8 years ago
README.md	update readme	8 years ago
bootloader-docker-build.sh	…
buttons.c	…
buttons.h	…
firmware-docker-build.sh	…
firmware-fingerprint.sh	…
layout.c	…
layout.h	…
memory.c	…
memory.h	…
memory.ld	…
memory_app_0.0.0.ld	…
memory_app_1.0.0.ld	…
oled.c	…
oled.h	…
rng.c	…
rng.h	…
serialno.c	…
serialno.h	…
setup.c	…
setup.h	…
util.c	…
util.h	…

README.md

TREZOR Firmware

http://bitcointrezor.com/

How to build TREZOR firmware?

Install Docker
git clone https://github.com/trezor/trezor-mcu.git
cd trezor-mcu
./firmware-docker-build.sh TAG (where TAG is v1.3.2 for example, if left blank the script builds latest commit)

This creates file output/trezor-TAG.bin and prints its fingerprint at the last line of the build log.

How to build TREZOR bootloader?

Install Docker
git clone https://github.com/trezor/trezor-mcu.git
cd trezor-mcu
./bootloader-docker-build.sh

This creates file output/bootloader.bin and prints its fingerprint and size at the last line of the build log.

How to get fingerprint of firmware signed and distributed by SatoshiLabs?

Pick version of firmware binary listed on https://mytrezor.com/data/firmware/releases.json
Download it: wget -O trezor.signed.bin.hex https://mytrezor.com/data/firmware/trezor-1.1.0.bin.hex
xxd -r -p trezor.signed.bin.hex trezor.signed.bin
./firmware-fingerprint.sh trezor.signed.bin

Step 4 should produce the same sha256 fingerprint like your local build (for the same version tag).

The reasoning for firmware-fingerprint.sh script is that signed firmware has special header holding signatures themselves, which must be avoided while calculating the fingerprint.