Go to file

Pavol Rusnak 81d226a29b build: modify travis to not use sudo		7 years ago
bootloader	Compute hash before checking signatures. (#158 )	7 years ago
demo	fix usage of RNG before setup (#150/#151)	7 years ago
firmware	update trezor-crypto	7 years ago
gen	adapt python scripts to Python3	8 years ago
gitian	…
vendor	update trezor-crypto	7 years ago
.gitignore	…
.gitmodules	…
.travis.yml	build: modify travis to not use sudo	7 years ago
COPYING	…
Dockerfile	…
Makefile	…
Makefile.include	update trezor-crypto	7 years ago
README.md	…
bootloader-docker-build.sh	…
buttons.c	…
buttons.h	…
firmware-docker-build.sh	…
firmware-fingerprint.sh	…
layout.c	…
layout.h	…
memory.c	memory protection: do not write reserved bits (#138 )	8 years ago
memory.h	…
memory.ld	…
memory_app_0.0.0.ld	…
memory_app_1.0.0.ld	…
oled.c	…
oled.h	…
rng.c	…
rng.h	…
serialno.c	…
serialno.h	…
setup.c	fix usage of RNG before setup (#150/#151)	7 years ago
setup.h	…
timer.c	…
timer.h	…
util.c	…
util.h	…

README.md

TREZOR Firmware

https://trezor.io/

How to build TREZOR firmware?

Install Docker
git clone https://github.com/trezor/trezor-mcu.git
cd trezor-mcu
./firmware-docker-build.sh TAG (where TAG is v1.3.2 for example, if left blank the script builds latest commit)

This creates file output/trezor-TAG.bin and prints its fingerprint at the last line of the build log.

How to build TREZOR bootloader?

Install Docker
git clone https://github.com/trezor/trezor-mcu.git
cd trezor-mcu
./bootloader-docker-build.sh

This creates file output/bootloader.bin and prints its fingerprint and size at the last line of the build log.

How to get fingerprint of firmware signed and distributed by SatoshiLabs?

Pick version of firmware binary listed on https://wallet.trezor.io/data/firmware/releases.json
Download it: wget -O trezor.signed.bin https://wallet.trezor.io/data/firmware/trezor-1.3.6.bin
./firmware-fingerprint.sh trezor.signed.bin

Step 3 should produce the same sha256 fingerprint like your local build (for the same version tag).

The reasoning for firmware-fingerprint.sh script is that signed firmware has special header holding signatures themselves, which must be avoided while calculating the fingerprint.