Skip to content

Latest commit

 

History

History
697 lines (484 loc) · 29.9 KB

HSM.md

File metadata and controls

697 lines (484 loc) · 29.9 KB
Raw

Lattice Firmware Updates (HSM)

Starting with v0.15.4 we began publishing releases to this repo's Release page. Prior releases are still documented but the binaries are unlinked.

This document lists historical Lattice firmware (HSM) releases and the corresponding changelogs.

v0.18.3

Published July 18, 2024

Fixes

  • (#2730) Solana decoder now allows for undefined instruction types

v0.18.2

Published July 10, 2024

Features

  • (#2707) Initial Solana support
  • (#2706) 200 char password (25th word)

Fixes

  • (#2717) Hyperliquid fix (affects all contracts with a long name)
  • (#2675) Support for EIP712 BIG_NEG
  • (#2690) Firmware security updates
  • (#2720, #2719, #2723, #2722) Other minor bug fixes

v0.17.6

Published February 1, 2024

Features

  • (#2693) Extra warnings, re-authentication, and internal wallet seed phrase extraction for compatible hardware versions
  • (#2674) Display mnemonic from safecard feature

Fixes

  • (#2698) minor text fixes
  • (#2665) Fixes a configuration edge case
  • (#2673) Build environment extension
  • (#2663) Various fixes related to checking the tamper mesh state at boot

v.0.17.1

Fixes

  • (#2654) Moves setup complete flag marker to when the user sets a PIN

v0.17.0

Features

  • (#2562, #2620) Adds BLS crypto and integrates it into getAddresses and sign routes.
  • (#2608) Adds route to fetch encrypted data, starting with encrypted BLS private keys (using EIP2335)
  • (#2616) Adds ETH2 staking keys (BLS) to wallet addresses screen. Also updates the UI related to those screens.

Fixes

  • (#2612) Fixes failure to ABI decode empty struct arrays
  • (#2625) Removes unnecessary block on screen timeouts while system PIN screen is drawn
  • (#2630) Updates all password input prompts to be 100 characters max
  • (#2633, #2634) Addresses PR comments

v0.16.5

Features

  • (#2585) Draws (shortened) signer address for EVM transactions in addition to BIP44 path. Also moves Amount to inline metadata

Fixes

  • (#2628) Moves some code back to m_text and removes fs operation that may interfere with m_external
  • (#2552) Fixes system PIN setup cancel button flow
  • (#2555) Ensures change SafeCard PIN UI flow is blocked when SafeCard is not inserted
  • (#2586) Rejects pairing request when SafeCard PIN screen is drawn, rather than timing out
  • (#2596) Fixes edge case in Solana transaction building that was auto-rejecting certain payloads
  • (#2602) Fixes edge case in EIP712 request building (zero-length typed arrays)
  • (#2550) Makes settings toggle buttons only refresh text, rather than entire screen
  • (#2561, #2577) Loads static code into m_external to free up active program space
  • (#2571, #2513, #2574, #2597, #2606) Prunes old, unused code related to wallet module
  • (#2556) Signal bootloader only once device startup has finished
  • (#2594) Add warning to update screen copy
  • (#2598, #2599, #2600) Small, unscheduled changes and fixes to release branch
  • (#2603) Bumps version number to 0.16.2

v0.16.3

Fixes

  • (#2623) Add seed to safecard_set_seed to account for copied seeds with passphrases

v0.16.1

Fixes

  • (#2557, #2581, #2582) Updates to language and screen text formatting
  • (#2589) Updates new device setup timers to prevent initial router timeout

v0.16.0

Published September 15, 2022

Features:

  • (#2419, #2428, #2505, #2523, #2542) Forces confirmation of generated mnemonic phrases unless this option is disabled. This was added to prevent users from being unable to backup phrases.
  • (#2441, #2506) Stores mnemonic in extra data region of supported SafeCard applets (v2.3+)
  • (#2500) Updates WiFi module to reflect usage of Ethernet and cleans up surrounding code
  • (#2519) Adds help screen with QR code link to docs page
  • (#2520) Updates keyboard layout for more readability and ease of use
  • (#2508) Adds support for nested ABI definitions used by e.g. multicall patterns

Fixes:

  • (#2497) Fixes broken cancel button
  • (#2502) Fixes typos
  • (#2541) Ensures wifi is cleared from firmware state when router is reset

Misc:

  • (#2509) Shrinks memory footprint of BIP39 word list
  • (#2526) Adds QR code pointing to ticketing system for system halts
  • (#2532) Updates device setup screen
  • (#2498, #2528, #2529, #2530, #2531, #2535, #2539) Release 0.16.0 cleanup (resulting from testing issues and copy change requests)

v0.15.4

Published July 15, 2022

Fixes:

  • (#2492) Ensures tag rendering in all decoded data situations
  • (#2494) Fixes issue with displaying fixed size arrays in EVM calldata

v0.15.3

Published July 13, 2022

Fixes:

  • (#2486) Fixes display issue EVM values >UINT64_MAX
  • (#2487) Fixes screen timeout issue related to updates by forcing a default value in new set

v0.15.2

Published July 6, 2022

Fixes:

  • (#2430) Force exit of critical screens when device locks
  • (#2444) Removes no-op cancel button from SafeCard PIN setup
  • (#2455) Ensure mesh "armed" state is checked when first drawing status bar
  • (#2460) Fixes ordering of boot screens to ensure SafeCard PIN is drawn prior to tamper config screen (if applicable)
  • (#2465) Adds more clarifying language to mesh config screen
  • (#2469, #2474, #2475, #2479) Updates to tamper config file lifecycle to ensure proper management of seed at all times

Misc:

  • (#2439) Disables Terra decoder to save code space (the chain is now defunct)
  • (#2443) Adds firmware version to halt screen
  • (#2458) Re-architects settings bars to be less insane and linearizes the values

v0.15.1

Published June 22, 2022

Fixes:

  • (#2451) Removes accidental duplicate 0x prefix for printed EVM addresses

v0.15.0

Published June 21, 2022

Features:

  • (#2374, #2415, #2416) Replaces legacy Ethereum signing pathway with a new EVM decoder in the general signing framework.
  • (#2380) Replaces legacy Ethereum ABI API with new just-in-time ABI decoder functionality, allowing the requester to include an ABI definition with the calldata in the transaction request. Also adds a new API for loading such decoders (compiled out in a different PR) ahead of time. This is no longer necessary but has a small benefit of validating param names (function names and param types/ordering are already validated in the ABI definition itself).
  • (#2406) Adds mechanism to arm or disarm the anti-tamper mesh. Forces the user to arm the mesh before a tamper event can be registered. All data remains encrypted and PIN protected regardless of this choice and the configuration can be switched at any time.

Fixes:

  • (#2404) Fixes non-critical issue related to general signing requests sent to SafeCards with non-exportable seeds
  • (#2405) Add additional check on purpose param when determining whether a coin_type maps to an Ethereum style address

Misc:

  • (#2411) Compiles out decoder API and deprecated V0 permissions feature. Neither of these features is necessary and this frees up a significant amount of code space.
  • (#2417) Adds OTP version to device info screen

v0.14.2

Published March 30, 2022

Fixes:

  • (#2398) Fixes edge case that was blocking a single screen transition

v0.14.1

Published March 29, 2022

Features:

  • (#2371) Adds Terra decoder
  • (#2372) Updates general signing route and decoder formats
  • (#2388) Adds encrypted wallet UIDs to return data of connect for faster syncing
  • (#2382, #2392) Makes text on all reset screens red

Fixes:

  • (#2389, #2391) Reverts transaction caching change, forcing a check for a cached transaction every time home UI renders
  • (#2385) Fixes issues with semi-deprecated non-exportable seeds (backport of previous logic)
  • (#2395) Removes bad sanity check

v0.14.0

Published March 9, 2022

Features:

  • (#2307, #2367) Adds GET/DELETE API to ABI data for data management
  • (#2339, #2360) Adds generic signing route to remove restrictions on signing requests
  • (#2347) Allows export of ED25519 and other pubkeys with new flag
  • (#2349) Adds Solana decoder to generic signing
  • (#2350, #2355, #2362) Updates system halt screen to print more readable errors

Fixes:

  • (#2346) Fixes to card manager events
  • (#2357) Adds missing SafeCard driver unload
  • (#2358) Adds missing unblocking mechanism during clone card process to allow cancellation
  • (#2361) Adds missing lock to QSPI reads during sector erase
  • (#2365) Adds return error converter to allow retries for sign requests

Misc:

  • (#2157) Updates to utils
  • (#2209) Updates wolfcrypt config
  • (#2310) Moves BIP32 derivation logic to its own file
  • (#2311) Adds curve25519
  • (#2354) Increases EIP712 type max size
  • (#2356) Adds better debugging mechanism after halt
  • (#2348) Updates Lattice verification URL to lattice.gridplus.io

v0.13.3

Published February 10, 2022

  • (#2341) Hotfix: Prevents screen from tearing down during clone card process

v0.13.2

Published February 7, 2022

Changelog:

  • (#2320, #2334, #2336) Handle ephemeral EMV ATR issues more gracefully
  • (#2327, #2337) Add error screen to system_halt
  • (#2328, #2331) Miscellaneous code cleanup

v0.13.1

Published February 1, 2022

Changelog:

  • (#2316) Adds missing handler for requests made against the wrong wallet

v0.13.0

Unpublished: v0.13.1 published instead

Features:

  • (#2225, #2251) Adds full bech32 support (BTC)
  • (#2253, #2255, #2256, #2252, #2261, #2282, #2285, #2286) UI enhancements and language clarifications
  • (#2248, #2258) Add new error code to enable SDK retry logic
  • (#2268) Allow EVM smart contract deployment
  • (#2262) Allow user to change SafeCard PIN

Bug fixes:

  • (#2238) Block address tags requests when device is locked
  • (#2257) Fixes edge case to allow empty arrays in EIP712 messages
  • (#2259, #2278) Removes accidental reduction in randomness space for A90 PIN generation
  • (#2296) Fix edge case in nested EIP712 name definitions

Miscellaneous:

  • (#2279, #2297, #2300, #2301, #2305) Refactor card manager module to improve speed
  • (#2272, #2275) Removes address caching, allowing much faster syncing
  • (#2235, #2249) Adds more coin_type options
  • (#2201) Add ed25519 cryptography
  • (#2264, #2269) Update hard fault handler
  • (#2270, #2276, #2277) Code refactoring
  • (#2232) Update README instructions
  • (#1980, #2267, #2280, #2266, #2265, #2302, #2298) Tools and options for dev builds
  • (#2308) Prerelease 0.13.0 fixes based on pull request feedback

v0.12.3

Published November 13 2021

Changelog:

  • (#2228) Adds fix introduced in v0.12.2 into a second location

v0.12.2

Published November 8 2021

Changelog:

  • (#2219) Fixes edge case that was resulting in blocked signatures for specific derivations

v0.12.1

Published October 28 2021

Changelog:

  • (#2203) Fixes issue introduced in falling back to non-exportable card signing

v0.12.0

Published October 27 2021

Features

  • Adds API to create, fetch, and remove key-value mappings (key and val both max 64 bytes). This will be used for address tags in the near term.
  • Adds determinism to ECDSA signatures using RFC6979 and BIP62. This enables SNARK-based functionality on e.g. ZK-rollups.
  • Removes seed exportability option and makes all SafeCard seeds exportable for better UX and better future proofing.

Bug Fixes

  • Fixes endianness of chainId display on ETH transaction request screen
  • Fixes edge case in BIP39 word suggestion
  • Adds better randomness to message ID
  • Correctly calculates number of states in system module state machine

Changelog

  • #2122 (Fix various unit tests)
  • #2018 (Fix system state machine rule count)
  • #2121 (Improve BIP39 word suggestion logic)
  • #2123 (Update system restart logic after resetting system and fs)
  • #2031 (Randomize message broker id)
  • #2169 (Refactor message broker module)
  • #2174 (Fix chainID display bug)
  • #2175 (Deprecate non-exportable seed option for wallet setup)
  • #2177 (Update wc module)
  • #2156 (Add kv-files functionality)
  • #2179 (Removes large and redundant buffer)
  • #2180 (Implement deterministic k signatures)
  • #2190 (Add blocking screen to wallet backup workflow to prevent timing issues)
  • #2194 (Add missing sanity check after message broker refactor)
  • #2198 (Fix boolean logic bug in BIP39 word suggestion update)

v0.11.4

Published October 5 2021

Changelog:

  • Adds support for EIP712 array types (#2165)

v0.11.3

Published October 1 2021

Changelog:

  • Updates extraText-based option screen drawing to fix edge cases (Updates extraText-based option screen drawing to fix edge cases #2160)

v0.11.2

Published September 7 2021

Changelog:

  • Fixes incorrectly small buffer in EIP712 decoding function (#2136)

v0.11.1

Published September 3 2021

Changelog:

  • Fixes bug related to wallet state after a router reset (#2128)
  • Fixes edge case related to handling long chainIds for ETH txs and adds AVAX (#2131)
  • Bumps to v0.11.1 (#2132)

v0.11.0

Published August 12 2021

Features:

  • Adds support for new Ethereum transaction types (EIP1559 and EIP2930)

Bug Fixes:

  • Add zero-initialization to parameter only affected by optimization
  • Ensure cases where chainId is large work with pre-hashed transaction requests
  • Ensure SafeCard seed always deletes, even when Lattice seed is the same

Changelog:

  • Fixes zero-initialization bug that only manifests in optimized code (#2078)
  • Fixes edge case where chainId is large and also the payload is pre-hashed (#2111)
  • Fixes issue in delete SafeCard seed when SafeCard and Lattice seeds are the same (#2106)
  • Add support for EIP1559 and EIP2930 transaction types (#2112)
  • Optimize remaining firmware code (#2093)
  • Update to v0.11.0 (#2115)
  • Fixes pointer scoping issue in EIP1559 implementation (#2116)
  • Optimize one last file (pairing manager) (#2120)
  • Fix typo in screen header (#2118)

v0.10.11

Published July 27 2021

Changelog:

  • Adds missing types to EIP712 decoding (#2089)
  • Fixes edge case related to printing ABI markdown of bytes types (#2091)
  • Bump version (#2092)
  • Fix compiler warning related to unknown return value (#2098)
  • Shrink code space usage of EIP712 type selection (#2101)

v0.10.10

Published July 13 2021

Features:

  • Allows pre-hashed EIP712 and personal_sign messages in cases where the messages are too large to fit in allocated firmware memory. A warning screen is displayed as is the case for Ethereum transactions, which already support this feature.

Changelog:

  • Adds pre-hash mechanism for ETH_MSG (#2085)

v0.10.9

Published July 6 2021

Features:

  • Displays native unit for non-Ethereum chains in transaction request screen. Supported chain units include: MATIC, BNB, FTM as well as Ethereum testnets Ropsten, Rinkeby, Kovan, and Goerli. All other chains display the unit ?TOKEN to indicate the chain is unknown (the signing is unaffected).
  • Updates to the ABI parser adding support for signed integer types and fixes an edge case for parsing 0-length bytes types.

Changelog:

  • Display native unit for EVM chain based on chainId (#2066)
  • ABI: support signed int types (#2071)
  • ABI decoding edge case: handle 0-length bytes types (#2062)
  • Bump to v0.10.9 (#2074)
  • Fix issue introduced in EVM unit display (#2076)
  • Fix issue introduced in signed int support (#2077)

v0.10.8

Publised June 11 2021

Features:

  • Updates to Ethereum ABI functionality: new types, updated struct, new files (breaking changes)
  • Support for sending to Bitcoin bech32 addresses (using p2wpkh)
  • Ability to remove SafeCard wallet from firmware UI
  • Allow pre-hashed ETH transactions when data is too large (prints a red warning screen)
  • Various minor updates/fixes

Changelog:

  • Accounting for ABI edge case where parameter has no name (#2025)
  • Add all non-standard uint ABI types (e.g. uint24) (#2030)
  • Remove gas constraints for ETH transactions (#2033)
  • Add support for sending to bech32 Bitcoin addresses (#2017)
  • Display remaining SafeCard PIN attempts whenever an incorrect PIN is entered (#2038)
  • Add ability to remove wallet on SafeCard from UI (#2045)
  • Various firmware-based changes to ABI structure (breaking change) (#2054)
  • Allow pre-hashed ETH txs when data is too large; red warning screen is displayed (#2051)
  • Update language when asking for optional 25th seed word (i.e. passphrase) (#2056)
  • Revert changes in previous version for skipping wifi setup if SSID exists (#2035)
  • Version bump (#2055)
  • Adds missing display of SafeCard PIN attempts remaining (#2060)

v0.10.7

Published May 7 20201

Features:

  • Screen to validate authenticity of the Lattice's secure enclave chip. Generates a QR code linking to a gridplus.io page and containing signature + certificate on signer.

Bug fixes:

  • Fixes bug in UI callback function that was introduced in previous version
  • Allows for EIP712 edge case that was previously not supported, but is allowable by the spec

Changelog:

  • Fixes UI bug introduced in previous version (#2012)
  • Adds screen to validate authenticity of Lattice's secure enclave (#2006)
  • Adjusts screen constants that got mis-aligned (#2015)
  • Adds support for EIP712 edge case related to 0-length parameters (#2016)
  • Additional support for tamper mesh in latest hardware version (#2020)

v0.10.6

Published May 3 2021

Features:

  • Support for EIP712 transactions.
  • Support for derivation paths between 2-5 indices instead of requiring 5 indices.
  • Adds ability to scroll between used addresses on the Lattice UI. Currently only BTC addresses, which have a gap limit, can display more than the root address but more may be added later.

Bug Fixes:

  • Add timeout mechanism to PIN screen, which previously blocked transition to the UI sleeping after inactivity.
  • Skip wifi setup step when the Lattice system is reset and the user still has wifi configured.
  • Fixes invalid callback handling which made canceling a seed restore entry more difficult than it needed to be.

Changelog:

  • Support for derivation paths <5 indices (#1974)
  • Modularize vendor libs and optimize compilation (#1975)
  • Move RLP module to GridPlus handle and swap submodules (#1976)
  • Update address display mechanism to allow scrolling between cached addresses (#1954)
  • Support for EIP712 requests (#1982)
  • Additional keyring support for hardware v3 (#1978)
  • Add missing timeout to PIN screen (#1984)
  • Skip wifi setup when wifi is already set (#1985)
  • Adds support for non-standard EIP712 domain headers since apps are already breaking the standard 😓 (#1991)
  • Adds missing "cancel" callback handler to restore screen (#1995)
  • Replaces invalid header button type on BIP39 password screen (#1996)
  • Hides unnecessary screen builder constants to avoid exporting constants we don't need to export (#1997)
  • Fixes bug in exporting certain address paths (#2008)

v0.10.4

Published March 31 2021

Features:

  • Updates signTransaction request to allow for requests larger than one frame. Previous limit was 1550 bytes for data (same limit for a personal_sign. message). This has now been updated to 1550 bytes + 1x 1500 byte frame for a total of 3050 bytes. (#1945, #1948)
  • Updates the look of the PIN screen, most notably using a larger font for the number buttons. (#1946)
  • Adds BIP32 signer path to transaction request screen (#1971)

Bug Fixes:

  • Blocks requests while ABI confirmation screen is drawn. This fixes a bug in which encrypted requests could still be made but could not be filled because the ABI confirmation screen was blocking the UI. (#1947)
  • Forces SafeCard unlock before accessing a cached request when the device is unlocked. This fixes a bug that allowed the device to sign a transaction from a SafeCard without requiring the user to unlock that SafeCard first. This bug was only relevant for locked devices with cached requests. (#1949)

Changelog:

  • #1945: Updates signTransaction route and all ETH transaction middleware to handle chained requests, effectively increasing the maximum transaction size by using multiple requests.
  • #1948: Increases extraData frame size and stack size to support a significantly larger signTransaction payload under the new mechanism.
  • #1947: Adds hook into ABI commit screen preventing inbound encrypted requests while the screen is drawn.
  • #1949: Adds more context to system unlock and adds specificity over home_ui redirect when tearing down loading screen.
  • #1946: Updates PIN screen to use larger font
  • #1950: Bump to version 0.10.4
  • #1955: Minor code cleanup to adjust comments and remove dead code
  • #1957: Adds missing cache clearing mechanism which should have been included in #1948
  • #1964: Fixes timeout mechanism when resetting router
  • #1971: Prints BIP32 signer path on ETH and ETH_MSG signing request screens

v0.10.3

Published March 17 2021

Features:

  • Better detection of the SafeCard. If a SafeCard is inserted when the device boots, it is now detected. If a SafeCard is inserted in a device that is unlocked, the SafeCard now also needs to be unlocked.
  • Various UI improvements such as a new cancel button added to the pairing secret screen.
  • Optional BIP39 password (a.k.a. "25th word") is now allowed when a wallet is generated.
  • ABI updates: ABI_V2 (released in mainnet Dec '20) now supported and tuple types (increasingly utilized by more modern smart contracts) are also now supported.
  • Uniswap router V2 ABI definitions now pre-loaded.

Bug fixes:

  • Invalid characters (non-ASCII) now represented with a single square character (🔲)). Previously these characters were either skipped or shown as screen artifacts.
  • Cleanup of invalid strncat usage in various places.
  • Fixed derivation of public keys from non-standard paths (i.e. for unknown coin types).
  • Added a missing zero-initialization of buffer.

Changelog:

  • #1863: Add max PIN length boundary to screen builder (ebd1c94ef1e04aa488b3ea05e776cf8451f96b72)
  • #1861: Fix issue with unlocking the card on insert (0dc251bd73a3ff6a24d9680544bf3d464dac70d0)
  • #1869: Check EVM1 at boot/login and prompt user to unlock SafeCard if one is inserted (daefde01ebd2a380a4cb61249153502e928ac2b7)
  • #1874: Increase number of pairing slots and add pagination to the pairings list screen (b1e2aa9f4f28a00946a0d1f64254874aa1d557ed)
  • #1877: Move compile guards to fix bug (6a2905823d69ac538ecb221023a99f39f1549f81)
  • #1875: Add length boundaries to PIN screens (aa3199150681a5879e002306b9dc5771234c8cb0)
  • #1876: Fixes bugs related to forgetting a wifi network (9446bef511f3aaf87309ae98e0bc0486297e8880)
  • #1878: Fixes bug in resetting wifi credentials after a router reset (6e79e58b4992580c0a842865ad5c006b07bf61bc)
  • #1879: Fixes syntax errors (4f4f82a77e1100edd9c78c2a5f832e89e5c5d4fd)
  • #1880: Adds cancel button to the pairing screen to improve UX (bdfc035b956efa5324ae54018d03bb7c14f07471)
  • #1881: Adds missing mechanism to exit clone card process (e6932bf925157dbfb589adfd0320c99d12f846e4)
  • #1893: Adds compile guards to settings UI (126261d3722c3ff9397d36079da1133ef828cd8f)
  • #1896: Fixes derivation of public keys from non-standard paths (daf93e5a619897b0023b2d9c8a03a7eda0020d00)
  • #1887: Updates lvgl to print square character when unknown character is encountered (5c06bd29dc4d07f481458b579897076b486802d9)
  • #1897: Fixes lvgl update from previous PR (4b220851289f918974b2a136bfee9ef8108e435f)
  • #1882: Fixes several erroneous strcat instances (1877b5dc8f440266302eb44685b5f1bcd2d8a6fb)
  • #1900: Fixes lvgl update again (db1a3d927baa2ddf835497d5974ee3cdcc66afc4)
  • #1895: Updates language on a few screens (91859fd1e409a70d614af38df8df73b62dc77911)
  • #1901: Add tuple support to ABI decoding/printing (f5eadf9662b5e6961e3bbee031e4dd5387a5bdb6)
  • #1910: Fixes off-by-one bug introduced in previous PR (9c95b3b631c0d5089707b5144c2c5b9005599dfd)
  • #1914: Zero-inits pairing secret buffer to avoid screen artifacts (56c4cc99ab4a2ae989d57ce48971d40ce490fd77)
  • #1911: Adds BIP password option to generated wallets (b06f3db9db7d1a31ed03fef440ce2cab181e7557)
  • #1904: Fixes UI hooks in reset Lattice setting (443ae86c7b9a70366608e7dd0a3fdd8d0b14d306)
  • #1912: Bump firmware to v0.10.3 (d6bd538b01ea878030c454dd4cf432cbcde225ed)
  • #1916: Add compile guards to wallet UI (ca449668e5933bb7d693e85d81a6c60002e668cf)
  • #1917: Adds Uniswap router V2 ABI definitions to preload list (863d6cd19fd4de651a1c8f24d8f57e57e62abc07)
  • #1923: Add HSM and GCE versions to welcome screen for easier factory debugging (47183371ffe32964d62107589314351a8773a1a7)
  • #1928: Add optimization to lvgl in order to build release (e95c8ace9afa21dbc0b1ed7a8c91640227771ed2)
  • #1930: Decreases timer on reset router mechanism to better align with GCE reset timing (d9930ee5da0344eefeefbd4a41fbe5af0623825b)
  • 239ab31c52041acc470859c2a449d3411241ca94: Removal of defunct unit tests
  • #1931: Fix mistaken size calculation on screen displaying number of ABI defs loaded (2112031dfa2c52ce521cff4c5dbcbef85b97da26)

v0.10.2

Published Jan 20 2021

This release contains a fix to prevent random tamper events in the field related to an overly sensitive tamper mesh.

Changelog:

  • #1870: Revision to tamper mesh config to prevent invalid triggering in v2 hardware revs.

v0.10.1

Published Jan 13 2021

This release includes a fix relative to v0.10.0.

Changelog:

  • #1860: Adds missing call to clear staged ABI definitions at ABI filesystem init. This functionally means that users had to approve preloaded definitions before, but no longer need to.

v0.10.0

Published Jan 12 2021

This is a minor release which contains features, minor UI tweaks, and bug fixes.

Larger Features:

  • Human readable Ethereum transactions via smart contract ABI definition loading and parsing
  • Permissions v0: time and spending limits on simple ETH and BTC transfers

Changelog:

  • #1738: Cleans up various build configs.
  • #1739: Removes the staging config added previously based on our observation that it would not be useful.
  • #1740: Fix associated build flags in some unit tests in light of the changes to the DEBUG compile flag.
  • #1741: Fix typo in CMakeLists.txt.
  • #1749: lvgl #define renames
  • #1751: Update lvgl submodule
  • #1754: System hook to subscribe to card manager events
  • #1759: Reset sleep timer on card insertion/removal
  • #1764: Import cb0r lib
  • #1772: Add cbor print util
  • #1781: Add bignum printing to cbor print util
  • #1787: Allows for display of larger Ethereum value amounts -- this supports display of values up to UINT256_MAX
  • #1813: Permissions v0
  • #1817: Wake device on signing request
  • #1821: Compile flag for clone card feature
  • #1822: Compile flag for update manager
  • #1823: Language update to tamper screen
  • #1824: Ethereum transaction data markdown using ABIs
  • #1825: Compile flag for permissions v0
  • #1827: Bug fixes and corrections to permissions
  • #1828: Allow paired requesters to fetch addresses outside of the device's cache
  • #1830: Fixes incorrect buffer size
  • #1831: Adds additional warning text when card has one PIN attempt remaining
  • #1833: Updates to submodules
  • #1836: One more submodule update to add more keyboard characters to lvgl's special keyboard
  • #1837: Bump version to v0.10.0 and updates several constants
  • #1838: Fix test runner and add missing compile flag
  • #1839: Blocks permissioned auto-signing of Ethereum transactions with non-zero data payloads
  • #1842: Fix bug in system_card_insertion_hook
  • #1843: Fix bug in permissions that was preventing permissioned requesters from making ETH_MSG requests
  • #1846: Comment out erroneous screen drawing function for the time being. Will be fixed at a later time.
  • #1849: Updates Ethereum ABI parser module to handle edge case
  • #1850: Updates Ethereum ABI parser module once more to remove erroneous sanity check from previous commit

v0.9.8

Published Dec 4 2020

  • #1763: Add option to display extraText left-justified (defaults to the legacy center alignment) and also fixes bug in calculating the size of the pages when line breaks are introduced.
  • #1770: Allows our Ethereum transaction parser to parse large chainID values, which were previously encoded as uint8_ts. Sidechains, testnets, and various other networks will use larger values for the chainID, which this PR enables.
  • #1775: Fixes race condition in wallet_task that occurs during the card cloning process
  • #1783: Fixes a nasty bug where the device times out and blanks the screen while the user is writing down their seed phrase. We should have had a block on that screen, which has been added in this PR.
  • #1786: Adds more visual cues to the different lock screens (card vs system) to give users more clarity. We have had a few confused users who haven't been able to differentiate between the screens.
  • #1795: Displays GCE SSH login credentials on the device info screen, even for production devices. Almost all of our user bugs/issues have arisen on the GCE side and not being able to debug those could lead to massive support issues. We have thus elected to display the information a user needs to SSH into the device on the device info screen. This also has the benefit of enticing developers to "hack" around with their device.
  • #1796: Various language updates throughout the UI.
  • #1798: Fixes bug introduced by me in #1795 🙈
  • #1799: More language updates to the UI
  • #1800: Fixes an oversight from #1770. We were not skipping over the chainID in the data field in the transaction display screen and this PR fixes that.

v0.9.6

Published Sep 30 2020

  • Our first version 🎉
  • Core Lattice firmware functionality