././@PaxHeader0000000000000000000000000000003400000000000010212 xustar0028 mtime=1770638540.7551503 trezor-0.20.2/AUTHORS0000644000000000000000000000164415142346315011127 0ustar00python-trezor is free software, created in 2012 and maintained by SatoshiLabs as part of the Trezor project. Over the years, many people have contributed to the project. Here is an incomplete list of credits: alepop Jan 'matejcik' Matějek Jan Pochyla Jiří Musil Jochen Hoenicke Jonathan Cross Karel Bílek Marek Palatinus Martin Milata mruddy Pavol Rusnak Peter van Mourik Petr Sedláček Roman Zeyde Saleem Rashid Tomáš Sušánka ZuluCrypto ././@PaxHeader0000000000000000000000000000003400000000000010212 xustar0028 mtime=1785490180.6809711 trezor-0.20.2/CHANGELOG.md0000644000000000000000000014016615233065405011672 0ustar00# Changelog All notable changes to this project will be documented in this file. The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/), and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html). ## [0.20.2] (29th July 2026) [0.20.2]: https://github.com/trezor/trezor-firmware/compare/python/v0.20.1...python/v0.20.2 ### Added - Support for [Solana off-chain message signing v0](https://docs.anza.xyz/proposals/off-chain-message-signing). [#6759] - Add ML-DSA-44 device authenticity check. [#6826] - Add testing module to trezorlib. [#6994] - Tron: Claim voting rewards (WithdrawBalanceContract). [#7101] - Stellar: Support signing Soroban authorization entries (`stellar.sign_soroban_authorization`, `stellar.from_authorization_entry` and `trezorctl stellar sign-soroban-authorization`). [#7365] ### Changed - `TrezorClient.ensure_unlocked()` will not allocate a session and will not cause seed derivation. `Session.ensure_unlocked()` now just forwards to `TrezorClient`. [#7168] - Generated Merkle trees are now balanced. [#7359] ### Fixed - Solana: allow chunkified addresses. [#6545] - Tron: allow chunkified addresses. [#6730] - Skip stale protocol v1 responses on probing. [#6859] - Fix non-functional `trezorctl get-session` with THP. [#7168] - Fix broken HID transport. [#7428] ### Incompatible changes - Solana: add support for off-chain message signing (OCMS) v1 and remove v0. [#7053] - Stellar: Enable signing Soroban smart contract transactions; `sign_tx` / `from_envelope` now accepts / returns a transaction extension. [#7259] ## [0.20.1] (11th May 2026) [0.20.1]: https://github.com/trezor/trezor-firmware/compare/python/v0.20.0...python/v0.20.1 ### Added - Support THP ACK piggybacking. [#6202] - Support WebAuthn credentials' pagination. [#6349] ### Changed - Default to advanced recovery for mnemonics shorter than 24 words on legacy. [#6525] ### Deprecated - `trezorlib.ui` is deprecated, the module has been moved to `trezorlib.cli.ui`. [#6564] - `trezorlib.tools.EnumAdapter` and `TupleAdaper` have been moved to `trezorlib.construct_helpers`. [#6564] ### Fixed - Handle missing THP continuations during multi-chunk payloads. [#6555] - Fix THP pairing after credential invalidation. [#6575] - Fetch root fingerprint from older firmware. [#6580] - Skip unrelated device response when probing transport. [#6588] - Fix THP auto-connection after unlocking the device. [#6633] ## [0.20.0] (10th February 2026) [0.20.0]: https://github.com/trezor/trezor-firmware/compare/python/v0.20.0-dev0...python/v0.20.0 Version 0.20.0 introduces a set of **major breaking API changes**. All user code must be upgraded. As announced, the API has changed significantly since the pre-release version 0.20.0-dev. ### Incompatible changes - Refactor trezorlib session-based API. [#6273] ### Added - Use keyring package for storing THP keys and credentials. [#6273] ### Removed - Deprecate uploading language blob during firmware update. [#6103] - debuglink: Remove vestigial memory_write/read/erase methods. [#6273] - Deprecated `@expect` decorator was removed. [#6273] - Deprecated `str` return values in functions whose result is a success have been removed. [#6273] ### Fixed - Avoid dropping WebUSB chunks in case of a timeout. [#6112] - Support resuming THP sessions. [#6273] - trezorctl: BLE behavior on macOS was improved. [#6449] - trezorctl: fix crash when device authentication allowlist is unavailable. [#6449] ## [0.20.0-dev0] (21st October 2025) [0.20.0-dev0]: https://github.com/trezor/trezor-firmware/compare/python/v0.13.10...python/v0.20.0-dev0 Version 0.20.0 introduces a set of **major breaking API changes**. All user code must be upgraded. This version is a pre-release. The new API is unstable and may change until 0.20.0 is released. ### Incompatible changes - All Trezor functions now run on top of a `Session` instead of `TrezorClient`. - Reworked API of `TrezorClient`. ### Added - Support for T3W1. - Support for Trezor-Host Protocol. [#4976] - Cardano: Add support for signing arbitrary messages. [#3509] - Added support for Bluetooth Low Energy transport. [#4948] - Added new translation blob format to support larger fonts. [#4975] - Generation of SLIP-21 node for a new way of storing labels (using Evolu). [#5220] - Add support for displaying the message hash when signing Ethereum EIP-712 typed data. [#5344] - Check Tropic fields to AuthenticityProof. [#5760] - Allow exporting device serial number. [#5928] - `debuglink`: Add new optional enum DebugTouchEventType to DebugLinkDecision message. [#5328] - `debuglink`: Add screen buttons and button actions. [#4740] - `debuglink`: Add 'navigate_to_menu_item' button action. [#5499] ### Changed - Changed trezorlib to session-based. Changes also affect trezorctl, python tools, and tests. [#4976] - Changed build system to uv. - Loadable definitions from data.trezor.io query the new path structure. ### Deprecated - `trezorlib.__version__` is deprecated, use `importlib.metadata.version("trezor")`. ### Removed - Remove BNB Beacon Chain support. [#4227] - Dropped support for Python 3.8. - `ethereum.network_from_address_n` was removed. ### Fixed - Fixed device restart handling during firmware update. [#5000] - Fix broken interactive test mode. [#5455] ## [0.13.10] (12th February 2025) [0.13.10]: https://github.com/trezor/trezor-firmware/compare/python/v0.13.9...python/v0.13.10 ### Added - Added support for T3B1. [#3728] - Added support for Trezor models not known by the current version of the library. [#3993] - Added ability to set Optiga's security event counter to maximum: `trezorctl debug optiga-set-sec-max`. [#4000] - Enum for valid device rotations. [#4041] - Added pretty-printing of protobuf messages in IPython (`_repr_pretty_`). [#4076] - Added support for benchmarks. [#4101] - Added support for entropy check workflow in `device.reset()`. [#4155] - Added shortcut for loading a debug device with the "academic" SLIP39 seed. [#4282] - Added support for lexicographic sorting of pubkeys in multisig. [#4351] - Added an `expect` argument to `TrezorClient.call()`, to enforce the returned message type. [#4464] - Introduced `device.setup()` as a cleaner upgrade to `device.reset()`. [#4464] ### Changed - Most USB level errors are now converted to `TransportException`. [#4089] ### Deprecated - `@expect` decorator is deprecated -- use `TrezorClient.call(expect=...)` instead. [#4464] - String return values are deprecated in functions where the semantic result is a success (specifically those that were returning the message from Trezor's `Success` response). Type annotations are updated to `str | None`, and in a future release those functions will be returning `None` on success, or raise an exception on a failure. [#4464] - `device.reset()` is deprecated, migrate to `device.setup()`. [#4464] - Return value of `device.recover()` is deprecated. In the future, this function will return `None`. [#4464] ### Removed - CoSi functionality. [#3442] - Removed display_random feature. [#4119] ### Fixed - It is now possible to interrupt USB communication (via Ctrl+C, or a signal, or any other way). [#4089] - Use `frozenset` for `models.TREZORS` to prevent accidental modification. ### Incompatible changes - Return values in `solana` module were changed from the wrapping protobuf messages to the raw inner values (`str` for address, `bytes` for pubkey / signature). [#4464] - `trezorctl device` commands whose default result is a success will not print anything to stdout anymore, in line with Unix philosophy. [#4464] ## [0.13.9] (19th June 2024) [0.13.9]: https://github.com/trezor/trezor-firmware/compare/python/v0.13.8...python/v0.13.9 ### Added - trezorctl: Automatically go to bootloader when upgrading firmware. [#2919] - Support interaction-less upgrade. [#2919] - Added user adjustable brightness setting. [#3208] - Added Solana support. [#3359] - trezorctl: support for human-friendly Trezor Safe device authenticity check (requires separate installation of `cryptography` library). [#3364] - Added support for T3T1. [#3422] - Stellar: add support for StellarClaimClaimableBalanceOp. [#3434] - Cardano: Added support for tagged sets in CBOR (tag 258). [#3496] - Cardano: Added support for Conway certificates. [#3496] - Added ability to request Shamir backups with any number of groups/shares. [#3636] - Added flag for setting up device using SLIP39 "single". [#3868] - Added `--quality` argument to `trezorctl set homescreen`. [#3893] ### Changed - Renamed `trezorctl device self-test` command to `trezorctl device prodtest-t1`. [#3504] - Increased default JPEG quality for uploaded homescreen. [#3893] ### Incompatible changes - Renamed flag used for setting up device using BIP39 to `bip39`. [#3868] - Minimum required Python version is now 3.8. ## [0.13.8] (19th October 2023) [0.13.8]: https://github.com/trezor/trezor-firmware/compare/python/v0.13.7...python/v0.13.8 ### Added - Added full support for Trezor Safe 3 (T2B1). - Added support for STM32F429I-DISC1 board [#2989] - Add support for address chunkification in Receive and Sign flow. [#3237] - Implement device authenticate command. [#3255] - trezorctl: support unlocking bootloader via `trezorctl device unlock-bootloader`. ### Changed - Use 'h' character for hardened BIP-32 components in help texts. [#3037] - trezorctl: Use 'h' character in generated descriptors. [#3037] - ClickUI: notify user in terminal that they should enter PIN or passphrase on Trezor. [#3203] - Internal names are used consistently in constants and names. Original model-based names are kept as aliases for backwards compatibility. - Trezor model detection will try to use the `internal_name` field. ### Fixed - Drop simple-rlp dependency and use internal copy [#3045] - Fixed printing Trezor model when validating firmware image [#3227] - Corrected vendor header signing keys for Safe 3 (T2B1). ## [0.13.7] (2nd June 2023) [0.13.7]: https://github.com/trezor/trezor-firmware/compare/python/v0.13.6...python/v0.13.7 ### Added - Recognize signing keys for T2B1. - Add possibility to call tutorial flow [#2795] - Add ability to change homescreen for Model R [#2967] - Recognize hw model field in vendor headers. [#3048] ## [0.13.6] (24th April 2023) [0.13.6]: https://github.com/trezor/trezor-firmware/compare/python/v0.13.5...python/v0.13.6 ### Added - Signed Ethereum network and token definitions from host [#15] - Support SLIP-25 in get-descriptor. [#2541] - trezorctl: Support prompt configuration for `encrypt-keyvalue` / `decrypt-keyvalue`. [#2608] - Support for external reward addresses in Cardano CIP-36 registrations [#2692] - Auto-convert image to Trezor's homescreen format. [#2880] ### Changed - `trezorctl firmware verify` changed order of checks - fingerprint is validated before signatures. [#2745] ### Fixed - Removed attempt to initialize the device after wipe in bootloader mode [#2221] - Limit memory exhaustion in protobuf parser. [#2439] - `trezorctl ethereum sign-tx`: renamed `--gas-limit` shortcut to `-G` to avoid collision with `-t/--token` [#2535] - Fixed behavior of UDP transport search by path when full path is provided and prefix_search is True [#2786] - Fixed behavior of `trezorctl fw` with unsigned Trezor One firmwares. [#2801] - Improve typing information when `TrezorClient` has a more intelligent UI object. [#2832] - When enabling passphrase force-on-device, do not also prompt to enable passphrase if it is already enabled. [#2833] ## [0.13.5] (28th December 2022) [0.13.5]: https://github.com/trezor/trezor-firmware/compare/python/v0.13.4...python/v0.13.5 ### Added - Add support for model field in firmware image. [#2701] - Add support for v3-style Trezor One signatures. [#2701] ### Changed - More structured information about signing keys for different models. [#2701] ### Incompatible changes - Instead of accepting a list of public keys, `FirmwareType.verify()` accepts a parameter configuring whether to use production or development keys. [#2701] ## [0.13.4] (4th November 2022) [0.13.4]: https://github.com/trezor/trezor-firmware/compare/python/v0.13.3...python/v0.13.4 ### Added - Add UnlockPath message. [#2289] - Added new TOI formats - little endian full-color and even-high grayscale [#2414] - Add device set-busy command to trezorctl. [#2445] - Support SLIP-25 accounts in get-public-node and get-address. [#2517] - Add possibility to save emulator screenshots. [#2547] - Support for Cardano CIP-36 governance registration format [#2561] ### Removed - Remove DATA parameter from trezorctl cosi commit. - Remove firmware dumping capability. [#2433] ### Fixed - Fixed issue where type declarations were not visible to consumer packages. [#2542] ### Incompatible changes - Refactored firmware parsing and validation to a more object oriented approach. [#2576] ## [0.13.3] (13th July 2022) [0.13.3]: https://github.com/trezor/trezor-firmware/compare/python/v0.13.2...python/v0.13.3 ### Added - Support for Cardano Babbage era transaction items [#2354] ### Fixed - Fix Click 7.x compatibility. [#2364] ## [0.13.2] (30th June 2022) [0.13.2]: https://github.com/trezor/trezor-firmware/compare/python/v0.13.1...python/v0.13.2 ### Fixed - Fixed dependency error when running trezorctl without PIL. - Fixed dependency error when running trezorctl on Python 3.6 without rlp. - Fix `trezorctl --version` crash. [#1702] ## [0.13.1] (29th June 2022) [0.13.1]: https://github.com/trezor/trezor-firmware/compare/python/v0.13.0...python/v0.13.1 ### Added - New exception type `DeviceIsBusy` indicates that the device is in use by another process. [#1026] - Support payment requests and GetNonce command. [#1430] - Add press_info() to DebugLink. [#1430] - Add support for blind EIP-712 signing for Trezor One [#1970] - Add ScriptUI for trezorctl, spawned by --script option [#2023] - Support T1 screenshot saving in Debuglink [#2093] - Support generating Electrum-compatible message signatures in CLI. [#2100] - Support Cardano Alonzo-era transaction items and --include-network-id flag [#2114] - trezorctl: Bitcoin commands can detect script type from derivation path. [#2159] - Add support for model R [#2230] - Add firmware get-hash command. [#2239] - Jump and stay in bootloader from firmware through SVC call reverse trampoline. [#2284] ### Changed - Unify boolean arguments/options in trezorlib commands to on/off [#2123] - Rename `normalize_nfc` to `prepare_message_bytes` in tools.py [#2126] - `trezorctl monero` network type arguments now accept symbolic names instead of numbers. [#2219] ### Fixed - trezorctl will correctly report that device is in use. [#1026] - Allow passing empty `message_hash` for domain-only EIP-712 hashes for Trezor T1 (i.e. when `primaryType`=`EIP712Domain`) [#2036] - Fixed error when printing protobuf message with a missing required field. [#2135] - Add compatibility with Click 8.1 [#2199] ## [0.13.0] - 9th December 2021 [0.13.0]: https://github.com/trezor/trezor-firmware/compare/python/v0.12.4...python/v0.13.0 ### Added - `trezorctl firmware update` shows progress bar (Model T only) - Enabled session management via `EndSession` [#1227] - Added parameters to enable Cardano derivation when calling `init_device()`. [#1231] - two new trezorctl commands - `trezorctl firmware download` and `trezorctl firmware verify` [#1258] - Support no_script_type option in SignMessage. [#1586] - Support for Ethereum EIP1559 transactions [#1604] - Debuglink can automatically scroll through paginated views. [#1671] - Support for Taproot descriptors [#1710] - `trezorlib.stellar.from_envelope` was added, it includes support for the Stellar [TransactionV1](https://github.com/stellar/stellar-protocol/blob/master/core/cap-0015.md#xdr) format transaction. [#1745] - Ethereum: support 64-bit chain IDs [#1771] - Support for Cardano multi-sig transactions, token minting, script addresses, multi-sig keys, minting keys and native script verification [#1772] - Added parameters to specify kind of Cardano derivation to all functions and `trezorctl` commands. [#1783] - Support for EIP-712 in library and `trezorctl ethereum sign-typed-data` [#1835] - Add script_pubkey field to TxInput message. [#1857] - Full type hinting checkable with pyright [#1893] ### Changed - protobuf is aware of `required` fields and default values [#379] - `trezorctl firmware-update` command changed to `trezorctl firmware update` [#1258] - `btc.sign_tx()` accepts keyword arguments for transaction metadata [#1266] - Raise `ValueError` when the txid for an input is not present in `prev_txes` during `btc.sign_tx` [#1442] - `trezorlib.mappings` was refactored for easier customization [#1449] - Refactor protobuf codec for better clarity [#1541] - `UdpTransport.wait_until_ready` no longer sets socket to nonblocking [#1668] - Cardano transaction parameters are now streamed into the device one by one instead of being sent as one large object [#1683] - `trezorlib.stellar` will refuse to process transactions containing MuxedAccount [#1838] - Use unified descriptors format. [#1885] - Introduce Trezor models as an abstraction over USB IDs, vendor strings, and possibly protobuf mappings. [#1967] ### Deprecated - instantiating protobuf objects with positional arguments is deprecated [#379] - `details` argument to `btc.sign_tx()` is deprecated. Use keyword arguments instead. [#379] - values of required fields must be supplied at instantiation time. Omitting them is deprecated. [#379] ### Removed - dropped Python 3.5 support [#810] - dropped debug-only `trezorctl debug show-text` functionality [#1531] - Removed support for Lisk [#1765] ### Fixed - fix operator precedence issue for ethereum sign-tx command [#1867] - Updated `tools/build_tx.py` to work with Blockbook's API protections. [#1896] - Fix PIN and passphrase entry in certain terminals on Windows [#1959] ### Incompatible changes - `client.init_device(derive_cardano=True)` must be used before calling Cardano functions. [#1231] - The type of argument to `ui.button_request(x)` is changed from int to ButtonRequest. The original int value can be accessed as `x.code` [#1671] - Due to transaction streaming in Cardano, it isn't possible to return the whole serialized transaction anymore. Instead the transaction hash, transaction witnesses and auxiliary data supplement are returned and the serialized transaction needs to be assembled by the client. [#1683] - `trezorlib.stellar` was reworked to use stellar-sdk instead of providing local implementations [#1745] - Cardano derivation now defaults to Icarus method. This will result in different keys for users with 24-word seed. [#1783] ## [0.12.4] - 7th September 2021 [0.12.4]: https://github.com/trezor/trezor-firmware/compare/python/v0.12.3...python/v0.12.4 ### Fixed - trezorctl: fixed "Invalid value for " when using Click 8 and param is not specified [#1798] ## [0.12.3] - 29th July 2021 [0.12.3]: https://github.com/trezor/trezor-firmware/compare/python/v0.12.2...python/v0.12.3 ### Added - `trezorctl btc get-descriptor` support [#1363] - `trezorctl btc reboot-to-bootloader` support [#1738] - distinguishing between temporary and permanent safety checks - trezorctl accepts PIN entered by letters (useful on laptops) - support for 50-digit PIN for T1 ### Changed - allowed Click 8.x as a requirement - replaced all references to Trezor Wallet with Trezor Suite, and modified all mentions of Beta Wallet ### Fixed - added missing requirement `attrs` - properly parse big numbers in `tools/build_tx.py` [#1257], [#1296] - it is now possible to set safety checks for T1 ## [0.12.2] - 27th August 2020 [0.12.2]: https://github.com/trezor/trezor-firmware/compare/python/v0.12.1...python/v0.12.2 ### Added - `trezorlib.toif` module (moved from internal) can encode and decode TOIF image format - `trezorctl set homescreen` was improved and extended to support PNG images for Trezor T ### Changed - trezorctl will correctly notify the user if the image decoding library is missing ### Fixed - fix exception in `trezorctl btc get-address` [#1179] - fix exception in `trezorctl lisk sign-message` - fix exception in trezorctl commands that accept filenames [#1196] - fix "Invalid homescreen" error when un-setting homescreen ### Removed - removed option `--skip-vendor-header` from `trezorctl firmware-update` which did nothing [#1210] ## [0.12.1] - 5th August 2020 [0.12.1]: https://github.com/trezor/trezor-firmware/compare/python/v0.12.0...python/v0.12.1 ### Added - `trezorctl set safety-checks` controls the new "safety checks" feature. [#1126] - `trezorctl btc get-address` can create multisig addresses. - the following commands are now equivalent in trezorctl: `firmware-update`, `firmware-upgrade`, `update-firmware`, `upgrade-firmware` - support for EXTERNAL input type [#38], [#1052] - support for ownership proofs - support for pre-authorized CoinJoin transactions [#37] - support for Cardano Shelley [#948] ### Changed - do not allow setting auto-lock delay unless PIN is configured ### Fixed - correctly calculate hashes for very small firmwares [f#1082] - unified file arguments in trezorctl - `TrezorClient.ping()` does not crash when device is PIN-locked ## [0.12.0] - 1st April 2020 [0.12.0]: https://github.com/trezor/trezor-firmware/compare/python/v0.11.6...python/v0.12.0 ### Incompatible changes - `trezorlib.coins`, `trezorlib.tx_api`, and the file `coins.json`, were removed - `TrezorClient` argument `ui` is now mandatory. `state` argument was renamed to `session_id`. - UI callback `get_passphrase()` has a new argument `available_on_device`. - API for `cosi` module was changed - other changes may also introduce incompatibilities, please review the full list below ### Added - support for firmwares 1.9.0 and 2.3.0 - Model T now defaults to entering passphrase on device. New trezorctl option `-P` enforces entering passphrase on host. - support for "passphrase always on device" mode on model T - new trezorctl command `get-session` and option `-s` allows entering passphrase once for multiple subsequent trezorctl operations - built-in functionality of UdpTransport to wait until an emulator comes up, and the related command `trezorctl wait-for-emulator` - `trezorctl debug send-bytes` can send raw messages to the device [f#116] - when updating firmware, user is warned that the requested version does not match their device [f#823] - `trezorctl list` can now show name, model and id of device ### Changed - `trezorlib.tx_api.json_to_tx` was reduced to only support Bitcoin fields, and moved to `trezorlib.btc.from_json`. - API for `cosi` module was streamlined: `verify_m_of_n` is now `verify`, the old `verify` is `verify_combined` - internals of firmware parsing were reworked to support signing firmware headers - `get_default_client` respects `TREZOR_PATH` environment variable - UI callback `get_passphrase` has an additional argument `available_on_device`, indicating that the connected Trezor is capable of on-device entry - `Transport.write` and `read` method signatures changed to accept bytes instead of protobuf messages - trezorctl subcommands have a common `@with_client` decorator that manages exception handling and connecting to device ### Fixed - trezorctl does not print empty line when there is no output - trezorctl cleanly reports wire exceptions [f#226] ### Removed - `trezorlib.tx_api` was removed - `trezorlib.coins` and coin data was removed - `trezorlib.ckd_public`, which was deprecated in 0.10, was now removed. - `btc.sign_tx` will not preload transaction data from `prev_txes`, as usage with TxApi is being removed - PIN protection and passphrase protection for `ping()` command was removed - compatibility no-op code from trezorlib 0.9 was removed from `trezorlib.client` - `trezorlib.tools.CallException` was dropped, use `trezorlib.exceptions.TrezorFailure` instead ## [0.11.6] - 30th December 2019 [0.11.6]: https://github.com/trezor/trezor-firmware/compare/python/v0.11.5...python/v0.11.6 ### Added - support for get-and-increase FIDO counter operation - support for setting wipe code - `trezorctl device recover` supports `--u2f-counter` option to set the FIDO counter to a custom value ### Changed - `trezorctl` command was reworked for ease of use and maintenance. See `trezorctl --help` and `OPTIONS.rst` for details. [f#510] - updated EOS transaction parser to match `cleos` in `delegatebw` and `undelegatebw` actions [f#680] [f#681] - `RecoveryDevice` does not set fields when doing dry-run recovery [f#666] ### Fixed - fixed "expand words" functionality in `trezorctl device recover` [f#778] ### Removed - trezorctl no longer interactively signs Bitcoin-like transactions, the only allowed input format is JSON. See [`docs/transaction-format.md`](docs/transaction-format.md) for details. - support for "load device by xprv" was removed from firmware and trezorlib ## [0.11.5] - 26th September 2019 [0.11.5]: https://github.com/trezor/trezor-firmware/compare/python/v0.11.4...python/v0.11.5 ### Added - trezorctl can dump raw protobuf bytes in debug output [f#117] - trezorctl shows a warning when activating Shamir Backup if the device does not support it [f#445] - warnings are emitted when encountering unknown value for a protobuf enum [f#363] - debug messages show enum value names instead of raw numbers - support for packed repeated encoding in the protobuf decoder - in `trezorctl firmware-update`, the new `--beta` switch enables downloading beta firmwares. By default, only stable firmware is used. [f#411], [f#420] - in `trezorctl firmware-update`, the new `--bitcoin-only` switch enables downloading Bitcoin-only firmware - support for FIDO2 resident credential management - support for SD-protect features ### Changed - package directory structure was changed: `src` subdirectory contains sources and `tests` subdirectory contains tests, so that cwd is not cluttered - `trezorctl` script was moved into a module `trezorlib.cli.trezorctl` and is launched through the `entry_points` mechanism. This makes it usable on Windows - `pyblake2` is no longer required on Python 3.6 and up - input flows can only be used in with-block (only relevant for unit tests) - if not specified, trezorctl will set label to "SLIP-0014" in SLIP-0014 mode - in `clear_session` the client also forgets the passphrase state for TT [f#525] ### Fixed - trezorctl will properly check if a firmware is present on a new T1 [f#224] ### Removed - device test suite was moved out of trezor package ## [0.11.4] - 31st July 2019 [0.11.4]: https://github.com/trezor/trezor-firmware/compare/python/v0.11.3...python/v0.11.4 ### Added - trezorctl support for SLIP-39 Shamir Backup - support for Binance Chain ## [0.11.3] - 29th May 2019 [0.11.3]: https://github.com/trezor/trezor-firmware/compare/python/v0.11.2...python/v0.11.3 ### Added - trezorctl can now send ERC20 tokens - trezorctl usb-reset will perform USB reset on devices in inconsistent state - set-display-rotation command added for TT firmware 2.1.1 - EOS support [f#87] - Tezos: add voting support [f#41] - `dict_to_proto` now allows enum values as strings ### Changed - Minimum firmware versions bumped to 1.8.0 and 2.1.0 - Cleaner errors when UI object is not supplied - Generated files are now part of the source tarball again. That means that `protoc` is no longer required. ### Fixed - Ethereum commands in trezorctl now work - Memory debugging tools now work again ### Removed - Tron and Ontology support removed until implementations exist in Trezor firmware ## [0.11.2] - 27th February 2019 [0.11.2]: https://github.com/trezor/python-trezor/compare/v0.11.1...v0.11.2 ### Added - full support for bootloader 1.8.0 and relevant firmware upgrade functionality - trezorctl: support fully offline signing JSON-encoded transaction data - trezorctl: dry-run for firmware upgrade command - client: new convenience function `get_default_client` for simple script usage - Dash: support DIP-2 special inputs [#351] - Ethereum: add get_public_key methods ### Changed - coins with BIP-143 fork id (BCH, BTG) won't require prev_tx [#352] - device recovery will restore U2F counter - Cardano: change `network` to `protocol_magic` - tests can run interactively when `INTERACT=1` environment variable is set - protobuf: improved `to_dict` function ### Deprecated - trezorctl: interactive signing with `sign-tx` is considered deprecated ## [0.11.1] - 28th December 2018 [0.11.1]: https://github.com/trezor/python-trezor/compare/v0.11.0...v0.11.1 ### Fixed - crash when entering passphrase on device with Trezor T - Qt widgets should only import QtCore [#349] ## [0.11.0] - 6th December 2018 [0.11.0]: https://github.com/trezor/python-trezor/compare/v0.10.2...v0.11.0 ### Incompatible changes - removed support for Python 3.3 and 3.4 - major refactor of `TrezorClient` and UI handling. Implementers must now provide a "UI" object instead of overriding callbacks [#307], [#314] - protobuf classes now use a `get_fields()` method instead of `FIELDS` field [#312] - all methods on `TrezorClient` class are now in separate modules and take a `TrezorClient` instance as argument [#276] - mixin classes are also removed, you are not supposed to extend `TrezorClient` anymore - `TrezorClientDebugLink` was moved to `debuglink` module - changed signature of `trezorlib.btc.sign_tx` - `@field` decorator was replaced by an argument to `@expect` ### Added - trezorlib now has a hardcoded check preventing use of outdated firmware versions [#283] - Ripple support [#286] - Zencash support [#287] - Cardano support [#300] - Ontology support [#301] - Tezos support [#302] - Capricoin support [#325] - limited Monero support (can only get address/watch key, monerowallet is required for signing) - support for input flow in tests makes it easier to control complex UI workflows [#314] - `protobuf.dict_to_proto` can create a protobuf instance from a plain dict - support for smarter methods in trezord 2.0.25 and up - support for seedless setup - trezorctl: firmware handling is greatly improved [#304], [#308] - trezorctl: Bitcoin-like signing flow is more user-friendly - `tx_api` now supports Blockbook backend servers ### Changed - better reporting for debuglink expected messages - replaced Ed25519 module with a cleaner, optimized version - further reorganization of transports makes them more robust when dependencies are missing - codebase now follows [Black](https://github.com/ambv/black) code style - in Qt modules, Qt5 is imported first [#315] - `TxApiInsight` is just `TxApi` - `device.reset` and `device.recover` now have reasonable defaults for all arguments - protobuf classes are no longer part of the source distribution and must be compiled locally [#284] - Stellar: addresses are always strings ### Removed - `set_tx_api` method on `TrezorClient` is replaced by an argument for `sign_tx` - caching functionality of `TxApi` was moved to a separate test-support class - Stellar: public key methods removed - `EncryptMessage` and `DecryptMessage` actions are gone ### Fixed: - `TrezorClient` can now detect when a HID device is removed and a different one is plugged in on the same path - trezorctl now works with Click 7.0 and considers "`_`" and "`-`" as same in command names [#314] - bash completion fixed - Stellar: several bugs in the XDR parser were fixed ## [0.10.2] - 21st June 2018 [0.10.2]: https://github.com/trezor/python-trezor/compare/v0.10.1...v0.10.2 ### Added - `stellar_get_address` and `_public_key` functions support `show_display` parameter - trezorctl: `stellar_get_address` and `_public_key` commands for the respective functionality ### Removed - trezorctl: `list_coins` is removed because we no longer parse the relevant protobuf field (and newer Trezor firmwares don't send it) [#277] ### Fixed - test support module was not included in the release, so code relying on the deprecated `ckd_public` module would fail [#280] ## [0.10.1] - 11th June 2018 [0.10.1]: https://github.com/trezor/python-trezor/compare/v0.10.0...v0.10.1 ### Fixed - previous release fails to build on Windows [#274] ## [0.10.0] - 8th June 2018 [0.10.0]: https://github.com/trezor/python-trezor/compare/v0.9.1...v0.10.0 ### Added - Lisk support [#197] - Stellar support [#167], [#268] - Wanchain support [#230] - support for "auto lock delay" feature - `TrezorClient` takes an additional argument `state` that allows reusing the previously entered passphrase [#241] - USB transports mention udev rules in exception messages [#245] - `log.enable_debug_output` function turns on wire logging, instead of having to use `TrezorClientVerbose` - BIP32 paths now support `123h` in addition to `123'` to indicate hardening - trezorctl: `-p` now supports prefix search for device path [#226] - trezorctl: smarter handling of firmware updates [#242], [#269] ### Changed - reorganized transports and moved into their own `transport` submodule - protobuf messages and coins info is now regenerated at build time from the `trezor-common` repository [#248] - renamed `ed25519raw` to `_ed25519` to indicate its privateness - renamed `ed25519cosi` to `cosi` and expanded its API - protobuf messages are now logged through Python's `logging` facility instead of custom printing through `VerboseWireMixin` - `client.format_protobuf` is moved to `protobuf.format_message` - `tools.Hash` is renamed to `tools.btc_hash` - `coins` module `coins_txapi` is renamed to `tx_api`. `coins_slip44` is renamed to `slip44`. - build: stricter flake8 checks - build: split requirements to separate files - tests: unified finding test device, while respecting `TREZOR_PATH` env variable. - tests: auto-skip appropriately marked tests based on Trezor device version - tests: only show wire output when run with `-v` - tests: allow running `xfail`ed tests selectively based on `pytest.ini` - docs: updated README with clearer install instructions [#185] - docs: switched changelog to Keep a Changelog format [#94] ### Deprecated - `ckd_public` is only maintained in `tests.support` submodule and considered private - `TrezorClient.expand_path` is moved to plain function `tools.parse_path` - `TrezorDevice` is deprecated in favor of `transport.enumerate_devices` and `transport.get_transport` - XPUB-related handling in `tools` is slated for removal ### Removed - most Python 2 compatibility constructs are gone [#229] - `TrezorClientVerbose` and `VerboseWireMixin` is removed - specific `tx_api.TxApi*` classes removed in favor of `coins.tx_api` - `client.PRIME_DERIVATION_FLAG` is removed in favor of `tools.HARDENED_FLAG` and `tools.H_()` - hard dependency on Ethereum libraries and HIDAPI is changed into extras that need to be specified explicitly. Require `trezor[hidapi]` or `trezor[ethereum]` to get them. ### Fixed - WebUSB enumeration returning bad devices on Windows 10 [#223] - `sign_tx` operation sending empty address string [#237] - Wrongly formatted Ethereum signatures [#236] - protobuf layer would wrongly encode signed integers [#249], [#250] - protobuf pretty-printing broken on Python 3.4 [#256] - trezorctl: Matrix recovery on Windows wouldn't allow backspace [#207] - aes_encfs_getpass.py: fixed Python 3 bug [#169] ## [0.9.1] - 5th March 2018 [0.9.1]: https://github.com/trezor/python-trezor/compare/v0.9.0...v0.9.1 ### Added - proper support for Trezor model T - support for Monacoin - improvements to `trezorctl`: - add pretty-printing of features and protobuf debug dumps (fixes [#199]) - support `TREZOR_PATH` environment variable to preselect a Trezor device. ### Removed - gradually dropping Python 2 compatibility (pypi package will now be marked as Python 3 only) [f#41]: https://github.com/trezor/trezor-firmware/pull/41 [f#87]: https://github.com/trezor/trezor-firmware/pull/87 [f#116]: https://github.com/trezor/trezor-firmware/pull/116 [f#117]: https://github.com/trezor/trezor-firmware/pull/117 [f#224]: https://github.com/trezor/trezor-firmware/pull/224 [f#226]: https://github.com/trezor/trezor-firmware/pull/226 [f#363]: https://github.com/trezor/trezor-firmware/pull/363 [f#411]: https://github.com/trezor/trezor-firmware/pull/411 [f#420]: https://github.com/trezor/trezor-firmware/pull/420 [f#445]: https://github.com/trezor/trezor-firmware/pull/445 [f#510]: https://github.com/trezor/trezor-firmware/pull/510 [f#525]: https://github.com/trezor/trezor-firmware/pull/525 [f#666]: https://github.com/trezor/trezor-firmware/pull/666 [f#680]: https://github.com/trezor/trezor-firmware/pull/680 [f#681]: https://github.com/trezor/trezor-firmware/pull/681 [f#778]: https://github.com/trezor/trezor-firmware/pull/778 [f#823]: https://github.com/trezor/trezor-firmware/pull/823 [f#1082]: https://github.com/trezor/trezor-firmware/pull/1082 [#15]: https://github.com/trezor/trezor-firmware/pull/15 [#37]: https://github.com/trezor/trezor-firmware/pull/37 [#38]: https://github.com/trezor/trezor-firmware/pull/38 [#94]: https://github.com/trezor/python-trezor/pull/94 [#167]: https://github.com/trezor/python-trezor/pull/167 [#169]: https://github.com/trezor/python-trezor/pull/169 [#185]: https://github.com/trezor/python-trezor/pull/185 [#197]: https://github.com/trezor/python-trezor/pull/197 [#199]: https://github.com/trezor/python-trezor/pull/199 [#207]: https://github.com/trezor/python-trezor/pull/207 [#223]: https://github.com/trezor/python-trezor/pull/223 [#226]: https://github.com/trezor/python-trezor/pull/226 [#229]: https://github.com/trezor/python-trezor/pull/229 [#230]: https://github.com/trezor/python-trezor/pull/230 [#236]: https://github.com/trezor/python-trezor/pull/236 [#237]: https://github.com/trezor/python-trezor/pull/237 [#241]: https://github.com/trezor/python-trezor/pull/241 [#242]: https://github.com/trezor/python-trezor/pull/242 [#245]: https://github.com/trezor/python-trezor/pull/245 [#248]: https://github.com/trezor/python-trezor/pull/248 [#249]: https://github.com/trezor/python-trezor/pull/249 [#250]: https://github.com/trezor/python-trezor/pull/250 [#256]: https://github.com/trezor/python-trezor/pull/256 [#268]: https://github.com/trezor/python-trezor/pull/268 [#269]: https://github.com/trezor/python-trezor/pull/269 [#274]: https://github.com/trezor/python-trezor/pull/274 [#276]: https://github.com/trezor/python-trezor/pull/276 [#277]: https://github.com/trezor/python-trezor/pull/277 [#280]: https://github.com/trezor/python-trezor/pull/280 [#283]: https://github.com/trezor/python-trezor/pull/283 [#284]: https://github.com/trezor/python-trezor/pull/284 [#286]: https://github.com/trezor/python-trezor/pull/286 [#287]: https://github.com/trezor/python-trezor/pull/287 [#300]: https://github.com/trezor/python-trezor/pull/300 [#301]: https://github.com/trezor/python-trezor/pull/301 [#302]: https://github.com/trezor/python-trezor/pull/302 [#304]: https://github.com/trezor/python-trezor/pull/304 [#307]: https://github.com/trezor/python-trezor/pull/307 [#308]: https://github.com/trezor/python-trezor/pull/308 [#312]: https://github.com/trezor/python-trezor/pull/312 [#314]: https://github.com/trezor/python-trezor/pull/314 [#315]: https://github.com/trezor/python-trezor/pull/315 [#325]: https://github.com/trezor/python-trezor/pull/325 [#349]: https://github.com/trezor/python-trezor/pull/349 [#351]: https://github.com/trezor/python-trezor/pull/351 [#352]: https://github.com/trezor/python-trezor/pull/352 [#379]: https://github.com/trezor/trezor-firmware/pull/379 [#810]: https://github.com/trezor/trezor-firmware/pull/810 [#948]: https://github.com/trezor/trezor-firmware/pull/948 [#1026]: https://github.com/trezor/trezor-firmware/pull/1026 [#1052]: https://github.com/trezor/trezor-firmware/pull/1052 [#1126]: https://github.com/trezor/trezor-firmware/pull/1126 [#1179]: https://github.com/trezor/trezor-firmware/pull/1179 [#1196]: https://github.com/trezor/trezor-firmware/pull/1196 [#1210]: https://github.com/trezor/trezor-firmware/pull/1210 [#1227]: https://github.com/trezor/trezor-firmware/pull/1227 [#1231]: https://github.com/trezor/trezor-firmware/pull/1231 [#1257]: https://github.com/trezor/trezor-firmware/pull/1257 [#1258]: https://github.com/trezor/trezor-firmware/pull/1258 [#1266]: https://github.com/trezor/trezor-firmware/pull/1266 [#1296]: https://github.com/trezor/trezor-firmware/pull/1296 [#1363]: https://github.com/trezor/trezor-firmware/pull/1363 [#1430]: https://github.com/trezor/trezor-firmware/pull/1430 [#1442]: https://github.com/trezor/trezor-firmware/pull/1442 [#1449]: https://github.com/trezor/trezor-firmware/pull/1449 [#1531]: https://github.com/trezor/trezor-firmware/pull/1531 [#1541]: https://github.com/trezor/trezor-firmware/pull/1541 [#1586]: https://github.com/trezor/trezor-firmware/pull/1586 [#1604]: https://github.com/trezor/trezor-firmware/pull/1604 [#1668]: https://github.com/trezor/trezor-firmware/pull/1668 [#1671]: https://github.com/trezor/trezor-firmware/pull/1671 [#1683]: https://github.com/trezor/trezor-firmware/pull/1683 [#1702]: https://github.com/trezor/trezor-firmware/pull/1702 [#1710]: https://github.com/trezor/trezor-firmware/pull/1710 [#1738]: https://github.com/trezor/trezor-firmware/pull/1738 [#1745]: https://github.com/trezor/trezor-firmware/pull/1745 [#1765]: https://github.com/trezor/trezor-firmware/pull/1765 [#1771]: https://github.com/trezor/trezor-firmware/pull/1771 [#1772]: https://github.com/trezor/trezor-firmware/pull/1772 [#1783]: https://github.com/trezor/trezor-firmware/pull/1783 [#1798]: https://github.com/trezor/trezor-firmware/pull/1798 [#1835]: https://github.com/trezor/trezor-firmware/pull/1835 [#1838]: https://github.com/trezor/trezor-firmware/pull/1838 [#1857]: https://github.com/trezor/trezor-firmware/pull/1857 [#1867]: https://github.com/trezor/trezor-firmware/pull/1867 [#1885]: https://github.com/trezor/trezor-firmware/pull/1885 [#1893]: https://github.com/trezor/trezor-firmware/pull/1893 [#1896]: https://github.com/trezor/trezor-firmware/pull/1896 [#1959]: https://github.com/trezor/trezor-firmware/pull/1959 [#1967]: https://github.com/trezor/trezor-firmware/pull/1967 [#1970]: https://github.com/trezor/trezor-firmware/pull/1970 [#2023]: https://github.com/trezor/trezor-firmware/pull/2023 [#2036]: https://github.com/trezor/trezor-firmware/pull/2036 [#2093]: https://github.com/trezor/trezor-firmware/pull/2093 [#2100]: https://github.com/trezor/trezor-firmware/pull/2100 [#2114]: https://github.com/trezor/trezor-firmware/pull/2114 [#2123]: https://github.com/trezor/trezor-firmware/pull/2123 [#2126]: https://github.com/trezor/trezor-firmware/pull/2126 [#2135]: https://github.com/trezor/trezor-firmware/pull/2135 [#2159]: https://github.com/trezor/trezor-firmware/pull/2159 [#2199]: https://github.com/trezor/trezor-firmware/pull/2199 [#2219]: https://github.com/trezor/trezor-firmware/pull/2219 [#2221]: https://github.com/trezor/trezor-firmware/pull/2221 [#2230]: https://github.com/trezor/trezor-firmware/pull/2230 [#2239]: https://github.com/trezor/trezor-firmware/pull/2239 [#2284]: https://github.com/trezor/trezor-firmware/pull/2284 [#2289]: https://github.com/trezor/trezor-firmware/pull/2289 [#2354]: https://github.com/trezor/trezor-firmware/pull/2354 [#2364]: https://github.com/trezor/trezor-firmware/pull/2364 [#2414]: https://github.com/trezor/trezor-firmware/pull/2414 [#2433]: https://github.com/trezor/trezor-firmware/pull/2433 [#2439]: https://github.com/trezor/trezor-firmware/pull/2439 [#2445]: https://github.com/trezor/trezor-firmware/pull/2445 [#2517]: https://github.com/trezor/trezor-firmware/pull/2517 [#2535]: https://github.com/trezor/trezor-firmware/pull/2535 [#2541]: https://github.com/trezor/trezor-firmware/pull/2541 [#2542]: https://github.com/trezor/trezor-firmware/pull/2542 [#2547]: https://github.com/trezor/trezor-firmware/pull/2547 [#2561]: https://github.com/trezor/trezor-firmware/pull/2561 [#2576]: https://github.com/trezor/trezor-firmware/pull/2576 [#2608]: https://github.com/trezor/trezor-firmware/pull/2608 [#2692]: https://github.com/trezor/trezor-firmware/pull/2692 [#2701]: https://github.com/trezor/trezor-firmware/pull/2701 [#2745]: https://github.com/trezor/trezor-firmware/pull/2745 [#2786]: https://github.com/trezor/trezor-firmware/pull/2786 [#2795]: https://github.com/trezor/trezor-firmware/pull/2795 [#2801]: https://github.com/trezor/trezor-firmware/pull/2801 [#2832]: https://github.com/trezor/trezor-firmware/pull/2832 [#2833]: https://github.com/trezor/trezor-firmware/pull/2833 [#2880]: https://github.com/trezor/trezor-firmware/pull/2880 [#2919]: https://github.com/trezor/trezor-firmware/pull/2919 [#2967]: https://github.com/trezor/trezor-firmware/pull/2967 [#2989]: https://github.com/trezor/trezor-firmware/pull/2989 [#3037]: https://github.com/trezor/trezor-firmware/pull/3037 [#3045]: https://github.com/trezor/trezor-firmware/pull/3045 [#3048]: https://github.com/trezor/trezor-firmware/pull/3048 [#3203]: https://github.com/trezor/trezor-firmware/pull/3203 [#3208]: https://github.com/trezor/trezor-firmware/pull/3208 [#3227]: https://github.com/trezor/trezor-firmware/pull/3227 [#3237]: https://github.com/trezor/trezor-firmware/pull/3237 [#3255]: https://github.com/trezor/trezor-firmware/pull/3255 [#3359]: https://github.com/trezor/trezor-firmware/pull/3359 [#3364]: https://github.com/trezor/trezor-firmware/pull/3364 [#3422]: https://github.com/trezor/trezor-firmware/pull/3422 [#3434]: https://github.com/trezor/trezor-firmware/pull/3434 [#3442]: https://github.com/trezor/trezor-firmware/pull/3442 [#3496]: https://github.com/trezor/trezor-firmware/pull/3496 [#3504]: https://github.com/trezor/trezor-firmware/pull/3504 [#3509]: https://github.com/trezor/trezor-firmware/pull/3509 [#3636]: https://github.com/trezor/trezor-firmware/pull/3636 [#3728]: https://github.com/trezor/trezor-firmware/pull/3728 [#3868]: https://github.com/trezor/trezor-firmware/pull/3868 [#3893]: https://github.com/trezor/trezor-firmware/pull/3893 [#3993]: https://github.com/trezor/trezor-firmware/pull/3993 [#4000]: https://github.com/trezor/trezor-firmware/pull/4000 [#4041]: https://github.com/trezor/trezor-firmware/pull/4041 [#4076]: https://github.com/trezor/trezor-firmware/pull/4076 [#4089]: https://github.com/trezor/trezor-firmware/pull/4089 [#4101]: https://github.com/trezor/trezor-firmware/pull/4101 [#4119]: https://github.com/trezor/trezor-firmware/pull/4119 [#4155]: https://github.com/trezor/trezor-firmware/pull/4155 [#4227]: https://github.com/trezor/trezor-firmware/pull/4227 [#4282]: https://github.com/trezor/trezor-firmware/pull/4282 [#4351]: https://github.com/trezor/trezor-firmware/pull/4351 [#4464]: https://github.com/trezor/trezor-firmware/pull/4464 [#4740]: https://github.com/trezor/trezor-firmware/pull/4740 [#4948]: https://github.com/trezor/trezor-firmware/pull/4948 [#4975]: https://github.com/trezor/trezor-firmware/pull/4975 [#4976]: https://github.com/trezor/trezor-firmware/pull/4976 [#5000]: https://github.com/trezor/trezor-firmware/pull/5000 [#5220]: https://github.com/trezor/trezor-firmware/pull/5220 [#5328]: https://github.com/trezor/trezor-firmware/pull/5328 [#5344]: https://github.com/trezor/trezor-firmware/pull/5344 [#5455]: https://github.com/trezor/trezor-firmware/pull/5455 [#5499]: https://github.com/trezor/trezor-firmware/pull/5499 [#5760]: https://github.com/trezor/trezor-firmware/pull/5760 [#5928]: https://github.com/trezor/trezor-firmware/pull/5928 [#6103]: https://github.com/trezor/trezor-firmware/pull/6103 [#6112]: https://github.com/trezor/trezor-firmware/pull/6112 [#6202]: https://github.com/trezor/trezor-firmware/pull/6202 [#6273]: https://github.com/trezor/trezor-firmware/pull/6273 [#6349]: https://github.com/trezor/trezor-firmware/pull/6349 [#6449]: https://github.com/trezor/trezor-firmware/pull/6449 [#6525]: https://github.com/trezor/trezor-firmware/pull/6525 [#6545]: https://github.com/trezor/trezor-firmware/pull/6545 [#6555]: https://github.com/trezor/trezor-firmware/pull/6555 [#6564]: https://github.com/trezor/trezor-firmware/pull/6564 [#6575]: https://github.com/trezor/trezor-firmware/pull/6575 [#6580]: https://github.com/trezor/trezor-firmware/pull/6580 [#6588]: https://github.com/trezor/trezor-firmware/pull/6588 [#6633]: https://github.com/trezor/trezor-firmware/pull/6633 [#6730]: https://github.com/trezor/trezor-firmware/pull/6730 [#6759]: https://github.com/trezor/trezor-firmware/pull/6759 [#6826]: https://github.com/trezor/trezor-firmware/pull/6826 [#6859]: https://github.com/trezor/trezor-firmware/pull/6859 [#6994]: https://github.com/trezor/trezor-firmware/pull/6994 [#7053]: https://github.com/trezor/trezor-firmware/pull/7053 [#7101]: https://github.com/trezor/trezor-firmware/pull/7101 [#7168]: https://github.com/trezor/trezor-firmware/pull/7168 [#7259]: https://github.com/trezor/trezor-firmware/pull/7259 [#7359]: https://github.com/trezor/trezor-firmware/pull/7359 [#7365]: https://github.com/trezor/trezor-firmware/pull/7365 [#7428]: https://github.com/trezor/trezor-firmware/pull/7428 ././@PaxHeader0000000000000000000000000000003400000000000010212 xustar0028 mtime=1760000640.7847416 trezor-0.20.2/COPYING0000644000000000000000000001674315071675201011120 0ustar00 GNU LESSER GENERAL PUBLIC LICENSE Version 3, 29 June 2007 Copyright (C) 2007 Free Software Foundation, Inc. Everyone is permitted to copy and distribute verbatim copies of this license document, but changing it is not allowed. This version of the GNU Lesser General Public License incorporates the terms and conditions of version 3 of the GNU General Public License, supplemented by the additional permissions listed below. 0. Additional Definitions. As used herein, "this License" refers to version 3 of the GNU Lesser General Public License, and the "GNU GPL" refers to version 3 of the GNU General Public License. "The Library" refers to a covered work governed by this License, other than an Application or a Combined Work as defined below. An "Application" is any work that makes use of an interface provided by the Library, but which is not otherwise based on the Library. Defining a subclass of a class defined by the Library is deemed a mode of using an interface provided by the Library. A "Combined Work" is a work produced by combining or linking an Application with the Library. The particular version of the Library with which the Combined Work was made is also called the "Linked Version". The "Minimal Corresponding Source" for a Combined Work means the Corresponding Source for the Combined Work, excluding any source code for portions of the Combined Work that, considered in isolation, are based on the Application, and not on the Linked Version. The "Corresponding Application Code" for a Combined Work means the object code and/or source code for the Application, including any data and utility programs needed for reproducing the Combined Work from the Application, but excluding the System Libraries of the Combined Work. 1. Exception to Section 3 of the GNU GPL. You may convey a covered work under sections 3 and 4 of this License without being bound by section 3 of the GNU GPL. 2. Conveying Modified Versions. If you modify a copy of the Library, and, in your modifications, a facility refers to a function or data to be supplied by an Application that uses the facility (other than as an argument passed when the facility is invoked), then you may convey a copy of the modified version: a) under this License, provided that you make a good faith effort to ensure that, in the event an Application does not supply the function or data, the facility still operates, and performs whatever part of its purpose remains meaningful, or b) under the GNU GPL, with none of the additional permissions of this License applicable to that copy. 3. Object Code Incorporating Material from Library Header Files. The object code form of an Application may incorporate material from a header file that is part of the Library. You may convey such object code under terms of your choice, provided that, if the incorporated material is not limited to numerical parameters, data structure layouts and accessors, or small macros, inline functions and templates (ten or fewer lines in length), you do both of the following: a) Give prominent notice with each copy of the object code that the Library is used in it and that the Library and its use are covered by this License. b) Accompany the object code with a copy of the GNU GPL and this license document. 4. Combined Works. You may convey a Combined Work under terms of your choice that, taken together, effectively do not restrict modification of the portions of the Library contained in the Combined Work and reverse engineering for debugging such modifications, if you also do each of the following: a) Give prominent notice with each copy of the Combined Work that the Library is used in it and that the Library and its use are covered by this License. b) Accompany the Combined Work with a copy of the GNU GPL and this license document. c) For a Combined Work that displays copyright notices during execution, include the copyright notice for the Library among these notices, as well as a reference directing the user to the copies of the GNU GPL and this license document. d) Do one of the following: 0) Convey the Minimal Corresponding Source under the terms of this License, and the Corresponding Application Code in a form suitable for, and under terms that permit, the user to recombine or relink the Application with a modified version of the Linked Version to produce a modified Combined Work, in the manner specified by section 6 of the GNU GPL for conveying Corresponding Source. 1) Use a suitable shared library mechanism for linking with the Library. A suitable mechanism is one that (a) uses at run time a copy of the Library already present on the user's computer system, and (b) will operate properly with a modified version of the Library that is interface-compatible with the Linked Version. e) Provide Installation Information, but only if you would otherwise be required to provide such information under section 6 of the GNU GPL, and only to the extent that such information is necessary to install and execute a modified version of the Combined Work produced by recombining or relinking the Application with a modified version of the Linked Version. (If you use option 4d0, the Installation Information must accompany the Minimal Corresponding Source and Corresponding Application Code. If you use option 4d1, you must provide the Installation Information in the manner specified by section 6 of the GNU GPL for conveying Corresponding Source.) 5. Combined Libraries. You may place library facilities that are a work based on the Library side by side in a single library together with other library facilities that are not Applications and are not covered by this License, and convey such a combined library under terms of your choice, if you do both of the following: a) Accompany the combined library with a copy of the same work based on the Library, uncombined with any other library facilities, conveyed under the terms of this License. b) Give prominent notice with the combined library that part of it is a work based on the Library, and explaining where to find the accompanying uncombined form of the same work. 6. Revised Versions of the GNU Lesser General Public License. The Free Software Foundation may publish revised and/or new versions of the GNU Lesser General Public License from time to time. Such new versions will be similar in spirit to the present version, but may differ in detail to address new problems or concerns. Each version is given a distinguishing version number. If the Library as you received it specifies that a certain numbered version of the GNU Lesser General Public License "or any later version" applies to it, you have the option of following the terms and conditions either of that published version or of any later version published by the Free Software Foundation. If the Library as you received it does not specify a version number of the GNU Lesser General Public License, you may choose any version of the GNU Lesser General Public License ever published by the Free Software Foundation. If the Library as you received it specifies that a proxy can decide whether future versions of the GNU Lesser General Public License shall apply, that proxy's public statement of acceptance of any version is permanent authorization for you to choose that version for the Library. ././@PaxHeader0000000000000000000000000000003300000000000010211 xustar0027 mtime=1770819678.479207 trezor-0.20.2/README.md0000644000000000000000000001034715143110136011325 0ustar00# trezorlib [![repology](https://repology.org/badge/tiny-repos/python:trezor.svg)](https://repology.org/metapackage/python:trezor) [![image](https://badges.gitter.im/trezor/community.svg)](https://gitter.im/trezor/community) Python library and command-line client for communicating with Trezor Hardware Wallet. See for more information. ## Install Python Trezor tools require Python 3.9 or higher, and libusb 1.0. The easiest way to install it is with `pip`. The rest of this guide assumes you have a working `pip`; if not, you can refer to [this guide](https://packaging.python.org/tutorials/installing-packages/). On a typical system, you already have all you need. Install `trezor` with: ```sh pip3 install trezor ``` On Windows, you also need to either install [Trezor Bridge](https://suite.trezor.io/web/bridge/), or [libusb](https://github.com/libusb/libusb/wiki/Windows) and the appropriate [drivers](https://zadig.akeo.ie/). ### Firmware version requirements Current trezorlib version supports Trezor One version 1.8.0 and up, Trezor T version 2.1.0 and up, and all versions of the Trezor Safe family. For firmware versions below 1.8.0 and 2.1.0 respectively, the only supported operation is "upgrade firmware". Trezor One with firmware _older than 1.7.0_ and bootloader _older than 1.6.0_ (including pre-2021 fresh-out-of-the-box units) will not be recognized, unless you install HIDAPI support (see below). ### Installation options * **Bluetooth**: To support connecting to T3W1 or later models via Bluetooth, additional dependencies are needed. Install with: ```sh pip3 install trezor[ble] ``` * **Ethereum**: To support Ethereum signing from command line, additional packages are needed. Install with: ```sh pip3 install trezor[ethereum] ``` * **Stellar**: To support Stellar signing from command line, additional packages are needed. Install with: ```sh pip3 install trezor[stellar] ``` * **Firmware-less Trezor One**: If you are setting up a brand new Trezor One manufactured before 2021 (with pre-installed bootloader older than 1.6.0), you will need HIDAPI support. On Linux, you will need the following packages (or their equivalents) as prerequisites: `python3-dev`, `cython3`, `libusb-1.0-0-dev`, `libudev-dev`. Install with: ```sh pip3 install trezor[hidapi] ``` To install all four, use `pip3 install trezor[ble,hidapi,ethereum,stellar]`. ### Distro packages Check out [Repology](https://repology.org/metapackage/python:trezor) to see if your operating system has an up-to-date python-trezor package. ### Running from source Install the [uv](https://docs.astral.sh/uv/) tool, checkout `trezor-firmware` from git, and activate the uv environment: ```sh git clone https://github.com/trezor/trezor-firmware cd trezor-firmware git submodule update --init --recursive uv sync source .venv/bin/activate ``` In this environment, trezorlib and the `trezorctl` tool is running from the live sources, so your changes are immediately effective. ## Command line client (trezorctl) The included `trezorctl` python script can perform various tasks such as changing setting in the Trezor, signing transactions, retrieving account info and addresses. See the [python/docs/](https://github.com/trezor/trezor-firmware/tree/main/python/docs) sub folder for detailed examples and options. NOTE: An older version of the `trezorctl` command is [available for Debian Stretch](https://packages.debian.org/en/stretch/python-trezor) (and comes pre-installed on [Tails OS](https://tails.boum.org/)). ## Python Library You can use this python library to interact with a Trezor and use its capabilities in your application. See examples here in the [tools/](https://github.com/trezor/trezor-firmware/tree/main/python/tools) sub folder. ## Changelog Visit [CHANGELOG.md] for the latest changes. [CHANGELOG.md]: https://github.com/trezor/trezor-firmware/blob/main/python/CHANGELOG.md ## Contributing If you want to change protobuf definitions, you will need to regenerate definitions in the `python/` subdirectory. First, make sure your submodules are up-to-date with: ```sh git submodule update --init --recursive ``` Then, rebuild the protobuf messages by running, from the `trezor-firmware` top-level directory: ```sh make gen ``` ././@PaxHeader0000000000000000000000000000003400000000000010212 xustar0028 mtime=1760000640.7849991 trezor-0.20.2/bash_completion.d/trezorctl.sh0000644000000000000000000000077515071675201016037 0ustar00_trezorctl() { export TREZORCTL_COMPLETION_CACHE local cur prev cmds base COMPREPLY=() cur="${COMP_WORDS[COMP_CWORD]}" prev="${COMP_WORDS[COMP_CWORD-1]}" if [ -z "$TREZORCTL_COMPLETION_CACHE" ]; then help_output=$(trezorctl --help | grep '^ [a-z]' | awk '{ print $1 }') export TREZORCTL_COMPLETION_CACHE="$help_output" fi cmds="$TREZORCTL_COMPLETION_CACHE" COMPREPLY=($(compgen -W "${cmds}" -- ${cur})) return 0 } complete -F _trezorctl trezorctl ././@PaxHeader0000000000000000000000000000003300000000000010211 xustar0027 mtime=1770638540.756083 trezor-0.20.2/docs/EXAMPLES.rst0000644000000000000000000001257615142346315012765 0ustar00Examples demonstrating how to use trezorctl =========================================== Show all available `options `_: .. code:: $ trezorctl --help Retrieve features, settings and coin types supported by your device: .. code:: $ trezorctl get-features Bitcoin examples ---------------- Get first receiving address of first account for Bitcoin (Legacy / non-SegWit): .. code:: $ trezorctl btc get-address --script-type address --address m/44h/0h/0h/0/0 Get first receiving address of first account for Bitcoin (SegWit-in-P2SH): .. code:: $ trezorctl btc get-address --script-type p2shsegwit --address m/49h/0h/0h/0/0 Get first receiving address of first account for Bitcoin (Bech32 native SegWit P2WPKH): .. code:: trezorctl btc get-address --script-type segwit --address m/84h/0h/0h/0/0 Get Legacy Bitcoin ``xpub`` (can be used to create a watch-only wallet): .. code:: trezorctl btc get-public-node --address m/44h/0h/0h Transaction signing ------------------- ``trezorctl`` supports offline signing of transactions in a `custom JSON format `_. If you have transaction data in file ``tx.json``, use the following call to get the signature: .. code:: $ trezorctl btc sign-tx tx.json Please confirm action on your Trezor device Signed transaction: 02000000025a6bdf3ac73e3e7047380d484e2f7d58ea633a509b9a63fe95fab84d64(...) A provided script can be used to sign transactions interactively. You will need the following pieces of info: 1) Transaction ID containing the Output we want to spend (aka ``prevhash`` or ``a5ea715a...d201e64e`` in example below). 2) Index number of the Output being spent from the above tx (aka ``previndex`` or ``0`` in example below). 3) BIP32 path to the Node which can spend the above UTXO (eg ``Bitcoin/0h/0/0`` for the first). 4) Destination address where you want to send funds (eg ``3M8XGFBKwkf7miBzpkU3x2DoWwAVrD1mhk`` below). 5) Amount to send in satoshis - ``91305`` in the example below (multiply BTC amount 0.00091305 by 100,000,000). 6) Expected fee (``0.00019695`` BTC in example below). Note: the miner receives all satoshis left unspent from a transaction. If you want to receive some change, you need to send it to an address you own (otherwise it will go to miner). Fee is not needed below, we just want it as a sanity check. There are many ways to retrieve the info above: from a watch-only wallet in Bitcoin Core, https://coinb.in (`screenshot `_) etc. The easiest way is using the Trezor Suite: https://suite.trezor.io After authenticating, open the "Send" tab, fill-out all details, then open the "Show transaction details" menu to see the info needed above (`screenshot `_). Once you have the required details, you can then perform the transaction signing using ``trezorctl`` as shown in the example below: .. code:: $ python3 tools/build_tx.py | trezorctl btc sign-tx - Coin name [Bitcoin]: Bitcoin Previous output to spend (txid:vout) []: a5ea715aa99ca30516f3af6f622dfe7399d883d49ad74b1fe33fdf73d201e64e:0 BIP-32 path to derive the key: m/44h/0h/0h/0/0 Prefilling input amount: 111000 Sequence Number to use (RBF opt-in enabled by default) [4294967293]: 4294967293 Input type (address, segwit, p2shsegwit) [address]: Previous output to spend (txid:vout) []: Output address (for non-change output) []: 3M8XGFBKwkf7miBzpkU3x2DoWwAVrD1mhk Amount to spend (satoshis): 91305 Output address (for non-change output) []: BIP-32 path (for change output) []: Transaction version [2]: Transaction locktime [0]: Please confirm action on your Trezor device Signed Transaction: 02000000014ee601d273df3fe31f4bd79ad483d89973fe2d626faff316(...) The signed transaction text can then be inspected in Electrum (`screenshot `_), `coinb.in `_ or another tool. If all info is correct, you can then broadcast the tx to the Bitcoin network via the URL provided by ``trezorctl`` or Electrum (Tools → Load transaction → From text. Here is a `screenshot `_). TIP: Electrum will only show the transaction fee if you previously imported the spending address (eg ``16ijWp48xn8hj6deD5ZHSJcgNjtYbpiki8`` from example tx above). Also, the final tx size (and therefore satoshis / byte) might be slightly different than the estimate shown on suite.trezor.io The final broadcast and mined transaction can be seen here: https://blockchain.info/tx/270684c14be85efec9adafa50339fd120658381ed2300b9207d0a0df2a5f0bf9 Litecoin examples ----------------- Get first receiving address of first account for Litecoin (SegWit-in-P2SH): .. code:: $ trezorctl ltc get-address --script-type p2shsegwit --address m/49h/2h/0h/0/0 Get first receiving address of first account for Litecoin (Bech32 native SegWit P2WPKH): .. code:: $ trezorctl ltc get-address --script-type segwit --address m/84h/2h/0h/0/0 Notes ----- 1. Bech32 native SegWit encoded addresses require `Trezor Firmware v1.6.0 `_ or later. ././@PaxHeader0000000000000000000000000000003400000000000010212 xustar0028 mtime=1785487156.8354588 trezor-0.20.2/docs/OPTIONS.rst0000644000000000000000000003450415233057465012703 0ustar00Command-line options for trezorctl ================================== See `EXAMPLES.rst `_ for examples on how to use. ``trezorctl`` is split into a number of subcommands based on currency and/or functionality. The best way to get up-to-date help is to use the integrated help option. The full list of subcommands can be seen like so: .. code:: trezorctl --help Each subcommand has its own help, shown with ``trezorctl --help``. List of subcommands ------------------- For convenience of search, the help texts of all commands and subcommands are listed on one page here. .. ### ALL CONTENT BELOW IS GENERATED BY helper-scripts/make-options-rst.py ### .. code:: Usage: trezorctl [OPTIONS] COMMAND [ARGS]... Options: -p, --path TEXT Select device by specific path. -B, --ble / --no-ble Enable/disable support for Bluetooth Low Energy. -v, --verbose Show communication messages. -j, --json Print result as JSON object -P, --passphrase-on-host Enter passphrase on host. -S, --script Use UI for usage in scripts. -s, --session-id DATA Resume given session. -r, --record DIRECTORY Record screen changes into a specified directory. --version Show the version and exit. --help Show this message and exit. Commands: benchmark Benchmark commands. ble BLE commands. btc Bitcoin and Bitcoin-like coins commands. cardano Cardano commands. clear-session Clear current session and lock the device. crypto Miscellaneous cryptography features. debug Miscellaneous debug features. device Device management commands - setup, recover seed, wipe, etc. eos EOS commands. ethereum Ethereum commands. evolu Evolu commands. fido FIDO2, U2F and WebAuthN management commands. firmware Firmware commands. get-features Retrieve device features and settings. get-session Get a session ID for subsequent commands. list List connected Trezor devices. monero Monero commands. nem NEM commands. nostr Nostr commands. ping Send ping message. ripple Ripple commands. set Device settings. solana Solana commands. stellar Stellar commands. telemetry Telemetry commands. tezos Tezos commands. tron Tron commands. usb-reset Perform USB reset on stuck devices. version Show version of trezorctl/trezorlib. wait-for-emulator Wait until Trezor Emulator comes up. Benchmark commands. ~~~~~~~~~~~~~~~~~~~ .. code:: trezorctl benchmark --help .. code:: Usage: trezorctl benchmark [OPTIONS] COMMAND [ARGS]... Benchmark commands. Options: --help Show this message and exit. Commands: list-names List names of all supported benchmarks run Run benchmark BLE commands. ~~~~~~~~~~~~~ .. code:: trezorctl ble --help .. code:: Usage: trezorctl ble [OPTIONS] COMMAND [ARGS]... BLE commands. Options: --help Show this message and exit. Commands: connect Connect to the device via BLE. unpair Erase bond of currently connected device, or all devices (on device side). Bitcoin and Bitcoin-like coins commands. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ .. code:: trezorctl btc --help .. code:: Usage: trezorctl btc [OPTIONS] COMMAND [ARGS]... Bitcoin and Bitcoin-like coins commands. Options: --help Show this message and exit. Commands: get-address Get address for specified path. get-descriptor Get descriptor of given account. get-public-node Get public node of given path. sign-message Sign message using address of given path. sign-tx Sign transaction. verify-message Verify message. Cardano commands. ~~~~~~~~~~~~~~~~~ .. code:: trezorctl cardano --help .. code:: Usage: trezorctl cardano [OPTIONS] COMMAND [ARGS]... Cardano commands. Options: --help Show this message and exit. Commands: get-address Get Cardano address. get-native-script-hash Get Cardano native script hash. get-public-key Get Cardano public key. sign-message Sign Cardano message containing arbitrary data. sign-tx Sign Cardano transaction. Miscellaneous cryptography features. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ .. code:: trezorctl crypto --help .. code:: Usage: trezorctl crypto [OPTIONS] COMMAND [ARGS]... Miscellaneous cryptography features. Options: --help Show this message and exit. Commands: decrypt-keyvalue Decrypt value by given key and path. encrypt-keyvalue Encrypt value by given key and path. get-entropy Get random bytes from device. Miscellaneous debug features. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ .. code:: trezorctl debug --help .. code:: Usage: trezorctl debug [OPTIONS] COMMAND [ARGS]... Miscellaneous debug features. Options: --help Show this message and exit. Commands: optiga-set-sec-max Set Optiga's security event counter to maximum. prodtest-t1 Perform a prodtest on Model One. record Record screen changes into a specified directory. set-battery-state Set emulated battery/power state (emulator only). set-log-filter Set logging filter string. Device management commands - setup, recover seed, wipe, etc. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ .. code:: trezorctl device --help .. code:: Usage: trezorctl device [OPTIONS] COMMAND [ARGS]... Device management commands - setup, recover seed, wipe, etc. Options: --help Show this message and exit. Commands: authenticate Verify the authenticity of the device. backup Perform device seed backup. forget Forget a THP pairing key. load Upload seed and custom configuration to the device. reboot-to-bootloader Reboot device into bootloader mode. recover Start safe recovery workflow. sd-protect Secure the device with SD card protection. serial-number Get serial number. set-busy Show a "Do not disconnect" dialog. setup Perform device setup and generate new seed. tutorial Show on-device tutorial. unlock-bootloader Unlocks bootloader. wipe Reset device to factory defaults and remove all private data. EOS commands. ~~~~~~~~~~~~~ .. code:: trezorctl eos --help .. code:: Usage: trezorctl eos [OPTIONS] COMMAND [ARGS]... EOS commands. Options: --help Show this message and exit. Commands: get-public-key Get Eos public key in base58 encoding. sign-transaction Sign EOS transaction. Ethereum commands. ~~~~~~~~~~~~~~~~~~ .. code:: trezorctl ethereum --help .. code:: Usage: trezorctl ethereum [OPTIONS] COMMAND [ARGS]... Ethereum commands. Most Ethereum commands now require the host to specify definition of a network and possibly an ERC-20 token. These definitions can be automatically fetched using the `-a` option. You can also specify a custom definition source using the `-d` option. Allowable values are: - HTTP or HTTPS URL - path to local directory - path to local tar archive For debugging purposes, it is possible to force use a specific network, token or contract descriptor definition by using the `--network`, `--token` and `--display-format` options. These options accept either a path to a file with a binary blob, or a hex-encoded string. Options: -d, --definitions TEXT Source for Ethereum definition blobs. -a, --auto-definitions Automatically download required definitions from trezor.io --network TEXT Network definition blob. --token TEXT Token definition blob. --display-format TEXT ERC-7730 clear-signing contract descriptor blob. --help Show this message and exit. Commands: get-address Get Ethereum address in hex encoding. get-public-node Get Ethereum public node of given path. sign-auth-eip7702 Sign EIP-7702 authorization. sign-message Sign message with Ethereum address. sign-tx Sign (and optionally publish) Ethereum transaction. sign-typed-data Sign typed data (EIP-712) with Ethereum address. sign-typed-data-hash Sign hash of typed data (EIP-712) with Ethereum address. verify-message Verify message signed with Ethereum address. Evolu commands. ~~~~~~~~~~~~~~~ .. code:: trezorctl evolu --help .. code:: Usage: trezorctl evolu [OPTIONS] COMMAND [ARGS]... Evolu commands. Evolu is a local first storage framework. See https://github.com/evoluhq/evolu Options: --help Show this message and exit. Commands: get-delegated-identity-key Request the delegated identity key of this device. get-node Return the SLIP-21 node for Evolu. index-management Read the rotation index for the delegated identity key. sign-registration-request Sign a registration request for this device to be registered at... FIDO2, U2F and WebAuthN management commands. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ .. code:: trezorctl fido --help .. code:: Usage: trezorctl fido [OPTIONS] COMMAND [ARGS]... FIDO2, U2F and WebAuthN management commands. Options: --help Show this message and exit. Commands: counter Get or set the FIDO/U2F counter value. credentials Manage FIDO2 resident credentials. Firmware commands. ~~~~~~~~~~~~~~~~~~ .. code:: trezorctl firmware --help .. code:: Usage: trezorctl firmware [OPTIONS] COMMAND [ARGS]... Firmware commands. Options: --help Show this message and exit. Commands: download Download and save the firmware image. get-hash Get a hash of the installed firmware combined with the optional challenge. update Upload new firmware to device. verify Verify the integrity of the firmware data stored in a file. Monero commands. ~~~~~~~~~~~~~~~~ .. code:: trezorctl monero --help .. code:: Usage: trezorctl monero [OPTIONS] COMMAND [ARGS]... Monero commands. Options: --help Show this message and exit. Commands: get-address Get Monero address for specified path. get-watch-key Get Monero watch key for specified path. NEM commands. ~~~~~~~~~~~~~ .. code:: trezorctl nem --help .. code:: Usage: trezorctl nem [OPTIONS] COMMAND [ARGS]... NEM commands. Options: --help Show this message and exit. Commands: get-address Get NEM address for specified path. sign-tx Sign (and optionally broadcast) NEM transaction. Nostr commands. ~~~~~~~~~~~~~~~ .. code:: trezorctl nostr --help .. code:: Usage: trezorctl nostr [OPTIONS] COMMAND [ARGS]... Nostr commands. Options: --help Show this message and exit. Commands: get-pubkey Return the pubkey derived by the given path. sign-event Sign an event using the key derived by the given path. Ripple commands. ~~~~~~~~~~~~~~~~ .. code:: trezorctl ripple --help .. code:: Usage: trezorctl ripple [OPTIONS] COMMAND [ARGS]... Ripple commands. Options: --help Show this message and exit. Commands: get-address Get Ripple address sign-tx Sign Ripple transaction Device settings. ~~~~~~~~~~~~~~~~ .. code:: trezorctl set --help .. code:: Usage: trezorctl set [OPTIONS] COMMAND [ARGS]... Device settings. Options: --help Show this message and exit. Commands: auto-lock-delay Set auto-lock delay (in seconds). brightness Set display brightness. display-rotation Set display rotation. experimental-features Enable or disable experimental message types. flags Set device flags. haptic-feedback Enable or disable haptic feedback. homescreen Set new homescreen. label Set new device label. language Set new language with translations. passphrase Enable, disable or configure passphrase protection. pin Set, change or remove PIN. safety-checks Set safety check level. wipe-code Set or remove the wipe code. Solana commands. ~~~~~~~~~~~~~~~~ .. code:: trezorctl solana --help .. code:: Usage: trezorctl solana [OPTIONS] COMMAND [ARGS]... Solana commands. Options: --help Show this message and exit. Commands: get-address Get Solana address. get-public-key Get Solana public key. sign-message Sign a Solana off-chain message. sign-tx Sign Solana transaction. verify-message Verify a signed Solana off-chain message. Stellar commands. ~~~~~~~~~~~~~~~~~ .. code:: trezorctl stellar --help .. code:: Usage: trezorctl stellar [OPTIONS] COMMAND [ARGS]... Stellar commands. Options: --help Show this message and exit. Commands: get-address Get Stellar public address. sign-soroban-authorization Sign a base64-encoded Soroban authorization entry. sign-transaction Sign a base64-encoded transaction envelope. Telemetry commands. ~~~~~~~~~~~~~~~~~~~ .. code:: trezorctl telemetry --help .. code:: Usage: trezorctl telemetry [OPTIONS] COMMAND [ARGS]... Telemetry commands. Options: --help Show this message and exit. Commands: get Read telemetry data from the device. Tezos commands. ~~~~~~~~~~~~~~~ .. code:: trezorctl tezos --help .. code:: Usage: trezorctl tezos [OPTIONS] COMMAND [ARGS]... Tezos commands. Options: --help Show this message and exit. Commands: get-address Get Tezos address for specified path. get-public-key Get Tezos public key. sign-tx Sign Tezos transaction. Tron commands. ~~~~~~~~~~~~~~ .. code:: trezorctl tron --help .. code:: Usage: trezorctl tron [OPTIONS] COMMAND [ARGS]... Tron commands. Options: --help Show this message and exit. Commands: get-address Get Tron address sign-tx Sign a raw transaction. ././@PaxHeader0000000000000000000000000000003400000000000010212 xustar0028 mtime=1770638540.7565022 trezor-0.20.2/docs/README.rst0000644000000000000000000000036115142346315012471 0ustar00Documentation for trezorctl commandline client ============================================== * `EXAMPLES.rst `_ - Examples demonstrating how to use trezorctl * `OPTIONS.rst `_ - Commandline options for trezorctl ././@PaxHeader0000000000000000000000000000003400000000000010212 xustar0028 mtime=1760000640.7854953 trezor-0.20.2/docs/sign_tx-coinb.in.png0000644000000000000000000007017115071675201014666 0ustar00PNG  IHDR'ztEXtSoftwareAdobe ImageReadyqe<PLTE4դmЭw]3簊t̍UUUөUlXwMxwwڨśvwȱݪd33wv#ȵhUUUj$wRkUT33aғ{goTbb֨YUVף⺤yyWStyřft3TpɓU~̣ܵԺҿἍUfff9=KUٳmO4޹Re|ueTռۦ_լsݳ$}y5umql3L¾xo˜傫63߳xƴr8ס!j?oUZ33И$恄RsZ`u刴{[UbQ_$ក^3cϟkln纙yv_b_ɍ]3cƢm~x5r`s޼`Z`&;eQJx434UmIDATx@Uot a+*?L?jfAyM&mm?ݵ5]kmk[_f9gA@ф/393ϼsΙ͕7+h0 0 Ld L4 2&ВM{V>˷Dg @\YqϓC8Zo2f$ǯT4+$ *b&gz6cǕQ^k 6G蔽,s:ziiT1\&GE=Z=O듣ţ2h}(S(o^,UoX^%ne%n'_/iI*p~j-( KdJ2uΜ|^滂Q8yԉjI)gɥes1N.6\סa(Υ ˧6*GKϿ{e݇;%ت&E䒊6,6>ҭ"Sc ܇zQQfԲRzS)>aZ[t~s&wE3?n%G?aG KQ|2!ZFVd2DbN(6yNiYe6NpeM62LvL್T'leeJ;~4kM쥶ҕ?ZďD% F%fKA9ֳX֝ͷQm EeG5]TUwU8CƎQkcc{Ir'G/_qT=Qe򜲣%'܂XZ䲣?zLVd!Z,tU6FVOT _YڑDhjj(['>iY grGӚd2_Varq[tm{CO9DO}ڭCކN^Et9k;uM|q5YgPWez/N+ HxsL'}TkQarZy:P?'_3,8NUc9!#Çj4/FU dY^NuW|%8ޚ1`:L&kw&LKzGK{J,p%x/ee4(.++r\R[VVІoOsχWFgWQBшU:)Ŷ I4@VzqKR:&*#ߍBfGIBkL=;B__gl#M6Gcޅ&5M暩~6N#Q?|ܬW 7w:N҉-f]zl *ױ|!B%{|yEb\L-:HHPdo89+r\'kdb[Y.ZW;Iux'.79̯7|H飸eN'/^̸N; "ֵa:4Rn](t&&,|jɕQ5k]S3T]/Mnw}H'/4+Ֆ}V3⓾ԝRۧIG(Sr0-u&l^h?xvìPu9ŵnHP!5Cmj9޴it7Xar0h˗=kuϚf\&/DP_zF @qY)xML*{lXG+ճJF?2x.jD]G1v=C'*#Z^hrCQ89U#,3i1`4\UM}8+6G|%MޣkY\tqZɵQПou5XU֔/;R=sde4 =q reu,)&-=J&*@\|ϧ גQu| 27mVv?-ЄOڿAKxY4%W;N3JGŹoPTJ/þ:N.v+;+-.aq||OaOPy׎\'Tݹ649'29c2enn%7wsnCC^ ng7`'2JF6kcg_{-o&+To50 d Ld L&d`2L&d`20&a20&yicZ>0 dLdL&`2&`200 LdLd`2&`2&`200 LdLd`2&~J=BZܒV4Y&O[ (M6Mtǧ@4n hNmtz:nrZ1?kh&MI[ B17d2lǸqvp/Tw bfq>&?[[c~{OiTWSΰUͽk=wj8+YEhs|Z\S5x03.ֻD zxl3!.G-xś+`?k&tKۋ>һB#wy0_Dn[!kKP fldQ{ .f3wmwss\"{^@|֚sBSkT2X)Û嘵<ܗׂt&z&W 7MTCHW%ڜCm7Xl: '&둽إ)$C>h=^%ɸ^N'}\ľrwdEf.ԎΩ/cC:ɴcZp:/TmIԏƢ=z|!D[k&5U8DgZ|%,ar #/=wTzz%$ê"0YT\MEՀkЬ*&wF%&mM^#pMgo_R 'DT7YHMW 4*&Gu8CGj|ɩ۟Nz0z)-ݜ=JKvFn+SաvҲ-}QKIJ}ۘҤ#l357/{öEgć9Kn%kZ:G]MȮٞ ebpSLw<0dcְ_FbsZLfғZ,|攘]{Lwj09OuƿFKICTuC\UdgٹL_3dFDUFҶbbrVb ,31ѻ^Zr>7 ,idW8HΛPÍ2yK5Q΁$]׿ U=N>멪WդhO1:~Y4*əڙ3TǨOGsklL ) /r_DOx+5oY %z:\M5ٺ _}&r6MVף&o=Rr"۰(&;Q`i\0G"VQu2n(&,ssznR{moz뼑<_B*4*ھsr c{sJ:ou Z 驯:\L6)l$&OuN<KbK7o('{[3^|֦\4UqZŲ"059l\VREL63;9yX@FMrյdV]ڌܵiqULCdqNiX;nY5DAge{ lYWwq!HP=z~{Ï,]VYv.zpe&P=Y&1/Uշ9c.LxV_>.7dg;\#LT9W˭F3]*:3Ĭ"!%[wƜ7RwGdy+0G}ݪk3&5`S&]24R:/9jK-&!=իIEŵw-z *LxXkܯ29AQ̹jɶ P4vΩFx[5]ɉuGԍ.2W jðu&AykdFY֌a&sd%ij=SMN4]a2&/jyW]zԴ0_\7(|՗ߠŸ%/5e,,o-PWzbeJ6iYvQ ~u1bwmһ>k:JͶ򋸟l\Vc4rn*3  as=M"1aD~޼',m2S,vjsŹ`OZm""i;駻%r/e$6M7V<6;N]jq19uj^"\6bܷrlyѵ@3\Kݕ]^G'Kb#_9]ʜK>j#o558ީu>3.+Yݩo*_Q*[9Ns_cRw-+^z7ֵ$dLdL&`2&`200 LdLc[p}nEK?gOazLnZ)#98@+5929kR>Ba2_/Qt8>~]7u AI_7l?"tYg\|>G̐f1Z]M aF"0dJ6=p)-~(wgQe5,*m'J.g[>32lGzm>=(oGz1U=D{J-ܮG$=N4*<9:M]" gYHkJ~OyK=m \'E}5ч3遤\Ҿ=G?XIöLmxԼlc97"UrY7߰oy\uܯ.tOYLCW=Bݼghe&/3 Yi\M IM9گ,M^?Gn}Td\~VN6lD=^Hz`\,PQsljLY45#QgknCs uio#+S"ygh[i|Xɍdrd*c~bN~+Oo N.];&D=!'ό*t㰸.%Y@QwP]4?o>?F*MfYHԟz}.fJ>(oR}G8sX@5xlKtrͭ,@dcxzddru'ņWJ6&uNqj~?od&=:ɑ\t3_Zf}so<ʌHj]V&;CB5ݛgqѢVq ɠl~a̦q4v"| ٻw4/kJMsKm-$אk`!5SMrZ"wqm>,<2c>Z&~r@O5LV&;~!Dr_ఞm7bw#`2hE&߯:dy!k\`k^p1}d6g~zr}E>YCkF/c>9.#G|ޞb$ior#G@!w/ddd&ц# ݾQ7ʥ\W[&|>L} : 3C&Gΐy! +:#0~Ev~cz &[?=|=v9?вLNP8,00 dLdL&`2&`2?O{U?鴗|F=j(W7z;vcrcYڪQG>ܨ:R?-/h/ @#MN='͇yJ"y[?苩ݵF\Wu^l< 5h&{7oqB$F}07GUUvQ²1'G-s@\X}2Ldc@j;%m؎ez{ڜg3qz,=3HI?Yx*dR`kgNm?::x*h/L0H3?+d4^ΏXzDYmЀm =?6ڼ6ll /] 'k]Qw w#gu&NJMj1 L]U~FpXCӫa ;&oGfL$5&O%KmeWHz۟_¥4s;ĺc6Xx=xN:In .Z}_/ň} Vk2?a4%ƱNw,@͏aы7铽Ic)!/,uK#iiM29]׷&2\=QGU΋N j1{~BYmmĐ\|֢9N^_Ts$]1:KAk5yʽD:JK"Hޯ8Ac( ]'A&Gs&<<\+e([&o{n ȝ&''߭AG^:w/gOVa2C^GiAk6Y\I>Y@qۄɃ :sJK= gx۷=&z.Tz+ILNv'^99Ab2UI7|K6}RV6Xpi-نqF==?2jɫZ5Lq.1t(NHɦɛ\ØY6:-ORK<K"er#REye^D^ώ $1:V-'xm;t" V=Mި^9:Vi3@k59[b$d~2-lnLkvN1ҨVOd^Υ#`:讽^OjIJZdGd1pǜBF\W|o2JM&nmy~Rd8E}!9˜8$' +KջNu`^?󉍇9Du5 5;placHD-S>0fANF69Ⱥx4#h3^.,yzf|?1uj9RZO]ɎW֛E :7Yے^lŧ~V&7õٸB[˥|UuZ{m^lWLY [f;x.ۀs^a^:&(a2d&kq 7θ5d Ld`2L&dZ/əLEL~S?,뀱_ŏIƃ]l^뷒dnr4O֞v>IF>F,.L85GDG cEVBCt4fE(28a;C998'mI6Ӆ_qwL^r>Y "|7CpL~ʓd/ʅwAzmuqC&Lckg*a9xsԸas p;G@NĈ3Q~|VQ6>2=%2'*;T3l}5M9Sd{ȀlW*$1`+T͙or\Me/EW Z=K&ӆ>$fTb g{G%x(hQWvE=#|qdQ7KƸ*o+ø1]{5d2Wg=-{DL#bGB2c!6Ř=Wk{pzvh3ba8f4:3Mu;4,l=e;s7q3!GM~$j&8qC`c1 V8ZzGüid)bWr'qd\c 28qc&tqK49s4>]J_?%zwa=oY uWƶmI,A8ڲ_yajirKUV23YWg#8 " u% ilo&੢^3fO3{0 xc&{/rwLz^4/)84X7H? )N2M^Nd4yM΋D]s=;ƒӍaow7'rt;eQdc06qLc=6Tx[d{?1b, s'핕M$S`2&/&k;Eorn849Q99Lm㕽pEqyuGd%fAS?zO]sx=j,ꃍu5 InY I~GDM+pfhտ|{Vc5=㫍 oרQתߐ2lk2&a20&0|&7 o0䆞اd~B|*@kx:E LdLd`2&`2&00 _ns09AUۜ_D_ @KP9&/`200 LdLd`2ubuл2Ai~fu'W5*-s҆&,nm'9Vki9r~;ZuH#;uڤ 9¡ܲj'͠滯Y_ݺ=<4}Fhі*:ݺѕ#i2]R㺯p6us;u~vLgm3nHJL~K9-d˿gWOa_3C֗J ;%./`տOJIeSʄɝI~Oߝ2*RT@W*q%'zդYgzSe )5^r;ZN9^喒/ UQ*+rF}B%>)q%)| |ܨle֋09_1y{v:t̯{8/_ d:0&'Lj/y84i v&byTp8m$_! 2#}zxʼ 2 :MFewWD"gTiUz1_|d{˧Qdl'uaառØVbr٫*T%%j{;I̾| H)tKVy,:sY[)ߩ :zQ{VKa'뾖z<mucyOwױڀ  m(ʝ7sL;K-YG Ȥ}&@>|tdkl_ 5ZiLY)خRɐ!"_h|jr}oߔ@~>k:{TwO6u{=SrIə~Eڐ)"gOɬ-mao5ųRDItmgfɗl[.:kp"{MPzCZg/yŨ)r_73l2䩽>i3ʵsE=$Fc3}< L.q }hkbڒ0?4ܳ;V;0y-P_.oջ6M6{O9Ia̙3å6ϱNwO~RJlbSaWë))[g }u_E{̔HM>I q<|qIga@PD vNxħ(*s 7M.^zzO Xԙ-)D\u`%)abV r#0N㚅E6,pUȓMEOt^-&hT.M6QԂ'xɯ*jϔ+`L+Fp#~pW*=4Ӷ8NSɴT'G:i&WXZYkm"L[&o&WuZ|MiNJJ1c[ʳqKR}L^M=on^\M>)ޙ&u<iUriUs5_/د<\ALk&I+HEAirnݴifLDnbWdk|HLFv>hWnbkL#ͮ&kԂ/}+S ʭ.Pd/͉(M",ž?%S߃gd,V^,,GJ֙>ZT&5=DgyR7~ȳ&s6/ S۹,]Gn)ԃ}3Z拋B-(~>eN_F6mZZ&S}aL&Ƒb듘l_?.w)d>aHs״/D _X g]=Sw=RHOJGh qYx1 9N$J;LnU&+S 1I)ŧ$2M&}z؍)b8:oC>zS \I ?e"7LVPm4WLU^4N!>% ?7 a2e}kPWWC2w3Vt#,&Xvzj(}ev V<ҝIk%{@ : h@j`|o~ 7TWKj>:|u|+9F҈/Vޒ{&fmѼCޞl.LN/uV\aft:tzLpSis6o@6T 00 dLdL&`2& *-k //m mNPm2dLdL&`2&`200 LdOmr6ۜ \ѿ(mN6W{ns^u&yr%6m0?`200 31LRM~mfTyU=Z;a͇[WW?  7uڼSI6JNsRo׵ 񺫻j',kb]ƛP+M~H BOWhZLY=V~ e[F!kg/"f%5A*V}}*i9dM ][Yyh_;k7>?AYH{Ѣ0V4_)CZϊr}/Pžk(j=A z]ea+ijE;Y>cûݤ@CZ2%k~agdMԂ25yOSssWwwіњ=M&;5+(ީQzO4iVi} 6.qqq*P͘|s/&.߭C7]"2>0ˣ+M35;5w^ ]yuɏSo*͟?ŋbQLɚ,-hٕtH uLUޜbC<~瑧4֝N=ߣ!vsWquH*,"s16eCU8>1nmވ ̪yz9Mš*6<2|g^yFӶ&N|H;9jNWn(ꐶ:L^wr d2VqgmparwjdnίxiwVOw4_VnW BOMAXts-W 0&G iViiMR|K p#&WלeKץ\M\RyE7Q_w/_ |sy|xOo2&a200 &_/^qݹܿ&ns.*- LdLd`2&`2&00 dLkpCmC+8yL>{]ڲW0T0vjM8{LwN2&dL0&a20& a20 0d A+4t=9}&(miZNRsU.R@/G0d,iCj5Bb?L:gP\w"nmPq)Cq+V}Ƙ<ȧ^="k-g{ J cH=.O5fV!5+?iG;L-.2#^\;إoaLygsS&Xei];e]mp,]&Ҳian6lsu{/m^eutLP3,B9Dc~TNxF|S /+kVgEJvMψv tu06);;*m}a2h&?D흫BrlߠZܡrm]}zcq|TmdwMP ͥe~{ gBEJ?6+Tٿ"A}O9(C JpMmsG?HQqKU2*3~0w Z]WjGaHɶ}oBn\vGJwpo^:4F>wqwZum-.i2'U<2$O'tL033f&1 sO읨b70jf퓳RYl L-d ohZ>[gRGPͥqn2 ϮR}B V;QXJs]IX\]^Vb7NlDF-jG/cޯMGE<1GZQ|2jf(`2h&FEuvazU}K a68Gݩw(pv5;8ssV?۬r)euSy벵fzjkɬfnW} &ertK4~o]w/M4YqfWn Zɻbak7֬&@vܘLV#0& u`20 0d Ld L&d `2L609vfuFтc250 dLdL&`2&`2000 rcE ͩ{#u&1NWչK@3CsbڅGXMcspfr^.k%9*ciuWxXw}_+.j 64Dع-h1&{Č{p&,\!qpGUkt+fzXW9Nk\O~rii$2lFfMJGT#]/4Y 3(/fEѩyѩ_if3T%zX:uN'bܾ8=oꑴat)HβxH2Z't7'l\(*Z[v~tmˏn1}(2s&{5"L'}Ҿ=G}}ȚP;vAm>=Wޤ.Qt3遤1g+"l=3KLbDMz]O?~r4zCm'/L#7G-立 ۇ)nxYC?@Ϥ{^anafd#M]g[Eu&h&~{rL(r J=7#wLsD=9$zԶd \-y&:iB*=G,2m_CۿݞVq$,vNK-/si" bz5\rj-t>[mܹe,!빶Vs\0D#"'Hp+9N.'䇈"!6 oխzN685~NjܦPz@R9+w0ȹe1NY6vl+;ԭ|,~<:3{9)VYW_;jdyX"NQdGqc-/9y}Ls#_0M7󛹯k 3dLdL&`2&`200 Q^MA[hRgrGښϾ\WIktQz}-Ǜ>l E`x4ڟ~qg㝣WZ8,'䟃f K7L_nN![:Sŀ5#mMfN ɟ rw3=BhOg<?h-&GnxmSz#Ln\NB=gIh~dсbgуLssDDnԏmj6qno'sH49ƘAcxN{Mt2O빖⌞A+[#5t7uar 'r N/1R{ybo*9:hhy=&?E~Al>N\5SZ0Y٭d+>'hqO9Z3:-{j+2Y>9X#L,żg? UD58t}&jԎ{IA=!<#@!+|x8hMdܱL'Zs;Py.dJ~1ŤHuSdg0,œ #GD:]қGN {cXL闢e:L&3qfC 7xGzrX/9dcWl/S^sU%NymY܄#77K^u<{ɫ^Ot"ZcG]q&ߺ#&nn䨛1V}[iZdU5n?$?>l- LdLdZɕ^\gϤ+ŸmrWppK jSngoa|Cp p18&MQf7bQ2EkDMLŸ! ZȌl&C[)7tvhg2CCCSq-dj6LZMnb ;od a2L0h֯j <^4>b+L0ED6'dSM>]UAWYNXMGLj#IjS~pEf2v"ibe[^]Aөxz]wU=Ċ,z Zԗ8V16tPT}FR5Q _~z/=E咙m_e2dl#mW?Z>`L>+*X?_ 7rؾ;6{[lA37j6y:eJl '`ROSvxzSCzZuq$#YVU4%A'=Б.+̻njj7w|zy::_[JkTTԃRx˫xƈAqQQWXNYa>兀x 3#^~Ъ䮾o ҔLh;SlḲY4b}t%_dogul O_Lꢻ"uk\ƶ/?Vx oآ;ݻR)0fn~84@RtgOD?=[V E(k5ֱlA1oj}3‚\{GY:Zo&;#Q/,%A>/cqJ!5&F|Nǩy]f5:GėCVP脉^[3T{+҆uRv_EI"g=(C`_Z}CXTP-**J"̕ӥ9,RQ^ɲA$q̱# ߗ5 <>Tn aq"J(Q>Hzu$떥7-ՒZYO%lLL3*v_/n'L:UL SX\\I@FB~Mcp/yvSbk쀴$~{d2`=1NN\-U4|{[g\wT_.ϣz9aigJxk;SU/?cގ >L>w2ҽ:>T5W05^UdL3s@P07,yJUC[}tEAyAWi 4޷d&ʉQ_B Oב47-+` GJ. M ٸ4Ͻ\'ъIkyy0XDqX[xHBcKfgTyzw7Yi"L(wahdb8]vl+cRz䰈v>Qbw: 6(o|j1 5KNFHF9!+kTsl<[-Օ\dMM`BwYL Gnd,ca!,_&] L[3Ktul,ISzݲfѵ<rOJL~MN i7rG[IkrrjD%ٱ ,mkJw*zZ%iKTEzwdnjTRd*0{?1>QwO*c ,5-6Ep%4a9̳q_[[([;g2R'? Z?q}b'KdN7:Lz9Y*4Y"5z5פ6QNe% ktu=+Y[zղuˢA9G'S>p": ;Dmy듋>(O':i]6o3Z;nrcKS$wmQpǣBUn2qMnWK_XM<:/iq&G ZQ Sj@Mdݗ`"Oڱ^&s:O_dݜ-ۓh>]CuMQ!tJ0mF91==*uer#]o.LF7'M64z}ݠ nb&W5rbY>4$i]r$njfG=SǓ)fr*u՚~e21rdȉL1Zsrz\"-a< lY询z4#F.HlhYdY8T!Q[-?B^䱾>,oF>IU,LMtE-?6Xo] -/u&&)^֣)iYzsX禮~s9E}}0YjCRF='^n6pwn>G[&2&}uM.? C'^4^x7zwaG+L@S'|ϥ:ϻ(, vGguvBgOԚ9-tNeXrtA4ذ#[?MG/4@өyf3,&:@v(kzߜpז()$7˸#TV"2:&Emҩb2UϮejiV(e2Hġws'NuR:=*R\-u3v#QWmLTODg,CMPaǼe9cdaQHLUFh>I]H Q<&A^^9=d>,d0n9s_yԱ0kAk2!x̡*m b~(nԹ^{M$uMJL&~CS͚&+ $6ϋtyvg[/ud7ݭM ~hM.߶N>{ֲZӌuK 6F$䂻,VK)1˩-YuM.N}v/(Hɖܮ'[hu}2&`2&00L:;}z5*y&WӋt <ɟN3ZwӉQ3y*dp'lO7`20 0 LL/h/tp}X6CΥ4V9'׈a DMPcRZcSZ;EmxwӇ}'Dim)]039>\WfD]-ZőoׅXj#yԭOa5;U۞g OO`M4~,-'J~ꏃ*LX?I_l7ؗ1O`BMN6,8m r%L-ŴT:WhLeσn. 8gc}edrw TtWX+ f/c Dli-n;*EpS)}:\dJ͐}vW= 5ٶ޴t(Grψ#kꍮk>6ALd L&d`2L&d`2L0Ξv&_xw_gO^9 DKL 00 LdLd`2&`2&07n޸Y}0&FT`bM !Lo$7W`2&a20&0 &ó㫿&6nX÷={d&ɿvԙwd{\ߥλcɭy/̈́LVRwKʥMPR`?;o2oq.g|&ir>TzZ/%u8Mǔ:3'6/`2F~~:sy}$d&Ty7s.n2M_:4;iL/&?4 IM~7d&0M~X^L=vd&iro9w:ş9;2/`2ut o{(پݥoii2cM* 49/oY_?*V ]0L_P00  Lf oLLKL 00 LdLd`2&`2z{IVeIENDB`././@PaxHeader0000000000000000000000000000003300000000000010211 xustar0027 mtime=1760000640.785611 trezor-0.20.2/docs/sign_tx-electrum1.png0000644000000000000000000003155315071675201015071 0ustar00PNG  IHDR xtEXtSoftwareAdobe ImageReadyqe<PLTEhP GcҐ 򵵵Տ+0/3aO ͹کye-ٹ@GZէoǬyNғJ^k־CkrF<t=1I 8?yy5Ms?T݁g1ۓߨ_$zꆘw]ÄWR>DCޠK{|ey 㡣:c!`471IDATx Cֆ\@Ydqq5.\I ƨ^s57L׿:{jQoZIMwrޮyT}u9/,| I.)|a!I^>n;PY'f?ޟg/k, 灹ҷ[q:ۈW|4(QKRW{?(uJ΋o8YZdlY+g:GzF6>˼{Q^s;}|TyeJm5[MI+,NC΋.|(ig.f[޾-ӽ{'}덂ӽޔ)?9Nt͍+/O}eSPҺ>|~dӉ71foIm OtysK9_[Km^2KӨ׬JSNrsr!ev^oI~s>] $_W \w;!թRR*w;pC`߈ds+cY?$S@+ܺ76\QNr}oUNt]=?'9'sw^?M}Wr͙$-['{)/(맩 s5DٱVky 9d[3J>J>`F1vzn䍕$lyPjoF3Cs|xHvbc'9 5vFr̹%0u^>}IRd.#fϥצ%f(Ov,rw<27R:}s7U.J6gJ49:id2W.ue%޹fl7OJ>S'ftl5d%LMjS%6~jTxy"q6MP*) HVɧm_5Eɹ̣55‡sk.N%ty/NOK_zI>A] x "1lqFzuj><ͅ6e"Eu6v.sQaK'Foʱp7֪e{$SۭR UMLx}k%Mnc~5`\p6_hTkݣS? Z{GjְeG%21aBTHʯ(l\u&XK˺t J`Ϊᴹlֵ$_ۂ.jN][ntII/.|:/,|6/+j9/,$ɓ)$SH$O!IB<$y I)$SH$O!IB<$y<$y I)$SH?/v>w*gkAOVjgaez܎ԙ򅽣?-/?˟{Ѿ}b^fsns%IGBulFj\r'w~1;̚W8C6g̎{[$o,whz܃pN{z,ߌe6V.T7,wӵ|}~h ?w>2>Lok>7k%COpf߬|MI~h2_ju ] JΛFkh ~x2h<|D{>SH$O!IB<$y I)$SH$O3~>aoRL$y[i/_,R lU.H٠O L܏qvSəK\/1.ԇscR?m`?[5tlmQ]kӨmdludzhɍw#{6_KD~ĭU*Gs]?T_PIX5i~RtAYjMe5ty[д䦊Bcji8;lzu&GsLC8[i_/RspL:Ƌdt9-<:QZGɂ]l(Y%3޶7C~WN~O'-d.aN2o~ݶyK-v Ll>FAU8wGs7|[qL5f=cqx2۲1'[snUcb\W֚NjtY%[8W#] Զ=c؞n)Ue\=BCVfՑSN>Lve#"fӯ lf?LCMydcՔzT^\GMWH glcpL(C8HgX{sM2CMHN HKlű*cqsR3(ϝ/˝N߭<6P}ӥm[b9dQkd'zWK Ac~W t=Q̨b^S[#^F,N{Ot#k~ݦM7.-Up<\'-l\> ٠֞j䛫|i)g̨D rEc*=-wة~Չs"ߚh#[=w dǶ=˯;,-=m7 qSփ9 Y53r>htq[ LqhGNΞ]QUA]ŷʞ!7M=l%7ARInNӗ6Jn-w0WUv܀흼ֶ92{{بdg=%gAz+mz*ofHOf_)]s 7>dwht[q\ca[Xw*m|nK,_Nº8+ 3x?c6s05rzs@~oJɝ˃<;6e5F/jhVًБʍDӍe#}ю!фo(Omz3Vԓ[(]`%/i6|LѶ\O41ʳ~{] [qL|A ;y\]'> ~1ɂf/wsWaN`}}Eƺ+;kp;3^6Rϻ/L>t<@Kav"ob;7Vc ۫cu5@yG@ߛc#=5MZ_}}ݮ=OUد4y6o &˃¾Qsޘc*?[mbgQ՞ T\&LE<"#x3(Ma֎Mbͧ\AӚі}|/i遇:^Yhsnd Yߔeȯkz>gm+{N2Zm\]KaHɼ^!=hS?~Yc+^>Wˡ O%d 20YaM}`_$`/r,Ak㚑ozka]j-G}^LؓI$y<$y _`B=Fv|-%q"\gj2sQcy/FP^W]1̹%nIZ௝yGwN!.Gf}LPphm;]6L6_:kz聋=]lZfY,bG-GGzk/R snw+~GMUvf7&9(J->_RFkѮmx߾mdAtVCx~L>Hft(X^R 5zm{\bƵ{kb|1ΎQKg:4_. a#wV$h-{ :.V"#3YU zŮja!z̑K#@͵^ /fi~(}l9E@^x7Pkҙ#.aKa7h} .[6ascctTw Ue,gD,q;s올^pV-L>Z99HXcZbj/fo 7!έiy*XD5!ܙ#|2 WǸܽ6[6k\?ʅG`lk◪hm[$&XOLVb+"zŠ`z̑Az`yR 5h-_hc0ն`a!jBV3+GvWBc\^hKʍ`0v`ࠜK" ͒ "Y 5ͮ!q"\#X%VZ_˷5nl{[Kwtvc;1Fh%-",[~Ga^p1Ւ\Iyk\E{|a66Q _wa`-tO}U?Z>$4_p9^h6Ku e61ZA`Yb+"z{y50sM'KAy9avK1V+i[~wwk&ɪ/Hgn>Ow>G(MO;W 1``]au bɂ8^ .nk >|/~h3f/ ~CԤYCn(yaoI$y>4bF\PN Σvɇ}'[@pS%5CHޖ_ ;d{H>3Yh8: }])Ofk*Fn}=X(Q;;o}WDt^iV~brv/!;d{(>V_qmM0^Y=аc(a 7p.\%hŒC;B ,`hoѩ OJpO덎Ĝ&%]݊G셿6s܈QA@`-LF>Vj>PF:n{b@w}= NB ۡvG\s9:͕.@7:^Bp#Wp45޲ڭL{![QvcFҞ5=buG>ȳ]!f/oT]vagvtc&/d+Ht4S%}W)#Wp~i cH &+C-.߱3iX)7f(GJ9QslMq>u'ъ!]d9G9L y;[,t.c6?#&/;Q@`?kNw/ܻ͌wԱo ^>Gf'8!l0j(y[ aˤ Qt=Sʣ?#v@p|G+tb`8lR{Pz ZcToqɃKNVty'//!Dyy ?ø2Y[u(;|+8G(6WB{](`YIʇLLj__xz׈F okuOؓI$y<$y _vou+|J9I ɾkc]o^s]৤Oq.gVGLT[SKk^Ьu;׾z;V4)yyMIn]Js<$10fs}XכӣgO|S\5oz rylŮ40ȳ$u8' ah^ l"{[k|e]}oݨ3i9-sF/`D[}duYGr6o aY`"wMrRiފ]ypu$10Ƭ#B߉y3;= ocOqہp}-5[oaVFJGN4} jfup$Cpv{7/Whk#m3:i9VJ0&X7<ӣ `5v([,S9tݨΐn5Ju1{iV`Yaɥ0MhYHu\wMˋUͦ(y!0oAk.3' p=e]>^xQNz}C,n5:nkU]n Cj$Jn}BC_y9$?,pݖ$10n7ryɂZcO V n窷OLΒ FZt}G]}5)Yaɥ0HrSEykx5y/r|D\3$ܥL|yeztAHݱ_ۑ9I}҅wFvVӢ:`Cfo%n|ֹQuPtsس{*1M˭v+vݶ\ܯ1Wx!y;~.Ѽ2= o֒cOqaN[ލb֒i:޾ǯH>X9SC=Cd{~R%}Ͻ7/IbmNݯ)I \Ǖj]j-9xX/n]`Tբv=fv߭>~ w:53DwKEDpWs=yy=\u G<@"8x]e#;#Vǝ=jO(Bm'a_7|7{C^KT+30xq^6g#w]Wa߭(g2L rXQpf禭~—kZL0M'$_|}@ 6 <پrVyܶVڧ-ys? {/Fݪ;0]I@ `Zа2iAh 7m<.zM>X؊6£;Ͳxgn0uVڇs%J;g|॔eKsi7/y0DK 0jԷiZP78i *`xM ؍ > $-y`.<#܌eŻܟU^vFuqWwS\u+ß^Je+3,MJF+56cr9 bp9i]eUyU]&f7,U޾*:S< 8Vz/ x ^JyـIg 呛:[8w 0j% jA_ʙzZ09vk h:3s ;lpuߎ&µO)lP7{=I$O'ɓI͚'='`K<1hq]n^yͺ 5 kCcc|NEeʔ enuG7z<ظ{ zLУC ߥ*9~Iϭv:[!V6[XV<W[^3{9;p=bx}VZ0?TtoDGk=Zl{ xKϺ*9Y󏶄rn3Z. ˑ:n^yu8^|B=lώ޵nMtϓݛ۝}LoJt[VmAE5M-% |&6!NzH-gpn@b4CFY<=^+p ][ KsD<%toJt2aڑ2] 4 /o zXg.MlFrfMc\- Y1i8`K6Zfxxl} 0w8 GJnMtߓ]`[o})cnu#MA]4d’~G[7k;7.J:[Z΍ρKhukf`o p1U-2>~}Ov`boJt s;u t7%pw1o|@aI7-Y.|@hz53 Cr{Ms;xkIbϱ߭{|X'sOl3M"qoutkǫ3+QiVV< H ܥ=W^ny<{y<׵e1k.45Ov()-Gl^i>\>f’~[7UIzF UHIR +-㚅ϭ om8zuГ]`9R21% r̭~Ķ[ޖWth6P`xRkPoZrq^grn6uqM{N7\f8>b+Z]>aa]*Fds7fuW\Xݖlܹi]>^=]Iޤ}I{ ĭK8w R^yn gu:GGƁpn UK?_} v诿||j'mOؓI$y<$y Ac1mⱊMno9̣ek^}7b)|ɉƱ6X`a8XB k1ywKO#H^._ Ӊxlk2yͲߒjKOZ~ɭ#p34c =nvüfoZ-nғiԅ1JXsT9kWDߍXzsq^Er&FY2yw."nғO̺pS/{+[ə9k,!rXѲr+F,=i$WnZޕ,qZեexhw#h.Pѽv 䟫ƕ7o@$g)vIV/$?Ƿ=IE]U+I:&_*m $_Nv4E'?Qd6$zK4 _fzY^Hnar&Jq!I$O'E>JSCx䣹 "з %Ϭ仾}M5?%?bVeٵEr8ήh%*4|شw')|\mMަkSmqdwJVY;k?j5!=XxsGVYK@7IǛ&zq_,9LhrfVC?_#MB+ޣIf%/w =ىP}9ann#/nˍٷq&f.k^za|^lj_hqE{4Iެ=E|v0InVXn[U.vܻ|mJзuST43WF̅2{oO|?۲oM׼8p/t Q\Qz!Ij{1.WƋv$ u=y9IL[VA6{~.~`GhVּ8'Fq&Y=$Z_K;ǸHnGz$_=;zOtߦ7}q_xyP.Snx3C-ZىJ귆vsahk|eA.FGH)SnL-46t^SKko[+L9^vEV)T{%BkC5*Bd裋B8n"n^R\-%g-qw|x ۽Qk٭؝Q+] ;g-b-žOeta"zq/ٵVJnB`wP".wK@Cw2A"% 9ifñ\R]U:ܻ@9ǽjO665@޸}ŪϺG#q/Chm~omϳ5+Wcܷ~97Fyg_,J^e~e8tqOČgݻ-9$Dr4ȩ"{wa!,?Z{Ҵ;˟Sc:q9иCp A;w!Cp{ޒZ Š >>u7RT#piEOlw]p.uר7}bx YYy+Ka|`P(,8m3jJ?ׅc"#?wSW^`lָ,k{ YSMy\\P{.z/T7.3zS&fo>FN|iR_-ZB6)BkVy:w d[]f㤸D@deGH9,dno8m\l^8{(3!XJLWk[o> fGEsgɄmywW+S5B3Y.'Q3v[LU1[WwUa5Սʌ_\.؝Run ?{T7%_c)T|(뵄lSi լJM~s tZ[t33qZ:nCz~oa]hmMYŖ2 +GN_4ȃm:oNK&(Ү+-#ڭH~J[&5nò"YBSU\#lu"s"M|5evQxxSfJm=v[=Of]2-.ջ}|X-MиI+\iVy&L~G<=7xf{psqa{b3lb+/-"H$3B$~~;ԾضR^hMme CEz|=|ؤ}4lݫa}uS(+YχH;U55V*0ḡ5HS6&Wc.sPtFں“c.ջuɲCרdxPU^&2תP5`4CU|qKJ vg qwo`Xrab7ݺ4 !"IoGI=mۭ\v%W[,d,̼#JVB[#S6Z^k3aCD}#!*}_)fUKطMs6KrWӱyw04@."f*ADZnph3gW,ruy|2Wk,ˤƐvwd^?wdߒή=sK&%&SNf&VѪP~LP=`eJ[C>nnB0z<9߀2jW©_P\.~W}PZd̦7T at:zW).Sf{ 5t=ڃEY%L|6=3hJ=T: 2g7n:6RKf7$kU 7]7@׭-^?߉qOPw"Oat]X_>R7KF jt l]:(8+T3k{\++[$#PO+=rxIi~a2ouzk5hJ""MuoԸ*i446N>t]FKNCn:YݰѬ|m&ʺV6qH7I<әnrtF=as|<6#9JI[{] 缃b !=}ݠ>Y!+Af$EcEٕӛC·32|9k cvg&%r.fQ5ɲңgjsc}w]c]f=K-7Ģ*\nVu t~s  U=Eaؙ`꾲 _7 4~ؔd2*ku@6٦p/j$=>:LiPk|L%"M:IK5c.y\75h*7ooNTOS.~g\p%B]U!Cp A;w!Aaܟ,* }*Se#C"2*}w(E?V{Sg::,7j|7} NMku8;fەe0IC5@cObF~W \؝)e}6:Mí1Kʔ)u;tq/#o;9Ɯ"Ywv;p8wޙ. ) 9Ū}#Q+Q;tNd%{c0w2pnX;coX :^r&vf>-qiܣzEI:p'} B0TdT9T7[ùkG+{7pPuUvi7uϽwc9ڮ.>wܜpEO͚ހSgfWL г*C)Ω8Vxŗ_[aw[NrCSob_;:==1:C) foZ}+tp_y$Cp A;w!A;}cZ_Ts7Ko~զCw_X-=yηd7upCc_YDowJ_MX%+Ŀ_k t A4c 3岮W7r!((ZX,U/1Y2,5^Ȕ:DeAZFJ1p^\`Å ^^ԍ*bDf[u-~!_uy |po2μ\=APZ2&X`qTgJ9?x5fjM M j' !cng_uݧ8ݧn,NKpK'\zސ"K`/+X{#] غ~a/GNNZ5lPEBlimL"}:O_؝H*=lm-sNLt $ dE!JLsEclEYc UQnMqOE5(wGw7s' bv<ܫ:-4Ro¸I"& CpI[v:w݃%Rm' ϔw:w=83F.fB|龾>vU{=ׄϪNM/z2_tbr]e(6. ݱ[ ~ѣqd*z{XU4O=uݙvj4n^Kwd6!)z{!%rff*nX t̄޽ݳ=) c!$_p7Kf ihy֝ש1PNCrF]mP|w <D25rFse8I$yJpG)ؓ#QzMׁw&Oy!Cp A;w!A;}?YUt՛GI㮖z .C"2*}RE逗 p0675k[=տz.ցg5,I@1r4O /CӴ +%ؓZ,yEP4/u`ֈ\F{G1+s֟(K@/t{7{C}O/ߍv+"!'GYK@yV_irU5̫y]{r|jUg,?/gR4tpu;HoE tu\\|0'{nQKѠɡsF=pH9WC=%IvgWVϺRNi-AC̙g#Qȥ^"1DTiٓy%4^Uh /^M}&./}Kf> 'g ءKp[K;w!Cp A!C7|+cJz{N0c⼴T6 Fo>Qr3*>\fxԲk+o` .5(cobv +9* =))Y\L@B4fA(˪k@(zV zmJM̨Ċ?S*%ۨݍxO-T0毞J~!K*t8^ ^K=-HP-)nп8ֶ" 2f%ԟ\]{5sLgH'Kr:dN0]/#Z"<5(ը5lbLo˖"S5Ľ]n<.z]-Dֶv]O|:8}Y"snlv#-9bOz ^ j#ObLv >W($!N%{fABl<%;=|G=y+fV:F K9j-DY!Ȟ@T?A Юz,4ݳfCk1ʶV5fAhg3n!ns[©ٙi,BІ':A|{YUZ#%CU@LE 6/z {jv9L^3b7f+ vs;Yž&V7o$ 9+9j=>8kVH\-RtV{k{TVXeם|ߺyIZrY2G U;p7b\rPUrFJ^쪅hƂ43`yUzz[ƼZO-ٙI̤Zr 476䪻z͒99NRސ^fj뛆4EMƗ:)~/'2Sjupּ#s>;fRfɜƃDy#N "5߈;w!Cp A;w~c`f tAq}цr0xw- +'w0XTG.UKOhg^:Zk@w{0+"QBwv/TF tqU{N wv/q[Ɲu]}?!K8;=;ެל"z;}W`ֆE;nT:apfF.dLݰιuSūpǚ-'rbZ3X_k@L6}aւ6. !Cp A;w:#7!ظ!肫CCUH w܏}M/>3lGicӷۙ7}EJD/?'`޿vS|܇#w&w&/Y>WiuA[4|4V2lG*]l=RRD|0LtO,CD.zLw,TJ3؜;9?H9>?wZ231aiw v"܉w _a`gd )mݞ'&w$k kf;;;/Ig?߹kJfOu> UZBęlw{M^8 w m\M5=6@8vd ~-湪y6#=!xGo Kz8 Eb299u)rq+lgmk3wNޖ.M5M8DzΎtoo3c㵈&X١b1qJ[w3#ϥ;w9uLhzXɫWWz3f s=:z T]n uFGv˸[4o2i]J@DFGE('_:+yu2src~Ma ; w[!7ٙVxB({02?m˸#w񮢟6M G4t]3EK~' D3Gc]t;"9LVҾ&m=)O#Cx8U;`&931O,}z;{';3bMٞ @Ď]v\&w`|wfVbݞ`^Qro_mBKWZ/l&p#~eO95q=;a"ǎdwcdff{8%7&3zb`ޯ1[T!.k0>k4'7Ũt>>PU|k)+W`gFfb@m? !T`5pHцrbgΧf p7lMfܯƝ|M2ΌrAGE.;s^o%~]YɄ!A<l^2 dYTaU lX>NfJ!:viSNnJ맲XfnbRjG:E߱ޙ1!ҝ>!zAqm%61ӆ?Q&JP4N7΄W,Ƚs;w H23TW*Kc J!Vg zL6Ls) a {u*YB8UB䢋78w>w(^ѲE]{#QG͖vӅ=g9v/C0f {2hW(&j 7uxIF]qfG8[iBcuw~83׬X9.<JK򬻉#Mu0pf;tpwEb{mI,_^)_,F-gtqjܫ4TդWCwB naOٙ[Pt4<= Q=H"N齽 ;G̖yTA.J4gۻhW^-˂;w!Cp ANM:6Sdw!C7}/xoxWv=3,W)Y,~n6k7K*<:Vnʹuy.+?KӦ'N;yz~pտVv.M_l}w|65+tB3aN[ݖɋl_!Q.m 9.ҙp.}~|ZjeRyv~7vv:w9YLxXKL Wq> 5 piIGܨWU K 4BLeP]e- ,(?-lv.bB?DNe|tљ ꪇv^“r|}i5aqRw]a,B&oy}vV2=&VKNѥ[3~܃CU @M穹ӄ&9${ꦮYΚ52Ըg 2vKDdGn]uz`A3SdV¡qWԊٟTE d"y b$WJw]={[:d>"mDՓxUN䃫^ڝiػY_ =pݻRe+"R~OM3Nk[y*n_mfB@r-=$F٠ף?U Ⱥ!Az ٦$SYʉ1nyTTXy￷9@PN|e-yRe3HVf"NqdvRO(YtmluE"n=zkCU̇!WꡓJO\/;սg`F$[PZFF9!yJ__"xNdJz!aJbd].1LVmȊZ4rK=gF׉( :&9[.gh+7' qz RQ+%=.ýÝ|epFWO=ܻpLhH-(cQ^_Wjkޙ &ۉŶlC<i.SS=I/ 9? gu|5fH6z<0MΌtyuWۋmSo0N"$p7}غۭW{H_$~汈 MrfFCNא!dɚ34^ `ǃ*1'|87}N>sh#kdqrH=jb3 ȇ]Ψ֌/i{UNyQN66p)ZO <t5>]W*}*N9gP^ əl==dc6P~&lɐ)[g~:eN7B.Tܒ~ܥ.9Qcrx 7yRӦ2I;gj'9]0f-^o3/Edn JGoOPvڗ-Wb>WVDDƉ?mM.&O/ʼnnԕ3~嬸go>^r:8sK7oepK[g=F>q#g_ /_E@fuר- g㧥ǏWς{&l˟]Gx ,|F}wWGQ?ߝ ti*z1^߼Of7']fdǭu?və̌se8cD2\G'}X݈x02~V➙z$ r/ұP6}" ҿ~b~ҸKz<(=Ro_|a&N{qogz%Dr0*:3> ܏=_Y*%ҽ]`B4{4in? (gۧq?4Ocq´+P_/&hqz;!Jgb`:p9uG<=&8'3+-?{B!x|U>=p&Z.10s#ˮC{nuOO_d鯤?ʸdz~Yܻ q?9$nuJ jI}d-nwSxRZɦ?.ҥ"|2ܓLK݀̆#x# BcWlms!G/_6'AN⤃9/4L$rLZǦmU6#-;Ɂ7TpG7`O#Dtw5jE'~χWًd}X9;jzJg& {:B0 ff{w HiZ+wnbڀ쳥Vjw騵pr_I=χƺwJɋa׫bו!Ɯ3N3H&R'ecx{4^)'Vu.9DmGUT?u˧*q83'ٟo/_"x{?/4~~ȣ{Fg>u,b ;D;3Vtx?;3G~"ݩOW/sCҦv?S;Ӕ{㏭%]Vu|7"_FFq{=[Yg=%]Vu";ƾ'QOO{o_)T__Y:*jjcİOuLN})(Nz~,ӏ'ݽ{ڿ{leOtY^2=xPF^?AGW" {Y:/KAǻXxDp A;w!Cp A!Cp A;w9^.v`P+X8$j-ӺXԚIENDB`././@PaxHeader0000000000000000000000000000003400000000000010212 xustar0028 mtime=1760000640.7861156 trezor-0.20.2/docs/sign_tx-trezor.io.png0000644000000000000000000004730015071675201015120 0ustar00PNG  IHDRRyotEXtSoftwareAdobe ImageReadyqe<PLTEՆɗׯvuvnnѳݘذ٩vը}YtwT|x͛vY`n`YJsuuƓӲLLJݚl˖TzٷFrޖBCn\4yBB3JlBBBDz跹BItEܵіI=𢤩㼎әuXe33_Q5:ɚuyŸ_33ҵ克ǢwuzlH伇R㟩{[CBahuBBXK_ɇ5&&Է33٣]Ҧ|cE꾷Pìӿ寠ŭiq~ʬ@T|{N?33YZZmqj~hbhо5f۾۱~aq3d3YƮ{󏅡~YeT圙BXbÆ9ӟ434YAy=>\񂞹ԸϿdXAzdHaKVIDATx \U 6FLJp@pQ 5/.im*Di+j]6bͽպYo%jws*~?/gssy89hΐH}VO$$3;G&g՜5t8}1NaZjgf}B4fZWgЩ߽e.eqt5$z'/'>YYa_2+=W!3:Wӽ%gf!t Y.ӓɇJ'y[yǹsY-pMĨ}j0f5x }-AtbGw0]Ŵ $Su:U90;wHYr6JGH˻ 'Bʜ,!!+ !hb6lӵ^CiS H;M|~v)sGN=AԸ- jl,nRK @TՖ٣ҎxNK擜@9 #gsR_SN;Tk(M*%Ƞz;A8'AJ%G|Msv`YvhR81N,A?_,(S+.;G>MLme9u\5+@1k]*Z>jӁ84ʙ q6$8v/U税%lJ8:U%;igΉ<6Ruu~jiV<P:t`ܧ%$;7n[75u{1vq~\kU7t@O,$t^Ji͈ %3HU{y)51?t=I"$I"ŷzFoL\Ʀ!뻅  # d9z 돉;A9&\΃؊)NMͪE|6K#x&bBgukCoNl?NB3A805CpJM;+}ʪKNu?]wtG0Om,lbbߖ P0h<ݻT3r̘r떘) F?ƕzlbFw(m^ܲ΅1~ 0uMǺ5E 0vݜs,Ţz"0\P?=.<{E_acxϪYp铍ƨNJמ~-|vή1AxǸ]V6O>"pHYY\Up(0Z0w@++U@wcV` iP0F߮?/7ï٘Uls=?EQ"1A1<]T; Y{u`Pth;?ȳ5ˆHmbtmMRqR4=lĉ9zb.FЍR\2F 8;;@˥31O\(ƂX}t੔o, y9,x%J{*l޲wdLn.:/Slv³ ᩵V-FOuJg 52`8J0B=' ZB^¥x؛z1F0!eQ.ůa%1b`ISEdYq#-8qrLŸ䎣u1tN99ůr GɁK/g/1-z:ir?ëP\Nx=~d2lbN,mMeYZϔ ˡ xnڵ|,oԱt8bk`崎B<|Olb5~qŵ>&o(a ;' ଵ"~PX=0Lb( 0)(Mu*Q5_7ʷn{sZތ1Ev-{_ȾH=Nb^!{ٹh9hxǬx/=?{BrO0h`+,F3㌧Q)X l ZA@_*_yn.܈ڏ[v8L7~,4ؾ3W1u̾ `}S-pichOϊ7>{sQ".j 6P4x\Nbbi';ԝBcę|>IM}F 8l?vĎXE( xxWxiY>|xs?lgs1 )9|2谔/Y*Xm6){i.Fa_L,:wdg.6^K`8o7[O%` ƅ2ah*{ ַv~sY 0w:%3+\ƞZO]_p>~s𹷟b1 ׷^B_S28><-y}O/WGưĚEح3@J~?=LޏDz4?)L=&O*H-^}[ư$[kWyz`4ՔCciĠ/9FFz}~χF)9A6'qORӉ% pz&lv1Zsm6kmcA(QM!Ǽ pr'ՔphK=s=|!#BQPg w{ " "F/jZ5KB.%!Rmmm#S;ogt5w tIrJ##ٍz$d@^D'Ix'Ix'Ix'Ix'y:`+6-5'EoE!z,=~I"$“D".pw0n}ˀbp6l39[1 00$:$]?|eb{xfBOSeǞ|o7z}KzBz-MNxz O6 >kf61žN k-TloxǏ[QhƲcaSpwP]OyhBk]h↦rGf 6;]-6_=ݷŋquh*$䂚OGkީwQ. Ͼ']Ix'Ix'Ix'Ix''sxg}O$$I"6U#̓ϝ`&?6u)[;{Lx%9M8:Ñ<@/%h ϕ( i ՓD|<,:gHx^緞֢r<]“Γ߹;\Gupx\kN9)dQ g:O^ĴZ-qb-Elכߕte[J [lϧҼrvt+zpy&?~6S ݺYJtx y>炕>mie0KgJ\لɑ~TJHqTj@^:SJHa e<#LU>ffvS+']fڹ^g&rdb(S@^/vC{]ɕYJ30=l[I?nRRFKdw]۱̃;}Teji0˽.I#gRBͻR0@:-@)|gH?]I ;$ٔJi$aZt'\3R+3-}ȡz9\xTܺf?]"Rj"1}T]cQNW KEKx^ }֒> o>5TgⶥYY4 HhOsx ;r5< 5æxl zt2|%WHi&hS""-Q*Ŷ:|&`J#`"-ͤGʝ>Se<#yЙ^ ;0? eNq Ohe(x>N#g,l=wcNb6y^ ynZ=yNxF+,OGS/( ³W:ee؊-RNL i3tQ֣ɖ)aŤV| pBG {~tRDz J38J&$ܻxɖZqT!I(8+"ylx*yVox3M}wh$gÀk8:`>8qvw|{L8sN6Mr<|O̺<ŌzQXfP*<2 RXMBNZA ;#0@кLΓTy (E3DNI6³ׅMV$u)|#Α]mߌަsMOc""mUwnn(3%H9]A/9}v\)pלx梁we$x*(tI\FίEW58񄹏&`)t'Gyoyɝ$OI"$I"Eja0 > kF# {bl}kyr软ᣓ\ cv e4-#v :PCU_CBCoSa[  6[ )lb71 #F`}yg+wH zч|k8܅u(]ƻ~ǯi}KbY'AN4gYQ syo,cԇ%\X5#<>Yb`*g0uVh(N߅h W[4kḀ3yhO++*9'>}-2yNPFSYϟ)9HW3b޻S}ǀ;_+:#wc ͐Gi0g=kVpK_qN<ۍ^Fhl{sSEA*6e4bWh͸=C<506:x isyOsȝ'ʆ&RǢ\i[;Wc& cP!,<=z!ͱf>P 2Sb]EΓab z/,Vpls:<K#pcZiq$~aLL3lN[iy\iEͧU bs풑u J@JԑxHb˻7}Z48VCmhFsrNVzJ>304`a_~]wݵJ I88_;Iu[GlWtg %< O“$< O“$< O“$< O“$<0“3'IxO“$< +OzI/-$a7Lx`#?g=!??Res]֯Yj]w]1bn|\x4 cny\O.mԻQYoϽ5ԫ<3+NA7h7D2 lh#cW?gɇZvD(F9!4ueJ>n4FC#6?mz݌U{k7Wb>v:/$k[l77_](|yr64CJ3: DAn>F <` EP`0 E\Az(o^e^eLYd~U,{)>VfZk+ʿW{yPyR'6nvnɀ5y $FFxFŁ1xzE{0O7OOL뙷+xJ ڐ[l[gJ`$J?{)q\`7ʙvs{`:16Ѣx;n:w7\űhڸ=Sϸhg^4ɓl^B8IP]7?hG;_O0}}u'xHD9xyǃ=nCr<q`mx5`Z=w5"x}OMbnwk~K; >2](+zX' jq9|.Ci1&ϭpKHaAKIx^, 8romv'`|:sjKIxhxOO\O)փ@|(/kF\ rH<u& ׊phkc;0|׃u)N[&6otxt[5y^qq^y= |ӫ 7|f^9w*Bv!x_t!|t;iڳ1/8IA|<o}\NXcL OHr10x"O+.ETq;8[ăUS`<2 N]3*[g[hvoV)pzQ52bGqWʐ!||Es;*[<ϓxF̵zVq-7?5v)YbՇ/!X2n%2ɾ~k'<^L:Ƽ8#=rX{'<1!DǓ!C}qhvTWLE.|ɜ9._m˛ [>/$]x._Cs(&+x24}ja箦'sԬߏi_/kEIvu)gCJ-کX\n͖?Dx^xn}'l oU[KuuԎxG?k=oE'.Ēg\cc||L8p6 Fσ+'4e"G;<}d}vި5n^q0I&~wW׎5<!P>& F83gw@-fq _?FcglD֋OxIl\bqH;nqʌ[qeht4O:wc γ=nqϡC#q4{!qʌ;'Ͻ+u)iD{؟΀|'gH<޹ity!s;[Xc4.w4uH}7O'}Oq{7ߧl o teGYeqAryKÞWywjJCRPP/~wPqcc;F"xG<[&k3э^|x}h|'ݺ?o7?z-%o m]7(-*l:w[wԺG^< ibǓaŭ ]#(f{#*֯Z^z7ަ.fyN6=+DکFwY+ةW3UK_x*w <9uOxx{{yh#":J޴nf /ƽU-x*wg;u+v&/Hާy@8$sxu й? Q_-:RO~Iw:w/_q 3.sMSo7:|ٿZL~:+J(l#j6Tأo*14tx[^XݡDCsx4R‚Iws{x&K uQ)0}$$<_45G$+IxH'$OI"$I"<v~lX ̺ yvumovQ.>1wcyplϒX!yp|MQ>A.XYr_G6 2 (ũf (^P(r7֏qf]$)E\nXşj@-(vږ+jXt잮 <KlcϗV8S..-=0 7=[ĆƺUne%7EȺ[odTnAԁK߬ۗ֍1ָdUiD[IlĜoz0< r{Xc l?lXDd"nj{ r|Qz子ֵr6ԴN~fQ8!g] hu*4s,J O^q;gIǮXFHV8 A7]Ktv뵟ߺΧnU7og:jkLZTgቱ#n ?Ui]JJ m~rvyvkeXЧ5,1Qo]p쐺*Ɓ~V|f^vUT&^LS(2xy#Ķ}Ɋ%aKߎj9հM4@0\e^M3OngTڰ2 .[2@.] ? @}U=e^KR\~gWdmZvlhz8n20G?'oby/D]Muà N.ګ*M Zs^ڛ4E@lQ"~x'C>v5~F{ d A`X]UuK*g^!DcY`He1@ry59*HUAeg/˩\b~g!4*vgұנ=~e^v%gYTg5gΖ]?"׹4+hƺc/-=J*Du.X.|Z?6d!f4 o<[Ƅ۞L<ƻg7'vP8k"Ȁ-\r{KJ*_,7e#sGm_rUK*WSΙ9.IZTvPIՀ=Y?Ⱥ_S,J*o"5BgW]  [آrLhl&l3AiD37@yR6a4,دA8*>8T@seJ*Ѫb x&%-n}~,έ'i3@ϴ8V,nђ!$kh Zdr sIrssO,N#:oȮ?M~n;Yl="RXOdq&8:8p: ³VWCl+%ʺF1lCQmne#1:%]kZ1$>+!02U%->*g+壋k0a sJBDE5圕;w<,ɝ;>ɑIcnZyv,r ,5<~ 6>s_~nW n:Mlxl~`XRfW@_"ǫJ3XQ5)B;G:T}g :┉bG:#8hybbճjFxH'$O$$I"NOE#lT66j4³ϖ7:=i (k{p| Lrg ȴ!NOEm%?=#A"Kɣ$Kt<_[O+tћ:ѹG15Td?)Jixg`:C "Ia;S ֭x\fi-U}j= ^VZ$2"IJ1. dER04rIx^늕iM\<ٷmhgPYI“I'DxO$'$5&*W{ o'z|6LNN~%'Cd.f}>q]|Ox^$$I#ҥ o"I&LxS:^ B%)$ßQ E&0wN#_,R`W `3DzHҦ#A.xMhp ܵ'X3R 0yQӰP !R 6, M_ LQ]Pz+]?t9a;g:c.&%] Yf (.yxIx^l(xN/Q> j_“D"N%c]}TG1f/g} : 0n9}(O$4g?Ųlwߡaz˃/C EsyRWiDE[&d(V4 =z'?)A/lB$!8CO xeHh`_ 𜎻&*wpx+r@jC 6*h7PcEaX+֓w咮0KH]sq Oy gx 8"drA gxeuZ3ӚH}FMӄxYI"! ۩I"I$“D"=0.20", "shamir-mnemonic>=0.3.0", "slip10>=1.0.1", "requests>=2.4.0", "click>=8,<9", "libusb1>=1.6.4", "construct>=2.9,!=2.10.55", "typing_extensions>=4.7.1", "construct-classes>=0.1.2", "cryptography>=47", "noiseprotocol>=0.3.1,<0.4.0", "platformdirs>=4.4.0", "keyring>=25.7.0", ] [project.optional-dependencies] hidapi = ["hidapi>=0.7.99.post20"] ethereum = ["web3>=5"] qt-widgets = ["PyQt5"] extra = ["Pillow>=10"] stellar = [ "stellar-sdk>=13; python_version < '3.10'", # Protocol 27 support (SOROBAN_CREDENTIALS_ADDRESS_V2 etc.) requires # stellar-sdk 15, which dropped Python 3.9. stellar-sdk is exempted from # the `exclude-newer = "30 days"` uv policy below (see # `exclude-newer-package`) so the 15.0.0 final can be used right away. "stellar-sdk>=15; python_version >= '3.10'", ] ble = ["bleak>=1.1.0"] full = [ "hidapi>=0.7.99.post20", "web3>=5", "PyQt5", "Pillow>=10", "stellar-sdk>=13; python_version < '3.10'", # stellar-sdk>=15 floor: see the stellar extra above "stellar-sdk>=15; python_version >= '3.10'", "bleak>=1.1.0", ] [project.urls] Homepage = "https://github.com/trezor/trezor-firmware/tree/main/python" Repository = "https://github.com/trezor/trezor-firmware" Documentation = "https://github.com/trezor/trezor-firmware/tree/main/python" [project.scripts] trezorctl = "trezorlib.cli.trezorctl:cli" [build-system] requires = ["flit_core >= 3.11,<5"] build-backend = "flit_core.buildapi" [tool.uv] package = true exclude-newer = "30 days" # Exempt stellar-sdk from the 30-day rule so the freshly released 15.0.0 # final (needed for Protocol 27 support) can be resolved. # TODO: remove after 2026-08-04 exclude-newer-package = { stellar-sdk = "2026-07-05T00:00:00Z" } [tool.flit.module] name = "trezorlib" [tool.flit.sdist] include = [ "bash_completion.d", "docs", "stubs", "tests", "tools", "AUTHORS", "CHANGELOG.md", "setup.cfg", "pyrightconfig.json", "tox.ini", ] exclude = [ "tests/*.bin", "src/trezorlib/_proto_messages.mako", ] [dependency-groups] dev = [ "autoflake>=2.3.1", "black>=25", "flake8>=2.3.0", "isort>=5.13.2", "pytest>=8.3.5", "pytest-random-order>=1.2.0", "tox>=4.25.0", "tox-uv>=1.13.1", ] ././@PaxHeader0000000000000000000000000000003400000000000010212 xustar0028 mtime=1774956357.3029993 trezor-0.20.2/pyrightconfig.json0000644000000000000000000000064315162727505013632 0ustar00{ "include": [ "src/trezorlib", "tools", "helper-scripts" ], "stubPath": "./stubs", "pythonVersion": "3.9", "typeCheckingMode": "basic", "reportMissingImports": false, "reportUntypedFunctionDecorator": true, "reportUntypedClassDecorator": true, "reportMissingParameterType": true, "useLibraryCodeForTypes": false, "reportMissingModuleSource": false } ././@PaxHeader0000000000000000000000000000003400000000000010212 xustar0028 mtime=1770727810.2852411 trezor-0.20.2/setup.cfg0000644000000000000000000000175615142624602011702 0ustar00[flake8] filename = *.py exclude = .tox/, .venv/, build/, dist/, vendor/, src/trezorlib/messages/__init__.py ignore = # E203 whitespace before ':' E203, # E221: multiple spaces before operator E221, # E241: multiple spaces after ':' E241, # E402: module level import not at top of file E402, # E501: line too long E501, # E704: multiple statements on one line (def) E704, # E741: ambiguous variable name E741, # W503: line break before binary operator W503, # Annotations plugin: type annotation for self and cls ANN101, ANN102, # Annotations plugin: opinionated warnings ANN4, per-file-ignores = helper-scripts/*:I tools/*:I,A tests/*:I,A known-modules = libusb1:[usb1],hidapi:[hid],PyQt5:[PyQt5.QtWidgets,PyQt5.QtGui,PyQt5.QtCore],noiseprotocol:[noise] [isort] profile = black [mypy] check_untyped_defs = True show_error_codes = True warn_unreachable = True disable_error_code = import ././@PaxHeader0000000000000000000000000000003400000000000010212 xustar0028 mtime=1770638540.7578576 trezor-0.20.2/src/trezorlib/__init__.py0000644000000000000000000000210115142346315014760 0ustar00# This file is part of the Trezor project. # # Copyright (C) SatoshiLabs and contributors # # This library is free software: you can redistribute it and/or modify # it under the terms of the GNU Lesser General Public License version 3 # as published by the Free Software Foundation. # # This library is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU Lesser General Public License for more details. # # You should have received a copy of the License along with this library. # If not, see . import importlib.metadata import warnings def __getattr__(name: str) -> str: if name == "__version__": warnings.warn( "__version__ is deprecated and will be removed in 0.15.0, use importlib.metadata.version('trezor') instead", DeprecationWarning, ) return importlib.metadata.version("trezor") raise AttributeError(f"module {__name__} has no attribute {name}") ././@PaxHeader0000000000000000000000000000003300000000000010211 xustar0027 mtime=1782395835.339361 trezor-0.20.2/src/trezorlib/_ed25519.py0000644000000000000000000001663415217231673014401 0ustar00# ed25519.py - Optimized version of the reference implementation of Ed25519 # downloaded from https://github.com/pyca/ed25519 # # Written in 2011? by Daniel J. Bernstein # 2013 by Donald Stufft # 2013 by Alex Gaynor # 2013 by Greg Price # # To the extent possible under law, the author(s) have dedicated all copyright # and related and neighboring rights to this software to the public domain # worldwide. This software is distributed without any warranty. # # You should have received a copy of the CC0 Public Domain Dedication along # with this software. If not, see # . """ NB: This code is not safe for use with secret keys or secret data. The only safe use of this code is for verifying signatures on public messages. Functions for computing the public key of a secret key and for signing a message are included, namely publickey_unsafe and signature_unsafe, for testing purposes only. The root of the problem is that Python's long-integer arithmetic is not designed for use in cryptography. Specifically, it may take more or less time to execute an operation depending on the values of the inputs, and its memory access patterns may also depend on the inputs. This opens it to timing and cache side-channel attacks which can disclose data to an attacker. We rely on Python's long-integer arithmetic, so we cannot handle secrets without risking their disclosure. """ import hashlib from typing import List, NewType, Tuple Point = NewType("Point", Tuple[int, int, int, int]) __version__ = "1.0.dev1" b = 256 q: int = 2**255 - 19 l: int = 2**252 + 27742317777372353535851937790883648493 COORD_MASK = ~(1 + 2 + 4 + (1 << b - 1)) COORD_HIGH_BIT = 1 << b - 2 def H(m: bytes) -> bytes: return hashlib.sha512(m).digest() def pow2(x: int, p: int) -> int: """== pow(x, 2**p, q)""" while p > 0: x = x * x % q p -= 1 return x def inv(z: int) -> int: """$= z^{-1} mod q$, for z != 0""" # Adapted from curve25519_athlon.c in djb's Curve25519. z2 = z * z % q # 2 z9 = pow2(z2, 2) * z % q # 9 z11 = z9 * z2 % q # 11 z2_5_0 = (z11 * z11) % q * z9 % q # 31 == 2^5 - 2^0 z2_10_0 = pow2(z2_5_0, 5) * z2_5_0 % q # 2^10 - 2^0 z2_20_0 = pow2(z2_10_0, 10) * z2_10_0 % q # ... z2_40_0 = pow2(z2_20_0, 20) * z2_20_0 % q z2_50_0 = pow2(z2_40_0, 10) * z2_10_0 % q z2_100_0 = pow2(z2_50_0, 50) * z2_50_0 % q z2_200_0 = pow2(z2_100_0, 100) * z2_100_0 % q z2_250_0 = pow2(z2_200_0, 50) * z2_50_0 % q # 2^250 - 2^0 return pow2(z2_250_0, 5) * z11 % q # 2^255 - 2^5 + 11 = q - 2 d = -121665 * inv(121666) % q I = pow(2, (q - 1) // 4, q) def xrecover(y: int) -> int: xx = (y * y - 1) * inv(d * y * y + 1) x = pow(xx, (q + 3) // 8, q) if (x * x - xx) % q != 0: x = (x * I) % q if x % 2 != 0: x = q - x return x By = 4 * inv(5) Bx = xrecover(By) B = Point((Bx % q, By % q, 1, (Bx * By) % q)) ident = Point((0, 1, 1, 0)) def edwards_add(P: Point, Q: Point) -> Point: # This is formula sequence 'addition-add-2008-hwcd-3' from # http://www.hyperelliptic.org/EFD/g1p/auto-twisted-extended-1.html x1, y1, z1, t1 = P x2, y2, z2, t2 = Q a = (y1 - x1) * (y2 - x2) % q b = (y1 + x1) * (y2 + x2) % q c = t1 * 2 * d * t2 % q dd = z1 * 2 * z2 % q e = b - a f = dd - c g = dd + c h = b + a x3 = e * f y3 = g * h t3 = e * h z3 = f * g return Point((x3 % q, y3 % q, z3 % q, t3 % q)) def edwards_double(P: Point) -> Point: # This is formula sequence 'dbl-2008-hwcd' from # http://www.hyperelliptic.org/EFD/g1p/auto-twisted-extended-1.html x1, y1, z1, _ = P a = x1 * x1 % q b = y1 * y1 % q c = 2 * z1 * z1 % q # dd = -a e = ((x1 + y1) * (x1 + y1) - a - b) % q g = -a + b # dd + b f = g - c h = -a - b # dd - b x3 = e * f y3 = g * h t3 = e * h z3 = f * g return Point((x3 % q, y3 % q, z3 % q, t3 % q)) def scalarmult(P: Point, e: int) -> Point: if e == 0: return ident Q = scalarmult(P, e // 2) Q = edwards_double(Q) if e & 1: Q = edwards_add(Q, P) return Q # Bpow[i] == scalarmult(B, 2**i) Bpow: List[Point] = [] def make_Bpow() -> None: P = B for _ in range(253): Bpow.append(P) P = edwards_double(P) make_Bpow() def scalarmult_B(e: int) -> Point: """ Implements scalarmult(B, e) more efficiently. """ # scalarmult(B, l) is the identity e = e % l P = ident for i in range(253): if e & 1: P = edwards_add(P, Bpow[i]) e = e // 2 assert e == 0, e return P def encodeint(y: int) -> bytes: return y.to_bytes(b // 8, "little") def encodepoint(P: Point) -> bytes: x, y, z, _ = P zi = inv(z) x = (x * zi) % q y = (y * zi) % q xbit = (x & 1) << (b - 1) y_result = y & ~xbit # clear x bit y_result |= xbit # set corret x bit value return encodeint(y_result) def decodeint(s: bytes) -> int: return int.from_bytes(s, "little") def decodepoint(s: bytes) -> Point: y = decodeint(s) & ~(1 << b - 1) # y without the highest bit x = xrecover(y) if x & 1 != bit(s, b - 1): x = q - x P = Point((x, y, 1, (x * y) % q)) if not isoncurve(P): raise ValueError("decoding point that is not on curve") return P def decodecoord(s: bytes) -> int: a = decodeint(s[: b // 8]) # clear mask bits a &= COORD_MASK # set high bit a |= COORD_HIGH_BIT return a def bit(h: bytes, i: int) -> int: return (h[i // 8] >> (i % 8)) & 1 def publickey_unsafe(sk: bytes) -> bytes: """ Not safe to use with secret keys or secret data. See module docstring. This function should be used for testing only. """ h = H(sk) a = decodecoord(h) A = scalarmult_B(a) return encodepoint(A) def Hint(m: bytes) -> int: return decodeint(H(m)) def signature_unsafe(m: bytes, sk: bytes, pk: bytes) -> bytes: """ Not safe to use with secret keys or secret data. See module docstring. This function should be used for testing only. """ h = H(sk) a = decodecoord(h) r = Hint(h[b // 8 : b // 4] + m) R = scalarmult_B(r) S = (r + Hint(encodepoint(R) + pk + m) * a) % l return encodepoint(R) + encodeint(S) def isoncurve(P: Point) -> bool: x, y, z, t = P return ( z % q != 0 and x * y % q == z * t % q and (y * y - x * x - z * z - d * t * t) % q == 0 ) class SignatureMismatch(Exception): pass def checkvalid(s: bytes, m: bytes, pk: bytes) -> None: """ Not safe to use when any argument is secret. See module docstring. This function should be used only for verifying public signatures of public messages. """ if len(s) != b // 4: raise ValueError("signature length is wrong") if len(pk) != b // 8: raise ValueError("public-key length is wrong") R = decodepoint(s[: b // 8]) A = decodepoint(pk) S = decodeint(s[b // 8 : b // 4]) h = Hint(encodepoint(R) + pk + m) x1, y1, z1, _ = P = scalarmult_B(S) x2, y2, z2, _ = Q = edwards_add(R, scalarmult(A, h)) if ( not isoncurve(P) or not isoncurve(Q) or (x1 * z2 - x2 * z1) % q != 0 or (y1 * z2 - y2 * z1) % q != 0 ): raise SignatureMismatch("signature does not pass verification") ././@PaxHeader0000000000000000000000000000003300000000000010211 xustar0027 mtime=1760000640.786997 trezor-0.20.2/src/trezorlib/_internal/__init__.py0000644000000000000000000000000015071675201016727 0ustar00././@PaxHeader0000000000000000000000000000003300000000000010211 xustar0027 mtime=1784031395.874937 trezor-0.20.2/src/trezorlib/_internal/emu_ble.py0000644000000000000000000002061615225424244016617 0ustar00# This file is part of the Trezor project. # # Copyright (C) 2025 SatoshiLabs and contributors # # This library is free software: you can redistribute it and/or modify # it under the terms of the GNU Lesser General Public License version 3 # as published by the Free Software Foundation. # # This library is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU Lesser General Public License for more details. # # You should have received a copy of the License along with this library. # If not, see . from __future__ import annotations import logging import socket import time from enum import Enum from typing import TYPE_CHECKING, Iterable, Tuple import construct as c from construct_classes import Struct from ..construct_helpers import EnumAdapter from ..log import DUMP_PACKETS from ..transport import Timeout, Transport, TransportException from ..transport.udp import UdpTransport if TYPE_CHECKING: from ..models import TrezorModel SOCKET_TIMEOUT = 0.1 LOG = logging.getLogger(__name__) class EventType(Enum): NONE = 0 CONNECTED = 1 DISCONNECTED = 2 PAIRING_REQUEST = 3 PAIRING_CANCELLED = 4 PAIRING_COMPLETED = 5 CONNECTION_CHANGED = 6 EMULATOR_PING = 255 class ModeType(Enum): OFF = 0 KEEP_CONNECTION = 1 CONNECTABLE = 2 PAIRING = 3 DFU = 4 class CommandType(Enum): STATUS = ord(" ") PAIRING_MODE = ord("p") DISCONNECT = ord("d") ALLOW_PAIRING = ord("a") REJECT_PAIRING = ord("r") class Event(Struct): event_type: EventType connection_id: int data: bytes # fmt: off SUBCON = c.Struct( "event_type" / EnumAdapter(c.Int32ul, EventType), "connection_id" / c.Int32ul, "data" / c.Prefixed(c.Int8ul, c.GreedyBytes), ) # fmt: on @staticmethod def new( event_type: EventType, connection_id: int = 0, data: bytes | None = None ) -> Event: return Event( event_type=event_type, connection_id=connection_id, data=data or bytes() ) @staticmethod def ping() -> Event: return Event.new(EventType.EMULATOR_PING) BLE_ADV_NAME_LEN = 20 class Command(Struct): command_type: CommandType mode: ModeType connected: int adv_name: bytes bonds: list[bytes] # fmt: off SUBCON = c.Struct( "command_type" / EnumAdapter(c.Int8ul, CommandType), "mode" / EnumAdapter(c.Int8ul, ModeType), "connected" / c.Int8ul, "adv_name" / c.Bytes(20), "bonds" / c.PrefixedArray(c.Int8ul, c.Bytes(6)), ) # fmt: on # You should probably use bluez-emu-bridge instead of this transport directly # as it does not implement any BLE connection management logic. class EmuBleTransport(Transport): DEFAULT_HOST = "127.0.0.1" DEFAULT_PORT = 21328 PATH_PREFIX = "emuble" ENABLED: bool = False CHUNK_SIZE = 244 def __init__(self, device: str | None = None) -> None: if not device: host = EmuBleTransport.DEFAULT_HOST port = EmuBleTransport.DEFAULT_PORT else: devparts = device.split(":") host = devparts[0] port = ( int(devparts[1]) if len(devparts) > 1 else EmuBleTransport.DEFAULT_PORT ) self.device: Tuple[str, int] = (host, port) self.data_socket: socket.socket | None = None self.event_socket: socket.socket | None = None super().__init__() @classmethod def _try_path(cls, path: str) -> "EmuBleTransport": d = cls(path) try: d.open() if d.ping(): return d else: raise TransportException( f"No Trezor device found at address {d.get_path()}" ) except Exception as e: raise TransportException(f"Error opening {d.get_path()}") from e finally: d.close() @classmethod def enumerate( cls, _models: Iterable["TrezorModel"] | None = None ) -> Iterable["EmuBleTransport"]: default_path = f"{cls.DEFAULT_HOST}:{cls.DEFAULT_PORT}" try: return [cls._try_path(default_path)] except TransportException: return [] @classmethod def find_by_path(cls, path: str, prefix_search: bool = False) -> "EmuBleTransport": try: address = path.replace(f"{cls.PATH_PREFIX}:", "") return cls._try_path(address) except TransportException: if not prefix_search: raise assert prefix_search # otherwise we would have raised above return super().find_by_path(path, prefix_search) def get_path(self) -> str: return "{}:{}:{}".format(self.PATH_PREFIX, *self.device) def open(self) -> None: try: self.data_socket = socket.socket(socket.AF_INET, socket.SOCK_DGRAM) self.data_socket.connect(self.device) self.data_socket.settimeout(SOCKET_TIMEOUT) self.event_socket = socket.socket(socket.AF_INET, socket.SOCK_DGRAM) self.event_socket.connect((self.device[0], self.device[1] + 1)) self.event_socket.settimeout(SOCKET_TIMEOUT) except Exception: self.close() raise def close(self) -> None: if self.data_socket is not None: self.data_socket.close() self.data_socket = None if self.event_socket is not None: self.event_socket.close() self.event_socket = None def write_chunk(self, chunk: bytes) -> None: assert self.data_socket is not None if len(chunk) != self.CHUNK_SIZE: raise TransportException("Unexpected data length") LOG.log(DUMP_PACKETS, f"sending packet: {chunk.hex()}") self.data_socket.sendall(chunk) def read_chunk(self, timeout: float | None = None) -> bytes: assert self.data_socket is not None start = time.time() while True: try: chunk = self.data_socket.recv(self.CHUNK_SIZE or 1) break except socket.timeout: if timeout is not None and time.time() - start > timeout: raise Timeout(f"Timeout reading UDP packet ({timeout}s)") LOG.log(DUMP_PACKETS, f"received packet: {chunk.hex()}") if len(chunk) != self.CHUNK_SIZE: raise TransportException(f"Unexpected chunk size: {len(chunk)}") return chunk def find_debug(self) -> "UdpTransport": host, port = self.device return UdpTransport(f"{host}:{port - 3}") def wait_until_ready(self, timeout: float = 10) -> None: with self: start = time.monotonic() while True: if self.ping(): break elapsed = time.monotonic() - start if elapsed >= timeout: raise Timeout("Timed out waiting for connection.") time.sleep(0.05) def ping(self) -> bool: """Test if the device is listening.""" assert self.event_socket is not None resp = None try: self.event_socket.sendall(Event.ping().build()) resp = self.read_command() except Exception: pass return (resp is not None) and (resp.command_type == CommandType.STATUS) def ble_connected(self) -> None: assert self.event_socket is not None self.event_socket.sendall(Event.new(EventType.CONNECTED).build()) def ble_disconnected(self) -> None: assert self.event_socket is not None self.event_socket.sendall(Event.new(EventType.DISCONNECTED).build()) def ble_pairing_request(self, pairing_code: bytes) -> None: assert self.event_socket is not None assert len(pairing_code) == 6 self.event_socket.sendall( Event.new(EventType.PAIRING_REQUEST, data=pairing_code).build() ) def ble_pairing_cancel(self) -> None: assert self.event_socket is not None self.event_socket.sendall(Event.new(EventType.PAIRING_CANCELLED).build()) def read_command(self) -> Command | None: assert self.event_socket is not None try: data = self.event_socket.recv(64) except TimeoutError: return None return Command.parse(data) ././@PaxHeader0000000000000000000000000000003400000000000010212 xustar0028 mtime=1784290267.7147136 trezor-0.20.2/src/trezorlib/_internal/emulator.py0000644000000000000000000003565315226415734017053 0ustar00# This file is part of the Trezor project. # # Copyright (C) SatoshiLabs and contributors # # This library is free software: you can redistribute it and/or modify # it under the terms of the GNU Lesser General Public License version 3 # as published by the Free Software Foundation. # # This library is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU Lesser General Public License for more details. # # You should have received a copy of the License along with this library. # If not, see . from __future__ import annotations import atexit import json import logging import os import signal import socket import subprocess import time from pathlib import Path from typing import Any, Dict, Iterable, List, Optional, Sequence, TextIO, Union, cast from ..debuglink import DebugLinkNotFound, TrezorTestContext from ..transport import Transport from ..transport.udp import UdpTransport LOG = logging.getLogger(__name__) TROPIC_MODEL_WAIT_TIME = 10 EMULATOR_WAIT_TIME = 30 _RUNNING_PIDS = set() def _cleanup_pids() -> None: for process in _RUNNING_PIDS: process.kill() atexit.register(_cleanup_pids) def _rm_f(path: Path) -> None: try: path.unlink() except FileNotFoundError: pass class TropicModel: DEFAULT_PORT = 28992 def __init__( self, profile_dir: str, configfile: Path, port: int = DEFAULT_PORT, logfile: TextIO | str | Path | None = None, configfile_output: Path | None = None, ) -> None: self.profile_dir = Path(profile_dir).resolve() self.port = port self.configfile = configfile.resolve() self.configfile_output = ( configfile_output or self.profile_dir / "tropic_model_config_output.yml" ) self.logfile = logfile or self.profile_dir / "trezor-tropic-model.log" self.process: Optional[subprocess.Popen] = None def start(self) -> None: self.process = self._launch_process() _RUNNING_PIDS.add(self.process) try: self._wait_until_ready() except TimeoutError: # Assuming that after the default, the process is stuck LOG.warning( f"Tropic model did not come up after {TROPIC_MODEL_WAIT_TIME} seconds" ) self.process.kill() raise def stop(self) -> None: if self.process: LOG.info("Terminating Tropic model...") start = time.monotonic() self.process.send_signal(signal.SIGINT) try: self.process.wait(TROPIC_MODEL_WAIT_TIME) end = time.monotonic() LOG.info(f"Tropic model shut down after {end - start:.3f} seconds") except subprocess.TimeoutExpired: LOG.info("Tropic model seems stuck. Sending kill signal.") self.process.kill() _RUNNING_PIDS.remove(self.process) def _launch_process(self) -> subprocess.Popen: # Opening the file if it is not already opened if hasattr(self.logfile, "write"): output = self.logfile else: assert isinstance(self.logfile, (str, Path)) output = open(self.logfile, "a") return subprocess.Popen( [ "model_server", "tcp", "-c", str(self.configfile), "-p", str(self.port), "-o", str(self.configfile_output), ], cwd=self.profile_dir, stdout=cast(TextIO, output), stderr=subprocess.STDOUT, ) def _wait_until_ready(self, timeout: float = TROPIC_MODEL_WAIT_TIME) -> None: assert self.process is not None, "Tropic model not started" LOG.info(f"Waiting for Tropic model to come up on port {self.port}...") start = time.monotonic() while True: try: with socket.create_connection(("127.0.0.1", self.port), timeout=1): # seems that even if the model is listening for connections # it sometimes needs up to 2 seconds more # before it actually correctly processes requests # TODO: https://github.com/trezor/trezor-firmware/pull/6128 time.sleep(2) break except OSError: pass if self.process.poll() is not None: raise RuntimeError("Tropic model process died") elapsed = time.monotonic() - start if elapsed >= timeout: raise TimeoutError("Can't connect to Tropic model") time.sleep(0.1) LOG.info(f"Tropic model ready after {time.monotonic() - start:.3f} seconds") def __enter__(self) -> "TropicModel": return self def __exit__(self, exc_type: Any, exc_value: Any, traceback: Any) -> None: self.stop() class Emulator: STORAGE_FILENAME: str def __init__( self, executable: Path, profile_dir: str, *, logfile: Union[TextIO, str, Path, None] = None, storage: Optional[bytes] = None, headless: bool = False, debug: bool = True, auto_interact: bool = True, extra_args: Iterable[str] = (), ) -> None: self.executable = Path(executable).resolve() if not executable.exists(): raise ValueError(f"emulator executable not found: {self.executable}") self.profile_dir = Path(profile_dir).resolve() if not self.profile_dir.exists(): self.profile_dir.mkdir(parents=True) elif not self.profile_dir.is_dir(): raise ValueError("profile_dir is not a directory") self.workdir = self.profile_dir self.storage = self.profile_dir / self.STORAGE_FILENAME if storage: self.storage.write_bytes(storage) if logfile: self.logfile = logfile else: self.logfile = self.profile_dir / "trezor.log" # Using `client` property instead to assert `not None` self._client: TrezorTestContext | None = None self.process: subprocess.Popen | None = None self.port = 21324 self.headless = headless self.debug = debug self.auto_interact = auto_interact self.extra_args = list(extra_args) # To save all screenshots properly in one directory between restarts self.restart_amount = 0 @property def client(self) -> TrezorTestContext: """So that type-checkers do not see `client` as `Optional`. (it is not None between `start()` and `stop()` calls) """ if self._client is None: raise RuntimeError return self._client def make_args(self) -> List[str]: return [] def make_env(self) -> Dict[str, str]: return os.environ.copy() def _get_transport(self) -> UdpTransport: return UdpTransport(f"127.0.0.1:{self.port}") def _wait_until_ready(self, timeout: float = EMULATOR_WAIT_TIME) -> None: assert self.process is not None, "Emulator not started" self.transport.open() LOG.info("Waiting for emulator to come up...") start = time.monotonic() try: while True: if self.transport.is_ready(): break if self.process.poll() is not None: raise RuntimeError("Emulator process died") elapsed = time.monotonic() - start if elapsed >= timeout: raise TimeoutError("Can't connect to emulator") time.sleep(0.1) finally: self.transport.close() LOG.info(f"Emulator ready after {time.monotonic() - start:.3f} seconds") def wait(self, timeout: Optional[float] = None) -> int: assert self.process is not None, "Emulator not started" ret = self.process.wait(timeout=timeout) _RUNNING_PIDS.remove(self.process) self.process = None self.stop() return ret def _launch_process(self) -> subprocess.Popen: args = self.make_args() env = self.make_env() # Opening the file if it is not already opened if hasattr(self.logfile, "write"): output = self.logfile else: assert isinstance(self.logfile, (str, Path)) output = open(self.logfile, "a") return subprocess.Popen( [str(self.executable)] + args + self.extra_args, cwd=self.workdir, stdout=cast(TextIO, output), stderr=subprocess.STDOUT, env=env, ) def start( self, transport: Optional[UdpTransport] = None, debug_transport: Optional[Transport] = None, ) -> None: if self.process: if self.process.poll() is not None: # process has died, stop and start again LOG.info("Starting from a stopped process.") self.stop() else: # process is running, no need to start again return self.transport = transport or self._get_transport() self.process = self._launch_process() _RUNNING_PIDS.add(self.process) try: self._wait_until_ready() except TimeoutError: # Assuming that after the default 60-second timeout, the process is stuck LOG.warning(f"Emulator did not come up after {EMULATOR_WAIT_TIME} seconds") self.process.kill() raise (self.profile_dir / "trezor.pid").write_text(str(self.process.pid) + "\n") (self.profile_dir / "trezor.port").write_text(str(self.port) + "\n") try: self._client = TrezorTestContext( transport=self.transport, auto_interact=self.auto_interact, debug_transport=debug_transport, ) except DebugLinkNotFound as e: # Don't fail `start()` to allow non-debug emulator sanity test. LOG.warning("DebugLink not found: %s", e) def stop(self) -> None: if self._client: self._client.transport.close() self._client = None if self.process: LOG.info("Terminating emulator...") start = time.monotonic() self.process.terminate() try: self.process.wait(EMULATOR_WAIT_TIME) end = time.monotonic() LOG.info(f"Emulator shut down after {end - start:.3f} seconds") except subprocess.TimeoutExpired: LOG.info("Emulator seems stuck. Sending kill signal.") self.process.kill() _RUNNING_PIDS.remove(self.process) _rm_f(self.profile_dir / "trezor.pid") _rm_f(self.profile_dir / "trezor.port") self.process = None def restart(self) -> None: # preserving the recording directory between restarts self.restart_amount += 1 prev_screenshot_dir = self.client.debug.screenshot_recording_dir debug_transport = self.client.debug.transport self.stop() self.start(transport=self.transport, debug_transport=debug_transport) if prev_screenshot_dir: self.client.debug.start_recording( prev_screenshot_dir, refresh_index=self.restart_amount ) def __enter__(self) -> "Emulator": return self def __exit__(self, exc_type: Any, exc_value: Any, traceback: Any) -> None: self.stop() def get_storage(self) -> bytes: return self.storage.read_bytes() def properties(self) -> dict: return {} class CoreEmulator(Emulator): STORAGE_FILENAME = "trezor.flash" def __init__( self, *args: Any, tropic_model_port: Optional[int] = None, port: Optional[int] = None, main_args: Sequence[str] = ("-m", "main"), workdir: Optional[Path] = None, sdcard: Optional[bytes] = None, disable_animation: bool = True, heap_size: str = "20M", **kwargs: Any, ) -> None: super().__init__(*args, **kwargs) if workdir is not None: self.workdir = Path(workdir).resolve() self.sdcard = self.profile_dir / "trezor.sdcard" if sdcard is not None: self.sdcard.write_bytes(sdcard) if port: self.port = port self.tropic_model_port = tropic_model_port self.disable_animation = disable_animation self.main_args = list(main_args) self.heap_size = heap_size def make_env(self) -> Dict[str, str]: env = super().make_env() env.update( TREZOR_PROFILE_DIR=str(self.profile_dir), TREZOR_PROFILE=str(self.profile_dir), TREZOR_UDP_PORT=str(self.port), ) if self.headless: env["SDL_VIDEODRIVER"] = "dummy" if self.headless or self.disable_animation: env["TREZOR_DISABLE_FADE"] = "1" env["TREZOR_DISABLE_ANIMATION"] = "1" env["TROPIC_MODEL_PORT"] = str(self.tropic_port()) return env def make_args(self) -> List[str]: pyopt = "-O0" if self.debug else "-O1" return ( [pyopt, "-X", f"heapsize={self.heap_size}"] + self.main_args + self.extra_args ) # UDP ports are hardcoded as offsets to the base wirelink port def debuglink_port(self) -> int: return self.port + 1 def fido2_port(self) -> int: return self.port + 2 def vcp_port(self) -> int: return self.port + 3 def ble_port(self) -> tuple[int, int]: return (self.port + 4, self.port + 5) # Tropic model can be managed externally, return configured port if set. # Also TCP instead of UDP. def tropic_port(self) -> int: return self.tropic_model_port or (self.port + 6) def properties(self) -> dict[str, Any]: args = [str(self.executable), "--emulator-properties"] try: stdout = subprocess.check_output( args, cwd=self.workdir, env=self.make_env(), stderr=subprocess.PIPE, text=True, timeout=5, ) props = json.loads(stdout) assert isinstance(props, dict) return props except subprocess.CalledProcessError as exc: LOG.warning( f"{' '.join(args)} failed: {exc}\nstdout: {exc.stdout}\nstderr: {exc.stderr}" ) except Exception as exc: LOG.warning(f"{' '.join(args)} failed: {exc}") return {} class LegacyEmulator(Emulator): STORAGE_FILENAME = "emulator.img" def make_env(self) -> Dict[str, str]: env = super().make_env() if self.headless: env["SDL_VIDEODRIVER"] = "dummy" return env ././@PaxHeader0000000000000000000000000000003400000000000010212 xustar0028 mtime=1785245699.2991316 trezor-0.20.2/src/trezorlib/_internal/firmware_headers.py0000644000000000000000000006021115232130003020472 0ustar00# This file is part of the Trezor project. # # Copyright (C) SatoshiLabs and contributors # # This library is free software: you can redistribute it and/or modify # it under the terms of the GNU Lesser General Public License version 3 # as published by the Free Software Foundation. # # This library is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU Lesser General Public License for more details. # # You should have received a copy of the License along with this library. # If not, see . from __future__ import annotations import typing as t from copy import copy from dataclasses import asdict from enum import Enum import click import construct as c from construct_classes import Struct from slhdsa import PublicKey, SecretKey, sha2_128s # noqa: I900 from typing_extensions import Protocol, Self, runtime_checkable from .. import _ed25519, cosi, firmware from ..firmware import models as fw_models from ..firmware import nrf from ..firmware.sanity_struct import STRICT_SANITY_CHECK_DEFAULT SYM_OK = click.style("\u2714", fg="green") SYM_FAIL = click.style("\u274c", fg="red") class Status(Enum): VALID = click.style("VALID", fg="green", bold=True) INVALID = click.style("INVALID", fg="red", bold=True) MISSING = click.style("MISSING", fg="blue", bold=True) DEVEL = click.style("DEVEL", fg="red", bold=True) def is_ok(self) -> bool: return self is Status.VALID or self is Status.DEVEL VHASH_DEVEL = bytes.fromhex( "c5b4d40cb76911392122c8d1c277937e49c69b2aaf818001ec5c7663fcce258f" ) def _make_dev_keys(*key_bytes: bytes) -> t.Sequence[bytes]: return [k * 32 for k in key_bytes] def all_zero(data: bytes) -> bool: return all(b == 0 for b in data) def check_signature_any( fw: SignableImageProto | BootloaderV2Image, is_devel: bool = False ) -> Status: if not fw.signature_present(): return Status.MISSING try: fw.verify() return Status.VALID if not is_devel else Status.DEVEL except Exception: pass try: fw.verify(dev_keys=True) return Status.DEVEL except Exception: return Status.INVALID # ====================== formatting functions ==================== class LiteralStr(str): pass def chunkify(data: bytes) -> str: s = data.hex() return " ".join(s[i : i + 4] for i in range(0, len(s), 4)) def format_container( pb: t.Union[c.Container, Struct, dict], indent: int = 0, sep: str = " " * 4, truncate_after: t.Optional[int] = 64, truncate_to: t.Optional[int] = 32, ) -> str: def mostly_printable(bytes: bytes | bytearray) -> bool: if not bytes: return True printable = sum(1 for byte in bytes if 0x20 <= byte <= 0x7E) return printable / len(bytes) > 0.8 def pformat(value: t.Any, indent: int) -> str: level = sep * indent leadin = sep * (indent + 1) if isinstance(value, LiteralStr): return value if isinstance(value, list): # short list of simple values if not value or isinstance(value[0], (int, bool, Enum)): return repr(value) # long list, one line per entry lines = ["[", level + "]"] lines[1:1] = [leadin + pformat(x, indent + 1) for x in value] return "\n".join(lines) if isinstance(value, Struct): value = asdict(value) if isinstance(value, dict): lines = ["{"] for key, val in value.items(): if key.startswith("_"): continue if val is None or val == []: continue lines.append(leadin + key + ": " + pformat(val, indent + 1)) lines.append(level + "}") return "\n".join(lines) if isinstance(value, (bytes, bytearray)): length = len(value) suffix = "" if truncate_after and length > truncate_after: suffix = "..." value = value[: truncate_to or 0] if mostly_printable(value): output = repr(value) else: output = value.hex() return f"{length} bytes {output}{suffix}" if isinstance(value, Enum): return str(value) return repr(value) return pformat(pb, indent) def _format_version(version: t.Tuple[int, ...]) -> str: return ".".join(str(i) for i in version) def format_header( header: firmware.core.FirmwareHeader, code_hashes: t.Sequence[bytes], digest: bytes, sig_status: Status, ) -> str: header_dict = asdict(header) header_out = header_dict.copy() for key, val in header_out.items(): if "version" in key: header_out[key] = LiteralStr(_format_version(val)) hashes_out = [] for expected, actual in zip(header.hashes, code_hashes): status = SYM_OK if expected == actual else SYM_FAIL hashes_out.append(LiteralStr(f"{status} {expected.hex()}")) if all(all_zero(h) for h in header.hashes): hash_status = Status.MISSING elif header.hashes != code_hashes: hash_status = Status.INVALID else: hash_status = Status.VALID header_out["hashes"] = hashes_out all_ok = SYM_OK if hash_status.is_ok() and sig_status.is_ok() else SYM_FAIL output = [ "Firmware Header " + format_container(header_out), f"Fingerprint: {click.style(chunkify(digest), bold=True)}", f"{all_ok} Signature is {sig_status.value}, hashes are {hash_status.value}", ] return "\n".join(output) def format_secmon_header( header: firmware.secmon.SecmonHeader, code_hash: bytes, digest: bytes, sig_status: Status, ) -> str: header_dict = asdict(header) header_out = header_dict.copy() for key, val in header_out.items(): if "version" in key: header_out[key] = LiteralStr(_format_version(val)) # status = SYM_OK if header.hash == code_hash else SYM_FAIL if all_zero(header.hash): hash_status = Status.MISSING elif header.hash != code_hash: hash_status = Status.INVALID else: hash_status = Status.VALID # # header_out["hashes"] = hashes_out all_ok = SYM_OK if hash_status.is_ok() and sig_status.is_ok() else SYM_FAIL output = [ "SECMON Header " + format_container(header_out), f"Code hash: {click.style(chunkify(code_hash), bold=True)}", f"Fingerprint: {click.style(chunkify(digest), bold=True)}", f"{all_ok} Signature is {sig_status.value}, hash is {hash_status.value}", ] return "\n".join(output) # =========================== functionality implementations =============== class SignableImageProto(Protocol): NAME: t.ClassVar[str] @classmethod def parse(cls, data: bytes) -> Self: """Parse binary data into an image of this type.""" ... def digest(self) -> bytes: """Calculate digest that will be signed / verified.""" ... def verify(self, dev_keys: bool = False) -> None: """Verify signature of the image. If dev_keys is True, verify using development keys. If selected, a production image will fail verification. """ ... def build(self) -> bytes: """Reconstruct binary representation of the image.""" ... def format(self, verbose: bool = False) -> str: """Generate printable information about the image.""" ... def signature_present(self) -> bool: """Check if the image has a signature.""" ... @runtime_checkable class CosiSignedImage(SignableImageProto, Protocol): DEV_KEYS: t.ClassVar[t.Sequence[bytes]] = [] def insert_signature(self, signature: bytes, sigmask: int) -> None: ... def public_keys(self, dev_keys: bool = False) -> t.Sequence[bytes]: ... @runtime_checkable class LegacySignedImage(SignableImageProto, Protocol): def slots(self) -> t.Iterable[int]: ... def insert_signature(self, slot: int, key_index: int, signature: bytes) -> None: ... class CosiSignatureHeaderProto(Protocol): hw_model: t.Union[fw_models.Model, bytes] signature: bytes sigmask: int class CosiSignedMixin: def signature_present(self) -> bool: header = self.get_header() return not all_zero(header.signature) or header.sigmask != 0 def insert_signature(self, signature: bytes, sigmask: int) -> None: self.get_header().signature = signature self.get_header().sigmask = sigmask def get_header(self) -> CosiSignatureHeaderProto: raise NotImplementedError def get_model_keys(self, dev_keys: bool) -> fw_models.ModelKeys: hw_model = self.get_header().hw_model model = fw_models.Model.from_hw_model(hw_model) return model.model_keys(dev_keys) class VendorHeader(firmware.VendorHeader, CosiSignedMixin): NAME: t.ClassVar[str] = "vendorheader" DEV_KEYS: t.ClassVar[t.Sequence[bytes]] = _make_dev_keys(b"\x44", b"\x45") SUBCON = c.Struct( *firmware.VendorHeader.SUBCON.subcons, # type: ignore [Cannot access attribute] c.Terminated, ) def get_header(self) -> CosiSignatureHeaderProto: return self def _format(self, terse: bool) -> str: if not terse: output = [ "Vendor Header " + format_container(self), f"Pubkey bundle hash: {self.vhash().hex()}", ] else: output = [ "Vendor Header for {vendor} version {version} ({size} bytes)".format( vendor=click.style(self.text, bold=True), version=_format_version(self.version), size=self.header_len, ), ] if not terse: output.append( f"Fingerprint: {click.style(chunkify(self.digest()), bold=True)}" ) sig_status = check_signature_any(self) sym = SYM_OK if sig_status.is_ok() else SYM_FAIL output.append(f"{sym} Signature is {sig_status.value}") return "\n".join(output) def format(self, verbose: bool = False) -> str: return self._format(terse=False) def public_keys(self, dev_keys: bool = False) -> t.Sequence[bytes]: return self.get_model_keys(dev_keys).bootloader_keys class VendorFirmware(firmware.VendorFirmware, CosiSignedMixin): NAME: t.ClassVar[str] = "firmware" DEV_KEYS: t.ClassVar[t.Sequence[bytes]] = _make_dev_keys(b"\x47", b"\x48") def get_header(self) -> CosiSignatureHeaderProto: return self.firmware.header def format(self, verbose: bool = False) -> str: vh = copy(self.vendor_header) vh.__class__ = VendorHeader assert isinstance(vh, VendorHeader) is_devel = self.vendor_header.vhash() == VHASH_DEVEL return ( vh._format(terse=not verbose) + "\n" + format_header( self.firmware.header, self.firmware.code_hashes(), self.digest(), check_signature_any(self, is_devel), ) ) def public_keys(self, dev_keys: bool = False) -> t.Sequence[bytes]: """Return public keys that should be used to sign the image. In vendor firmware, the public keys are stored in the vendor header. There is no choice of development keys. If that is required, you need to create an image with a development vendor header. """ return self.vendor_header.pubkeys class BootloaderImage(firmware.FirmwareImage, CosiSignedMixin): NAME: t.ClassVar[str] = "bootloader" DEV_KEYS: t.ClassVar[t.Sequence[bytes]] = _make_dev_keys(b"\x41", b"\x42") def get_header(self) -> CosiSignatureHeaderProto: return self.header def format(self, verbose: bool = False) -> str: return format_header( self.header, self.code_hashes(), self.digest(), check_signature_any(self), ) def verify(self, dev_keys: bool = False) -> None: self.validate_code_hashes() public_keys = self.public_keys(dev_keys) try: cosi.verify( self.header.signature, self.digest(), self.get_model_keys(dev_keys).boardloader_sigs_needed, public_keys, self.header.sigmask, ) except Exception: raise firmware.InvalidSignatureError("Invalid bootloader signature") def public_keys(self, dev_keys: bool = False) -> t.Sequence[bytes]: return self.get_model_keys(dev_keys).boardloader_keys class SecmonImage(firmware.SecmonImage, CosiSignedMixin): NAME: t.ClassVar[str] = "secmon" DEV_KEYS: t.ClassVar[t.Sequence[bytes]] = _make_dev_keys(b"\x41", b"\x42") def get_header(self) -> CosiSignatureHeaderProto: return self.header def format(self, verbose: bool = False) -> str: return format_secmon_header( self.header, self.code_hash(), self.digest(), check_signature_any(self), ) def verify(self, dev_keys: bool = False) -> None: self.validate_code_hash() public_keys = self.public_keys(dev_keys) try: cosi.verify( self.header.signature, self.digest(), self.get_model_keys(dev_keys).boardloader_sigs_needed, public_keys, self.header.sigmask, ) except Exception: raise firmware.InvalidSignatureError("Invalid bootloader signature") def public_keys(self, dev_keys: bool = False) -> t.Sequence[bytes]: return self.get_model_keys(dev_keys).secmon_keys class BootloaderV2Image(firmware.BootableImage): NAME: t.ClassVar[str] = "bootloader" DEV_ED25519_KEYS_PRIVATE = _make_dev_keys(b"\x41", b"\x42") def signature_present(self) -> bool: return any(not all_zero(sig) for sig in self.unauth.slh_signatures) or any( not all_zero(sig) for sig in self.unauth.ec_signatures ) def sign_with_devkeys(self) -> None: # sigmask is a part of the signed part of the header the # digest is calculated from self.header.sigmask = (1 << 0) | (1 << 1) digest = self.merkle_root() # SLH signature signs the image digest for idx, key in enumerate(fw_models.ROOT_SLH_DSA_KEYS_DEV_PRIVATE): key = SecretKey.from_digest(key, sha2_128s) self.unauth.slh_signatures[idx] = key.sign(digest) hash_params = self.get_hash_params() hash_fn = hash_params.hash_function for idx, key in enumerate(self.DEV_ED25519_KEYS_PRIVATE): # The EC signature signs both the image digest and the SLH signature ext_digest = hash_fn(digest + self.unauth.slh_signatures[idx]).digest() self.unauth.ec_signatures[idx] = _ed25519.signature_unsafe( ext_digest, key, fw_models.ROOT_ED25519_KEYS_DEV[idx] ) def format(self, verbose: bool = False) -> str: header_dict = asdict(self) header_out = header_dict.copy() for key, val in header_out.items(): if "version" in key: header_out[key] = LiteralStr(_format_version(val)) sig_status = check_signature_any(self) all_ok = SYM_OK if sig_status.is_ok() else SYM_FAIL output = [ "Firmware Header " + format_container(header_out), f"Leaf hash: {click.style(chunkify(self.leaf_hash()), bold=True)}", f"Merkle root: {click.style(chunkify(self.merkle_root()), bold=True)}", f"{all_ok} Signature is {sig_status.value}", ] return "\n".join(output) def verify(self, dev_keys: bool = False) -> None: digest = self.merkle_root() hash_fn = self.get_hash_params().hash_function mask = self.header.sigmask if (mask.bit_length() > len(self.public_ec_keys(dev_keys))) or ( mask.bit_length() > len(self.public_pq_keys(dev_keys)) ): raise ValueError("Sigmask specifies more public keys than provided.") # Verify ed25519 signatures if mask.bit_count() != len(self.unauth.ec_signatures): raise ValueError("Sigmask does not specify valid number of ed25519 keys.") sig_idx = 0 for pubkey_idx, key in enumerate(self.public_ec_keys(dev_keys)): if not (mask & (1 << pubkey_idx)): continue ext_digest = hash_fn(digest + self.unauth.slh_signatures[sig_idx]).digest() try: _ed25519.checkvalid(self.unauth.ec_signatures[sig_idx], ext_digest, key) except _ed25519.SignatureMismatch: raise firmware.InvalidSignatureError("Invalid bootloader signature") sig_idx += 1 # Verify slh-dsa signatures if mask.bit_count() != len(self.unauth.slh_signatures): raise ValueError("Sigmask does not specify valid number of slh-dsa keys.") sig_idx = 0 for pubkey_idx, key in enumerate(self.public_pq_keys(dev_keys)): if not (mask & (1 << pubkey_idx)): continue pq_key = PublicKey.from_digest(key, sha2_128s) if not pq_key.verify(digest, self.unauth.slh_signatures[sig_idx]): raise firmware.InvalidSignatureError("Invalid bootloader signature") sig_idx += 1 class LegacyFirmware(firmware.LegacyFirmware): NAME: t.ClassVar[str] = "legacy_firmware_v1" def signature_present(self) -> bool: return any(i != 0 for i in self.key_indexes) or any( not all_zero(sig) for sig in self.signatures ) def insert_signature(self, slot: int, key_index: int, signature: bytes) -> None: if not 0 <= slot < firmware.V1_SIGNATURE_SLOTS: raise ValueError("Invalid slot number") if not 0 < key_index <= len(fw_models.LEGACY_V1V2.firmware_keys): raise ValueError("Invalid key index") self.key_indexes[slot] = key_index self.signatures[slot] = signature def format(self, verbose: bool = False) -> str: contents = asdict(self).copy() del contents["embedded_v2"] if self.embedded_v2: em = copy(self.embedded_v2) em.__class__ = LegacyV2Firmware assert isinstance(em, LegacyV2Firmware) embedded_content = "\nEmbedded V2 header: " + em.format(verbose=verbose) else: embedded_content = "" return format_container(contents) + embedded_content def public_keys( self, dev_keys: bool = False, signature_version: int = 2 ) -> t.Sequence[bytes]: if dev_keys: return fw_models.LEGACY_V1V2_DEV.firmware_keys else: return fw_models.LEGACY_V1V2.firmware_keys def slots(self) -> t.Iterable[int]: return self.key_indexes class LegacyV2Firmware(firmware.LegacyV2Firmware): NAME: t.ClassVar[str] = "legacy_firmware_v2" def signature_present(self) -> bool: return any(i != 0 for i in self.header.v1_key_indexes) or any( not all_zero(sig) for sig in self.header.v1_signatures ) def insert_signature(self, slot: int, key_index: int, signature: bytes) -> None: if not 0 <= slot < firmware.V1_SIGNATURE_SLOTS: raise ValueError("Invalid slot number") if not 0 < key_index <= len(firmware.V1_BOOTLOADER_KEYS): raise ValueError("Invalid key index") if not isinstance(self.header.v1_key_indexes, list): self.header.v1_key_indexes = list(self.header.v1_key_indexes) if not isinstance(self.header.v1_signatures, list): self.header.v1_signatures = list(self.header.v1_signatures) self.header.v1_key_indexes[slot] = key_index self.header.v1_signatures[slot] = signature def format(self, verbose: bool = False) -> str: return format_header( self.header, self.code_hashes(), self.digest(), check_signature_any(self), ) def public_keys( self, dev_keys: bool = False, signature_version: int = 3 ) -> t.Sequence[bytes]: keymap: t.Dict[t.Tuple[int, bool], fw_models.ModelKeys] = { (3, False): fw_models.LEGACY_V3, (3, True): fw_models.LEGACY_V3_DEV, (2, False): fw_models.LEGACY_V1V2, (2, True): fw_models.LEGACY_V1V2_DEV, } if not (signature_version, dev_keys) in keymap: raise ValueError("Unsupported signature version") return keymap[signature_version, dev_keys].firmware_keys def slots(self) -> t.Iterable[int]: return self.header.v1_key_indexes class NrfImage(nrf.NrfImage): NAME: t.ClassVar[str] = "nrf" def signature_present(self) -> bool: return ( nrf.TlvType.SIGNATURE1 in self.unprotected_tlv and nrf.TlvType.SIGNATURE2 in self.unprotected_tlv ) def format(self, verbose: bool = False) -> str: header_str = _format_header(self.header) image_str = f"Image data: {len(self.img_data)} bytes" tlvs_str = _format_tlvs(self.protected_tlv, self.unprotected_tlv) fingerprint_str = ( f"Calculated fingerprint: {click.style(chunkify(self.digest()), bold=True)}" ) sig_result = check_signature_any(self) sig_ok = SYM_OK if sig_result.is_ok() else SYM_FAIL sig_str = f"{sig_ok} Signature is {sig_result.value}" return "\n".join( [ header_str, image_str, tlvs_str, fingerprint_str, sig_str, ] ) def _format_header(header: nrf.NrfHeader) -> str: header_dict = asdict(header) header_out = header_dict.copy() for key, val in header_out.items(): if "version" in key: header_out[key] = LiteralStr(_format_version_nRF(val)) return "NrfHeader " + format_container(header_out) def _format_version_nRF(version: tuple[int, int, int, int]) -> str: return "{}.{}.{}+{}".format(*version) def _format_tlvs( *tlv_tables: nrf.TlvTable, padding: str = " " * 4, ) -> str: total_size = 0 for table in tlv_tables: total_size += table.length output = [f"TLVs (count: {len(tlv_tables)}, total_size: {total_size} bytes) {{"] def _add(s: str, depth: int = 1) -> None: output.append(padding * depth + s) for tlv in tlv_tables: type_name = tlv.magic.name _add(f"{type_name} ({tlv.length} bytes) {{") for entry in tlv.entries: if isinstance(entry.id, nrf.TlvType): name = entry.id.name else: name = f"unrecognized {entry.id}" if len(entry.data) > 64: data = entry.data[:64].hex() + "..." elif isinstance(entry.id, nrf.TlvType) and entry.id.name == "MODEL": data = f"{entry.data.decode()} ({entry.data.hex()})" else: data = entry.data.hex() _add(f"{name}: ({len(entry.data)} bytes) {data}", depth=2) _add("}") return "\n".join(output) + "\n}" def parse_image( image: bytes, strict: bool = STRICT_SANITY_CHECK_DEFAULT ) -> SignableImageProto: try: return VendorFirmware.parse(image, strict=strict) except c.ConstructError: pass try: return VendorHeader.parse(image, strict=strict) except c.ConstructError: pass try: return SecmonImage.parse(image, strict=strict) except c.ConstructError: pass try: firmware_img = firmware.core.FirmwareImage.parse(image, strict=strict) if firmware_img.header.magic == firmware.core.HeaderType.BOOTLOADER: return BootloaderImage.parse(image, strict=strict) if firmware_img.header.magic == firmware.core.HeaderType.FIRMWARE: return LegacyV2Firmware.parse(image, strict=strict) raise ValueError("Unrecognized firmware header magic") except c.ConstructError: pass try: return LegacyFirmware.parse(image, strict=strict) except c.ConstructError: pass raise ValueError("Unrecognized firmware type") ././@PaxHeader0000000000000000000000000000003300000000000010211 xustar0027 mtime=1785245699.299195 trezor-0.20.2/src/trezorlib/_internal/master_fingerprint.py0000644000000000000000000000520415232130003021066 0ustar00# This file is part of the Trezor project. # # Copyright (C) SatoshiLabs and contributors # # This library is free software: you can redistribute it and/or modify # it under the terms of the GNU Lesser General Public License version 3 # as published by the Free Software Foundation. # # This library is distributed in the hope that it will be useful, # but WITHOUT ANY WARRANTY; without even the implied warranty of # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the # GNU Lesser General Public License for more details. # # You should have received a copy of the License along with this library. # If not, see . from __future__ import annotations import hashlib from typing import TextIO from .slip26 import parse_label # Artefact info and fingerprint: (model integer, purpose, 32-byte fingerprint). ArtefactFingerprint = tuple[int, int, bytes] def parse_fingerprints_file(f: TextIO) -> set[ArtefactFingerprint]: """Parse ``