Release 5.0.0

Compatible with desktop app versions v4.3.0 or newer.

Release notes:

• Provide option for users to access legacy hidden wallets in case they have funds still there
• Allow the ability to verify a hidden wallet password, if in non-full-2FA mode
• Use message authentication code for USB communication
• Provide firmware version with the 'ping' command, such that U2F-iface applications (e.g. MEW) can know the correct API format to use

To reproduce and verify the deterministic build:

# Clone the repository
git clone https://github.com/digitalbitbox/mcu.git
cd mcu

# Build deterministically (requires Vagrant and Virtualbox and OSX or Linux)
vagrant up
cp build-vagrant/bin/firmware.pad.bin firmware.deterministic.5.0.0.bin
vagrant halt

# Verify the deterministic binary
shasum -a 256 firmware.deterministic.5.0.0.bin  #  7f55a9740d107e7fac5ce07c06e0bd3f7ab76d65021209a8c16933c811259ab8

# Append signatures of the firmware
py/prepend_signatures_firmware_binary.py firmware.deterministic.5.0.0.bin firmware.deterministic.5.0.0.signed.bin 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


# Verify the signed deterministic binary
shasum -a 256 firmware.deterministic.5.0.0.signed.bin  #  01eb019214fc6503d109f5826cb282ebc6b1c45339dedb8e36fab5b65b16caeb

# Signed deterministic binaries can be loaded into the Digital Bitbox 
# using the Upgrade Firmware button in the desktop app.

# In case of problems, check if using a different major version:
vagrant --version  #  Vagrant 1.8.5
vagrant box list   #  ubuntu/trusty64 (virtualbox, 20181103.0.0)
virtualbox --help  #  Oracle VM VirtualBox Manager 5.1.38

ECC secp256k1 public keys and signatures of the double SHA256 hash of firmware.deterministic.5.0.0.bin:

0263b742d9873405c609814da884324ab0f4c1597a5fd152b388899857f4d041df : fb8f3f271869872b9fd7ee7985cb65434f8c2b24e0cc95b23d2e35ac94b10f44394889d44398498586f18a09ecb6ec1a0bd2c760a1e14288151cc0f96cbb99b2
02b95dc22d293376222ef896f74a8436a8b6672e7e416299f3c4e23b49c38ad366 : 44acefdafb734091f9ea4bda8165cc9aac2c9ceb0e5cd33b8b1d0761c980dedd4e02a88510ab1eb6ace128dc32f64c926118289e4b1a54f62b55ef1b754a201c
03ef4c48dc308ace971c025db3edd4bc5d5110e28e14bdd925fffafd4d21002800 : 6ca3f4264c85db8b2f8f24ecf38efee60ad4117e5a293fc01adf7f1c445d896323fb9ecd386074b0bcbd9d120c88f09f3c801adcba9171a5553e68e5deb8e1cb
030d8b0b86fca70bfd3a8d842cdb3ff8362c02f455fd092b080f1bb137dfc1d25f : 8774a39d8d9ba34c1f47209f869bd9ea7806f3b584e5fcbc5531fc6a31b2b79c519d9c1b14b07db72d390a633dc4e55494b13e66be49c09cf2032aff7a6a5f7f

Signature blob appended to firmware.deterministic.5.0.0.bin

000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fb8f3f271869872b9fd7ee7985cb65434f8c2b24e0cc95b23d2e35ac94b10f44394889d44398498586f18a09ecb6ec1a0bd2c760a1e14288151cc0f96cbb99b244acefdafb734091f9ea4bda8165cc9aac2c9ceb0e5cd33b8b1d0761c980dedd4e02a88510ab1eb6ace128dc32f64c926118289e4b1a54f62b55ef1b754a201c6ca3f4264c85db8b2f8f24ecf38efee60ad4117e5a293fc01adf7f1c445d896323fb9ecd386074b0bcbd9d120c88f09f3c801adcba9171a5553e68e5deb8e1cb8774a39d8d9ba34c1f47209f869bd9ea7806f3b584e5fcbc5531fc6a31b2b79c519d9c1b14b07db72d390a633dc4e55494b13e66be49c09cf2032aff7a6a5f7f