Skip to content

Release 6.0.3

Compare
Choose a tag to compare
@douglasbakkum douglasbakkum released this 27 Mar 00:04
· 69 commits to master since this release
4aded96

The latest desktop app contains the latest firmware and provides step-by-step instructions for upgrading. To get the latest desktop app, click here.

Release notes:

  • Patch to check validity of change addresses

To reproduce and verify the deterministic build:

# Clone the repository
git clone https://github.com/digitalbitbox/mcu.git
cd mcu

# Build deterministically (requires Vagrant and Virtualbox and OSX or Linux)
vagrant up
cp build-vagrant/bin/firmware.pad.bin firmware.deterministic.6.0.3.bin
vagrant halt

# Verify the deterministic binary
shasum -a 256 firmware.deterministic.6.0.3.bin  #  3db3dca5e31ecd1868cb96d617f33162e16b82dab8e3961f17110e57261d99ca

# Append signatures of the firmware
py/prepend_signatures_firmware_binary.py firmware.deterministic.6.0.3.bin firmware.deterministic.6.0.3.signed.bin 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


# Verify the signed deterministic binary
shasum -a 256 firmware.deterministic.6.0.3.signed.bin  #  7577780c23e46d9ebaacb8c84e00cb2d3ca9e36b199f3d83979fa6d11ba66c1f

# Signed deterministic binaries can be loaded into the Digital Bitbox
# using the Upgrade Firmware button in the desktop app.

# In case of problems, check if using a different major version:
vagrant --version  #  Vagrant 1.8.5
vagrant box list   #  ubuntu/trusty64 (virtualbox, 20181103.0.0)
virtualbox --help  #  Oracle VM VirtualBox Manager 5.1.38

ECC secp256k1 public keys and signatures of the double SHA256 hash of firmware.deterministic.6.0.3.bin:

0263b742d9873405c609814da884324ab0f4c1597a5fd152b388899857f4d041df : 5932861985f702f1103173ae772ae9aed4db74a23ca9ba590827856466fd89c300ff0b910b3badfd7ffb46f4a84375f81cc8632d3496e7b8950fb907c40969fe
02b95dc22d293376222ef896f74a8436a8b6672e7e416299f3c4e23b49c38ad366 : dd0539315a7e3aa7743142d95aa4ae2c3dfa477aba40f8f53d724f25083ebc126a807d13e4eb6332184bc775a368f4d46aebc21d781cc7e697b1b3cf76f3b03e
03ef4c48dc308ace971c025db3edd4bc5d5110e28e14bdd925fffafd4d21002800 : b7c2108d404de7b40c30d772cd668f361a8174369e5c33add1dfebd3e1bc222f296d1dda936ac6b4ff6e66d48e0d8df58bc99f5119079b5008a41e63203df6d2
030d8b0b86fca70bfd3a8d842cdb3ff8362c02f455fd092b080f1bb137dfc1d25f : af85433087dbb3501aa7148bc9ee8209943070ab110d99512a843c2df753ffda45c4e0a40609d252d8cc53e56f866faf4895067d45f39ca4f91ab6559a1c02c7

Signature blob appended to firmware.deterministic.6.0.3.bin

0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005932861985f702f1103173ae772ae9aed4db74a23ca9ba590827856466fd89c300ff0b910b3badfd7ffb46f4a84375f81cc8632d3496e7b8950fb907c40969fedd0539315a7e3aa7743142d95aa4ae2c3dfa477aba40f8f53d724f25083ebc126a807d13e4eb6332184bc775a368f4d46aebc21d781cc7e697b1b3cf76f3b03eb7c2108d404de7b40c30d772cd668f361a8174369e5c33add1dfebd3e1bc222f296d1dda936ac6b4ff6e66d48e0d8df58bc99f5119079b5008a41e63203df6d2af85433087dbb3501aa7148bc9ee8209943070ab110d99512a843c2df753ffda45c4e0a40609d252d8cc53e56f866faf4895067d45f39ca4f91ab6559a1c02c7