Skip to content

Release v7.0.3

Compare
Choose a tag to compare
@douglasbakkum douglasbakkum released this 29 Oct 07:23
· 18 commits to master since this release
012d929

The latest desktop app contains the latest firmware and provides step-by-step instructions for upgrading. To get the latest desktop app, click here.

Release notes:

  • Internal JSON generation performance fixes
  • Reverts an error in tag v7.0.2 where a JSON error code became a string; the error code should remain a number

To reproduce and verify the deterministic build:

# Clone the repository
git clone https://github.com/digitalbitbox/mcu.git
cd mcu

# Build deterministically (requires Vagrant and Virtualbox and OSX or Linux)
vagrant up
cp build-vagrant/bin/firmware.pad.bin firmware.deterministic.7.0.3.bin
vagrant halt

# Verify the deterministic binary
shasum -a 256 firmware.deterministic.7.0.3.bin  #  ff53b22d6c237396d610d55583e0b32ee7a4edfa356ac19c767c47e298b26e02

# Append signatures of the firmware
py/prepend_signatures_firmware_binary.py firmware.deterministic.7.0.3.bin firmware.deterministic.7.0.3.signed.bin 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


# Verify the signed deterministic binary
shasum -a 256 firmware.deterministic.7.0.3.signed.bin  #  32107814f4c4aa307207e14aeee047051a34ac00ef3f242ca8ea374c9536e11b

# Signed deterministic binaries can be loaded into the Digital Bitbox
# using the Upgrade Firmware button in the desktop app.

# In case of problems, check if using a different major version:
vagrant --version  #  Vagrant 2.2.4
vagrant box list   #  ubuntu/trusty64 (virtualbox, 20190429.0.0)
virtualbox --help  #  Oracle VM VirtualBox Manager 5.1.38

ECC secp256k1 public keys and signatures of the double SHA256 hash of firmware.deterministic.7.0.3.bin:

0263b742d9873405c609814da884324ab0f4c1597a5fd152b388899857f4d041df : f82d494b09415bde6426f154bbf28e0c13cdb07d3daad39d7954e677201696a47ca2a962915179ea059c56ceaf1523ed79ca3c90fce5ddee797c72fad023bb91
02b95dc22d293376222ef896f74a8436a8b6672e7e416299f3c4e23b49c38ad366 : 51801755415b60d353d2e2e8711fa68f94f3840bb0b33791593f87238795075c36861763e03eb5e5ad3dae3c18386325d38cba9286b5104779daad99eb5628b0
03ef4c48dc308ace971c025db3edd4bc5d5110e28e14bdd925fffafd4d21002800 : bffdbb174cfb15e20f3f730f32faf3132c22fd0ea99ffd2c534e2a7e8aa87c1c06b53f9fe419f022a77d17a9d4137dac071284bcc27d3c760d774ce97f1a285c
030d8b0b86fca70bfd3a8d842cdb3ff8362c02f455fd092b080f1bb137dfc1d25f : 25e5b0e14728b0617ae6a268c0a003663aa7c3adf583ee019af26953aea649f224d08f4043e4f8d7f799fda586c2ff5fa732663b0388ef6571124603b787b426

Signature blob appended to firmware.deterministic.7.0.3.bin

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