Release v7.1.0

The latest desktop app contains the latest firmware and provides step-by-step instructions for upgrading. To get the latest desktop app, click here.

Release notes:

• Allow backup list & check commands when the device is locked. This allows users to have confidence that they will be able to recover a wallet from a backup after resetting their device.

To reproduce and verify the deterministic build:

# Clone the repository
git clone https://github.com/digitalbitbox/mcu.git
cd mcu

# Build deterministically (requires Vagrant and Virtualbox and OSX or Linux)
vagrant up
cp build-vagrant/bin/firmware.pad.bin firmware.deterministic.7.1.0.bin
vagrant halt

# Verify the deterministic binary
shasum -a 256 firmware.deterministic.7.1.0.bin  #  0dc1209bf1b54baed594d6810656a947f094d6dbdc1ac8d6253254c36a697e97

# Append signatures of the firmware
py/prepend_signatures_firmware_binary.py firmware.deterministic.7.1.0.bin firmware.deterministic.7.1.0.signed.bin 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

# Verify the signed deterministic binary
shasum -a 256 firmware.deterministic.7.1.0.signed.bin  #  5975183ed2d4393a9092c67ff22391c28cfa022e397707ae6cc71cad6ad4450f

# Signed deterministic binaries can be loaded into the Digital Bitbox
# using the Upgrade Firmware button in the desktop app.

# In case of problems, check if using a different major version:
vagrant --version  #  Vagrant 2.2.4
vagrant box list   #  ubuntu/trusty64 (virtualbox, 20190429.0.0)
virtualbox --help  #  Oracle VM VirtualBox Manager 5.1.38

ECC secp256k1 public keys and signatures of the double SHA256 hash of firmware.deterministic.7.1.0.bin:

0263b742d9873405c609814da884324ab0f4c1597a5fd152b388899857f4d041df : 79ab2031396658f7604516646fb697501aa9486d2413555089fc9b41f51684362c7309daeaa045da90e7286316b78354cc9455c84903cfe49f704cf0726080be
02b95dc22d293376222ef896f74a8436a8b6672e7e416299f3c4e23b49c38ad366 : 72371c5bfeef998ec5fd013b5a5f46bbad7e293fbb2a42c5f3beb0b07f0a67c839ef3fa80bab8464b02933dfe453ed12228a34ef82a7debe27673abe77d796e4
03ef4c48dc308ace971c025db3edd4bc5d5110e28e14bdd925fffafd4d21002800 : f935e1384a2bfe963e827e76fa3c91e0f837b8c49587fee248766038bb3c9d1f1e816d3dd0d3c0a9528e617dfa970aa0ffda83e76e98c7b694ed64f0fbd0b5ba
030d8b0b86fca70bfd3a8d842cdb3ff8362c02f455fd092b080f1bb137dfc1d25f : dbf5472cb263f632e5026de17a49a1401862b2f4602d4ad685657bfb0d119a434f0d86e8e904899a39154db67f77af264434382f7eddedea5f3eac5b0309a8cb

Signature blob appended to firmware.deterministic.7.1.0.bin

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

Release v7.0.4

The latest desktop app contains the latest firmware and provides step-by-step instructions for upgrading. To get the latest desktop app, click here.

Release notes:

• Fixes off-by-one error in the base64 decoder that could lead to memory bugs

To reproduce and verify the deterministic build:

# Clone the repository
git clone https://github.com/digitalbitbox/mcu.git
cd mcu

# Build deterministically (requires Vagrant and Virtualbox and OSX or Linux)
vagrant up
cp build-vagrant/bin/firmware.pad.bin firmware.deterministic.7.0.4.bin
vagrant halt

# Verify the deterministic binary
shasum -a 256 firmware.deterministic.7.0.4.bin  #  60d43e3aa6db682abf9a53d2c1e03a9128ae097c8e34d513d7f71554278f3e11

# Append signatures of the firmware
py/prepend_signatures_firmware_binary.py firmware.deterministic.7.0.4.bin firmware.deterministic.7.0.4.signed.bin 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


# Verify the signed deterministic binary
shasum -a 256 firmware.deterministic.7.0.4.signed.bin  #  3bdfda6389f638395c316b21abfdd3fb8f6e48ae28206d50a2e678a1a502f3c7

# Signed deterministic binaries can be loaded into the Digital Bitbox
# using the Upgrade Firmware button in the desktop app.

# In case of problems, check if using a different major version:
vagrant --version  #  Vagrant 2.2.4
vagrant box list   #  ubuntu/trusty64 (virtualbox, 20190429.0.0)
virtualbox --help  #  Oracle VM VirtualBox Manager 5.1.38

ECC secp256k1 public keys and signatures of the double SHA256 hash of firmware.deterministic.7.0.4.bin:

0263b742d9873405c609814da884324ab0f4c1597a5fd152b388899857f4d041df : ff41ee436366c2dafd056dd61cc04d9e21c51303ac87851cc972637aa5668f195d56b4faff404e5d1d2d1bf0ee51c1cc4c19f74456e41869b01f317c33592e80
02b95dc22d293376222ef896f74a8436a8b6672e7e416299f3c4e23b49c38ad366 : 979e20029fb848bd201fd849bd35c80fd3d4351b2eb4a525639e3a2123689cad1b9c681bd06db95717137b7778fa86b3c3d376028bfdb70fe2778dd12a42233b
03ef4c48dc308ace971c025db3edd4bc5d5110e28e14bdd925fffafd4d21002800 : 122f5ee27e9c3ca7cdf890969d9b3e8501674931b30f92a54dd1e05d37ffe3403771fc83855b9983273e17610d0804abf64a292160e32ba6940542e4618645e7
030d8b0b86fca70bfd3a8d842cdb3ff8362c02f455fd092b080f1bb137dfc1d25f : 2a03863b997fa79f890aa5e4ba6a75b3b5c7570fb37f9b27afa2f4df831deeb52a3176c5badf335aac8809ceb8427a01558e061860fe5892c7219697655b913f

Signature blob appended to firmware.deterministic.7.0.4.bin

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

Release v7.0.3

The latest desktop app contains the latest firmware and provides step-by-step instructions for upgrading. To get the latest desktop app, click here.

Release notes:

• Internal JSON generation performance fixes
• Reverts an error in tag v7.0.2 where a JSON error code became a string; the error code should remain a number

To reproduce and verify the deterministic build:

# Clone the repository
git clone https://github.com/digitalbitbox/mcu.git
cd mcu

# Build deterministically (requires Vagrant and Virtualbox and OSX or Linux)
vagrant up
cp build-vagrant/bin/firmware.pad.bin firmware.deterministic.7.0.3.bin
vagrant halt

# Verify the deterministic binary
shasum -a 256 firmware.deterministic.7.0.3.bin  #  ff53b22d6c237396d610d55583e0b32ee7a4edfa356ac19c767c47e298b26e02

# Append signatures of the firmware
py/prepend_signatures_firmware_binary.py firmware.deterministic.7.0.3.bin firmware.deterministic.7.0.3.signed.bin 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


# Verify the signed deterministic binary
shasum -a 256 firmware.deterministic.7.0.3.signed.bin  #  32107814f4c4aa307207e14aeee047051a34ac00ef3f242ca8ea374c9536e11b

# Signed deterministic binaries can be loaded into the Digital Bitbox
# using the Upgrade Firmware button in the desktop app.

# In case of problems, check if using a different major version:
vagrant --version  #  Vagrant 2.2.4
vagrant box list   #  ubuntu/trusty64 (virtualbox, 20190429.0.0)
virtualbox --help  #  Oracle VM VirtualBox Manager 5.1.38

ECC secp256k1 public keys and signatures of the double SHA256 hash of firmware.deterministic.7.0.3.bin:

0263b742d9873405c609814da884324ab0f4c1597a5fd152b388899857f4d041df : f82d494b09415bde6426f154bbf28e0c13cdb07d3daad39d7954e677201696a47ca2a962915179ea059c56ceaf1523ed79ca3c90fce5ddee797c72fad023bb91
02b95dc22d293376222ef896f74a8436a8b6672e7e416299f3c4e23b49c38ad366 : 51801755415b60d353d2e2e8711fa68f94f3840bb0b33791593f87238795075c36861763e03eb5e5ad3dae3c18386325d38cba9286b5104779daad99eb5628b0
03ef4c48dc308ace971c025db3edd4bc5d5110e28e14bdd925fffafd4d21002800 : bffdbb174cfb15e20f3f730f32faf3132c22fd0ea99ffd2c534e2a7e8aa87c1c06b53f9fe419f022a77d17a9d4137dac071284bcc27d3c760d774ce97f1a285c
030d8b0b86fca70bfd3a8d842cdb3ff8362c02f455fd092b080f1bb137dfc1d25f : 25e5b0e14728b0617ae6a268c0a003663aa7c3adf583ee019af26953aea649f224d08f4043e4f8d7f799fda586c2ff5fa732663b0388ef6571124603b787b426

Signature blob appended to firmware.deterministic.7.0.3.bin

000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f82d494b09415bde6426f154bbf28e0c13cdb07d3daad39d7954e677201696a47ca2a962915179ea059c56ceaf1523ed79ca3c90fce5ddee797c72fad023bb9151801755415b60d353d2e2e8711fa68f94f3840bb0b33791593f87238795075c36861763e03eb5e5ad3dae3c18386325d38cba9286b5104779daad99eb5628b0bffdbb174cfb15e20f3f730f32faf3132c22fd0ea99ffd2c534e2a7e8aa87c1c06b53f9fe419f022a77d17a9d4137dac071284bcc27d3c760d774ce97f1a285c25e5b0e14728b0617ae6a268c0a003663aa7c3adf583ee019af26953aea649f224d08f4043e4f8d7f799fda586c2ff5fa732663b0388ef6571124603b787b426

Release v7.0.2

EDIT - This release will be superseded by Release v7.0.3

Release v7.0.1

The latest desktop app contains the latest firmware and provides step-by-step instructions for upgrading. To get the latest desktop app, click here.

Release notes:

• U2F and MyEtherWallet bugfixes caused by an update to how U2F is processed in Windows 1903 release
• Update to latest ARM compiler release 8-2019-q3-update

To reproduce and verify the deterministic build:

# Clone the repository
git clone https://github.com/digitalbitbox/mcu.git
cd mcu

# Build deterministically (requires Vagrant and Virtualbox and OSX or Linux)
vagrant up
cp build-vagrant/bin/firmware.pad.bin firmware.deterministic.7.0.1.bin
vagrant halt

# Verify the deterministic binary
shasum -a 256 firmware.deterministic.7.0.1.bin  #  0ff5411bea73f65a39eff10abbe3fe717d86926901be1e3a6da0d0f034c484cc

# Append signatures of the firmware
py/prepend_signatures_firmware_binary.py firmware.deterministic.7.0.1.bin firmware.deterministic.7.0.1.signed.bin 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


# Verify the signed deterministic binary
shasum -a 256 firmware.deterministic.7.0.1.signed.bin  #  ef34dd4e5d9cb2a978b6ef8d4abcff70a4280ce1f041c23b92757fa99b0c8e32

# Signed deterministic binaries can be loaded into the Digital Bitbox
# using the Upgrade Firmware button in the desktop app.

# In case of problems, check if using a different major version:
vagrant --version  #  Vagrant 2.2.4
vagrant box list   #  ubuntu/trusty64 (virtualbox, 20190429.0.0)
virtualbox --help  #  Oracle VM VirtualBox Manager 5.1.38

ECC secp256k1 public keys and signatures of the double SHA256 hash of firmware.deterministic.7.0.1.bin:

0263b742d9873405c609814da884324ab0f4c1597a5fd152b388899857f4d041df : e34772e2462db37425712aadb3d9d1059ec3a55375fe1d1a37e20d0069dc7b1765b1ca52da3c230f5c2a4325a7fa14c1f9ec55ebd364ba86443c2b7a13b74596
02b95dc22d293376222ef896f74a8436a8b6672e7e416299f3c4e23b49c38ad366 : 7c3d40d7dec84451866c829cff10a10401ecaa4e9a4d33ffa5425a099bd9df2355059b962a0beeec667bada36de2484b42f98b86fbd507f392405217f5941c3f
03ef4c48dc308ace971c025db3edd4bc5d5110e28e14bdd925fffafd4d21002800 : 134eb617521a203b21a4495c06006c07cbdad2681f10169b6bee66e37cf798a801095c19918cbcc0403d626e47b1936286fa8566c4923da4933a1e035a8a9d23
030d8b0b86fca70bfd3a8d842cdb3ff8362c02f455fd092b080f1bb137dfc1d25f : f3b26d44eee48de2d9e99fcdcd158fe33ac6a484e65267ac5e025369115828e724f8e30e784e2b7d5eaf60094e931e9a3c410d0890f280240c069d55e59776e6

Signature blob appended to firmware.deterministic.7.0.1.bin

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

Release v7.0.0

The latest desktop app contains the latest firmware and provides step-by-step instructions for upgrading. To get the latest desktop app, click here.

Release notes:

• MyEtherWallet bugfix

To reproduce and verify the deterministic build:

# Clone the repository
git clone https://github.com/digitalbitbox/mcu.git
cd mcu

# Build deterministically (requires Vagrant and Virtualbox and OSX or Linux)
vagrant up
cp build-vagrant/bin/firmware.pad.bin firmware.deterministic.7.0.0.bin
vagrant halt

# Verify the deterministic binary
shasum -a 256 firmware.deterministic.7.0.0.bin  #  927eaf80fbfb82c0abcf105917f375ad3b2093af452ccb9aebc7f5a3253a20e0

# Append signatures of the firmware
py/prepend_signatures_firmware_binary.py firmware.deterministic.7.0.0.bin firmware.deterministic.7.0.0.signed.bin 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


# Verify the signed deterministic binary
shasum -a 256 firmware.deterministic.7.0.0.signed.bin  #  318c5bb3403f61fbdf271ba3a8df09fbbf020b232e59c22d4f63e6205221f5e7

# Signed deterministic binaries can be loaded into the Digital Bitbox
# using the Upgrade Firmware button in the desktop app.

# In case of problems, check if using a different major version:
vagrant --version  #  Vagrant 2.2.4
vagrant box list   #  ubuntu/trusty64 (virtualbox, 20190429.0.0)
virtualbox --help  #  Oracle VM VirtualBox Manager 5.1.38

ECC secp256k1 public keys and signatures of the double SHA256 hash of firmware.deterministic.7.0.0.bin:

0263b742d9873405c609814da884324ab0f4c1597a5fd152b388899857f4d041df : 80aa3c367bab0266aa6770d1b1d6980e30c0fd18e07258dab7af60676045a5e13bd4679cf9cd6831286811f7d2173e62c7f5f37419d9cdf87013520aec4ec642
02b95dc22d293376222ef896f74a8436a8b6672e7e416299f3c4e23b49c38ad366 : 8ce42a69f03ea71af4f07841d5f9d417630d90ac9e5112a7f45f23801389e5812cc3dfb037e9866481ccceb203c2143a2e85286a9db1c4e5822d1b5b7d461495
03ef4c48dc308ace971c025db3edd4bc5d5110e28e14bdd925fffafd4d21002800 : 91cec9da81c9b45e03ddb9813c0d3c4e229fc0d12cbca42c00a29914021c62544e917cf979bbac5bb5fac310fb4f0165599d32d004ef5d26795566c2f12fae0c
030d8b0b86fca70bfd3a8d842cdb3ff8362c02f455fd092b080f1bb137dfc1d25f : bf3b1e65840b842887bac9d7d48a3787eb32af1532bb16dd5d92357d0ea5ef374b2c68328f27ecee95b2b0bb34ed9bb9705761b36cfe93a550b8543260a2dd5c

Signature blob appended to firmware.deterministic.7.0.0.bin

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

Release v6.1.1

The latest desktop app contains the latest firmware and provides step-by-step instructions for upgrading. To get the latest desktop app, click here.

Release notes:

• Improve blink pattern comprehension

To reproduce and verify the deterministic build:

# Clone the repository
git clone https://github.com/digitalbitbox/mcu.git
cd mcu

# Build deterministically (requires Vagrant and Virtualbox and OSX or Linux)
vagrant up
cp build-vagrant/bin/firmware.pad.bin firmware.deterministic.6.1.1.bin
vagrant halt

# Verify the deterministic binary
shasum -a 256 firmware.deterministic.6.1.1.bin  #  98315c07148df78c35282a9c8e3a310905317df20de938e07409a6de503c3f56

# Append signatures of the firmware
py/prepend_signatures_firmware_binary.py firmware.deterministic.6.1.1.bin firmware.deterministic.6.1.1.signed.bin 0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e2e802701edf7b0ccc0e9e50e3d6afbbca9325df46005bd815d30dc7a9cd2607221cf0f93b76b81506a7cf5d79d35d4c67db84b52cb19a379dd83aa07f482d57abdfbb497d9f23aa00b3c186fea27c1d791909d1937ce42e5dd5c4abcf62af863ce9e2b4fac914e5b4f96642631c7adae2bcfce53a0aab894ebf5496010968a29b381102cab0cb104dd57353630c1d0544808d15d3bf5810a7619ead8a00548294308fb63abbca048439fb9df2de412696544d940fafec819fc176b73beff731b8c4505b246469cfa083e18c8fc039b203d8b97927658676058e57757a4ca750cbb442f30964f5ab1372b1a577d311707376e43325e117a4eedcbe85d0048c6

# Verify the signed deterministic binary
shasum -a 256 firmware.deterministic.6.1.1.signed.bin  #  76378d25fdce709b2a8867038a20be49197e30f9b1ab7ef375a9af050ff6f637

# Signed deterministic binaries can be loaded into the Digital Bitbox
# using the Upgrade Firmware button in the desktop app.

# In case of problems, check if using a different major version:
vagrant --version  #  Vagrant 1.8.5
vagrant box list   #  ubuntu/trusty64 (virtualbox, 20181103.0.0)
virtualbox --help  #  Oracle VM VirtualBox Manager 5.1.38

ECC secp256k1 public keys and signatures of the double SHA256 hash of firmware.deterministic.6.1.1.bin:

0263b742d9873405c609814da884324ab0f4c1597a5fd152b388899857f4d041df : 1e2e802701edf7b0ccc0e9e50e3d6afbbca9325df46005bd815d30dc7a9cd2607221cf0f93b76b81506a7cf5d79d35d4c67db84b52cb19a379dd83aa07f482d5
02b95dc22d293376222ef896f74a8436a8b6672e7e416299f3c4e23b49c38ad366 : 7abdfbb497d9f23aa00b3c186fea27c1d791909d1937ce42e5dd5c4abcf62af863ce9e2b4fac914e5b4f96642631c7adae2bcfce53a0aab894ebf5496010968a
03ef4c48dc308ace971c025db3edd4bc5d5110e28e14bdd925fffafd4d21002800 : 29b381102cab0cb104dd57353630c1d0544808d15d3bf5810a7619ead8a00548294308fb63abbca048439fb9df2de412696544d940fafec819fc176b73beff73
030d8b0b86fca70bfd3a8d842cdb3ff8362c02f455fd092b080f1bb137dfc1d25f : 1b8c4505b246469cfa083e18c8fc039b203d8b97927658676058e57757a4ca750cbb442f30964f5ab1372b1a577d311707376e43325e117a4eedcbe85d0048c6

Signature blob appended to firmware.deterministic.6.1.1.bin

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

Release v6.1.0

The latest desktop app contains the latest firmware and provides step-by-step instructions for upgrading. To get the latest desktop app, click here.

Release notes:

• Update libsecp256k1 library
• Make blink patterns distinguishable

To reproduce and verify the deterministic build:

# Clone the repository
git clone https://github.com/digitalbitbox/mcu.git
cd mcu

# Build deterministically (requires Vagrant and Virtualbox and OSX or Linux)
vagrant up
cp build-vagrant/bin/firmware.pad.bin firmware.deterministic.6.1.0.bin
vagrant halt

# Verify the deterministic binary
shasum -a 256 firmware.deterministic.6.1.0.bin  #  0c56448bbec689a0b8a2c738ca56069b15a7643f6379c223419fdc431bd74123

# Append signatures of the firmware
py/prepend_signatures_firmware_binary.py firmware.deterministic.6.1.0.bin firmware.deterministic.6.1.0.signed.bin 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

# Verify the signed deterministic binary
shasum -a 256 firmware.deterministic.6.1.0.signed.bin  #  a04262c99434a44c0a092c2d0d59c62ad16e72d195a932a843598e166bc280c3

# Signed deterministic binaries can be loaded into the Digital Bitbox
# using the Upgrade Firmware button in the desktop app.

# In case of problems, check if using a different major version:
vagrant --version  #  Vagrant 1.8.5
vagrant box list   #  ubuntu/trusty64 (virtualbox, 20181103.0.0)
virtualbox --help  #  Oracle VM VirtualBox Manager 5.1.38

ECC secp256k1 public keys and signatures of the double SHA256 hash of firmware.deterministic.6.1.0.bin:

0263b742d9873405c609814da884324ab0f4c1597a5fd152b388899857f4d041df : 50c1a2b8ca106dbab2acd4eec2193af35dbd1890af199b2dba091eb1ce65c96a3d0058e104626f1a060bb59c00c74699b3656e2885557d2baec8bb17967b25ec
02b95dc22d293376222ef896f74a8436a8b6672e7e416299f3c4e23b49c38ad366 : c514ed71d60486469e0b47afe93aafbc6f0b91818e98baa770692a3897be56f36eb82ea139e263bac8760192d97a39d3b48f61ac00c02d36f96d0aedb6168c85
03ef4c48dc308ace971c025db3edd4bc5d5110e28e14bdd925fffafd4d21002800 : 77da95464c5647fd8f88a4a37400959f7bfce19dcf288efb1ea2396b84499b7b1e43fb184ba3df3e41a3e1433bf563b8e3a7b6fc825b81695399351ea3e3ee66
030d8b0b86fca70bfd3a8d842cdb3ff8362c02f455fd092b080f1bb137dfc1d25f : 97b7b7861e929237c638690edc363ed8db1c85831e15114aaf1f103b97af7e3061fb85503f50104f3d36489e5e0b8b0313d750c114bd2eb80df9a3a0d02e12cc

Signature blob appended to firmware.deterministic.6.1.0.bin

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

Release v6.0.4

The latest desktop app contains the latest firmware and provides step-by-step instructions for upgrading. To get the latest desktop app, click here.

Release notes:

• Bugfix for Electrum multisig

To reproduce and verify the deterministic build:

# Clone the repository
git clone https://github.com/digitalbitbox/mcu.git
cd mcu

# Build deterministically (requires Vagrant and Virtualbox and OSX or Linux)
vagrant up
cp build-vagrant/bin/firmware.pad.bin firmware.deterministic.6.0.4.bin
vagrant halt

# Verify the deterministic binary
shasum -a 256 firmware.deterministic.6.0.4.bin  #  b466cee3544e4caaf00ddcb49993f1360b247cc799b1c6977ab1764e37053645

# Append signatures of the firmware
py/prepend_signatures_firmware_binary.py firmware.deterministic.6.0.4.bin firmware.deterministic.6.0.4.signed.bin 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

# Verify the signed deterministic binary
shasum -a 256 firmware.deterministic.6.0.4.signed.bin  #  58974bd1cd38adb1e99ca962628bde0ab074ea0f608ba1d070e760817ee7a29b

# Signed deterministic binaries can be loaded into the Digital Bitbox
# using the Upgrade Firmware button in the desktop app.

# In case of problems, check if using a different major version:
vagrant --version  #  Vagrant 1.8.5
vagrant box list   #  ubuntu/trusty64 (virtualbox, 20181103.0.0)
virtualbox --help  #  Oracle VM VirtualBox Manager 5.1.38

ECC secp256k1 public keys and signatures of the double SHA256 hash of firmware.deterministic.6.0.4.bin:

0263b742d9873405c609814da884324ab0f4c1597a5fd152b388899857f4d041df : 94a319fa4e208a3703615ab1a1d5b91c0c60fa06ce11cf1f3b95715231ce05c266fb7b92ffda64e7781152048ba5f24350eb886d2bb2ad203aa268584e531a9b
02b95dc22d293376222ef896f74a8436a8b6672e7e416299f3c4e23b49c38ad366 : a8f80f6d85a8d2f88d552a6543949f949eccd360449b0a81f8065c38a3aa163d67c6254078114f85d910062fc8e51c20e461a1c4219c6911dfb2d5242b39c739
03ef4c48dc308ace971c025db3edd4bc5d5110e28e14bdd925fffafd4d21002800 : 30f12c64b516380ab1adaceb4f3f4008b003ce6c3d0f51cfe4509990b568c9c5252748099a95d0b2127ccb7b3c92c9b19fc32a26df100761fe0aacb52233afb7
030d8b0b86fca70bfd3a8d842cdb3ff8362c02f455fd092b080f1bb137dfc1d25f : 34f59a71d7d46c22439700804cf02898f7e9c592f8c3c3c533da234e04201be2112dd33c0574eb1befeda3ea70d6a5c4690bcbc7ea02a38fd67427f8ceab1d4f

Signature blob appended to firmware.deterministic.6.0.4.bin

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

Release 6.0.3

The latest desktop app contains the latest firmware and provides step-by-step instructions for upgrading. To get the latest desktop app, click here.

Release notes:

• Patch to check validity of change addresses

To reproduce and verify the deterministic build:

# Clone the repository
git clone https://github.com/digitalbitbox/mcu.git
cd mcu

# Build deterministically (requires Vagrant and Virtualbox and OSX or Linux)
vagrant up
cp build-vagrant/bin/firmware.pad.bin firmware.deterministic.6.0.3.bin
vagrant halt

# Verify the deterministic binary
shasum -a 256 firmware.deterministic.6.0.3.bin  #  3db3dca5e31ecd1868cb96d617f33162e16b82dab8e3961f17110e57261d99ca

# Append signatures of the firmware
py/prepend_signatures_firmware_binary.py firmware.deterministic.6.0.3.bin firmware.deterministic.6.0.3.signed.bin 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


# Verify the signed deterministic binary
shasum -a 256 firmware.deterministic.6.0.3.signed.bin  #  7577780c23e46d9ebaacb8c84e00cb2d3ca9e36b199f3d83979fa6d11ba66c1f

# Signed deterministic binaries can be loaded into the Digital Bitbox
# using the Upgrade Firmware button in the desktop app.

# In case of problems, check if using a different major version:
vagrant --version  #  Vagrant 1.8.5
vagrant box list   #  ubuntu/trusty64 (virtualbox, 20181103.0.0)
virtualbox --help  #  Oracle VM VirtualBox Manager 5.1.38

ECC secp256k1 public keys and signatures of the double SHA256 hash of firmware.deterministic.6.0.3.bin:

0263b742d9873405c609814da884324ab0f4c1597a5fd152b388899857f4d041df : 5932861985f702f1103173ae772ae9aed4db74a23ca9ba590827856466fd89c300ff0b910b3badfd7ffb46f4a84375f81cc8632d3496e7b8950fb907c40969fe
02b95dc22d293376222ef896f74a8436a8b6672e7e416299f3c4e23b49c38ad366 : dd0539315a7e3aa7743142d95aa4ae2c3dfa477aba40f8f53d724f25083ebc126a807d13e4eb6332184bc775a368f4d46aebc21d781cc7e697b1b3cf76f3b03e
03ef4c48dc308ace971c025db3edd4bc5d5110e28e14bdd925fffafd4d21002800 : b7c2108d404de7b40c30d772cd668f361a8174369e5c33add1dfebd3e1bc222f296d1dda936ac6b4ff6e66d48e0d8df58bc99f5119079b5008a41e63203df6d2
030d8b0b86fca70bfd3a8d842cdb3ff8362c02f455fd092b080f1bb137dfc1d25f : af85433087dbb3501aa7148bc9ee8209943070ab110d99512a843c2df753ffda45c4e0a40609d252d8cc53e56f866faf4895067d45f39ca4f91ab6559a1c02c7

Signature blob appended to firmware.deterministic.6.0.3.bin

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