Initial Release

.gitignore

@@ -0,0 +1,4 @@
+trezor/repo
+trezor/.venv
+trezor/trezor-*
+bk

.gitmodules

@@ -0,0 +1,3 @@
+[submodule "wiki"]
+	path = wiki
+	url = https://github.com/brianddk/attestation.wiki.git

LICENSE

@@ -186,7 +186,7 @@
       same "printed page" as the copyright notice for easier
       identification within third-party archives.
 
-   Copyright [yyyy] [name of copyright owner]
+   Copyright 2023 brianddk at github https://github.com/brianddk
 
    Licensed under the Apache License, Version 2.0 (the "License");
    you may not use this file except in compliance with the License.

README.md

@@ -1,2 +1,84 @@
-# attestation
-Opensource Attestations Proving Source and Binaries Match
+# Multi-Project Reproducible Build Attestation
+
+This project will be used to try to reproduce build of some of the larger and well know opensource projects.  
+
+## Directory Structure
+
+The directory structure is as follows:
+
+* **wiki**  -  The Wiki documentation for this project.  To update, fork and make a PR
+* **pubkeys**  -  The pubkeys used in the various attestments posted in this project
+* **trezor**  -  Directory for verifying the [trezor-firmware](https://github.com/trezor/trezor-firmware) Github repository
+  * **verify.sh**  -  The main verification script to verify `trezor-firmware` builds
+  * **repo**  -  Scratchpad to checkout the repository into (dynamically created)
+  * **attest**  -  Signed attestment files (and failures)
+
+## Trezor Attestation
+
+To perform Trezor attestation, you will need to install GnuPG, Docker and Git. 
+The process to do this varies widely based upon your OS, but it should work on
+Windows, Linux and macOS without serious modification.  In a general sense, the process is
+fairly straight forward.
+
+1. Install GnuPG, Docker and Git.
+2. Perform [GnuPG "gen-key"](https://www.gnupg.org/gph/en/manual/c14.html) and save off the UID (User ID) for reference
+2. Clone this repo: `git clone https://github.com/brianddk/attestation.git`
+3. CD to the proper directory (ie Trezor): `cd ./attestation/trezor`
+4. Use your UID to attest a build: `./verify.sh --gpg-key YOUR_GPG_UID core/v2.6.0`
+
+All done!
+
+## Windows Setup
+
+Most builds use Docker under Linux, which is fine if you have an updated Windows OS.
+Windows supports something called WSL which allows you to run a Linux kernel from Windows.
+It's officially supported by Microsoft and not too terribly complex.  Beyond WSL, you will 
+also need to install Docker and GnuPG.  I'll touch on the most basic concepts of these.
+
+1. [Install WSL](https://learn.microsoft.com/en-us/windows/wsl/install) - The default Ubuntu distro works fine.
+2. [Install Docker](https://learn.microsoft.com/en-us/windows/wsl/tutorials/wsl-containers#install-docker-desktop) - Just follow the first 6 steps to `hello-world`
+2. [Enter WSL Shell](https://learn.microsoft.com/en-us/windows/wsl/basic-commands#run-a-specific-linux-distribution-from-powershell-or-cmd) - `wsl` without arguments is usually enough
+3. Install GnuPG and GIT in WSL - `sudo apt update && sudo apt install gnupg git`
+4. Continue with step \#2 mentioned above in ***Trezor Attestation***
+
+NOTE: I use [Gpg4win](https://www.gpg4win.org/) which works fine under WSL, you just have to remember to execute `gpg.exe` instead of `gpg`.
+To name which program to use, prefix the script with `GPG_BIN=gpg.exe`
+
+## Linux
+
+This should be old-hat for most Linux users, but I'll outline the basics.  I'll assume Ubuntu since that is what I'm most familiar with
+
+1. [Install Docker](https://docs.docker.com/engine/install/ubuntu/) - Setup the `apt` repo, install docker, run `hello-world`
+2. Install GnuPG and GIT - `sudo apt update && sudo apt install gpg git`
+4. Continue with step \#2 mentioned above in ***Trezor Attestation***
+
+## macOS Setup
+
+This is what I'm least familiar with.  I don't own Apple HW, and they forbid virtualization, so unless someone donates a old Mac, I'll just have to go off what ChatGPT tells me.
+
+1. [Install Docker](https://docs.docker.com/desktop/install/mac-install/) - I'd likely suggest the `.dmg` install method
+2. Verify Docker with Hello World - From a terminal window run `docker run hello-world` which should run without error
+3. Install GnuPG and GIT from Terminal - `brew install git gnupg` (so says ChatGPT)
+4. Continue with step \#2 mentioned above in ***Trezor Attestation***
+
+## Submitting Attestation
+
+For all the builds that are reproducible, the goal is to get as many people to attest
+to the build as possible.  If you are willing to do so, please [fork the repo](https://github.com/brianddk/attestation/fork),
+run the build, then [submit a PR](https://docs.github.com/en/pull-requests/collaborating-with-pull-requests/proposing-changes-to-your-work-with-pull-requests/creating-a-pull-request).
+If you have questions on how to do that, please feel free to [post a discussion](https://github.com/brianddk/attestation/discussions)
+and I'll try to help.
+
+## Contributing
+
+Please feel free to fork this repo and make PRs if you can attest a build I have
+not yet determined how to.  If find issues, please [open an issue](https://github.com/brianddk/attestation/issues/new/choose),
+or if you just have a question [post a discussion topic](https://github.com/brianddk/attestation/discussions).  Please try
+to review the [Wiki](https://github.com/brianddk/attestation/wiki)
+
+## Todo List
+
+- [x] Trezor Attestation
+- [ ] Coldcard Attestation
+- [ ] Bitbox Attestation
+- [ ] Bitcoin Core Attestation

pubkeys/brianddk.asc

@@ -0,0 +1,41 @@
+-----BEGIN PGP PUBLIC KEY BLOCK-----
+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+=QcPU
+-----END PGP PUBLIC KEY BLOCK-----

trezor/attest/canary/attest.brianddk

@@ -0,0 +1,21 @@
+-----BEGIN PGP SIGNED MESSAGE-----
+Hash: SHA256
+
+gpg: Signature made 5/2/2023 4:13:41 AM Central Daylight Time
+gpg:                using RSA key 86E6792FC27BFD478860C11091F3B339B9A02A3D
+gpg: Good signature from "Pavol Rusn�k <pavol@rusnak.io>" [unknown]
+gpg:                 aka "Pavol Rusn�k <stick@gk2.sk>" [unknown]
+gpg:                 aka "Pavol Rusn�k <stick@satoshilabs.com>" [full]
+gpg:                 aka "Pavol Rusn�k <prusnak@opensuse.org>" [unknown]
+gpg:                 aka "[jpeg image of size 2449]" [unknown]
+-----BEGIN PGP SIGNATURE-----
+
+iQFEBAEBCAAuFiEEYoX6CPtntyvk2kGEg18EM6bVGGAFAmRuVw4QHGJyaWFuZGRr
+QHJlZGRpdAAKCRCDXwQzptUYYO/1B/93PL7o7KoYdC+W6tYfrsJEfW5VIAoTu2gM
+oen1hA9bFh3lydggWKmZEg8HlDWEE3Cp6kJ4SX/yaojIxhdTkKKeuFkpOyZvVX3I
+Nwlqp+bJgp8d71HYYJtPVZGhi0CEizLbYrVMKAuTAD5geUF++215z0yHLhBl/O46
+xzAsJn0Xl18O+SX2fHJ1m6MfjRErpqF+YHcuVcRpxtr+KVzI2DjDCn+58/xrS95g
+qYGJiYvX+0WqvG7FBct+MEvqtc3j9IJLivegJdcNVpQPJGyxsRrAtKFr7SBfqHTJ
+YnJ3ASlpGyWnqLAEsoQdoQq7Ly3nrk070cgI9JAyTjykY4w6YFZI
+=kU58
+-----END PGP SIGNATURE-----

trezor/attest/core/bl2.1.0/attest.brianddk

@@ -0,0 +1,22 @@
+-----BEGIN PGP SIGNED MESSAGE-----
+Hash: SHA256
+
+Intended Build Version:  core/bl2.1.0
+build-docker.sh Version: core/v2.6.0
+Build Command:           build-docker.sh --skip-bitcoinonly --skip-legacy core/bl2.1.0
+Source Binary tag:       core/v2.6.0
+Bootloader Build?:       1
+
+1b4845b2d2869eece07c3b287ad0acf036f7ba61efc39acb2cc01ed45490d2c6  repo/core/embed/firmware/bootloaders/bootloader_T2T1.bin
+1b4845b2d2869eece07c3b287ad0acf036f7ba61efc39acb2cc01ed45490d2c6  repo/build/core/bootloader/bootloader.bin
+-----BEGIN PGP SIGNATURE-----
+
+iQFEBAEBCAAuFiEEYoX6CPtntyvk2kGEg18EM6bVGGAFAmRvqU8QHGJyaWFuZGRr
+QHJlZGRpdAAKCRCDXwQzptUYYG/iCAC4qENDJL7gSOwu+/RJE3Vbu8cSpuqujwly
+dHggv+eO/9OIcdF3o5BLtXH5c6DZGPn+oMQzwrvMfR0L9Loyh6NUNe6VL3ir4Ycm
+SY3ocOns20dzr5tT/MMEczeipmzW+cUU1A6OJfHrCGmSMIObaFUlzZ3+3wU44efF
+MOh2bjkk0qGRXOAsKksL/Ys1L53NTu/A8Fk3xQ/tBCJKZx4ojpHXLvh1yQL8BuIo
+ilUSyW4HAB841OQvPyxRr60ahUTWe5VyN2oVVpEvvBsX6/uP87iBm4/CWZj5lfle
+SxomXC47BuKltV+w/0ZXkt3fqbTSp5v+er7lY8B2klTUnvtlAcWd
+=34ND
+-----END PGP SIGNATURE-----

trezor/attest/core/v2.5.3/attest.brianddk

@@ -0,0 +1,25 @@
+-----BEGIN PGP SIGNED MESSAGE-----
+Hash: SHA256
+
+Intended Build Version:  core/v2.5.3
+build-docker.sh Version: core/v2.5.3
+Build Command:           build-docker.sh --skip-legacy core/v2.5.3
+Source Binary tag:       
+Bootloader Build?:       0
+
+07e9053be42873b8fc094205607d2c5624a15c84fdf323bc783217d3a7b7fc24  trezor-2.5.3.bin
+07e9053be42873b8fc094205607d2c5624a15c84fdf323bc783217d3a7b7fc24  repo/build/core/firmware/firmware.bin
+
+b69f1b69819a281f76553e39fed4394f2a5c56eb33f95767b775800282a19f6c  trezor-2.5.3-bitcoinonly.bin
+b69f1b69819a281f76553e39fed4394f2a5c56eb33f95767b775800282a19f6c  repo/build/core-bitcoinonly/firmware/firmware.bin
+-----BEGIN PGP SIGNATURE-----
+
+iQFEBAEBCAAuFiEEYoX6CPtntyvk2kGEg18EM6bVGGAFAmRv0kUQHGJyaWFuZGRr
+QHJlZGRpdAAKCRCDXwQzptUYYLDHB/9Re2av2grFRkkA0evTc73HFtBxTI6xpWWH
+QqNtULI3XeEIHjLkaTn5nENMhiyukU2OZo0ZQKvyOv3RKYNSTyw5JDQdHy5PTmJ+
+GBp/Hq8EaP+TIA/Qv6TPBwT78B0BsmS8IUBXO8v3muZ3937nzLjrmXBgciuoOkfC
+J3Ax0qWEFbAsfsUZgpB2F0fcGG73UrqKCs4rnr3XrjltCAkuc3c2naTFDZ6izlsb
+ZLjQ1xq28+T7U1l+S2ufS9ya7k2wp0M5qX0GMEHJZox/HxL2V/gGT5nlLbs+xk+c
+wwL4/5akpUX1sEDSbBNvCqJmKK3Bc+bMBjzvxRgKlq4FI/uFkvXj
+=8iL1
+-----END PGP SIGNATURE-----

trezor/attest/core/v2.6.0/attest.brianddk

@@ -0,0 +1,24 @@
+-----BEGIN PGP SIGNED MESSAGE-----
+Hash: SHA256
+
+build-docker.sh Version: core/v2.6.0
+Build Command:           build-docker.sh --skip-legacy core/v2.6.0
+Source Binary tag:       core/v2.6.0
+Bootloader Build?:       0
+
+c33e336869964cfb1ef193195894e8b6667955b4ea3044558c380b1787168e38  trezor-2.6.0.bin
+c33e336869964cfb1ef193195894e8b6667955b4ea3044558c380b1787168e38  repo/build/core/firmware/firmware.bin
+
+c0b7696ce45ac9fe593eb9af1eb561f66cdf8be4d6a6bea6e538e252843e8a2f  trezor-2.6.0-bitcoinonly.bin
+c0b7696ce45ac9fe593eb9af1eb561f66cdf8be4d6a6bea6e538e252843e8a2f  repo/build/core-bitcoinonly/firmware/firmware.bin
+-----BEGIN PGP SIGNATURE-----
+
+iQFEBAEBCAAuFiEEYoX6CPtntyvk2kGEg18EM6bVGGAFAmRvmdQQHGJyaWFuZGRr
+QHJlZGRpdAAKCRCDXwQzptUYYPVCCACynxuZDmJGJYOWvLzCkNbV4LjCITXSC+gi
+4ZlbX7R3uG+tFMnjEAUAaYBaWTuosx9v/rVjtHM/e9MQwPgBzyj73bpyk4q6kREM
+Z6bop7FJZ5SPMYtBhCjyvyY/76Ii1G6r8ZdR+hea1NmXsEqamHtkPuMq3ZEp8EtJ
+Ikv8tlNy9eoXiHr1GvKszotgNVbeGneu3ipM9DvagYwe+S0Ob/Qg8kZkPuan1NPI
+vLGbqMzW3mY56r141Tl3QMGPw/x3FKKbbLihWONI5/S8IUCXT5T86T/9xeC+xH+W
+VhBf5Zay51TPFQtVQYbMH7IpWSBS7uODk3czNb1AMJrwlu0ZZJkn
+=VSgg
+-----END PGP SIGNATURE-----

trezor/attest/legacy/bl1.12.1/attest.brianddk

@@ -0,0 +1,22 @@
+-----BEGIN PGP SIGNED MESSAGE-----
+Hash: SHA256
+
+Intended Build Version:  legacy/bl1.12.1
+build-docker.sh Version: legacy/bl1.12.1
+Build Command:           build-docker.sh --skip-bitcoinonly --skip-core legacy/bl1.12.1
+Source Binary tag:       legacy/bl1.12.1
+Bootloader Build?:       1
+
+2c41be8c40e74ab8acaef6e65e0c5a4b270668a6498edf5f4cbb892810986f70  repo/legacy/firmware/bootloader.dat
+2c41be8c40e74ab8acaef6e65e0c5a4b270668a6498edf5f4cbb892810986f70  repo/build/legacy/bootloader/bootloader.bin
+-----BEGIN PGP SIGNATURE-----
+
+iQFEBAEBCAAuFiEEYoX6CPtntyvk2kGEg18EM6bVGGAFAmRvuTwQHGJyaWFuZGRr
+QHJlZGRpdAAKCRCDXwQzptUYYDrWB/9X0iA9YAJZq9VYHtY7oQh1cWr8gH/ep66P
+/46ucdy/y6iy70onTkhB6ztFGvThOLhMUEQqpk8LYizR1rwa6mQ9Nn9Trb2VRnyJ
+Dmhp51Fn271Db6a+qbGqPptex3iqtkO0q1kcnI9hw54qBiB9mER3IZpw7kwTEgf+
+HZKj1TzXTt3bCcuPDgni4ljMbAz5XoO8/lJ887pKmHGJ6povV3jC4UXbaCpiJew5
+bL3VQE4Gsfbtwq2Jge2jTkoZJ/4lg6c/XdJZstBfStsZkaIfNXTiQ1Cm+X82a77C
+JOjDKWNfi/dyEFT9a5OzNTn5R6Qjcrg44BNorpd/4tddYks0p2AA
+=77y5
+-----END PGP SIGNATURE-----

trezor/attest/legacy/v1.11.1/attest.brianddk

@@ -0,0 +1,19 @@
+-----BEGIN PGP SIGNED MESSAGE-----
+Hash: SHA256
+
+880b61c6c0a4b8d26baf2698bc6163bb6c3548c9f48028e4e58c3902bc07bf71  trezor-1.11.1.bin
+880b61c6c0a4b8d26baf2698bc6163bb6c3548c9f48028e4e58c3902bc07bf71  repo/build/legacy/firmware/firmware.bin
+
+e1cfcf53ef9bcc88bf1b8b378e793c0eda1f8cb7dc4153fed4aa54e0880e536a  trezor-1.11.1-bitcoinonly.bin
+e1cfcf53ef9bcc88bf1b8b378e793c0eda1f8cb7dc4153fed4aa54e0880e536a  repo/build/legacy-bitcoinonly/firmware/firmware.bin
+-----BEGIN PGP SIGNATURE-----
+
+iQFEBAEBCAAuFiEEYoX6CPtntyvk2kGEg18EM6bVGGAFAmRuy2EQHGJyaWFuZGRr
+QHJlZGRpdAAKCRCDXwQzptUYYMCiB/9ZTFOqkACiCAL0JWr5vBPu4WKphzCBdoUm
++AXTyg/2tSCNBtYnO8b1KKiAF80MqHuAnwXzXins22A76Btvx/RPvrlvQ3h66gnw
+tHRCRd/eFT7SWxBaOJat90N/hDCFf0inC2QvK7vrX9JdsUtRpwi3MNKIBOez38p1
+qq3Xhz65yqI+COXpTMnHy0BydX9C1SV8MirjczSVaFoP0ysjyV12vieZWzUKnUwk
+RmL7z3V4fse/rFFeM7VLRZf0yL/T+XbSdVZRlgATBoh9ZstTmONX6zAvAoIc5Lb/
+5QMHrx1z1lWxHncBmrD/Sm7TWCCUWfjsrBDP7Cpfsiq2ULZjwVEC
+=8lwO
+-----END PGP SIGNATURE-----

trezor/attest/legacy/v1.11.2/attest.brianddk

@@ -0,0 +1,25 @@
+-----BEGIN PGP SIGNED MESSAGE-----
+Hash: SHA256
+
+Intended Build Version:  legacy/v1.11.2
+build-docker.sh Version: legacy/v1.11.2
+Build Command:           build-docker.sh --skip-core legacy/v1.11.2
+Source Binary tag:       
+Bootloader Build?:       0
+
+70ffc2334d5f55758332e260719392bc208d1add449856eefaa36b6c4fe6d8f9  trezor-1.11.2.bin
+70ffc2334d5f55758332e260719392bc208d1add449856eefaa36b6c4fe6d8f9  repo/build/legacy/firmware/firmware.bin
+
+28bbbb35ef06adaecce79440a4d4e6ec6c8d37b1a1803439c4625884d8a669ec  trezor-1.11.2-bitcoinonly.bin
+28bbbb35ef06adaecce79440a4d4e6ec6c8d37b1a1803439c4625884d8a669ec  repo/build/legacy-bitcoinonly/firmware/firmware.bin
+-----BEGIN PGP SIGNATURE-----
+
+iQFEBAEBCAAuFiEEYoX6CPtntyvk2kGEg18EM6bVGGAFAmRvy20QHGJyaWFuZGRr
+QHJlZGRpdAAKCRCDXwQzptUYYEV6B/95LyjDDmyH843215S8gURPToLDxUMA62En
+GghlU6rbnVwhlrhO2iulR6jMVMzvOKAeAc1+KZuiLTQyn0MEoW520GIgffd6xS7K
+SCPdcIKLFF0TN0T2R9RoxuhOi52BYpsXcBuNQGMC778TbRkPiPDy7BfAzOhSESOe
+w77flWb8kMqOGE8Xz4HE45eAxx5U78/IUvi87jED5EsbwQO+wBrL+zsRRyx9wgh5
+sWWNG0Hp5rQKl0xyn3gHPlqIeEp1GcqjvF5A8GYYb1bqN5xk1d9lohBKkrAapcEy
+qWoWj9GAYxNJfWYu0C3FOUfHIr4Mre306gScp17RhRKhhGO16Kdh
+=JyIu
+-----END PGP SIGNATURE-----

trezor/attest/legacy/v1.12.1/attest.brianddk

@@ -0,0 +1,25 @@
+-----BEGIN PGP SIGNED MESSAGE-----
+Hash: SHA256
+
+Intended Build Version:  legacy/v1.12.1
+build-docker.sh Version: legacy/v1.12.1
+Build Command:           build-docker.sh --skip-core legacy/v1.12.1
+Source Binary tag:       
+Bootloader Build?:       0
+
+859dff49705fb81e83fe6d2efcf8f739f847081037aacf4f176624009a738ed8  trezor-1.12.1.bin
+859dff49705fb81e83fe6d2efcf8f739f847081037aacf4f176624009a738ed8  repo/build/legacy/firmware/firmware.bin
+
+683b51fb68d0b0377f5596d6e75cc5ba2b64b88563dae2ede431031565b977fa  trezor-1.12.1-bitcoinonly.bin
+683b51fb68d0b0377f5596d6e75cc5ba2b64b88563dae2ede431031565b977fa  repo/build/legacy-bitcoinonly/firmware/firmware.bin
+-----BEGIN PGP SIGNATURE-----
+
+iQFEBAEBCAAuFiEEYoX6CPtntyvk2kGEg18EM6bVGGAFAmRvxpsQHGJyaWFuZGRr
+QHJlZGRpdAAKCRCDXwQzptUYYMIUB/wJuAYuHqYNixIKqf8uljS48n/dWqPv9AcB
+JYlf8d96YHk4lDTJc4QLPrgDPfzv5G7cz4AKOrIbeo4lnShveZTfZO84CvrQeTXU
+sVWJzTWZldPwgvqbCViPLhBBr9SxZwEM57zHOiuL0Qbe4xeIB179fyS1u0jLsS7O
+7L0WqT+TWWuT/1IuMlL2shI8vE+fijbvmYmB6syqj545axsvz/dBrWw9SWf6NXi+
+IC1eCvHppgoWxmd3kwqvdjlpOtdQY8iSqM/19Vd20HVjIARlmB0EAsRkPEYCyLBm
+S+CHjJziAS5b2AVtXN9lyGU0l3RPPvwI/DJ4twol6VGP1BajS/a5
+=7S7c
+-----END PGP SIGNATURE-----

trezor/check.sh

@@ -0,0 +1,16 @@
+#!/bin/bash
+# [rights]  Copyright 2023 brianddk at github https://github.com/brianddk
+# [license] Apache 2.0 License https://www.apache.org/licenses/LICENSE-2.0
+# [repo]    github.com/brianddk/attestation/
+# [btc]     BTC-b32: bc1qwc2203uym96u0nmq04pcgqfs9ldqz9l3mz8fpj
+# [tipjar]  github.com/brianddk/reddit/blob/master/tipjar/tipjar.txt
+# [req]     bash, grep, dirname, realpath
+
+EXEC_PATH=$(dirname $(readlink -f "${BASH_SOURCE[0]}"))
+REAL_PATH=$(realpath --relative-to="$PWD" "${EXEC_PATH}")
+if [[ -z "${REAL_PATH}" ]]; then
+  REAL_PATH=.
+fi
+
+TARG_PATH=${1:-$REAL_PATH/attest}
+grep -r " repo/\| trezor-" "${TARG_PATH}"