[ESHOP launched] Trezor: Bitcoin hardware wallet

[stick]

Has anyone successfully compiled the bootloader? It seems something wrong with the dependence in the Makefiles, because it complains /serialno.c:32: undefined reference to `desig_get_unique_id' Thanks.

it is not a trezor issue, but rather a bug in libopencm3 code for f2 family. fix:

diff --git a/lib/stm32/f2/Makefile b/lib/stm32/f2/Makefile
index 9291668..74d97e7 100644
--- a/lib/stm32/f2/Makefile
+++ b/lib/stm32/f2/Makefile
@@ -34,7 +34,7 @@ CFLAGS                = -Os -g \
 # ARFLAGS      = rcsv
 ARFLAGS                = rcs
 
-OBJS           = gpio.o rcc.o
+OBJS           = gpio.o rcc.o desig.o
 
 OBJS            += crc_common_all.o dac_common_all.o dma_common_f24.o \
                    gpio_common_all.o gpio_common_f0234.o i2c_common_all.o \

[GreatBug]

I'm seeing a different error:

Code:

bootloader.o: In function `show_unofficial_warning':
/home/user/Documents/tbootloader/trezor-mcu/bootloader/bootloader.c:55: undefined reference to `__stack_chk_fail'
/home/user/Documents/tbootloader/trezor-mcu/bootloader/bootloader.c:55: undefined reference to `__stack_chk_guard'
bootloader.o: In function `load_app':
/home/user/Documents/tbootloader/trezor-mcu/bootloader/bootloader.c:63: undefined reference to `__stack_chk_fail'
/home/user/Documents/tbootloader/trezor-mcu/bootloader/bootloader.c:63: undefined reference to `__stack_chk_guard'
...
many snipped
...

/home/user/Documents/tbootloader/trezor-mcu//libtrezor.a(fonts.o): In function `fontStringWidth':
/home/user/Documents/tbootloader/trezor-mcu/gen/fonts.c:118: undefined reference to `__stack_chk_fail'
/home/user/Documents/tbootloader/trezor-mcu/gen/fonts.c:118: undefined reference to `__stack_chk_guard'
collect2: error: ld returned 1 exit status
make: *** [bootloader.elf] Error 1

on Ubuntu 14.04 64-bit

[stick]

I'm seeing a different error:

Remove -fstack-protector-all \ line in file Makefile.include ...

[GreatBug]

Is the stack protector enabled in the shipping version?

Why is the modification necessary to compile?

[stick]

Why is the modification necessary to compile?

Because stack protector was not enabled in bootloader until now.

[GreatBug]

Why is the modification necessary to compile?

Because stack protector was not enabled in bootloader until now.

I don't understand.  Can you please explain?

[stick]

I don't understand.  Can you please explain?

I just pushed a commit* which enables stack protector for bootloader as well. It was not enabled up until now. I have not tested it yet, though, but the code can be compiled without any changes.

* https://github.com/trezor/trezor-mcu/commit/58ecfdcab0a2653be32a9d9895d815380ce4f84f

[cor]

Here: https://www.buytrezor.com/
until Monday only!

Happy Bitcoin Anniversary! 

[AussieHash]

GreenAddress can be used with a key generated offline on the hardware wallet (not in the app) so this allows you to pair it with any key.

I've just received my HW1 and confirm that indeed you can either write the greenaddress.crx generated mnemonic to HW1, or independently generate a seed on the HW1 instead.

This first step can be done offline, connecting only for the 2fa stage, although if HW1 works as it should, the seed should presumably never leak to the online machine (assuming you have a cold offline machine for the powercycle seed backup)

Bring on Trezor 2of2 multisig support !

[Valzador]

Wait, if my 24 word seed can bring back my coins, doesn't that mean my private keys are held somewhere?

[cbeast]

Wait, if my 24 word seed can bring back my coins, doesn't that mean my private keys are held somewhere?

That's why it's called a seed and not a passphrase. Your keys come from the seed and your seed can clone them if they are lost.

[Valzador]

Wait, if my 24 word seed can bring back my coins, doesn't that mean my private keys are held somewhere?

That's why it's called a seed and not a passphrase. Your keys come from the seed and your seed can clone them if they are lost.

How does it know how to clone it?

What if I make 4 other accounts on my trezor.

[cbeast]

Wait, if my 24 word seed can bring back my coins, doesn't that mean my private keys are held somewhere?

That's why it's called a seed and not a passphrase. Your keys come from the seed and your seed can clone them if they are lost.

How does it know how to clone it?

What if I make 4 other accounts on my trezor.

I don't know what you mean by account. The Trezor doesn't contain accounts. It contains a wallet filled with addresses. The website has your account. The Trezor can only load one wallet at a time
If you lose your Trezor you will want to clone the wallet from the seed so you at least get your bitcoins back. You have to do that yourself.

[molecular]

Wait, if my 24 word seed can bring back my coins, doesn't that mean my private keys are held somewhere?

That's why it's called a seed and not a passphrase. Your keys come from the seed and your seed can clone them if they are lost.

How does it know how to clone it?

What if I make 4 other accounts on my trezor.

I don't know what you mean by account. The Trezor doesn't contain accounts. It contains a wallet filled with addresses. The website has your account. The Trezor can only load one wallet at a time
If you lose your Trezor you will want to clone the wallet from the seed so you at least get your bitcoins back. You have to do that yourself.

There's is a "account" moniker in the key derivation scheme.

All accounts are derived from the seed.

[cbeast]

Wait, if my 24 word seed can bring back my coins, doesn't that mean my private keys are held somewhere?

That's why it's called a seed and not a passphrase. Your keys come from the seed and your seed can clone them if they are lost.

How does it know how to clone it?

What if I make 4 other accounts on my trezor.

I don't know what you mean by account. The Trezor doesn't contain accounts. It contains a wallet filled with addresses. The website has your account. The Trezor can only load one wallet at a time
If you lose your Trezor you will want to clone the wallet from the seed so you at least get your bitcoins back. You have to do that yourself.

There's is a "account" moniker in the key derivation scheme.

All accounts are derived from the seed.

Interesting choice of monikers. Very bank. Cannotes third party security. Most clients use the term wallet. Why did you choose account?

[btchip]

Interesting choice of monikers. Very bank. Cannotes third party security. Most clients use the term wallet. Why did you choose account?

as molecular said, https://github.com/bitcoin/bips/blob/master/bip-0032.mediawiki#the-default-wallet-layout

[blossbloss]

Still trying to wrap my head around HD wallets.  When I use Trezor for sending and receiving funds, does it automatically ensure that I use private keys only once per addess for signing transactions?  In other words, does the Traezor manage the creation and use of addresses so that I never reuse one?
Thanks

[molecular]

Still trying to wrap my head around HD wallets.  When I use Trezor for sending and receiving funds, does it automatically ensure that I use private keys only once per addess for signing transactions?  In other words, does the Traezor manage the creation and use of addresses so that I never reuse one?
Thanks

How is the trezor going to keep you from reusing an address? It gives you an unlimited amount of addresses, but it's your responsibility to use a fresh one for every payment reception.

Mytrezor wallet helps with this by displaying a fresh one on receive tab afaik.

[mmortal03]

Wait, if my 24 word seed can bring back my coins, doesn't that mean my private keys are held somewhere?

That's why it's called a seed and not a passphrase. Your keys come from the seed and your seed can clone them if they are lost.

How does it know how to clone it?

What if I make 4 other accounts on my trezor.

I don't know what you mean by account. The Trezor doesn't contain accounts. It contains a wallet filled with addresses. The website has your account. The Trezor can only load one wallet at a time
If you lose your Trezor you will want to clone the wallet from the seed so you at least get your bitcoins back. You have to do that yourself.

There's is a "account" moniker in the key derivation scheme.

All accounts are derived from the seed.

Interesting choice of monikers. Very bank. Cannotes third party security. Most clients use the term wallet. Why did you choose account?

Other coins, for instance, Monero, are also using the term "account" instead of "wallet", for various practical reasons.

[Erdogan]

Wait, if my 24 word seed can bring back my coins, doesn't that mean my private keys are held somewhere?

That's why it's called a seed and not a passphrase. Your keys come from the seed and your seed can clone them if they are lost.

How does it know how to clone it?

What if I make 4 other accounts on my trezor.

I don't know what you mean by account. The Trezor doesn't contain accounts. It contains a wallet filled with addresses. The website has your account. The Trezor can only load one wallet at a time
If you lose your Trezor you will want to clone the wallet from the seed so you at least get your bitcoins back. You have to do that yourself.

There's is a "account" moniker in the key derivation scheme.

All accounts are derived from the seed.

Interesting choice of monikers. Very bank. Cannotes third party security. Most clients use the term wallet. Why did you choose account?

Other coins, for instance, Monero, are also using the term "account" instead of "wallet", for various practical reasons.

It's unfortunate that they called it account, because it connotes with bank account.... but, a bank account is really a bank deposit account. Account really means some numbers that you track, and deposit means that you have given your money away. So it is not really bad to call it an account (as in BIP-0032). It is a way to arrange your numbers.

Gives us a splendid pretext to argue what an account really is, and what a deposit really is.