coldcard/firmware
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

use HW accelerated tagged_sha256

Browse Source
This commit is contained in:
scgbckbone 2026-02-25 04:51:03 +01:00 committed by doc-hex
parent 515b74b606
commit 79374d7a7d
1 changed files with 2 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
shared/auth.py
View File

@ -301,7 +301,7 @@ class ApproveTransaction(UserAuthorizedAction):
key0="to input message manually", title="BIP-322 MSG",
no_qr=not version.has_qwerty)
# TODO move elswhere
# single sha256 of b'BIP0322-signed-message'
bip322_tag_hash = b'te\x84\xa1\x87/\xa1\x00AUN\xff\xa08\xd6\x12IB\xddy\xb4\xe5\x8aL\xda\x18N\x13\xdb\xe6,I'
if ch == KEY_CANCEL:
@ -330,9 +330,8 @@ class ApproveTransaction(UserAuthorizedAction):
with open(fn, 'rt') as fd:
msg = fd.read()
# TODO needs newer libngu with sha256t
assert msg, "need msg"
msg_hash = ngu.hash.sha256s(bip322_tag_hash+bip322_tag_hash+msg)
msg_hash = ngu.hash.sha256t(bip322_tag_hash, msg, True)
assert msg_hash == self.psbt.por322_msg_hash, "hash verification failed"
ch = await ux_show_story(
msg+"\n\nPress %s to approve message, otherwise %s to exit." % (OK, X),