Skip to content

Add TREZOR Manager app

username-removed-49371 requested to merge mr.ligi/fdroiddata:add_trezor into master

One note: I had to add AntiFeatures:NonFreeAssets as there is a binary firmware for the TREZOR device included

But this does not do the project justice as firmware.bin is a result of deterministic build of an foss firmware but it is signed using keys which are obviously not free.

Is there a way to work around this?

EDIT:

< Tovok7> ligi: stick`It would help, if you would explain what this firmware is, what it is used for, why it needs to be signed and why it can't be signed with another key. Thanks!

< ligi> Tovok7: ack - will do it in the MR

The firmware is included in the app for an easy update of the firmware on the TREZOR hardware via the app The key cannot be public as otherwise everyone could sign a firmware with this key - the key only being in the hands of the trusted hardware vendor adds a layer of security which is important for these kinds of applications. When signing with another key the Hardware would warn the user that it is signed with a untrusted key

Edited by username-removed-49371

Merge request reports