Keystone 3 firmware

This commit removes a line that made a Bitcoin PSBT (Partially Signed Bitcoin Transaction) safety check always return success before doing any real verification. The title says 'add mfp check' (master fingerprint check), but the actual code change mostly re-enables an existing check that had been short-circuited. A master fingerprint check helps ensure the transaction was built for this specific hardware wallet, reducing the risk of signing a transaction meant for someone else's wallet. The commit also contains unrelated build and simulator tweaks.

This commit is a routine localization and font update. It adds one Chinese character (盘) to the Chinese font file, removes three Chinese characters from the Russian font symbol list, and updates translations for the 'Randomized PIN Pad' setting across multiple languages. There is no code behavior change, no security fix, and no vulnerability introduced.

This commit adds a user-facing option to scramble the numeric PIN keypad layout on the Keystone 3 hardware wallet. When enabled, the digits appear in a random order each time, making it harder for someone watching or filming the screen to guess the PIN from finger positions. It is a security-hardening feature, not a fix for an active vulnerability, and it is off by default.

This commit only changes one number in a version header file, bumping the build version from 10 to 14. It does not modify any actual code, features, or security behavior. There is no security issue here.

This commit adds Dogecoin support for multi-signature wallet addresses in a hardware wallet firmware. It lets the device create Dogecoin multi-sig addresses and sort public keys before building the address. There is also a trivial whitespace change in a UI file. The changes look like normal feature work, but adding new address handling always carries a small risk of address-generation mistakes that could make funds hard or impossible to spend.

This commit only changes how two internal Rust libraries are sourced in the project's build configuration. It switches from using local file paths on a developer's Windows machine (C:/3.git/...) to pulling the same libraries from a specific Git branch in the vendor's public repository. There is no code behavior change visible in this commit, and nothing in the commit message or diff indicates a security fix or vulnerability.

This commit fixes two bugs in the Bitcoin PSBT (Partially Signed Bitcoin Transaction) handling code of a hardware wallet firmware. One fix corrects the order of arguments passed between C and Rust code so they match the expected function signature. The other fix moves the array-size assignment to happen before the array is populated, ensuring all nine public keys are properly registered instead of only the first four. These are likely functional bugs that could cause transaction parsing or signing to fail or behave incorrectly, but the diff alone does not prove a direct theft-of-funds vulnerability.

This commit adds support for signing extended PSBTs for several UTXO-based coins (Litecoin, Dogecoin, Dash, Bitcoin Cash) in the Keystone 3 hardware wallet firmware. It also contains several changes that look like temporary debug or development shortcuts rather than production-hardened code: a hardcoded return value that hides the real battery percentage, disabling a boot-version mismatch warning, sending real UART output in production builds, and pointing Rust dependencies to a local path on a developer's Windows machine. These shortcuts reduce the device's defensive posture but are not, by themselves, a remote exploit.

This commit only edits wording and spacing in two changelog files. No code, configuration, or security behavior is changed. It is a documentation-only formatting cleanup.

This commit only adds a new section to the English and Chinese changelogs for firmware version 2.2.14. It describes new features (BSC transfers/swaps, randomized PIN input, IOTA Wallet support) and one bug fix (certain ADA transaction signing causing device restarts). No source code is changed, so the commit itself does not introduce, fix, or alter any security behavior.

This commit simply swaps the Petra wallet icon graphics for new versions. It changes two PNG image files and their corresponding generated C source files, plus updates a hash file used to track those assets. There is no code logic change, no security fix, and no indication this addresses a vulnerability.

This commit only increments a software build number from 13 to 14 in a version header file. There are no code changes, no bug fixes, and no security-related modifications visible in the diff.

This commit fixes minor user-interface issues for the IOTA wallet in the Keystone 3 hardware firmware. It renames the displayed label from 'IOTA' to 'IOTA Wallet', adds a tutorial entry with a help link, and moves the IOTA wallet entry to a different position in the wallet list. There is no security-relevant change visible in the code.

This commit fixes a coding mistake in the Ethereum batch transaction screen. The code was allocating memory for a token symbol, then accidentally assigning the result of a safe string-copy function back to the same pointer. On success, that function returns the destination pointer, so the bug is mostly harmless, but it makes the code confusing and could hide problems if the copy fails. The fix removes the redundant assignment so the pointer keeps the originally allocated memory address.

This commit fixes a UI bug in the Ethereum batch transaction screen where the wrong memory buffer was being used to store a network symbol name. Before the fix, the code allocated memory for the symbol but then wrote the symbol into a buffer sized by a different function argument, which could lead to a crash or corrupted display text when showing swap details. The fix makes the destination buffer the same one that was just allocated, matching its size.

This commit adds two new BNB Smart Chain (BSC) THORChain router contract definitions to the wallet's built-in list of known smart contracts, and makes a small, safe-looking code change so the swap screen can display the correct network symbol (e.g., BNB) instead of hard-coding 'ETH'. There is no obvious security vulnerability in the diff itself; it appears to be a routine feature addition to support more cross-chain swaps.

This commit adds support for the IOTA wallet in the Keystone 3 firmware. It is a routine feature addition: a new wallet icon is included, the wallet is added to the status bar and connect-wallet lists, and the firmware build number is bumped. There is no indication of a security fix or vulnerability.

This commit simply bumps a build number in a version header from 9 to 13 for a beta test. It does not change any executable logic, fix any bug, or alter any security behavior. There is no security relevance visible in the change itself.

This commit simply adds two known THORChain Router smart contract definitions for the BNB Smart Chain (BSC) network to a lookup table used by the wallet's user interface. It is a routine data update with no visible security defect.

This commit increases the memory stack size for a task that handles sensitive data, with the stated goal of fixing a crash related to Cardano (ADA). A too-small stack can cause memory corruption or a device crash when handling certain operations. While the change itself is defensive, the crash occurs in a security-sensitive task, so it could theoretically affect availability or stability during sensitive operations. There is no direct evidence in the commit that this is exploitable for theft or key extraction.

This commit is a routine build fix. It updates a cached image hash file and adds a missing function declaration inside a conditional compile block for a Web3-specific version. There is no visible security relevance.

This commit adds a feature that shuffles the on-screen numeric keypad layout each time the device lock screen appears. The goal is to make it harder for someone watching or recording your screen to figure out your PIN based on where your fingers tap. The change itself is a security improvement, not a vulnerability fix, but the commit message is vague and gives no explanation.

This commit simply changes two user-facing text labels from 'Version 3.0' and 'Version 3.1' to 'V3.0' and 'V3.1'. It is a cosmetic string formatting update with no security relevance.

This commit only adds release notes for firmware version 2.2.12. It does not change any executable code, configuration, or security controls. The changelog mentions a bug fix for Cardano passphrase message signing, but the commit itself contains only documentation updates.

This commit adds a shuffled numeric keypad for PIN entry on a hardware wallet. Instead of always showing 0-9 in the same order, the digits now appear in a random order each time. This is a defensive measure to make it harder for someone watching or recording the screen to learn your PIN based on where you tap.