Skip to content

Commit

Permalink
Add reproducibility video and device verification steps
Browse files Browse the repository at this point in the history
  • Loading branch information
sethforprivacy committed Jun 21, 2023
1 parent 18a1668 commit e6e435a
Showing 1 changed file with 6 additions and 0 deletions.
6 changes: 6 additions & 0 deletions REPRODUCIBILITY.md
Original file line number Diff line number Diff line change
Expand Up @@ -16,6 +16,10 @@ In this guide we will outline the exact steps necessary to get set up, build fir

Security through transparency is the goal here, and firmware reproducibility is a key aspect of that!

Just want a taste of what to expect? Watch the entire process, start to finish, in this quick video:

[![asciicast](https://asciinema.org/a/5DtKQT0gH5LnYIpSHonOkkUif.svg)](https://asciinema.org/a/5DtKQT0gH5LnYIpSHonOkkUif)

## Setup

In order to build and verify the reproducibility of Passport firmware, you will need to:
Expand Down Expand Up @@ -215,6 +219,8 @@ In order to install the firmware you just verified, you can follow our documenta

Be sure to use the unmodified release binary you downloaded from Github above (i.e., `v2.1.2-passport.bin`) that still has our official signatures, as Passport will only allow you to install firmware that has been signed by at least two members of the Passport team.

You can also validate the firmware hashes on Passport before installing by viewing the file under Settings>Advanced>MicroSD>List Files and viewing the info for the binary, or after installing by holding down the "1" key while booting and scrolling to the right.

## Conclusion

We want to close out this guide by thanking our fantastic community, many of whom have tested out reproducibility or let us know when they run into any issues along the way. Open source and the verifiability and transparency it brings are core to our ethos at Foundation, and the ability to reproducibly build firmware for Passport is a core outpouring of that.
Expand Down

0 comments on commit e6e435a

Please sign in to comment.