* .github/workflows/validate_and_build.yaml: Rename file to ...
* .github/workflows/build.yaml: ... this one and remove lint job.

Signed-off-by: Jean-Pierre De Jesus DIAZ <[email protected]>

* .github/actions/rust-toolchain/action.yml: Add vendored
dtolnay/rust-toolchain action.
* .reuse/dep5: Add dtolnay to dep5 as the copyright holder of
rust-toolchain action file.

Signed-off-by: Jean-Pierre De Jesus DIAZ <[email protected]>

* .github/workflows/lint.yaml: New action.

Signed-off-by: Jean-Pierre De Jesus DIAZ <[email protected]>

Signed-off-by: Jean-Pierre De Jesus DIAZ <[email protected]>

Signed-off-by: Jean-Pierre De Jesus DIAZ <[email protected]>

* .github/workflows/build.yaml: Remove setup-just action.

Signed-off-by: Jean-Pierre De Jesus DIAZ <[email protected]>

The Passport firmware code runs on a "single thread" so the warnings
don't apply here.

* extmod/foundation-rust/src/secp256k1.rs: Replace `&mut ...' with
`&mut *addr_of_mut!(...)'.
* extmod/foundation-rust/src/ur/decoder.rs: Ditto.
* extmod/foundation-rust/src/ur/encoder.rs: Ditto.
* extmod/foundation-rust/src/ur/mod.rs: Ditto.

* .github/workflows/dependabot.yaml: Move from here...
* .github/dependabot.yaml: ... to here.

For consistency.

* extmod/foundation-rust/include/foundation.h: Re-generate file.
* extmod/foundation-rust/src/secp256k1.rs
(foundation_secp256k1_schnorr_sign): Rename this ...
(foundation_secp256k1_sign_schnorr): ... to this.
* extmod/foundation/modfoundation-secp56k1.h
(mod_foundation_secp256k1_sign_schnorr): Update.

* extmod/foundation-rust/include/foundation.h: Re-generate file.
* extmod/foundation-rust/src/secp256k1.rs
(foundation_secp256k1_sign_ecdsa): New function.
* extmod/foundation/modfoundation-secp56k1.h
(mod_foundation_secp256k1_sign_ecdsa): New function.
(mod_foundation_secp256k1_sign_ecdsa_obj): New variable.
(mod_foundation_secp256k1_globals_table): Add MP_QSTR_sign_ecdsa.

* extmod/foundation/modfoundation-secp56k1.h
(mod_foundation_secp256k1_public_key_schnorr): New function.
(mod_foundation_secp256k1_public_key_schnorr_obj): New variable.
(mod_foundation_secp256k1_globals_table): Add MP_QSTR_public_key_schnorr.
* extmod/foundation-rust/include/foundation.h: Re-generate file.
* extmod/foundation-rust/src/secp256k1.rs
(secp256k1_public_key_schnorr): New function.

* ports/stm32/boards/Passport/modules/tasks/nostr_key_task.py
(nostr_key_task): Use secp256k1.public_key_schnorr instead of
nostr_pubkey_from_pk.
* ports/stm32/boards/Passport/modules/utils.py
(nostr_pubkey_from_pk): Remove function.

* ports/stm32/boards/Passport/modules/tasks/sign_psbt_task.py
(sign_psbt_task): Use foundation.secp256k1.sign_ecdsa.
* ports/stm32/boards/Passport/modules/utils.py
(sign_message_digest): Ditto.

* extmod/trezor-firmware/core/embed/extmod/modtrezorcrypto/modtrezorcrypto.c:
(modtrezorcrypto-secp256k1.h): Remove inclusion.
(mp_module_trezorcrypto_globals_table): Remove MP_QSTR_secp256k1.

* py/py.mk (PY_EXTMOD_O_BASENAME): Remove
extmod/trezor-firmware/crypto/shamir.o and
extmod/trezor-firmware/crypto/schnorr.o.

* extmod/trezor-firmware/core/embed/extmod/modtrezorcrypto/modtrezorcrypto.c
(FOUNDATION_ADDITIONS): Remove definition.
* py/py.mk (CFLAGS_MOD): Add -DFOUNDATION_ADDITIONS=1.

* extmod/trezor-firmware/crypto/bip32.c (get_curve_by_name): Disable
getting nist256p1 information to avoid linking.
* py/py.mk (PY_EXTMOD_O_BASENAME): Remove
extmod/trezor-firmware/crypto/nist256p1.o.

* extmod/trezor-firmware/crypto/bip32.c: Avoid using unused curves.
* extmod/trezor-firmware/crypto/hasher.c: Disable various hashes.
* extmod/trezor-firmware/crypto/hasher.h: Ditto.
* extmod/trezor-firmware/crypto/secp256k1.c: Remove unused curves.
* py/py.mk (PY_EXTMOD_O_BASENAME): Remove
extmod/trezor-firmware/crypto/groestl.o,
extmod/trezor-firmware/crypto/blake256.o,
extmod/trezor-firmware/crypto/blake2b.o and
extmod/trezor-firmware/crypto/blake2s.o.

* py/py.mk (CFLAGS_MOD): Add -DUSE_PRECOMPUTED_CP=0.

* extmod/foundation-rust/Cargo.toml (dependencies) <secp256k1>: Enable
lowmemory feature.

* extmod/foundation-rust/Cargo.lock: Update lockfile.
* extmod/foundation-rust/Cargo.toml (dependencies) <bitcoin_hashes>: New
dependency, enable small-hash.

* src/secp256k1.rs
(secp256k1_public_key_schnorr): Use Keypair instead of KeyPair.
(secp256k1_sign_ecdsa): Use Message::from_digest_slice.

…x-rust-compilation-issues

SFT-3656: Fix Rust compilation issues.

* simulator/Makefile
(CC_UNIX_TOP): Remove variable.
(up): Remove target.
(dfu): Ditto.
(tags): Ditto.
(tools): Ditto.
(setup): Ditto.

Signed-off-by: Jean-Pierre De Jesus DIAZ <[email protected]>

* ports/unix/main.c (mp_import_stat): Fix function signature.

* extmod/foundation-rust/Cargo.lock: Regenerate file.
* extmod/foundation-rust/Cargo.toml (dependencies)
<foundation-ur>: Update to 0.2.
<foundation-urtypes>: Update to 0.3.
<minicbor>: Update to 0.24.

…move-unused-targets-on-simulator

SFT-3648: Remove unused targets on simulator.

…date-foundation-urtypes

SFT-3632: Update foundation-urtypes.

…s-while-hashing-files-from-microsd

SFT-3499: moved all calculation inside try block for sha256

…ating-fix

SFT-2998: fix for firmware updating failures

…ot-for-btcpay

SFT-3235: enabled taproot for btcpay

SFT-3670: added theya single-sig with firmware version info

…-name-on-reset

SFT-3442: clear device name on reset

…ictive-text-list

SFT-3694: improve predictive text list

…clusive-firmware-updating-changes

SFT-2998: reverting inconclusive changes

SFT-3578: merging 2.4.0 progress into 2.3.2

* extmod/foundation-rust/src/ur/mod.rs (UR_Error) <unsupported>: Remove
message argument.
* extmod/foundation-rust/src/ur/registry.rs (UR_Value) <from_ur>: Catch
Error::UnsupportedResource and return UR_Error::unsupported in that
case.

* ports/stm32/boards/Passport/modules/data_codecs/ur2_codec.py
(UR2Decoder) <decode>: Fix the names of the UR exceptions.

* ports/stm32/boards/Passport/modules/flows/scan_qr_flow.py
(ScanQRFlow): Remove use of pass_error altogether.
* ports/stm32/boards/Passport/modules/flows/sign_psbt_qr_flow.py
(SignPsbtQRFlow) <scan_transaction>: Do not pass pass_error.

* ports/stm32/boards/Passport/modules/data_codecs/ur2_codec.py
(UR2Decoder) <add_data>: Create upgrade your Passport alert when
encountering unknown UR types.

…eate-upgrade-your-passport-alert-for-outdated-versions

SFT-2417: Create upgrade your Passport alert.

…ing-final

SFT-2988: message signing final

* extmod/foundation-rust/Cargo.lock: Regenerate.
* extmod/foundation-rust/Cargo.toml (dependencies) <foundation-urtypes>:
Update to 0.4.1.
* extmod/foundation-rust/include/foundation.h: Regenerate.
* extmod/foundation-rust/src/ur/registry.rs: Fix breaking changes.
* extmod/foundation/modfoundation-ur.h: Likewise.
* ports/stm32/boards/Passport/modules/flows/sign_psbt_qr_flow.py: Likewise.
* ports/stm32/boards/Passport/modules/wallets/casa.py: Likewise.

* extmod/foundation-rust/Cargo.lock: Regenerate.
* extmod/foundation-rust/Cargo.toml (dependencies) <foundation-ur>:
Update to 0.3.0

* extmod/foundation-rust/Cargo.lock: Regenerate.

* ports/stm32/boards/Passport/modules/wallets/casa.py (CasaWallet):
Remove ur_type and is_cbor since these are not used in the codebase.

* extmod/foundation/modfoundation-ur.h
(mod_foundation_ur_globals_table) <MP_QSTR_NotMultiPartError>: Use
mp_type_NotMultiPartError.

* extmod/foundation-rust/include/foundation.h: Regenerate.
* extmod/foundation-rust/src/ur/decoder.rs
(UR_ErrorKind) <UR_ERROR_KIND_TOO_BIG>: New variant.
* extmod/foundation-rust/src/ur/mod.rs
(UR_Error) <too_big>: New procedure.
* extmod/foundation/modfoundation-ur.h
(mp_type_TooBigError): New exception.
* ports/stm32/boards/Passport/modules/data_codecs/ur2_codec.py
(UR2Decoder): Add specific message for ur.TooBigError.
* ports/stm32/boards/Passport/modules/flows/sign_psbt_qr_flow.py
(SignPsbtQrFlow) <scan_transaction>: Remove QR too large condition.

…y-noded-wallet

SFT-3756: support fully noded wallet

…date-foundation-rs-crates

SFT-3812: Update foundation-rs crates.

* Cargo.lock: Update lockfile.
* Cargo.toml (dependencies) <foundation-firmware>: New dependency.

* extmod/foundation-rust/include/foundation.h: Update bindings.
* extmod/foundation-rust/src/firmware.rs: New module.
* extmod/foundation-rust/src/lib.rs (firmware): Register module.
* ports/stm32/boards/Passport/modpassport-system.h
(mod_passport_System_validate_firmware_header): Remove procedure.
(mod_passport_System_validate_firmware_header_obj): Remove variable.
(mod_passport_System_locals_dict_table): Remove
validate_firmware_header.
* ports/stm32/boards/Passport/modpassport.c
(mod_passport_verify_update_header): New procedure.
(mod_passport_verify_update_header_obj): New variable.
(passport_module_globals_table): Add verify_update_header.
* ports/stm32/boards/Passport/modules/flows/update_firmware_flow.py
(UpdateFirmwareFlow) <show_firmware_details>: Use verify_update_header
instead of validate_firmware_header.
* ports/stm32/boards/Passport/modules/tasks/verify_firmware_signature_task.py:
Add new task.

* extmod/foundation/modfoundation-ur.h
(mod_foundation_ur_new_passport_response): Fix UUID error message.

* extmod/foundation/modfoundation-ur.h
(mod_foundation_ur_new_derived_key): Use correct value for is_private in
hdkey.

Only used for debugging.

* extmod/foundation-rust/src/ur/registry.rs: Derive debug for FFI UR
types.

…plicate-checks-from-bootloader-when-upgrading

SFT-3480: Add firmware image signature verification

…store-qr-too-large-error-message

SFT-3800: Restore QR too large error message.

…x-hdkey-ur-encoding

SFT-3764: Fix hdkey encoding

* ports/stm32/boards/Passport/modules/data_codecs/ur2_codec.py
(UR2Decoder): Re-raise ur.UnsupportedError message.
* ports/stm32/boards/Passport/modules/flows/scan_qr_flow.py
(ScanQRFlow) <scan>: Handle when the scanned QR code is unsupported.
* ports/stm32/boards/Passport/modules/pages/scan_qr_page.py
(QRScanResult) <is_unsupported>: New method.

…ge-parsing-of-newlines

SFT-2988: fixing message parsing of newlines

…ix-menu

SFT-3407: update postmix menu

…f-question-icon

SFT-2988: fixing cutoff question icon

…eate-upgrade-your-passport-alert-for-outdated-versions

SFT-2417: Update upgrade passport message.

No private key material is leaked, only the calculated hash that is then
verified by the bootloader is printed.

* ports/stm32/Justfile (sign): Pass -d option to cosign.

* Cargo.lock: Regenerate.
* Cargo.toml (dependencies) <foundation-firmware>: Bump to 0.1.2.

SFT-3480: Update foundation-firmware to 0.1.2.

…y-taproot

SFT-3847: remove btcpay taproot

…able-debug-option-when-signing-firmware

SFT-3854: Enable debug logging when signing firmware.