Laan Tungir ac2e6347a2 v0.1.6 - Teensy 4.1 SD-card OTP pad: real implementation working on hardware ...

- otppad_embedded: bit-compatible port of libotppad (2386/2386 host tests pass)
- otp_pad_sd: SdFat-direct SD card pad reader (FAT-only, ASCII armor + binary .otp)
- pad_gen.ino: TRNG-sourced 1 MB pad generator using i.MX RT1062 TRNG registers
- Linker script: moved .rodata from DTCM to FLASH (EXCLUDE_FILE ed25519),
  reclaiming 124 KB DTCM, free stack 5.9 KB -> 130.9 KB
- check_stack.sh: build-time FlexRAM stack gauge, wired into build_signer.sh
- test_otp_sd.py: 8/9 hardware tests pass (ASCII + binary round-trips,
  offset advance, tamper detection; 10 KB plaintext times out on perf)
- test_classical.py: 16/16 pass with new memory layout (ed25519 OK)
- Memory evaluation document: plans/teensy41_memory_evaluation.md

2026-07-30 17:10:50 -04:00

..

algorithm_based_api.md

v0.0.47 - Added post-quantum cryptography (ML-DSA-65, SLH-DSA-128s, ML-KEM-768) and standard ECC (ed25519, x25519) support with algorithm-based API

2026-07-16 15:14:57 -04:00

auth_envelope_other_transports.md

v0.0.25 - Add --allow-all flag and short aliases for CLI options

2026-05-06 12:09:08 -04:00

caller_token_identity.md

v0.0.20 - Implement TCP auth envelope verification with signed caller pubkey identity, replay protection, tests, and deferred NIP-46 bunker plan

2026-05-05 11:22:58 -04:00

cyd_algorithm_api_upgrade.md

v0.1.0 - CYD firmware v0.0.2: algorithm-based API upgrade (all verbs, all algorithms), vendored Keccak/SHAKE + PSA ed25519/x25519 for IDF v5.4, Web Serial test page, CYD docs, Teensy 4.1 port plan (1TB SDXC OTP pad), brainstorming READMEs for BLE/IR/NFC/FPGA signer concepts

2026-07-21 13:16:04 -04:00

cyd_signer_port.md

v0.0.30 - CYD: add post-approval event log screen and document CH340 EN-GND capacitor reset mitigation

2026-05-27 06:56:40 -04:00

deny_by_default_approvals.md

v0.0.16 - Implement deny-by-default approval model with on-demand nostr_index derivation and --preapprove CLI flag

2026-05-04 18:44:40 -04:00

derive_hmac.md

v0.0.58 - Added derive verb: HMAC-SHA256(privkey, data) for secp256k1, enabling opaque d-tag derivation via nsigner remote backend without exposing the privkey

2026-07-20 19:56:51 -04:00

docker_runtime_image.md

v0.0.25 - Add --allow-all flag and short aliases for CLI options

2026-05-06 12:09:08 -04:00

embedded_nsigner_spawn.md

v0.0.26 - Add mnemonic-stdin and mnemonic-fd startup input modes with tests/docs

2026-05-06 17:38:50 -04:00

feather_signer_ui.md

v0.0.29 - Feather firmware: auto-approve sign_event and always return explicit JSON-RPC errors for unhandled/oversized requests

2026-05-11 13:43:14 -04:00

feather_tinyusb_composite.md

v0.0.28 - Finalize Feather TinyUSB migration and remove cardputer artifacts

2026-05-09 16:22:50 -04:00

http_wss_listener.md

v0.0.48 - Added OTP one-time pad encryption (otp_encrypt/otp_decrypt verbs), HTTP listener mode (--listen http:HOST:PORT), interactive OTP pad auto-scan on USB drives, raised SERVER_MAX_MSG_SIZE to 16MB, updated README with curl examples and current API documentation

2026-07-19 11:07:07 -04:00

interactive_transport_selection.md

v0.0.48 - Added OTP one-time pad encryption (otp_encrypt/otp_decrypt verbs), HTTP listener mode (--listen http:HOST:PORT), interactive OTP pad auto-scan on USB drives, raised SERVER_MAX_MSG_SIZE to 16MB, updated README with curl examples and current API documentation

2026-07-19 11:07:07 -04:00

kb2040_hidden_signer.md

v0.0.32 - Fix KB2040 Python WebUSB handshake and robust frame reassembly for get-public-key

2026-06-08 20:24:02 -04:00

kb2040_qubes_signing_bridge.md

v0.0.34 - Add qrexec bridge subcommand and --bridge-source-trusted flag for persistent-signer qrexec transport

2026-07-11 09:37:51 -04:00

kb2040_real_nip06_crypto.md

v0.0.34 - Add qrexec bridge subcommand and --bridge-source-trusted flag for persistent-signer qrexec transport

2026-07-11 09:37:51 -04:00

legacy_verb_aliases.md

v0.0.57 - Migrated to unified nostr_ prefixed verb names; removed legacy verb aliases (sign_data, ssh_sign, verify_signature, kem_encapsulate, kem_decapsulate, otp_encrypt, otp_decrypt); split get_public_key into algorithm-based get_public_key and role-based nostr_get_public_key; OTP now selected via algorithm:otp instead of curve:otp; consolidated API docs from api.md into README.md

2026-07-20 17:29:45 -04:00

migrate_client_to_nostr_core_lib.md

v0.0.34 - Add qrexec bridge subcommand and --bridge-source-trusted flag for persistent-signer qrexec transport

2026-07-11 09:37:51 -04:00

mine_event_pow.md

v0.0.45 - Display qrexec service name (qubes.NsignerRpc) in signer connection info; use human-readable timestamps in activity log; fix static release build by adding miner.c to Dockerfile.alpine-musl

2026-07-11 19:12:34 -04:00

mnemonic_startup_input.md

v0.0.26 - Add mnemonic-stdin and mnemonic-fd startup input modes with tests/docs

2026-05-06 17:38:50 -04:00

nip46_bunker_mode.md

v0.0.20 - Implement TCP auth envelope verification with signed caller pubkey identity, replay protection, tests, and deferred NIP-46 bunker plan

2026-05-05 11:22:58 -04:00

nostr_core_lib_client_updates.md

v0.0.42 - Add C qrexec client example using high-level nostr_signer API with nostr_index selector; sync nostr_core_lib with qrexec transport and index support

2026-07-11 14:28:09 -04:00

nsigner_browser_extension.md

first

2026-05-02 12:31:26 -04:00

nsigner.md

v0.0.7 - Allow TCP non-loopback IPv4/IPv6 binds for FIPS reachability

2026-05-03 11:41:42 -04:00

otp_nostr_integration.md

v0.0.48 - Added OTP one-time pad encryption (otp_encrypt/otp_decrypt verbs), HTTP listener mode (--listen http:HOST:PORT), interactive OTP pad auto-scan on USB drives, raised SERVER_MAX_MSG_SIZE to 16MB, updated README with curl examples and current API documentation

2026-07-19 11:07:07 -04:00

post_quantum_crypto.md

v0.0.47 - Added post-quantum cryptography (ML-DSA-65, SLH-DSA-128s, ML-KEM-768) and standard ECC (ed25519, x25519) support with algorithm-based API

2026-07-16 15:14:57 -04:00

qrexec_persistent_bridge.md

v0.0.34 - Add qrexec bridge subcommand and --bridge-source-trusted flag for persistent-signer qrexec transport

2026-07-11 09:37:51 -04:00

seed_phrase_uses.md

v0.0.47 - Added post-quantum cryptography (ML-DSA-65, SLH-DSA-128s, ML-KEM-768) and standard ECC (ed25519, x25519) support with algorithm-based API

2026-07-16 15:14:57 -04:00

ssh_agent_proxy.md

v0.0.47 - Clean up main menu layout and hotkeys

2026-07-16 17:59:58 -04:00

teensy41_bringup.md

v0.1.1 - Fixed Teensy 4.1 NIP-04 crash and NIP-44 dispatch bug: reduced secp256k1 ECMULT_CONST_GROUP_SIZE 5->4 to halve ECDH stack usage (~3.5KB->~1.7KB) preventing DTCM stack overflow in secp256k1_ecmult_const during nip04/nip44 ECDH; fixed is_nip44 selector in dispatch.cpp (method[7] was always 'i', digit is at method[9]) so nostr_nip44_* verbs now reach the nip44 implementation instead of silently calling nip04; verified nip04+nip44 round-trip on hardware

2026-07-27 07:16:53 -04:00

teensy41_memory_evaluation.md

v0.1.6 - Teensy 4.1 SD-card OTP pad: real implementation working on hardware

2026-07-30 17:10:50 -04:00

teensy41_otp_sd_pad.md

v0.1.6 - Teensy 4.1 SD-card OTP pad: real implementation working on hardware

2026-07-30 17:10:50 -04:00

teensy41_signer_implementation.md

v0.1.1 - Fixed Teensy 4.1 NIP-04 crash and NIP-44 dispatch bug: reduced secp256k1 ECMULT_CONST_GROUP_SIZE 5->4 to halve ECDH stack usage (~3.5KB->~1.7KB) preventing DTCM stack overflow in secp256k1_ecmult_const during nip04/nip44 ECDH; fixed is_nip44 selector in dispatch.cpp (method[7] was always 'i', digit is at method[9]) so nostr_nip44_* verbs now reach the nip44 implementation instead of silently calling nip04; verified nip04+nip44 round-trip on hardware

2026-07-27 07:16:53 -04:00

teensy41_signer_port.md

v0.1.0 - CYD firmware v0.0.2: algorithm-based API upgrade (all verbs, all algorithms), vendored Keccak/SHAKE + PSA ed25519/x25519 for IDF v5.4, Web Serial test page, CYD docs, Teensy 4.1 port plan (1TB SDXC OTP pad), brainstorming READMEs for BLE/IR/NFC/FPGA signer concepts

2026-07-21 13:16:04 -04:00

teensy41_signer_remaining_fixes.md

v0.1.6 - Teensy 4.1 SD-card OTP pad: real implementation working on hardware

2026-07-30 17:10:50 -04:00

tui_continuous_integration.md

v0.0.26 - Add mnemonic-stdin and mnemonic-fd startup input modes with tests/docs

2026-05-06 17:38:50 -04:00

tui_display_connections_on_demand.md

v0.0.54 - TUI: show full derivation path in Roles table, move connection instructions to on-demand 'd' hotkey display with spaced transport blocks

2026-07-20 09:49:20 -04:00