Skip to content

Commit 9aaaa84

Browse files
committed
test(reset): run dice and re-entry coverage from firmware 7.14.3
The bitcoin-only 7.14.3 release line carries the dice-entropy backport, and no firmware between 7.14.3 and 7.15.0 exists without it, so the 7.15.0 gates were exact only for the 7.15 line: against 7.14.3 the dice end-to-end test, the ceremony re-entry regression (the host-chosen-seed guard), and report Section K all skipped silently, and CI went green with zero device-level dice coverage. Gates move to 7.14.3, which is exact for the whole fleet. Section K retitled accordingly.
1 parent d58dc63 commit 9aaaa84

2 files changed

Lines changed: 8 additions & 3 deletions

File tree

scripts/generate-test-report.py

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -791,7 +791,7 @@ def _arg_shown(a):
791791
['Wordlist rejection warning']),
792792
]),
793793

794-
('K', 'Seed Generation Hardening (7.15)', '7.15.0',
794+
('K', 'Seed Generation Hardening (7.14.3+)', '7.14.3',
795795
'The 7.15 changes to how a seed comes into existence: user-supplied dice entropy folded in '
796796
'on-device, and the PIN key-derivation rewrap. These ran green from the first 7.15 RC but '
797797
'appeared nowhere in this report, because the catalog could not reference native firmware '

tests/test_msg_resetdevice.py

Lines changed: 7 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -112,7 +112,10 @@ def test_reset_device(self):
112112
self.assertIsInstance(resp, proto.Success)
113113

114114
def test_reset_device_dice(self):
115-
self.requires_firmware("7.15.0")
115+
# 7.14.3, not 7.15.0: the bitcoin-only 7.14.3 release line carries the
116+
# dice backport, and no firmware between 7.14.3 and 7.15.0 exists
117+
# without it, so the version gate is exact for the whole fleet.
118+
self.requires_firmware("7.14.3")
116119

117120
external_entropy = b'zlutoucky kun upel divoke ody' * 2
118121
strength = 256 # 99 rolls
@@ -208,7 +211,9 @@ def test_reset_reentry_disarms_entropy_ack(self):
208211
disarmed -- there is no second ceremony to leave armed. Both halves are
209212
asserted below: the refusal, and then the original property.
210213
"""
211-
self.requires_firmware("7.15.0")
214+
# 7.14.3: the bitcoin-only release line carries the same single-armed
215+
# ceremony and the dice backport; see test_reset_device_dice.
216+
self.requires_firmware("7.14.3")
212217
self.client.wipe_device()
213218

214219
# Arm a reset and walk away without acking the entropy request.

0 commit comments

Comments
 (0)