215 sats \ 2 replies \ @dash 22 Jun 2023 \ parent \ on: Does anyone know why Wallet Scrutiny can't reproduce Coldcard builds? bitcoin
I can use the docker to get SUCCESS just like in those videos but the build files do not hash to the same values as those files downloaded from the Coldcard website. Is there something I'm missing?
write
preview
209 sats \ 1 reply \ @dash 22 Jun 2023
I guess it's because I don't have the Coinkite key to sign the build. So, the docker process is masking out the signature part and verifying there is no diff other than that? Is there an explanation of this somewhere we can read? On the Coinkite site it says you can read docs/notes-on-repro.md but that file does not exist for me.
reply
209 sats \ 0 replies \ @dash 22 Jun 2023
What I find really strange is the file size of my build for 2023-06-19T1627-v4.1.8 is 722944 for the firmware-signed.dfu but the file downloaded from Coinkite is 753981 even though the result of make repro is SUCCESS
For the MK4 latest build I was able to confirm the file size was the same. The file size should be identical even if the hash is off (due to the signature difference), right?
reply