Skip to content

docs(erc7730): require authenticated envelope replay #50

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
BitHighlander merged 1 commit into from
Sep 17, 2026
Merged

docs(erc7730): require authenticated envelope replay #50

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
8 changes: 8 additions & 0 deletions docs/erc7730-compiled-format.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -43,6 +43,14 @@ the exact canonical program. The delegate certificate binds that signature to
one chain and the compiled-in KeepKey root; the purpose prefix prevents replay
as v1-v4 ClearSign metadata.

On-demand offsets address this complete envelope, with offset zero at `K773`.
The definition id is SHA-256 of the complete envelope and does not make
individual ranges independently authentic. Firmware rereads an accepted
definition as a contiguous offset-zero stream, hashes and validates the full
envelope again, and stages bounded interpreter results until that replay has
matched the accepted definition id. No display result derived from replayed
bytes becomes authoritative before the final match.

## Canonical program header

The format-1 header is exactly 179 bytes.
Expand Down
12 changes: 10 additions & 2 deletions messages-ethereum.proto
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -420,7 +420,10 @@ message EthereumClearSignDefinitionAck {
* The lookup tuple is authenticated again from the returned definition; these
* fields select an entry but never grant trust. selector_or_type_hash is four
* bytes for calldata, 32 bytes for EIP-712, and omitted for token/network
* lookups.
* lookups. Offsets address the complete signed envelope, beginning at K773.
* A definition_id commits to the entire envelope, not independently
* authenticated ranges, so firmware verifies a contiguous offset-zero replay
* before consuming its program bytes for display.
* @next EthereumClearSignDefinitionChunk
* @next Failure
*/
Expand All @@ -435,7 +438,12 @@ message EthereumClearSignDefinitionRequest {
optional uint32 recursion_depth = 8;
}

/** Host response to an on-demand definition request. */
/**
* Host response to an on-demand definition request. Chunks are contiguous and
* offset is relative to the complete signed envelope. Program bytes remain
* untrusted until the complete replay hashes to definition_id and its catalog
* authentication verifies.
*/
message EthereumClearSignDefinitionChunk {
required bytes definition_id = 1;
required uint32 offset = 2;
Expand Down
Loading