The user-side upgrade process verifies that the firmware checksums match.
The actual cryptographic verification (i.e. "this firmware is official") is done by the Coldcard bootloader during the install process, since you should never trust the computer anyway.
alfred / Alfred Hodler
npub1ty…f0yql
2024-05-24 01:11:12
in reply to nevent1q…6quk
Author Public Key
npub1tyvmpfftrnj7kdg26snpzlu6qvtv0w3arw7zxw6v94j0h9va4yaqcf0yqlPublished at
2024-05-24 01:11:12Event JSON
{
"id": "a67cd9745cd426457f580a4e6e78a9156530c62d50fd2d1d82df2545f17a955e",
"pubkey": "5919b0a52b1ce5eb350ad426117f9a0316c7ba3d1bbc233b4c2d64fb959da93a",
"created_at": 1716513072,
"kind": 1,
"tags": [
[
"e",
"b1ea4599d4b063b284a7182b5c5b66efa9c9f78d40845ead3844f9420468f2e9",
"wss://relay.damus.io",
"root"
],
[
"e",
"b175cfce200a61240ecda970bd5e9c79003b3571b1571f97caed0284b490b429",
"",
"reply"
],
[
"p",
"273d77da30025faa363e40b61155afc83d9bf76b77a937c23357f3fd92f85aca"
]
],
"content": "The user-side upgrade process verifies that the firmware checksums match.\n\nThe actual cryptographic verification (i.e. \"this firmware is official\") is done by the Coldcard bootloader during the install process, since you should never trust the computer anyway.",
"sig": "3d4f4ce014537db7da71b5a1114c90cae75d21823a6932c7f7f3fc96b8295c100a66f1cf7697facd3a0a5b212257a0257c525ede51d1ee82b8ccfb2447b23916"
}