Release notes
- Bundle BitBox02 Bitcoin-only firmware version 9.12.0
- Bundle BitBox02 Multi firmware version 9.12.0
- The Windows installer now asks the user to close a running instance of the BitBoxApp instead of forcefully stopping it
- Ethereum: reduce Etherscan polling interval from one minute to five minutes
Verifying the release
Get a public key of security@shiftcrypto.ch with fingerprint DD09 E413 0975 0EBF AE0D EF63 5092 49B0 68D2 15AE:
curl 'https://keys.openpgp.org/vks/v1/by-fingerprint/DD09E41309750EBFAE0DEF63509249B068D215AE' | gpg --import
Download the app for your platform and the corresponding .asc file and place them in the same folder.
We will verify the signature of the macOS release as an example. The other files are verified in the same way by replacing the filename.
To verify the signature, execute:
gpg --verify BitBox-4.34.0-macOS.zip.asc
You should see the following output:
gpg --verify BitBox-4.34.0-macOS.zip.asc
gpg: assuming signed data in 'BitBox-4.34.0-macOS.zip'
gpg: Signature made <DATE AND TIME>
gpg: using RSA key 1AA62C17C56D4275A54123209CD5646C0AD5161E
gpg: Good signature from "ShiftCrypto Security <security@shiftcrypto.ch>" [ultimate]
(The [ultimate] could say [unknown] or something else depending on your trust level.)