Release notes
- Bundle BitBox02 firmware version v9.18.0 and intermediate version v9.17.1
- Add support for BIP-85 derived child keys
- Preselect backup when there's only one backup available
- Show QR scanner video in fullscreen on mobile
- Android: fix file upload forms in MoonPay
- Replace the existing BIP69 lexicographical sorting of tx inputs/outputs with a randomized sorting approach
- Android: fix app crash after close and re-open
- Fix a bug that caused the exchange selection page to go blank if no region was selected
Verifying the release
Get a public key of security@shiftcrypto.ch with fingerprint DD09 E413 0975 0EBF AE0D EF63 5092 49B0 68D2 15AE:
curl https://bitbox.swiss/download/shiftcryptosec-509249B068D215AE.gpg.asc | gpg --import
Download the app for your platform and the corresponding .asc file and place them in the same folder.
We will verify the signature of the macOS release as an example. The other files are verified in the same way by replacing the filename.
To verify the signature, execute:
gpg --verify BitBox-4.42.0-macOS.zip.asc
You should see the following output:
gpg --verify BitBox-4.42.0-macOS.zip.asc
gpg: assuming signed data in 'BitBox-4.42.0-macOS.zip'
gpg: Signature made <DATE AND TIME>
gpg: using RSA key DD09E41309750EBFAE0DEF63509249B068D215AE
gpg: Good signature from "ShiftCrypto Security <security@shiftcrypto.ch>" [ultimate]
(The [ultimate] could say [unknown] or something else depending on your trust level.)