KeepKey Firmware v7.16.0

Verification

Source commit: 4f94a63b6632be48379c95465b3a9f4ae6e561bb (tag v7.16.0, on master)

v7.16.0 is the multi-coin release. Bitcoin-only devices stay on v7.14.3.

To verify this release

git clone https://github.com/keepkey/keepkey-firmware
cd keepkey-firmware
git checkout v7.16.0
git submodule update --init --recursive
./scripts/build/docker/device/release.sh
tail -c +257 bin/firmware.keepkey.bin | shasum -a 256

Expected hash: 95f5c15218b28dbbcf748127685d52f625e06bb79cd8caf6d553b55f38470dc1

See https://keepkey.com/blog/verifying_keepkey_firmware for full verification workflow.

Note: The build embeds the source commit in the firmware binary, so verification must check out the tag (which points to 4f94a63).

The attached binary is signed by firmware key slots 1, 2, 3 (3-of-5).

What's new

7.16.0 includes everything from the 7.15 line, which was not released separately.

• Typed data you can read: EIP-712 messages are streamed and reviewed field by field, including Permit2 approvals shown in plain words (who, what, until when).
• Contract descriptions: ERC-7730 descriptions explain contract calls, including Uniswap Universal Router swaps with their limits.
• Unlimited approvals and permits sign behind a clear UNLIMITED screen.
• Solana: richer review, lookup-table support, and large transactions sign under Advanced Mode while still requiring your key as a signer.
• Zcash shielded (Orchard) support.
• Passkeys (FIDO2).
• Binance Chain support retired.
• Certified clear-signing: the KeepKey ClearSign root is built in; certified reviews activate once KeepKey-issued certificates are published.

Known limitations: passkeys and U2F registrations made on 7.16 do not survive a wipe or a seed recovery onto another device.