KeepKey Vault v1.5.3

Wallet creation becomes a security ceremony you can audit, device firmware is verified by hash instead of by version string, and Zcash stops mis-selecting its consensus branch.

What's New

• Creating a wallet is now a three-step ceremony. Randomness and dice are their own security steps rather than options buried in setup, each with its own window. A device that fails the randomness check cannot proceed to wallet creation — the gate is hard, not advisory.
• An RNG health test, offered before the wallet exists. It runs against the connected device and reports honestly: three-state results instead of pass/fail, adaptive chunking, a real ETA rather than a spinner, a linear-complexity check, and a sample-size slider from 64 KB to 8 MB. The reasoning behind each check is written up in the entropy-source design doc.
• On-device dice entropy when creating a wallet, for anyone who would rather not trust the device's generator alone.
• Device firmware is verified by hash. The check previously compared a version string, which any device can simply claim. The hash table is gated in CI so it cannot drift from the firmware that was actually released.
• Idle auto-lock defaults to an hour and is now configurable. It was previously fixed.
• Zcash and Hive support is derived from the connected firmware instead of settings toggles that could disagree with the device.

Bug Fixes

• Zcash picked its consensus branch ID from a hardcoded constant. That constant said NU6.2 and outlived Ironwood's activation, so transparent sends were signed against the wrong branch and rejected by the network. The branch is now selected by chain height.
• Zcash funds could be spent before they matured. Send and swap now apply the 10-confirmation maturity gate.
• The send screen showed the native balance where the gas cost belongs — users saw their entire balance presented as the fee.
• A working device could be routed to "set up your wallet" after a firmware update. Alarming, and wrong.
• The portfolio was lost on unplug, along with the dice flag on create.
• Real USDT on Gnosis was branded a scam by the spam heuristic. Token discovery pinned to 10.3.2.
• Empty chains read "No balance" instead of "0 BTC".
• The QR scanner overlay was off-centre at some window sizes; it is now portaled to body.
• Bitcoin change could be built on the wrong derivation path for Taproot accounts. BIP-86 reuses ordinary xpub version bytes, so resolving the script type from the key prefix answered p2pkh and put change at m/44'. Firmware refuses to treat such an output as change and shows it as an ordinary recipient — visible, but wrong. The account path's purpose now takes precedence over the key prefix.
• Signing calls used the 30-second read timeout rather than the signing timeout, in the SDK.
• Fee rates now fall back to GetFeeRate where the Pioneer client lacks the ByNetwork call.

Downloads

Platform	File	SHA-256
macOS (Apple Silicon)	KeepKey-Vault-1.5.3-arm64.dmg	0d795d3722e042d8b50006205979cafa2dbfda3e18545583d44ebcc79e1f55c1
macOS (Intel)	KeepKey-Vault-1.5.3-x86_64.dmg	860e19b05e4162a31e6b6f37833bedf28e34d885e0f0f1eb59115d4f87cddedf
Linux (AppImage)	KeepKey-Vault-x86_64.AppImage	d131fabf16069388fb12dcdbd7dd402f5f40b3c679f4fcb718463cf7830bf6ce
Linux (deb)	keepkey-vault_1.5.3_amd64.deb	232deaf9b3e975cfe6f24369d57584ddcab97f4666aaab2aed99cd37555aa647

To verify: shasum -a 256 <filename>

Both macOS DMGs are signed, notarized, and stapled.

Windows is published separately from the Windows build machine.