requirements.txt

# BIP-352 silent payments. notTanveer's embit#145 branch, pinned to a commit rather
# than to the branch name so a force-push upstream cannot silently change what we
# build. Same fork-by-URL pattern as the pgpy pin below. Drop back to the PyPI
# release the day silent payments land in embit proper.
embit @ https://github.com/bitsagarob/embit/archive/a4ee5a41044a0ed3e2b1e92c89880a1ac2e9cb18.zip  # notTanveer's embit#145 silent payments + BIP-390 musig()
# BIP-353 on-device DNSSEC validation. Our fork of alvroble/pydnssec-prover, on a branch
# adding an optional libcrypto backend for ECDSA. Pinned to a commit for the same reason embit
# is: there is no release, upstream is a work in progress, and a force-push must not be able to
# change what we build. MUST MATCH seedsigner-os/opt/external-packages/python-pydnssec-prover,
# which is what actually ships; build.sh checks that the two agree.
pydnssec-prover @ https://github.com/bitsagarob/pydnssec-prover/archive/4a3365e4b10fc6635f26397120a2cce1b8fd8b2c.zip
Pillow>=10.4.0,<12  # ST7789.py converts to "BGR;16", which Pillow 12 removed
pyzbar @ https://github.com/seedsigner/pyzbar/archive/c3c237821c6a20b17953efe59b90df0b514a1c03.zip
qrcode==7.3.1
colorama==0.4.6 ; platform_system == "Windows"
urtypes @ https://github.com/selfcustody/urtypes/archive/7fb280eab3b3563dfc57d2733b0bf5cbc0a96a6a.zip
pycryptodomex==3.23.0
pgpy @ https://github.com/3rdIteration/PGPy/archive/7cdad000a76ced53c873211241d5ba20019a8488.zip  # v0.6.0 fork: cryptography primary backend, pycryptodomex/ecdsa/embit fallbacks
pyasn1==0.6.2
specter-card @ git+https://github.com/3rdIteration/specter-javacard.git@06dcde629cdc1057934b434afc46d822c2d2425d#subdirectory=py
pygp @ https://github.com/3rdIteration/pygp/archive/e316f6b427b7d1020cf24d082f28bd7be7d3874c.zip
# tag 0.6a, byte-identical to Toporin/pysatochip master. Must match
# seedsigner-os/opt/external-packages/python-pysatochip, which is what actually ships.
# The PyPI release (pysatochip==0.17.0) predates master and lacks both secret type
# 0xC1 'Descriptor' and card_get_ndef_v2(), which smartcard_views.py calls.
pysatochip @ https://github.com/3rdIteration/pysatochip/archive/d77e311e0cd39193c9b2c03a1ab5f69421b8f4d5.zip
ndeflib==0.3.3
pyscard==2.3.1
ecdsa==0.19.1
pyaes==1.6.1
cryptography==45.0.5
pyopenssl==25.1.0
typing_extensions==4.14.1
certifi==2025.7.14
six==1.17.0
cffi==1.17.1
pycparser==2.22
smbus2==0.4.3 ; platform_system != "Windows"
shamir-mnemonic==0.3.0