From 72e26947c341ecdfcec3ed68dfad41469d4c6f1f Mon Sep 17 00:00:00 2001
From: Alexandre Paillier <alexandre.paillier@ledger.fr>
Date: Fri, 8 Mar 2024 14:36:10 +0100
Subject: [PATCH 1/5] Fix blind-signing TX refusal

Would refuse the APDU but then start a empty signature flow on the device
Which would crash the device when accepted or rejected
---
 src_features/signTx/logic_signTx.c | 24 +++++++++++++-----------
 1 file changed, 13 insertions(+), 11 deletions(-)

diff --git a/src_features/signTx/logic_signTx.c b/src_features/signTx/logic_signTx.c
index b1ca0654a..bdacd7684 100644
--- a/src_features/signTx/logic_signTx.c
+++ b/src_features/signTx/logic_signTx.c
@@ -316,15 +316,13 @@ static int strcasecmp_workaround(const char *str1, const char *str2) {
     return 0;
 }
 
-__attribute__((noinline)) static void finalize_parsing_helper(bool direct, bool *use_standard_UI) {
+__attribute__((noinline)) static bool finalize_parsing_helper(bool direct, bool *use_standard_UI) {
     char displayBuffer[50];
     uint8_t decimals = WEI_TO_ETHER;
     uint64_t chain_id = get_tx_chain_id();
     const char *ticker = get_displayable_ticker(&chain_id, chainConfig);
     ethPluginFinalize_t pluginFinalize;
 
-    *use_standard_UI = true;
-
     // Verify the chain
     if (chainConfig->chainId != ETHEREUM_MAINNET_CHAINID) {
         uint64_t id = get_tx_chain_id();
@@ -334,7 +332,7 @@ __attribute__((noinline)) static void finalize_parsing_helper(bool direct, bool
             reset_app_context();
             reportFinalizeError(direct);
             if (!direct) {
-                return;
+                return false;
             }
         }
     }
@@ -358,7 +356,7 @@ __attribute__((noinline)) static void finalize_parsing_helper(bool direct, bool
             PRINTF("Plugin finalize call failed\n");
             reportFinalizeError(direct);
             if (!direct) {
-                return;
+                return false;
             }
         }
         // Lookup tokens if requested
@@ -384,7 +382,7 @@ __attribute__((noinline)) static void finalize_parsing_helper(bool direct, bool
                 PRINTF("Plugin provide token call failed\n");
                 reportFinalizeError(direct);
                 if (!direct) {
-                    return;
+                    return false;
                 }
             }
             pluginFinalize.result = pluginProvideInfo.result;
@@ -409,7 +407,7 @@ __attribute__((noinline)) static void finalize_parsing_helper(bool direct, bool
                         PRINTF("Incorrect amount/address set by plugin\n");
                         reportFinalizeError(direct);
                         if (!direct) {
-                            return;
+                            return false;
                         }
                     }
                     memmove(tmpContent.txContent.value.value, pluginFinalize.amount, 32);
@@ -425,7 +423,7 @@ __attribute__((noinline)) static void finalize_parsing_helper(bool direct, bool
                     PRINTF("ui type %d not supported\n", pluginFinalize.uiType);
                     reportFinalizeError(direct);
                     if (!direct) {
-                        return;
+                        return false;
                     }
             }
         }
@@ -450,7 +448,7 @@ __attribute__((noinline)) static void finalize_parsing_helper(bool direct, bool
         reportFinalizeError(direct);
         ui_warning_contract_data();
         if (!direct) {
-            return;
+            return false;
         }
     }
 
@@ -530,12 +528,16 @@ __attribute__((noinline)) static void finalize_parsing_helper(bool direct, bool
     // Prepare network field
     get_network_as_string(strings.common.network_name, sizeof(strings.common.network_name));
     PRINTF("Network: %s\n", strings.common.network_name);
+    return true;
 }
 
 void finalizeParsing(bool direct) {
-    bool use_standard_UI;
+    bool use_standard_UI = true;
     bool no_consent_check;
-    finalize_parsing_helper(direct, &use_standard_UI);
+
+    if (!finalize_parsing_helper(direct, &use_standard_UI)) {
+        return;
+    }
     // If called from swap, the user has already validated a standard transaction
     // And we have already checked the fields of this transaction above
     no_consent_check = G_called_from_swap && use_standard_UI;

From 5715827addbbe98e5d71772949c24febf43be8b0 Mon Sep 17 00:00:00 2001
From: Alexandre Paillier <alexandre.paillier@ledger.fr>
Date: Fri, 8 Mar 2024 17:39:18 +0100
Subject: [PATCH 2/5] New basic signature (+ verification) ragger tests

---
 tests/ragger/test_sign.py | 67 +++++++++++++++++++++++++++++++++++++++
 1 file changed, 67 insertions(+)
 create mode 100644 tests/ragger/test_sign.py

diff --git a/tests/ragger/test_sign.py b/tests/ragger/test_sign.py
new file mode 100644
index 000000000..401be19a0
--- /dev/null
+++ b/tests/ragger/test_sign.py
@@ -0,0 +1,67 @@
+from ragger.backend import BackendInterface
+from ragger.firmware import Firmware
+from ragger.navigator import Navigator, NavInsID
+from ledger_app_clients.ethereum.client import EthAppClient
+import ledger_app_clients.ethereum.response_parser as ResponseParser
+from ledger_app_clients.ethereum.utils import recover_transaction
+from web3 import Web3
+
+
+# Values used across all tests
+CHAIN_ID = 1
+ADDR = bytes.fromhex("0011223344556677889900112233445566778899")
+BIP32_PATH = "m/44'/60'/0'/0/0"
+NONCE = 21
+GAS_PRICE = 13
+GAS_LIMIT = 21000
+AMOUNT = 1.22
+
+
+def common(fw: Firmware,
+           back: BackendInterface,
+           nav: Navigator,
+           tx_params: dict):
+    app_client = EthAppClient(back)
+
+    with app_client.get_public_addr(display=False):
+        pass
+    _, DEVICE_ADDR, _ = ResponseParser.pk_addr(app_client.response().data)
+
+    with app_client.sign(BIP32_PATH, tx_params):
+        if fw.device.startswith("nano"):
+            next_action = NavInsID.RIGHT_CLICK
+            confirm_action = NavInsID.BOTH_CLICK
+            end_text = "Accept"
+        else:
+            next_action = NavInsID.USE_CASE_REVIEW_TAP
+            confirm_action = NavInsID.USE_CASE_REVIEW_CONFIRM
+            end_text = "Sign"
+        nav.navigate_until_text(next_action, [confirm_action], end_text)
+
+    # verify signature
+    vrs = ResponseParser.signature(app_client.response().data)
+    addr = recover_transaction(tx_params, vrs)
+    assert addr == DEVICE_ADDR
+
+
+def test_legacy(firmware: Firmware, backend: BackendInterface, navigator: Navigator):
+    common(firmware, backend, navigator, {
+        "nonce": NONCE,
+        "gasPrice": Web3.to_wei(GAS_PRICE, "gwei"),
+        "gas": GAS_LIMIT,
+        "to": ADDR,
+        "value": Web3.to_wei(AMOUNT, "ether"),
+        "chainId": CHAIN_ID
+    })
+
+
+def test_1559(firmware: Firmware, backend: BackendInterface, navigator: Navigator):
+    common(firmware, backend, navigator, {
+        "nonce": NONCE,
+        "maxFeePerGas": Web3.to_wei(145, "gwei"),
+        "maxPriorityFeePerGas": Web3.to_wei(1.5, "gwei"),
+        "gas": GAS_LIMIT,
+        "to": ADDR,
+        "value": Web3.to_wei(AMOUNT, "ether"),
+        "chainId": CHAIN_ID
+    })

From 6414890b2f3516c15632cd0a4c3b955e85f8e701 Mon Sep 17 00:00:00 2001
From: Alexandre Paillier <alexandre.paillier@ledger.fr>
Date: Fri, 8 Mar 2024 18:00:28 +0100
Subject: [PATCH 3/5] Added ERC-20 ABI & fixed indentation on other ABIs

---
 tests/ragger/abis/erc1155.json | 548 ++++++++++++++++-----------------
 tests/ragger/abis/erc20.json   | 135 ++++++++
 tests/ragger/abis/erc721.json  | 532 ++++++++++++++++----------------
 3 files changed, 675 insertions(+), 540 deletions(-)
 create mode 100644 tests/ragger/abis/erc20.json

diff --git a/tests/ragger/abis/erc1155.json b/tests/ragger/abis/erc1155.json
index 3c53ad8c2..6f8e6ab25 100644
--- a/tests/ragger/abis/erc1155.json
+++ b/tests/ragger/abis/erc1155.json
@@ -1,276 +1,276 @@
 [
-   {
-      "anonymous" : false,
-      "inputs" : [
-         {
-            "indexed" : true,
-            "internalType" : "address",
-            "name" : "_owner",
-            "type" : "address"
-         },
-         {
-            "indexed" : true,
-            "internalType" : "address",
-            "name" : "_operator",
-            "type" : "address"
-         },
-         {
-            "indexed" : false,
-            "internalType" : "bool",
-            "name" : "_approved",
-            "type" : "bool"
-         }
-      ],
-      "name" : "ApprovalForAll",
-      "type" : "event"
-   },
-   {
-      "anonymous" : false,
-      "inputs" : [
-         {
-            "indexed" : true,
-            "internalType" : "address",
-            "name" : "_operator",
-            "type" : "address"
-         },
-         {
-            "indexed" : true,
-            "internalType" : "address",
-            "name" : "_from",
-            "type" : "address"
-         },
-         {
-            "indexed" : true,
-            "internalType" : "address",
-            "name" : "_to",
-            "type" : "address"
-         },
-         {
-            "indexed" : false,
-            "internalType" : "uint256[]",
-            "name" : "_ids",
-            "type" : "uint256[]"
-         },
-         {
-            "indexed" : false,
-            "internalType" : "uint256[]",
-            "name" : "_values",
-            "type" : "uint256[]"
-         }
-      ],
-      "name" : "TransferBatch",
-      "type" : "event"
-   },
-   {
-      "anonymous" : false,
-      "inputs" : [
-         {
-            "indexed" : true,
-            "internalType" : "address",
-            "name" : "_operator",
-            "type" : "address"
-         },
-         {
-            "indexed" : true,
-            "internalType" : "address",
-            "name" : "_from",
-            "type" : "address"
-         },
-         {
-            "indexed" : true,
-            "internalType" : "address",
-            "name" : "_to",
-            "type" : "address"
-         },
-         {
-            "indexed" : false,
-            "internalType" : "uint256",
-            "name" : "_id",
-            "type" : "uint256"
-         },
-         {
-            "indexed" : false,
-            "internalType" : "uint256",
-            "name" : "_value",
-            "type" : "uint256"
-         }
-      ],
-      "name" : "TransferSingle",
-      "type" : "event"
-   },
-   {
-      "anonymous" : false,
-      "inputs" : [
-         {
-            "indexed" : false,
-            "internalType" : "string",
-            "name" : "_value",
-            "type" : "string"
-         },
-         {
-            "indexed" : true,
-            "internalType" : "uint256",
-            "name" : "_id",
-            "type" : "uint256"
-         }
-      ],
-      "name" : "URI",
-      "type" : "event"
-   },
-   {
-      "inputs" : [
-         {
-            "internalType" : "address",
-            "name" : "_owner",
-            "type" : "address"
-         },
-         {
-            "internalType" : "uint256",
-            "name" : "_id",
-            "type" : "uint256"
-         }
-      ],
-      "name" : "balanceOf",
-      "outputs" : [
-         {
-            "internalType" : "uint256",
-            "name" : "",
-            "type" : "uint256"
-         }
-      ],
-      "stateMutability" : "view",
-      "type" : "function"
-   },
-   {
-      "inputs" : [
-         {
-            "internalType" : "address[]",
-            "name" : "_owners",
-            "type" : "address[]"
-         },
-         {
-            "internalType" : "uint256[]",
-            "name" : "_ids",
-            "type" : "uint256[]"
-         }
-      ],
-      "name" : "balanceOfBatch",
-      "outputs" : [
-         {
-            "internalType" : "uint256[]",
-            "name" : "",
-            "type" : "uint256[]"
-         }
-      ],
-      "stateMutability" : "view",
-      "type" : "function"
-   },
-   {
-      "inputs" : [
-         {
-            "internalType" : "address",
-            "name" : "_owner",
-            "type" : "address"
-         },
-         {
-            "internalType" : "address",
-            "name" : "_operator",
-            "type" : "address"
-         }
-      ],
-      "name" : "isApprovedForAll",
-      "outputs" : [
-         {
-            "internalType" : "bool",
-            "name" : "",
-            "type" : "bool"
-         }
-      ],
-      "stateMutability" : "view",
-      "type" : "function"
-   },
-   {
-      "inputs" : [
-         {
-            "internalType" : "address",
-            "name" : "_from",
-            "type" : "address"
-         },
-         {
-            "internalType" : "address",
-            "name" : "_to",
-            "type" : "address"
-         },
-         {
-            "internalType" : "uint256[]",
-            "name" : "_ids",
-            "type" : "uint256[]"
-         },
-         {
-            "internalType" : "uint256[]",
-            "name" : "_values",
-            "type" : "uint256[]"
-         },
-         {
-            "internalType" : "bytes",
-            "name" : "_data",
-            "type" : "bytes"
-         }
-      ],
-      "name" : "safeBatchTransferFrom",
-      "outputs" : [],
-      "stateMutability" : "nonpayable",
-      "type" : "function"
-   },
-   {
-      "inputs" : [
-         {
-            "internalType" : "address",
-            "name" : "_from",
-            "type" : "address"
-         },
-         {
-            "internalType" : "address",
-            "name" : "_to",
-            "type" : "address"
-         },
-         {
-            "internalType" : "uint256",
-            "name" : "_id",
-            "type" : "uint256"
-         },
-         {
-            "internalType" : "uint256",
-            "name" : "_value",
-            "type" : "uint256"
-         },
-         {
-            "internalType" : "bytes",
-            "name" : "_data",
-            "type" : "bytes"
-         }
-      ],
-      "name" : "safeTransferFrom",
-      "outputs" : [],
-      "stateMutability" : "nonpayable",
-      "type" : "function"
-   },
-   {
-      "inputs" : [
-         {
-            "internalType" : "address",
-            "name" : "_operator",
-            "type" : "address"
-         },
-         {
-            "internalType" : "bool",
-            "name" : "_approved",
-            "type" : "bool"
-         }
-      ],
-      "name" : "setApprovalForAll",
-      "outputs" : [],
-      "stateMutability" : "nonpayable",
-      "type" : "function"
-   }
+    {
+        "anonymous" : false,
+        "inputs" : [
+            {
+                "indexed" : true,
+                "internalType" : "address",
+                "name" : "_owner",
+                "type" : "address"
+            },
+            {
+                "indexed" : true,
+                "internalType" : "address",
+                "name" : "_operator",
+                "type" : "address"
+            },
+            {
+                "indexed" : false,
+                "internalType" : "bool",
+                "name" : "_approved",
+                "type" : "bool"
+            }
+        ],
+        "name" : "ApprovalForAll",
+        "type" : "event"
+    },
+    {
+        "anonymous" : false,
+        "inputs" : [
+            {
+                "indexed" : true,
+                "internalType" : "address",
+                "name" : "_operator",
+                "type" : "address"
+            },
+            {
+                "indexed" : true,
+                "internalType" : "address",
+                "name" : "_from",
+                "type" : "address"
+            },
+            {
+                "indexed" : true,
+                "internalType" : "address",
+                "name" : "_to",
+                "type" : "address"
+            },
+            {
+                "indexed" : false,
+                "internalType" : "uint256[]",
+                "name" : "_ids",
+                "type" : "uint256[]"
+            },
+            {
+                "indexed" : false,
+                "internalType" : "uint256[]",
+                "name" : "_values",
+                "type" : "uint256[]"
+            }
+        ],
+        "name" : "TransferBatch",
+        "type" : "event"
+    },
+    {
+        "anonymous" : false,
+        "inputs" : [
+            {
+                "indexed" : true,
+                "internalType" : "address",
+                "name" : "_operator",
+                "type" : "address"
+            },
+            {
+                "indexed" : true,
+                "internalType" : "address",
+                "name" : "_from",
+                "type" : "address"
+            },
+            {
+                "indexed" : true,
+                "internalType" : "address",
+                "name" : "_to",
+                "type" : "address"
+            },
+            {
+                "indexed" : false,
+                "internalType" : "uint256",
+                "name" : "_id",
+                "type" : "uint256"
+            },
+            {
+                "indexed" : false,
+                "internalType" : "uint256",
+                "name" : "_value",
+                "type" : "uint256"
+            }
+        ],
+        "name" : "TransferSingle",
+        "type" : "event"
+    },
+    {
+        "anonymous" : false,
+        "inputs" : [
+            {
+                "indexed" : false,
+                "internalType" : "string",
+                "name" : "_value",
+                "type" : "string"
+            },
+            {
+                "indexed" : true,
+                "internalType" : "uint256",
+                "name" : "_id",
+                "type" : "uint256"
+            }
+        ],
+        "name" : "URI",
+        "type" : "event"
+    },
+    {
+        "inputs" : [
+            {
+                "internalType" : "address",
+                "name" : "_owner",
+                "type" : "address"
+            },
+            {
+                "internalType" : "uint256",
+                "name" : "_id",
+                "type" : "uint256"
+            }
+        ],
+        "name" : "balanceOf",
+        "outputs" : [
+            {
+                "internalType" : "uint256",
+                "name" : "",
+                "type" : "uint256"
+            }
+        ],
+        "stateMutability" : "view",
+        "type" : "function"
+    },
+    {
+        "inputs" : [
+            {
+                "internalType" : "address[]",
+                "name" : "_owners",
+                "type" : "address[]"
+            },
+            {
+                "internalType" : "uint256[]",
+                "name" : "_ids",
+                "type" : "uint256[]"
+            }
+        ],
+        "name" : "balanceOfBatch",
+        "outputs" : [
+            {
+                "internalType" : "uint256[]",
+                "name" : "",
+                "type" : "uint256[]"
+            }
+        ],
+        "stateMutability" : "view",
+        "type" : "function"
+    },
+    {
+        "inputs" : [
+            {
+                "internalType" : "address",
+                "name" : "_owner",
+                "type" : "address"
+            },
+            {
+                "internalType" : "address",
+                "name" : "_operator",
+                "type" : "address"
+            }
+        ],
+        "name" : "isApprovedForAll",
+        "outputs" : [
+            {
+                "internalType" : "bool",
+                "name" : "",
+                "type" : "bool"
+            }
+        ],
+        "stateMutability" : "view",
+        "type" : "function"
+    },
+    {
+        "inputs" : [
+            {
+                "internalType" : "address",
+                "name" : "_from",
+                "type" : "address"
+            },
+            {
+                "internalType" : "address",
+                "name" : "_to",
+                "type" : "address"
+            },
+            {
+                "internalType" : "uint256[]",
+                "name" : "_ids",
+                "type" : "uint256[]"
+            },
+            {
+                "internalType" : "uint256[]",
+                "name" : "_values",
+                "type" : "uint256[]"
+            },
+            {
+                "internalType" : "bytes",
+                "name" : "_data",
+                "type" : "bytes"
+            }
+        ],
+        "name" : "safeBatchTransferFrom",
+        "outputs" : [],
+        "stateMutability" : "nonpayable",
+        "type" : "function"
+    },
+    {
+        "inputs" : [
+            {
+                "internalType" : "address",
+                "name" : "_from",
+                "type" : "address"
+            },
+            {
+                "internalType" : "address",
+                "name" : "_to",
+                "type" : "address"
+            },
+            {
+                "internalType" : "uint256",
+                "name" : "_id",
+                "type" : "uint256"
+            },
+            {
+                "internalType" : "uint256",
+                "name" : "_value",
+                "type" : "uint256"
+            },
+            {
+                "internalType" : "bytes",
+                "name" : "_data",
+                "type" : "bytes"
+            }
+        ],
+        "name" : "safeTransferFrom",
+        "outputs" : [],
+        "stateMutability" : "nonpayable",
+        "type" : "function"
+    },
+    {
+        "inputs" : [
+            {
+                "internalType" : "address",
+                "name" : "_operator",
+                "type" : "address"
+            },
+            {
+                "internalType" : "bool",
+                "name" : "_approved",
+                "type" : "bool"
+            }
+        ],
+        "name" : "setApprovalForAll",
+        "outputs" : [],
+        "stateMutability" : "nonpayable",
+        "type" : "function"
+    }
 ]
diff --git a/tests/ragger/abis/erc20.json b/tests/ragger/abis/erc20.json
new file mode 100644
index 000000000..301b94656
--- /dev/null
+++ b/tests/ragger/abis/erc20.json
@@ -0,0 +1,135 @@
+[
+    {
+        "inputs" : [
+            {
+                "internalType" : "address",
+                "name" : "_owner",
+                "type" : "address"
+            },
+            {
+                "internalType" : "address",
+                "name" : "_spender",
+                "type" : "address"
+            }
+        ],
+        "name" : "allowance",
+        "outputs" : [
+            {
+                "internalType" : "uint256",
+                "name" : "remaining",
+                "type" : "uint256"
+            }
+        ],
+        "stateMutability" : "view",
+        "type" : "function"
+    },
+    {
+        "inputs" : [
+            {
+                "internalType" : "address",
+                "name" : "_spender",
+                "type" : "address"
+            },
+            {
+                "internalType" : "uint256",
+                "name" : "_value",
+                "type" : "uint256"
+            }
+        ],
+        "name" : "approve",
+        "outputs" : [
+            {
+                "internalType" : "bool",
+                "name" : "success",
+                "type" : "bool"
+            }
+        ],
+        "stateMutability" : "nonpayable",
+        "type" : "function"
+    },
+    {
+        "inputs" : [
+            {
+                "internalType" : "address",
+                "name" : "_owner",
+                "type" : "address"
+            }
+        ],
+        "name" : "balanceOf",
+        "outputs" : [
+            {
+                "internalType" : "uint256",
+                "name" : "balance",
+                "type" : "uint256"
+            }
+        ],
+        "stateMutability" : "view",
+        "type" : "function"
+    },
+    {
+        "inputs" : [],
+        "name" : "totalSupply",
+        "outputs" : [
+            {
+                "internalType" : "uint256",
+                "name" : "",
+                "type" : "uint256"
+            }
+        ],
+        "stateMutability" : "view",
+        "type" : "function"
+    },
+    {
+        "inputs" : [
+            {
+                "internalType" : "address",
+                "name" : "_to",
+                "type" : "address"
+            },
+            {
+                "internalType" : "uint256",
+                "name" : "_value",
+                "type" : "uint256"
+            }
+        ],
+        "name" : "transfer",
+        "outputs" : [
+            {
+                "internalType" : "bool",
+                "name" : "success",
+                "type" : "bool"
+            }
+        ],
+        "stateMutability" : "nonpayable",
+        "type" : "function"
+    },
+    {
+        "inputs" : [
+            {
+                "internalType" : "address",
+                "name" : "_from",
+                "type" : "address"
+            },
+            {
+                "internalType" : "address",
+                "name" : "_to",
+                "type" : "address"
+            },
+            {
+                "internalType" : "uint256",
+                "name" : "_value",
+                "type" : "uint256"
+            }
+        ],
+        "name" : "transferFrom",
+        "outputs" : [
+            {
+                "internalType" : "bool",
+                "name" : "success",
+                "type" : "bool"
+            }
+        ],
+        "stateMutability" : "nonpayable",
+        "type" : "function"
+    }
+]
diff --git a/tests/ragger/abis/erc721.json b/tests/ragger/abis/erc721.json
index e00d5ca3f..b6f583563 100644
--- a/tests/ragger/abis/erc721.json
+++ b/tests/ragger/abis/erc721.json
@@ -1,268 +1,268 @@
 [
-   {
-      "anonymous" : false,
-      "inputs" : [
-         {
-            "indexed" : true,
-            "internalType" : "address",
-            "name" : "_owner",
-            "type" : "address"
-         },
-         {
-            "indexed" : true,
-            "internalType" : "address",
-            "name" : "_approved",
-            "type" : "address"
-         },
-         {
-            "indexed" : true,
-            "internalType" : "uint256",
-            "name" : "_tokenId",
-            "type" : "uint256"
-         }
-      ],
-      "name" : "Approval",
-      "type" : "event"
-   },
-   {
-      "anonymous" : false,
-      "inputs" : [
-         {
-            "indexed" : true,
-            "internalType" : "address",
-            "name" : "_owner",
-            "type" : "address"
-         },
-         {
-            "indexed" : true,
-            "internalType" : "address",
-            "name" : "_operator",
-            "type" : "address"
-         },
-         {
-            "indexed" : false,
-            "internalType" : "bool",
-            "name" : "_approved",
-            "type" : "bool"
-         }
-      ],
-      "name" : "ApprovalForAll",
-      "type" : "event"
-   },
-   {
-      "anonymous" : false,
-      "inputs" : [
-         {
-            "indexed" : true,
-            "internalType" : "address",
-            "name" : "_from",
-            "type" : "address"
-         },
-         {
-            "indexed" : true,
-            "internalType" : "address",
-            "name" : "_to",
-            "type" : "address"
-         },
-         {
-            "indexed" : true,
-            "internalType" : "uint256",
-            "name" : "_tokenId",
-            "type" : "uint256"
-         }
-      ],
-      "name" : "Transfer",
-      "type" : "event"
-   },
-   {
-      "inputs" : [
-         {
-            "internalType" : "address",
-            "name" : "_approved",
-            "type" : "address"
-         },
-         {
-            "internalType" : "uint256",
-            "name" : "_tokenId",
-            "type" : "uint256"
-         }
-      ],
-      "name" : "approve",
-      "outputs" : [],
-      "stateMutability" : "payable",
-      "type" : "function"
-   },
-   {
-      "inputs" : [
-         {
-            "internalType" : "address",
-            "name" : "_owner",
-            "type" : "address"
-         }
-      ],
-      "name" : "balanceOf",
-      "outputs" : [
-         {
-            "internalType" : "uint256",
-            "name" : "",
-            "type" : "uint256"
-         }
-      ],
-      "stateMutability" : "view",
-      "type" : "function"
-   },
-   {
-      "inputs" : [
-         {
-            "internalType" : "uint256",
-            "name" : "_tokenId",
-            "type" : "uint256"
-         }
-      ],
-      "name" : "getApproved",
-      "outputs" : [
-         {
-            "internalType" : "address",
-            "name" : "",
-            "type" : "address"
-         }
-      ],
-      "stateMutability" : "view",
-      "type" : "function"
-   },
-   {
-      "inputs" : [
-         {
-            "internalType" : "address",
-            "name" : "_owner",
-            "type" : "address"
-         },
-         {
-            "internalType" : "address",
-            "name" : "_operator",
-            "type" : "address"
-         }
-      ],
-      "name" : "isApprovedForAll",
-      "outputs" : [
-         {
-            "internalType" : "bool",
-            "name" : "",
-            "type" : "bool"
-         }
-      ],
-      "stateMutability" : "view",
-      "type" : "function"
-   },
-   {
-      "inputs" : [
-         {
-            "internalType" : "uint256",
-            "name" : "_tokenId",
-            "type" : "uint256"
-         }
-      ],
-      "name" : "ownerOf",
-      "outputs" : [
-         {
-            "internalType" : "address",
-            "name" : "",
-            "type" : "address"
-         }
-      ],
-      "stateMutability" : "view",
-      "type" : "function"
-   },
-   {
-      "inputs" : [
-         {
-            "internalType" : "address",
-            "name" : "_from",
-            "type" : "address"
-         },
-         {
-            "internalType" : "address",
-            "name" : "_to",
-            "type" : "address"
-         },
-         {
-            "internalType" : "uint256",
-            "name" : "_tokenId",
-            "type" : "uint256"
-         }
-      ],
-      "name" : "safeTransferFrom",
-      "outputs" : [],
-      "stateMutability" : "payable",
-      "type" : "function"
-   },
-   {
-      "inputs" : [
-         {
-            "internalType" : "address",
-            "name" : "_from",
-            "type" : "address"
-         },
-         {
-            "internalType" : "address",
-            "name" : "_to",
-            "type" : "address"
-         },
-         {
-            "internalType" : "uint256",
-            "name" : "_tokenId",
-            "type" : "uint256"
-         },
-         {
-            "internalType" : "bytes",
-            "name" : "data",
-            "type" : "bytes"
-         }
-      ],
-      "name" : "safeTransferFrom",
-      "outputs" : [],
-      "stateMutability" : "payable",
-      "type" : "function"
-   },
-   {
-      "inputs" : [
-         {
-            "internalType" : "address",
-            "name" : "_operator",
-            "type" : "address"
-         },
-         {
-            "internalType" : "bool",
-            "name" : "_approved",
-            "type" : "bool"
-         }
-      ],
-      "name" : "setApprovalForAll",
-      "outputs" : [],
-      "stateMutability" : "nonpayable",
-      "type" : "function"
-   },
-   {
-      "inputs" : [
-         {
-            "internalType" : "address",
-            "name" : "_from",
-            "type" : "address"
-         },
-         {
-            "internalType" : "address",
-            "name" : "_to",
-            "type" : "address"
-         },
-         {
-            "internalType" : "uint256",
-            "name" : "_tokenId",
-            "type" : "uint256"
-         }
-      ],
-      "name" : "transferFrom",
-      "outputs" : [],
-      "stateMutability" : "payable",
-      "type" : "function"
-   }
+    {
+        "anonymous" : false,
+        "inputs" : [
+            {
+                "indexed" : true,
+                "internalType" : "address",
+                "name" : "_owner",
+                "type" : "address"
+            },
+            {
+                "indexed" : true,
+                "internalType" : "address",
+                "name" : "_approved",
+                "type" : "address"
+            },
+            {
+                "indexed" : true,
+                "internalType" : "uint256",
+                "name" : "_tokenId",
+                "type" : "uint256"
+            }
+        ],
+        "name" : "Approval",
+        "type" : "event"
+    },
+    {
+        "anonymous" : false,
+        "inputs" : [
+            {
+                "indexed" : true,
+                "internalType" : "address",
+                "name" : "_owner",
+                "type" : "address"
+            },
+            {
+                "indexed" : true,
+                "internalType" : "address",
+                "name" : "_operator",
+                "type" : "address"
+            },
+            {
+                "indexed" : false,
+                "internalType" : "bool",
+                "name" : "_approved",
+                "type" : "bool"
+            }
+        ],
+        "name" : "ApprovalForAll",
+        "type" : "event"
+    },
+    {
+        "anonymous" : false,
+        "inputs" : [
+            {
+                "indexed" : true,
+                "internalType" : "address",
+                "name" : "_from",
+                "type" : "address"
+            },
+            {
+                "indexed" : true,
+                "internalType" : "address",
+                "name" : "_to",
+                "type" : "address"
+            },
+            {
+                "indexed" : true,
+                "internalType" : "uint256",
+                "name" : "_tokenId",
+                "type" : "uint256"
+            }
+        ],
+        "name" : "Transfer",
+        "type" : "event"
+    },
+    {
+        "inputs" : [
+            {
+                "internalType" : "address",
+                "name" : "_approved",
+                "type" : "address"
+            },
+            {
+                "internalType" : "uint256",
+                "name" : "_tokenId",
+                "type" : "uint256"
+            }
+        ],
+        "name" : "approve",
+        "outputs" : [],
+        "stateMutability" : "payable",
+        "type" : "function"
+    },
+    {
+        "inputs" : [
+            {
+                "internalType" : "address",
+                "name" : "_owner",
+                "type" : "address"
+            }
+        ],
+        "name" : "balanceOf",
+        "outputs" : [
+            {
+                "internalType" : "uint256",
+                "name" : "",
+                "type" : "uint256"
+            }
+        ],
+        "stateMutability" : "view",
+        "type" : "function"
+    },
+    {
+        "inputs" : [
+            {
+                "internalType" : "uint256",
+                "name" : "_tokenId",
+                "type" : "uint256"
+            }
+        ],
+        "name" : "getApproved",
+        "outputs" : [
+            {
+                "internalType" : "address",
+                "name" : "",
+                "type" : "address"
+            }
+        ],
+        "stateMutability" : "view",
+        "type" : "function"
+    },
+    {
+        "inputs" : [
+            {
+                "internalType" : "address",
+                "name" : "_owner",
+                "type" : "address"
+            },
+            {
+                "internalType" : "address",
+                "name" : "_operator",
+                "type" : "address"
+            }
+        ],
+        "name" : "isApprovedForAll",
+        "outputs" : [
+            {
+                "internalType" : "bool",
+                "name" : "",
+                "type" : "bool"
+            }
+        ],
+        "stateMutability" : "view",
+        "type" : "function"
+    },
+    {
+        "inputs" : [
+            {
+                "internalType" : "uint256",
+                "name" : "_tokenId",
+                "type" : "uint256"
+            }
+        ],
+        "name" : "ownerOf",
+        "outputs" : [
+            {
+                "internalType" : "address",
+                "name" : "",
+                "type" : "address"
+            }
+        ],
+        "stateMutability" : "view",
+        "type" : "function"
+    },
+    {
+        "inputs" : [
+            {
+                "internalType" : "address",
+                "name" : "_from",
+                "type" : "address"
+            },
+            {
+                "internalType" : "address",
+                "name" : "_to",
+                "type" : "address"
+            },
+            {
+                "internalType" : "uint256",
+                "name" : "_tokenId",
+                "type" : "uint256"
+            }
+        ],
+        "name" : "safeTransferFrom",
+        "outputs" : [],
+        "stateMutability" : "payable",
+        "type" : "function"
+    },
+    {
+        "inputs" : [
+            {
+                "internalType" : "address",
+                "name" : "_from",
+                "type" : "address"
+            },
+            {
+                "internalType" : "address",
+                "name" : "_to",
+                "type" : "address"
+            },
+            {
+                "internalType" : "uint256",
+                "name" : "_tokenId",
+                "type" : "uint256"
+            },
+            {
+                "internalType" : "bytes",
+                "name" : "data",
+                "type" : "bytes"
+            }
+        ],
+        "name" : "safeTransferFrom",
+        "outputs" : [],
+        "stateMutability" : "payable",
+        "type" : "function"
+    },
+    {
+        "inputs" : [
+            {
+                "internalType" : "address",
+                "name" : "_operator",
+                "type" : "address"
+            },
+            {
+                "internalType" : "bool",
+                "name" : "_approved",
+                "type" : "bool"
+            }
+        ],
+        "name" : "setApprovalForAll",
+        "outputs" : [],
+        "stateMutability" : "nonpayable",
+        "type" : "function"
+    },
+    {
+        "inputs" : [
+            {
+                "internalType" : "address",
+                "name" : "_from",
+                "type" : "address"
+            },
+            {
+                "internalType" : "address",
+                "name" : "_to",
+                "type" : "address"
+            },
+            {
+                "internalType" : "uint256",
+                "name" : "_tokenId",
+                "type" : "uint256"
+            }
+        ],
+        "name" : "transferFrom",
+        "outputs" : [],
+        "stateMutability" : "payable",
+        "type" : "function"
+    }
 ]

From c193362d56053ab2a815772b7496b0f82dc7aab5 Mon Sep 17 00:00:00 2001
From: Alexandre Paillier <alexandre.paillier@ledger.fr>
Date: Fri, 8 Mar 2024 17:47:55 +0100
Subject: [PATCH 4/5] New blind-sign ragger test

---
 tests/ragger/constants.py                     |   2 +
 .../nanos/blind-signed_approval/00000.png     | Bin 0 -> 428 bytes
 .../nanos/blind-signed_approval/00001.png     | Bin 0 -> 419 bytes
 .../nanos/blind-signed_approval/00002.png     | Bin 0 -> 349 bytes
 .../nanosp/blind-signed_approval/00000.png    | Bin 0 -> 587 bytes
 .../nanosp/blind-signed_approval/00001.png    | Bin 0 -> 381 bytes
 .../nanox/blind-signed_approval/00000.png     | Bin 0 -> 587 bytes
 .../nanox/blind-signed_approval/00001.png     | Bin 0 -> 381 bytes
 .../stax/blind-signed_approval/00000.png      | Bin 0 -> 13105 bytes
 .../stax/blind-signed_approval/00001.png      | Bin 0 -> 10883 bytes
 tests/ragger/test_blind_sign.py               |  55 ++++++++++++++++++
 tests/ragger/test_nft.py                      |   5 +-
 12 files changed, 58 insertions(+), 4 deletions(-)
 create mode 100644 tests/ragger/snapshots/nanos/blind-signed_approval/00000.png
 create mode 100644 tests/ragger/snapshots/nanos/blind-signed_approval/00001.png
 create mode 100644 tests/ragger/snapshots/nanos/blind-signed_approval/00002.png
 create mode 100644 tests/ragger/snapshots/nanosp/blind-signed_approval/00000.png
 create mode 100644 tests/ragger/snapshots/nanosp/blind-signed_approval/00001.png
 create mode 100644 tests/ragger/snapshots/nanox/blind-signed_approval/00000.png
 create mode 100644 tests/ragger/snapshots/nanox/blind-signed_approval/00001.png
 create mode 100644 tests/ragger/snapshots/stax/blind-signed_approval/00000.png
 create mode 100644 tests/ragger/snapshots/stax/blind-signed_approval/00001.png
 create mode 100644 tests/ragger/test_blind_sign.py

diff --git a/tests/ragger/constants.py b/tests/ragger/constants.py
index 86b6304ee..0f375a71f 100644
--- a/tests/ragger/constants.py
+++ b/tests/ragger/constants.py
@@ -1,3 +1,5 @@
 from pathlib import Path
+import os
 
 ROOT_SNAPSHOT_PATH = Path(__file__).parent
+ABIS_FOLDER = "%s/abis" % (os.path.dirname(__file__))
diff --git a/tests/ragger/snapshots/nanos/blind-signed_approval/00000.png b/tests/ragger/snapshots/nanos/blind-signed_approval/00000.png
new file mode 100644
index 0000000000000000000000000000000000000000..c2420afe1d5b2ea19c999ee43f90c67f120d4f5b
GIT binary patch
literal 428
zcmV;d0aN~oP)<h;3K|Lk000e1NJLTq004jh001Be0ssI2RY2!*0004VNkl<Zc%1E-
z(GG(k3`KRB|Np^0Y!5CBX(?!ti}9YA#jx5!k#_B-i4Z~v>CI>TUk!C8`c(mGx8WRa
z!xd`|I)kHai-|mfH_EU=@WQ<8?vt;iutXgsJ7fsT#RT=<c%5@2wgBi5Ku<u=_w=)-
z=Hv*17kUC9#_<01&<z;I`x7_>*@-kDbFv|(3aIfXRyfj@+?msfv|9!ih8`J$fW)Vn
zz~CO>;T|BN_mLd%e%vjPJ%D;eMaiRY#At6&Lsw*_J&nWB{N+Jii(`R~LM#+7vH7^1
zF{YKPgOW#*A8m0f)G#fTs8dpVu7-&qzkS-3oiTU-^*<9k78P5Y>WHD!W4f~aS-%if
z=ZR@VlnSwV`CZM!$c^HXr@$^f3+e?K9T@e1AEk+s4NtSE;t^;oLOod9f%9u_+g!V>
zg-|*Hr>)vEHnNj9aru-OX(LJU#UxzW#2tv5bk|2oN7xMoGovT4Cs$JRS3(FO58w+7
Wi7X{&VtL~L0000<MNUMnLSTYk@V+eo

literal 0
HcmV?d00001

diff --git a/tests/ragger/snapshots/nanos/blind-signed_approval/00001.png b/tests/ragger/snapshots/nanos/blind-signed_approval/00001.png
new file mode 100644
index 0000000000000000000000000000000000000000..b31e455967dd36ec248757eeb3ca37e26ae4def7
GIT binary patch
literal 419
zcmV;U0bKrxP)<h;3K|Lk000e1NJLTq004jh001Be0ssI2RY2!*0004MNkl<Zc%1E;
z%?`sL2!QRfzW)RFupOFoOc6m*tmVrNi$6dGv9g8WIF92ymCa1^=KxmhYBEnzm+(mP
zIUw!5CO!!0fPOMz3(?!d7#?pc#RxDkqaa0NHfnKXe2(AeYJt7<cRJXMayY$1Fx>&Y
zgBND@G|SJC_g~fqbc0^sIaWU`>wufAelSi!%!3qtam)=vPiZv&K!Fpv#O{SmfokLJ
zp87upO%w<Z<kqo&dwlinaUa;@KCq{&4~o?S(Omw-sOG_EwTRSpK#Njh%-BV*y@=(i
zl>sYQqK)YLE>ZPF2NT+9(#mV<19*cgK44&97!^oMk`-llLWqi3*b+7J6;)f#rg;Z6
zj%lA#1coqYV>KeY%+@-9sUzLLDq<^u`9V=p<X3rRY0+xvFt#08>&V$8RXc!x+7OAG
zw)^arJc+=D-0$)sldm|!=|2NF`s5CFA)bPavHM@p0`xf59mjD7@&#R+4xnH^xfuWe
N002ovPDHLkV1g%Zy?y`y

literal 0
HcmV?d00001

diff --git a/tests/ragger/snapshots/nanos/blind-signed_approval/00002.png b/tests/ragger/snapshots/nanos/blind-signed_approval/00002.png
new file mode 100644
index 0000000000000000000000000000000000000000..ce795f34e8569e986af689fded3b59c9a8af2961
GIT binary patch
literal 349
zcmV-j0iyniP)<h;3K|Lk000e1NJLTq004jh001Be0ssI2RY2!*0003bNkl<Zc%1E-
z%@V>O41}p;-~WL<=z+0=1Om1tEU@3H#qtw22}5*_5JCvC<NdnY@!SZf=bZ|_3uZeA
zzv<833;5lmZPyyZF7nH5k9&n;``2Wzni=OoMnLjeZ!G4b%5jQ~?Xiu3!v`aOym9=|
zFi%0P_sEMnjuPeqBy;Y<7zz;OoG=T?BQe()5gxob-#-pvr56zPj+vZs*7zvc)y3?k
z1aOLJy=-1h0GG6GZi4}#20ekxLQ8>o4!52c$FXo$VhXU?0M$^Bekqgf%Ka;M*^X|4
zEs9YCQ(xfJKmNC#+8dY%2&wT+>D^<3C%}<XbPeRMqt!t@kKPN&5dFP%@32VOA1?yV
v6+xZw{YDa!tAMG3nu5rL`0P&zA>_*k1^mvtO~`RE00000NkvXXu0mjf-kqOA

literal 0
HcmV?d00001

diff --git a/tests/ragger/snapshots/nanosp/blind-signed_approval/00000.png b/tests/ragger/snapshots/nanosp/blind-signed_approval/00000.png
new file mode 100644
index 0000000000000000000000000000000000000000..11ea8a56bc60bd449386bb9fca08e76fedf58e0e
GIT binary patch
literal 587
zcmV-R0<`^!P)<h;3K|Lk000e1NJLTq004jh002M;0ssI2U9{*Z0006KNkl<Zc%1E;
zTW-W43`J?xon-$@VlVwbjXc2^$0m<k-SaWZ1Y#^Zye=t)5JCtcgb+dqA%y7ET5GMb
z(s%Oxv;z^;D8q%m0hWMm+uFq;-230X0t#RWC|VA1qhCt-dfI^?{eXiQ{esv78i#O$
zM!(=D;NO6nfYBrj2V?@|tUFp4p@5fwe$4}&1F!^)R-Cvw082naUGv~Bga{#o5JJcY
z^^^VP;lg7lSs_{fYOeA}+6}~AwS&&`!?>S}D{b#1o0q#G`|wuQS5382)wtbsZ$x!T
z8b7$9HnG=lzlVLFx<${P6!qgz(YnI4qx6{=X_;q@`%ClIMm7U(NG4Lm_Q&#J1ZZ3e
zyXyH$BR&LW=)3%m+QHAV#7M(%)%mQ=lVY6Ov82SGvAkBByJ8GzOnN}LRoi1@c3Sd@
zL)eHhZS?cAU9F$w-_DX#Mxd#s0eK$qpLo}IL8C3j{YD5OgsdbZV@<^j`&rM9)YB+7
zYZH)Z)TncR&?8brFCy+mswCOpR2L`emdEhH)?%IhOMz3CwxUy->rLA(r-*3Ow~Z_@
zEARM~*Qt|!hyA2_K(bE$kty;OzTxY+fMyp-fU^ztj3sY2!02En$sw;X-IP*99945Y
ztDBzg0sh&>qbwR`mngtaky5_P{<DP9Vubp~<t!0y8ytcj=3Qzi5Y$`=A%qY@2qA=!
Z2*0haB4zuYxGVqw002ovPDHLkV1h0;8Ik}1

literal 0
HcmV?d00001

diff --git a/tests/ragger/snapshots/nanosp/blind-signed_approval/00001.png b/tests/ragger/snapshots/nanosp/blind-signed_approval/00001.png
new file mode 100644
index 0000000000000000000000000000000000000000..657887225857cf48be8a8daed2cb3e89d4b29ece
GIT binary patch
literal 381
zcmeAS@N?(olHy`uVBq!ia0vp^4M6O`!2~2@x4h6`U|@9dba4!+nDh2#G~Xcw0f)e(
zJDk7cg{nU`w<zRivo9++KRs#TfeV=q$v`bIa6oTPaedgHYloix&O3Vk&=$!n_AlRG
zmHjbGIXic;!MaKDnQMKsjvo9L-@VoC-H!f0oEmj`;$_7b6RhtZ;#_9On8>U4`s1;0
z?{f>9Zfbf|_0<H(i*(*()OdDh@>0eLCwPudd#p2Mzfg8-=Z~Y&(Z3(6-dSPln_e}2
z&8bJe=5=<foTE*jU1mz?S{!ZhfSEaA%h3lWuQpu>w3_V0<MMKD+{Jk>Wxpw!uqXV@
zTyg#0l&4R7|Ayyoo}1J3WZRs6lez;p_x-s3`O4ERHjEo5Zk@S4@1z`Oka)v{pj(C~
z>TB;<u2`<eFfX8t?|4Dgrv1AZVyszAZ{G6%x3ER*)}l{QcNt|4TQ1N2$qWk&hTFdx
XEX$>CrkB0D2@>;k^>bP0l+XkKqsFS~

literal 0
HcmV?d00001

diff --git a/tests/ragger/snapshots/nanox/blind-signed_approval/00000.png b/tests/ragger/snapshots/nanox/blind-signed_approval/00000.png
new file mode 100644
index 0000000000000000000000000000000000000000..11ea8a56bc60bd449386bb9fca08e76fedf58e0e
GIT binary patch
literal 587
zcmV-R0<`^!P)<h;3K|Lk000e1NJLTq004jh002M;0ssI2U9{*Z0006KNkl<Zc%1E;
zTW-W43`J?xon-$@VlVwbjXc2^$0m<k-SaWZ1Y#^Zye=t)5JCtcgb+dqA%y7ET5GMb
z(s%Oxv;z^;D8q%m0hWMm+uFq;-230X0t#RWC|VA1qhCt-dfI^?{eXiQ{esv78i#O$
zM!(=D;NO6nfYBrj2V?@|tUFp4p@5fwe$4}&1F!^)R-Cvw082naUGv~Bga{#o5JJcY
z^^^VP;lg7lSs_{fYOeA}+6}~AwS&&`!?>S}D{b#1o0q#G`|wuQS5382)wtbsZ$x!T
z8b7$9HnG=lzlVLFx<${P6!qgz(YnI4qx6{=X_;q@`%ClIMm7U(NG4Lm_Q&#J1ZZ3e
zyXyH$BR&LW=)3%m+QHAV#7M(%)%mQ=lVY6Ov82SGvAkBByJ8GzOnN}LRoi1@c3Sd@
zL)eHhZS?cAU9F$w-_DX#Mxd#s0eK$qpLo}IL8C3j{YD5OgsdbZV@<^j`&rM9)YB+7
zYZH)Z)TncR&?8brFCy+mswCOpR2L`emdEhH)?%IhOMz3CwxUy->rLA(r-*3Ow~Z_@
zEARM~*Qt|!hyA2_K(bE$kty;OzTxY+fMyp-fU^ztj3sY2!02En$sw;X-IP*99945Y
ztDBzg0sh&>qbwR`mngtaky5_P{<DP9Vubp~<t!0y8ytcj=3Qzi5Y$`=A%qY@2qA=!
Z2*0haB4zuYxGVqw002ovPDHLkV1h0;8Ik}1

literal 0
HcmV?d00001

diff --git a/tests/ragger/snapshots/nanox/blind-signed_approval/00001.png b/tests/ragger/snapshots/nanox/blind-signed_approval/00001.png
new file mode 100644
index 0000000000000000000000000000000000000000..657887225857cf48be8a8daed2cb3e89d4b29ece
GIT binary patch
literal 381
zcmeAS@N?(olHy`uVBq!ia0vp^4M6O`!2~2@x4h6`U|@9dba4!+nDh2#G~Xcw0f)e(
zJDk7cg{nU`w<zRivo9++KRs#TfeV=q$v`bIa6oTPaedgHYloix&O3Vk&=$!n_AlRG
zmHjbGIXic;!MaKDnQMKsjvo9L-@VoC-H!f0oEmj`;$_7b6RhtZ;#_9On8>U4`s1;0
z?{f>9Zfbf|_0<H(i*(*()OdDh@>0eLCwPudd#p2Mzfg8-=Z~Y&(Z3(6-dSPln_e}2
z&8bJe=5=<foTE*jU1mz?S{!ZhfSEaA%h3lWuQpu>w3_V0<MMKD+{Jk>Wxpw!uqXV@
zTyg#0l&4R7|Ayyoo}1J3WZRs6lez;p_x-s3`O4ERHjEo5Zk@S4@1z`Oka)v{pj(C~
z>TB;<u2`<eFfX8t?|4Dgrv1AZVyszAZ{G6%x3ER*)}l{QcNt|4TQ1N2$qWk&hTFdx
XEX$>CrkB0D2@>;k^>bP0l+XkKqsFS~

literal 0
HcmV?d00001

diff --git a/tests/ragger/snapshots/stax/blind-signed_approval/00000.png b/tests/ragger/snapshots/stax/blind-signed_approval/00000.png
new file mode 100644
index 0000000000000000000000000000000000000000..7c13332b6ebd5b2edae1533c8fbb661eb1ff81b4
GIT binary patch
literal 13105
zcmeHuc|4S1*sf@^N0MEHRAWhGr_v;ZDEnR^OCvjD%Pwk!?3u})W$c<56Op8$$u?rl
z$T}GNG81F@UUkm-@0{<y@0|1dee(~qJkLDu^Ip$=U)Oct^WvV7E<1|=3j+fKyWX8!
zrVI>6UNbN-zB|bXyrO2@Qo+EW@JH{~jR!$*mxxPE1zH4@6TW^=&{5wp{kfzgvn6B3
zbIB*n)=?SfB(F1@M!osHG0}3tA}*7U%fU#K%2|&zi99;tdh$p(l^&K;a)hA;b3j{Q
zWOy#e$ogF1C@+K3Nf3kkDNBaIb2SX_Z#W*g7v0AA?s(*}>+Jvif&boz{|Y=fLAC!r
zs%4L9or;Wok^Nr0US9Pd`bq}f&HBEzH~a%>)?KfV#M``5w;Y`WV2;42&iwn7)U!r*
z@Ojp>e-NIqC*lWYe41=!Ewqo1CH{qTEPC@=wRMDw7TZ|NzZceodMii=R3pYe=WFEq
zhZ+Q+DLw5^{vC*y6C*7G(4^bEU&a0&iU}8GrRq4X>*ra|?*fPCcj3!#3T>h?pfMLe
z31D@5|5o?$bDnOfV%@U~jI5ue<`Lrc&p7`rujOvgPV#Nu+vopH*4(XY0gO`l_g%JY
z?><u$>*N_DV=vlaB1I1e$#P<@y}r#0>FmU1@gXm1aL9nzpzX-BPaaQ59gb3wxYg?2
zTj5QkdKhkPY;<@_Li^fpCSMqjPiE2y694-(`Ad>0)smEBqK5<K{JONIT1)2)2m0w8
z%GQ5R`>M8F#GSL6R?mRzpOcJ#B*fGnsRi0aKx}3Wt(7+)e|{JHHwfHVz4oe1%*$Rw
zgZ*DrP#cxI#PUM7a6tHNR<uCF|4(6KN|33-EvLlI-j0PqnZ6=vfTTcgJ&tkW1E=iT
znWguLC5mqpBoDbaj(A3$`?e8^u^+cS&QRSjz9MIw={%ALHcY)`e|KOoqKUjQ0-x9p
z4Zl9apz+<q+OnEE&WSIsUooxK!A|@)@eJ5oMJVdr$&S^T6Oz@;l@fXj%@E8lMME>Q
z^+2I6PW`mK@K$SN)VZMT@)HlF6Ca`o$8MYg_hD%{!$-}573O@f*AU`J>b$v6TA?X#
z-Q6}wEdpV6d-&T5!=|imGU$gHiJF_4#dq9*DHclW4=BQ>mb(%Q<PldiX)?g89HY_a
z5~eI?XC1h&KIH+M#&t~GGc&UrUf1`4%n}{nEsgXmzPj75Xvi0*po2I+$F(JJMbCt%
zL`@;xc&(`LmbnQJ*eau2VpiQSwTQ;bzHBL`lT&gru|S$-yLxcPJ#D;oa$RrxrDx1~
zVzBoU@4^e7Ll6`}$?!Zl-D<1KMwMGpSZOx>+{sjl;Gb81o{>{E_~p?$o@<(Cbb%Ic
z<H{UDE0EA@KAmGsh1&~_3KmK?TNgn_)-_sfWr-_FiQ?PS^L`6qC=fP3n={YRaA458
z-}e^g_T4%nB>vhY2pjj^Ji~eAL7j6B3QyUJx%|cHNt|BlT{G|c*gM702$c{NuJ5#f
zj)Mm(0C|5whOmT>NH>~0&4^vg9q$F{I<oIQr)QR%ebB(g3wZ0LepF6a{t=*sAWFWR
z`WSdt*rb{(%~rUayUQEp>1?HzbF*uzkIS;q;@j(u?L~;vX53anBBAMOL+sJ8+_^dC
zF!!@ZKd%KfXs`T{h*VOjnO09Ic+xs9n%p(DmPKyDxY(Q#Vgb=Nb#qEe7y@V!E3$!&
zo_eW^G<qG#=9mYDpoTk#yqb&gb+IzfnAr~1$}^&J49H9*Kwo8j*<UV@Ruf51<#Dze
z?OcX<2Bi0vtB53<mPsexee2KUF~+jCJ$cv3s5I^3%QE8LnH30zvSs~&gs=AU(B;!~
zst9n)5lQYEm>(p9mJ%{ma~BMbbyj?pFXya$SIzIQArem#W&zcc{UY*!Ia<!d<r|-`
zXmsBEq3?IUo2RhxktfRLYWm()>BS8=67lH}DlbM<Lzvnx@S}qtdvOvuU)qc5EOs`r
zK3Y+jy0lD!3RgI9#w?pXt*%<mgm5Dp4L^OkaMXMyera5szLnqR6PlNao$*t9HP^us
z^^RV(XYea*c)zLML0SFlJ=fRU{GLmK=NFV9W^Zxiz3_2*hX*wSALwLljKRFhj7a`q
z9m|io8JG2p|I*8CYa0V0leG$)m3vONje{Bk0ty-zZaQuWhTRGBhfpaNHkQi5w?1O=
zXz!1$`=o~i46}}*H+spXRja`MbQO!!3fnB0ZV~q6e1rC*6L`(b(+lzOEa$s&mG}I%
z%y%biw{nnv(({m<pY;Klik)?r$l`Fzjt6A(dQckIs+rl|_QnN0ZUonH$bEJ^3U@iM
z`qU|E=d^;#^?ebOYCZE<Hih?;=JHFvvSTh5kKZ2zy*J*2pYidJ(}`Vc$)LD*KGi8s
zoci@rswv_oZWL@Had{(e#koMMri3L{1Lq7fUJbNO4qbDZ9?YBY=L|u-?RBxx_VRiL
zY!B4zo8_ge{k^TGFuA@(u+9Lf`R4M)p4YjTAcB}Jl48E=(xgg;G08f~^<feH;Ei*W
zeYMT_6T4xb-k+Y=LdbIc_)%@$K?+_krzE@AWn()OMQ9``6uQQ1OmJ^@De*6t{UH>@
z7T<=GgW*`Xm6@3d&n&j0++7QSGTP8YgfaTv3Do8{sm_(k#*t?~>U=H3KKH-a4MEw+
zW+Jz9qXlTo-u`5M)Xg{+-wLiX5jHMnts8cCPgaVU@MOcjHdmcZiuHWsZ|8L_7ymJx
z{HAMniBER!D#C^`bM-}&y~N3=E$C8H_#&o2I*|lrC(e17pXs;Bst~sS`Y}-(kv9w*
z&E}o-sA^j45SuvTlmBw$-O@g`v{qTgH<FNdd(h(vH~K{%dVm@S6IRp_?$N0>{&X{x
z<vvfROZ|xFwOOXAOZ%Z(jTMy9Pb};FodU6KEK#jb<3~KHbUJ|^IlMm`<Md>wX=c~X
z!h{DH(PTU7T5@}k!d3Bb?s4`=N&wnUIk3DuHP<TemAx28fD<&@rOCF+ykf|GMl=PU
z6wZhaz=+mZOtIqR?7)tDqQ2OeWuu2i*~hBsvb~%^W@fWhPPgrb`?LFr8-H)a-I(sC
zUAzQ##%JzvtfqCC7Q*YApz85AU>tdaRQ6@=5IEc;$eub6?}$zW?&Zler2%MQqjh$M
z1&uc>K&jOIcXDai@426i^C%9XM%phG*f3=)yw#z4m`Z^&k;j|`uRMFuAY0d4=ZPi)
zH;M*+3?S)Ys`+Os9dq}gY_MSY1IkV=FMXkNxrXk2`Afcf#}-s(Z;qNov)En0hxjM#
zB2U}zV-jx8p4)>UIX*9I*j#u#T^V&?oyQxwrM;{Zcpx`_Bhr8E<CW{Q@@DU?W`FLk
zGPNdIqDfgk8moV^$xH4kBv$34>)a>zq1H(`=1PML^;P&ES0*Z!@oi!g2j6}dF8?@B
zBduTphti&+2vcjna;2;?@^EC*eV6kK{uBwHsd>ofIuKgz)Gf%#+VPcokU^@19=BBt
zP7mb`oM1Ne{cJ*HgMDl1B<=z#U=EqrGLu!~kE_mn8^#j#+qHGP)mM~Y@XL<dC%1Pv
zqtrkR3JFt~N`Mm8UTEmuTHaOdejYtO?l8~nlPt)Gx+%1n_^0RDdZP9qvhk|D)@Ec|
zyA6GNJ4O4~J+5aNr{o?CZ}~LsZjf<5pFN{1&Zu*8v=5xJ49f19I2R2MKodi?P$!Nk
z8lInmPq)g2Odlb!#m58{Z-+uSmulm8f5|m_?ZH-Vu(DPUHa~*yWd?(dI#SF}HPoy^
zeI7g+H@=i8&Odp5_>AX2?sxS6BugevD;jP{8Hcv%giSsAG)>Z5NA*Vz&XSCMv<ofH
zk~_^S(#M9ya2v}q-P$kq-ooWDw)0_-lwCz?J*T~0Mv9O!bpIMaZb)zdauo)f*QJV}
zUVMA(DiSdeC%zowuYEz$7j02c`koeSN(Dy5{r-I7&sQx_C|}dD-U@?A*T1aM+VaLK
zE&Q$z%WV$XP?1o8YG^Q9!L@*Fno~mC%vUtL&lB6k<jMnf%OUx4Kl5WwDtH~Qjg1gK
zos(<XEnFGZip%rLkun^pz_I(O3vtZ8__E#uC)tSkV}H_tZM`?#s39SRRVahC@EyHD
zA=%U&f83;C9NgJ5w=pzUzi(JPsdBCOm@D(ab~RU*w^ar#n{6r4EeED<qNLaX@D5J3
zEmZ@Rsu*M!Zp4~Xlb2ekX<V9y!HxSK_ni}Yib)RhuYOer3h|Jz+5Z`BZHSrPA_@6f
zJR92)y@ce6u8$cPv4q9z9>4K3*9zDzP3UFVRIUOgR0|zZfetAPIV)_}Ucp|V0<%f`
z6**)*H`mszrt%}==|`{XPz{kVMr_|0JYdg3MkaD=DN@qrdQM5#R4oWQwf5xTL%h?k
zyfG4QJ?JuaJyZ)}bRooRW%(Beb^o<QcX+FIo)I!P4+Ym)=BV_RY%s0`oA_ynIG4I>
zj(lwVoYjuaVe61L99RmtoP3Y!z#ON!e&70ONsyGSb!=cIJ3aF{9vO<QyR<lwsS_#b
zE04Pkc`A0}f~Icufw>!+P_!o-xdpcFdQMpSuyrH^;r5gtiMR5&Nw+l%{D4`^nuEkr
z(NyJ`UtrzLpNlTbVP#uYc^^>MWJ0o!`B%7z?2E+Z3!m2U=vdRV-?u{%IUB;k)&p7(
zS!)p<M46|Qd(Yc;#HmtBe!m`4N#^IVEhIv|Z!N4`L(t0QU~&0O`=Tn9TR76+m>Gay
zc<TzgaDCE;Q79Fr*)8o$(+XD0+ojjsrMNvIjv9*SI{Ie@@$XOGu8z1rnlIA@8R4>Y
z__8M`y(p?Ukml@gOrgOy$Nc(lZ({P^M84cjn3T2p!cSSXU}ko-p;Id)z*F}+mTUR7
zxe%Muj1Y7<j+nu3jiR~=#m6kij*9YO_LoxGo~FV2!;`&4@$!QR_duO20z;O8adZS?
z)2)7m|J;Q>VFQ$_%7fHgS>@~xF+N(Kswm~<0qDGtKG;p!Oar=GnGEuB20#{0XjzzT
zk#PtKy?#aEHOEqX2YZP2l<z$K=gy0%Uu;eCz*W#Y^Gz>e?nPKT2wTF!dcv`u!Bi=g
z+}^4m2Mg@Ri~L3kKWF#3zXwUuxgy~u0@82DO)u?O_F<1wZ4(Oae7zDJmq~7ZRq)Mj
zAQzwqdjvf)3DmkPs|HL5ahc-7yl6T2;G9|GmIH*I71g-6hLkX@ZmI+<z!tTAKV#-^
zRz!ZiV>b*4h${X~QDgcK9a*$Z0=nTS-r__C9j&}Vh3G6Fv7K}m+|NhVH8;itSa(}K
z<L8k@j4TBJY0Fk`al>IhZ8}(%*~~1REiV&QUY>&^2N>UztA}W|&UC*b+_X2dmieSs
z6Ls#jhg5Sl0m)oHk2=0J*1Cz0B=2o2HOI{Azd3gjAoU3e!7%{E1*DTbh}ZO6bCq)L
zEA(q>vrJ+^;L|MnIU`HQ4Vock+^DL&92&9kvBJHr6Gsfc?-a;QV0r`9me0W$s_Tn)
z>FS8qypqi)epq0S%3Qf*!ZX73xmpCVQ)z=RgQoRS#^KN2Kd``sghqRDf>gzZBvE7R
zQRiTf==;w~x&oiH7f1s;<I}V`*3uK+NLYgEIQ`EoU(cjb5K|JgFDhb~V^Tk|NTZ=>
zOv*|(m;4EKA!cUTUcr|Nhg)q0p6V0OlBa;6xOG<hM3_$YA_9$n#}@*6`A9lo1&vvR
z!zA>qqXQRHUIpkuPaGlMzZvo?kjC;IuM|hMp*F^7ZTZ(H1s;4nFxMW2VgPZVQ1ujJ
zkNTR#_NqgmeE8>`(LS35jHF*R|C2nyy-{yV;EvDI?(JJv4<maE0v|nH!T@5f*w;et
zieP`<1Qe5@<wXaFaEJU(-Ap1R30kz{CFp=69j_kt@V$~3JPdaqZEM~|yMFa<v9B)X
zqf+)Q%$rwkxFepvy;LI`=qX0*mBab^>I%@~t{ugntz`m2A7|d3fR_!Qpcc_K)pUPc
zO^CA|rJI!~6LgDN*tM}hx{ekaQr^u(@mYefqe$q7PuOBAYjuy}XJ9gq-!B7qC2;G{
zXxk1|3)J-T!xok|4p?Wvn7;)C{1g4u*$NP6UYhaJR~L;W_4;0MUksoO_UB2y5o8a%
z&|SB<z!&9~?(AkAaBbV(sC2+k)5-@MzZZ^hwgQ+z>bJWhP$|DnUegR`I2kG0r)WqF
zgl~&z1K0e;pA%8)CNM%?S~f<M^^|$@H!A8~d0Z1qW{bb=@=`Y6E>7>Z*GnmjW8LFE
zU47kW*XZ=i9Rs3@S&ue(#T{;}uDFSwvi#!?SXk>P)T3C&!|x<;n*T3Cz!w%`$&|@k
zaous^kub*z{(%O<((Fc4n6uA-qC%VDKIPLW*Gja`&Ct3-I>4_~_Bh_cgH4mfF9Qm#
z!z0%ytv#20Aa5G_qj-6>5JG20mA6wb@O^-T6KJ}J=A6#W{}T81(Du^!0zvt<Tu#0i
zvDse_%H8cqwuhRTC3T9Qj2f6%Gz*S8_atZbnaZEc@8i)dyY0s?6aC}Z@YdGQx6+A1
zW<~>>%m&&BoQ3v9f&&lOt8NpJH)qnFRh?44*RcV|ZHk$EQRKnzv$AvSnfvBi^|6xu
zic3%Rnx+<WXM#zGMuoRfYct3mZvK0?ir;@6I~D5VI1~KiY-pN18;Y=0Vc;EIdgf1~
z$892QT?HXzsg+a09CeOOXWM3<0*O*Gyg%&E7YCPVEH95b$9FbQ;m{Uo@AF-CXvW-Z
zt{!VhgjiSU0BrozoZS;t8|>k?&^W2U;pH11B{oI*%qtE%7ykU#s;oG%+yCNp*V=Zd
z(ZHZR;46HfZ!ZN9M$ZAOrSfLm7cB*NcsUU{Ik%hu#%g}xmnu;@(A~N`m7%qncyLJ#
z5cW<V71?jooMwU{7B^;RtD=H2>FM-6(xCILB`K?`THpo$gMRI=C{)dtP_63nONIl|
ziHQa8%iWu7<D8y&v0!IRf0Rk;0c2`G5o{vF5f4N^91-|C<HO%o>sd0};cV3$VUl|&
z>iq3;>$Cms&Vm8d+GG^F<~nco$N#A;Xs&Xtw;E71;pwKBvJJR~rv3H2+T|6~05Jy4
zW2;WEG#m1~#v0Z3z~M(7a+nh09*Ao=pEx}aPp!DcdU<a5OSee>-bIe6-$5Fqh&QjQ
zw{l&qosh%Mf^|3(>a|l6MRlNhhc~iph>aICP}tlVgxO=>JaRBCjmU}a_UVvsu!-$A
zW$pNB@*6uYSKP>GsJI!9gbTLKDNQ*@bdB<1HjUT2Bhw}HM!Q0LLMg;TnP4Kx<_FnV
z`G};hwO|1V6Sx}F0O^@*7A#my(@XU$O+V)$IeU-TB}1%zWNQaDT_@d1CvKHs=7Kb+
zRq^ImnvZ2Lhhz@P#6>JETU}K?Q#Pz=a3GJ+=(mGKHy4HUCro`Lm|e6<-P7yRo58bz
zR}xs<W_iF@9=Py3ju7C=C#(RC-MT5JRq@SaeVNO4KoPCw0;y9`{aSmWWwb2R{}`--
z_*#9qC+`G=_Qtl%c)4Q~g2HfJ-Fazq>gbTemV*vr@fF)Z#6(uasiXblgHVHv8OzB%
zgVy+-4}qME;jH~b{d-08AJViF3$l7$`rWch%8U>4rYh%j<h-5*b%@Vzbw@g@sa&Wf
zEM3cem3P*qbYZWhQ0Cdzu-C2gPuh!(tLUr%-(6`Fr_%w)2oRzu!Wpp1q2L9M0?ro!
zTL=kH6PadDD(bs%0v`hyhUC)eQu`0uBbm?(DFdMxFFRrYaG3H=umU&DhnT?D@sr%#
zz6HhDSI<byPdt15tGrwv8Vl|81}%**dks~<Qb{#;pkY3u_?XAnI{>i*LFuLbS=_+f
z2=M1C4ZbWid;hoh-z!8VE&Yi8DV<mcQWr@s9k|HW0qHWQbVSzg;AnB+{-m~b@zxlk
z9kK5i2_5;JEUbAJ2KU$XfRq=HcbNF7=AiZLhS9{TA*Zw8z9A9kGP}Uh5;s6>BRjLc
z2=eO5F=CT;?|fLc2DHVL*0uPK{H^7OwNG+xfBiF3O(1v+b@j{P7t*RI&?Z{|MYtXT
z)Mm&x{)*-*8}$kIMuFM{VClB9=*u_CSLX7QrYt$G0se#@u0VQrW4l5Y6xJbrk@|V6
zrr?On%haj%lOw4;=Q208K@|Y?*T8LPWFic=QA%@q8M1lb>uO!BToMNb&YiEuTFKXg
zHYPyWp1P<X&*gLv;pxr%ZOBYQG~+y8I`OegBa3h2>b30jmwqUVC{20)x&F71Q(wHt
zggIv%(CWi4BT}Hm*3IO#?ntFCY`QJ;HgecHB?3V31#P_??PN16EH)ZlJnR?k4Wzk#
zJJ5j5j_8`hWc=JnY|7Z!9#eyEwPvjPGzlelfw0qe*PxhBo5T!CcI1pzk^Rw(wfgZD
zZE9WNiPyCj%EatBcol^9ibVvo*#{3s9gpz2;ULt-eR}0Ld(!4CAO4x3>iZVA)R2Ht
z`U>xQs(q@Pmy+^BNgi;YChFXtL-oQnXotAltx|QZUe9Z}I5Ki0-OQ|e<as8WYy_}>
zU{+Ryl;QoR;G{6Qv#N?2-mN@(waJTqU6}wRkW-)moMFlXps?^<VAJV8twa*9i-5Nl
zOf~e(%v%3Gs%5{~Jd)Amj~vnw;r|IWS>9HigtU4UpiE&Xj`-*?1M=RA`ttkH!i&}h
zh{z-aVVW1Lm#QMtTL3FG)$y7MmJQ5@Zsa0bsPz8246WmlvEe=;IE&0lVr>TeWt;nk
z_Q%)8_881tA<!)o#mUI$`^p4AxlWUdT{i2_1VZAdmkkHLMG&1Sq_79>iVw1Eykr-)
z!@A#!uF3cfr|#j0nv*Sy9bOTzd>B-jQlKenrGnVp3SJ@N(KKh{)Gr4{gkU(qCV&<&
z3pen7@V)gD^|H4R0!PLR%*hbu{oIA6muU3-+>{Xf@T_dBl{T_KO3yT-IONBEu|RWK
zi!0H~uJ~Q-miGGdjPi2eY$r=CQw>49NdWf(v3A_k0%@*M&kz1h4C{ZKn-E1B1q%RW
z1z{`pgn?L5KXNB{I=$EBk%(s4fT>XWdZpL!VFuEN^GPKu0Z4P=8%4kMlj&ybm7(w^
zfmfnuH7Nw2#$D=8N?munYkfA(F8yoz0=}6QVU~FAUF?upD`B=<EpC@DU|hkDkDA0S
ziY)c%z7Qh1)^B%@FOI4MDSF_<2ebKpueb`2BDAxpEu9}h*vNf{jb6$fd4xu?A$F)f
z50Er5Px_wy_n%>LuY2nsU}P$7D9cUy-rIv+p~NY7M}JOAQP<~|aR0MF(1S648>u2O
z{&`a$cyZvkc_4d(c-z`X&5`USlm<op@%!C%=n5|SOC-J44PLxZRh+x9+^R3e7w?}-
zf?EtMW*&U6KMob#fRUR76(Uq+=RQHkn%?wHGvkP7nJCQb7Fd^!$`z!L^J}JNy-%^Z
z8R~wa<a&LvxsK*nI8~{UFP!l@f%5rpulgW<rE*-Hch^h3C4wDWvTpXh$T<_l_mIYX
z1-^wzpZc7T%8?ezYNtFTj1sRA0gI?A|5yvMMVbRKPMT$)3_%V?4O8L88aW3Hj0ZbA
zzR8>k1>e}rgKm}GW`jTH<X{$cMib#DvcetWx1fMkXk0oFfKGRq?RB||z?Is4kG?}M
zKrvtSdpTw05W&r_(<>dk=U(|zdMKf}Lo`xJ(^usb$HrT;!#a=fVRe8fE}vMeFkvd?
zs`k9utEsxlcQDYFA9{f%w5DG5ppe2LdKAAY6h`uSHUV#`q7Wg&J1<}b?}u1J$fhFt
z0_Ta=fW?JV`w)z$nZvfuqsE?bdJEW<=Ptl<uT<uDvbD{JVQ7j?o;%c>MPV_2wY+Ka
zux8~Aqh^%Rdm8+J>HwesQoi!@+!l8HG&NwPN8YI3dRni5c%Qz%wKVg7RCB6E!(a$)
z_Gfsn#4M3@ss@@J`I~wz@V;Xn&Q*_HHRs#L*jq9883Q@hoU|)=Y6FpCw42#)Q<l3B
zLLm)l-sc5Uqr4<;hl9U72NQ1XOC4DZ(^qOR3&Q8MHJ^zbnhMp*MGow0jq_M$eyZ4g
zjB09RXg{!S&oACIUntpu{X)aK9%VT9e|+6lhYk9Hzq?BzVC@?FhPij%e6Kb8Gk7>n
za(Q41_UAI98yR?x@5+)PLTIN)V#_~`vN)--jPcus`=7C`7>!=W|Hjz`{&5t_z)FOy
zXkKlazl+~PyuF4@ESTd+e^Y-%=e+z1s4cqu+QU&U|9H+H+>>H}3=P%t$}6fU*Z=V*
zjGDFLRYfoCYj4*na=S!(Q0rAI&XiIIqA%Jf0B>~k&BIQl_-<3bx-=uSNy@`}`E!0J
z-W?D7&wD*M0R}M5n+XBR8~cY3t^7L<Ff-)YNTuxZ^5$fb_lG(3JCns2M?657{q2l{
z$SWlAuym5rYJ%A-^6yEq+czXERU!qg4|`2+8uN22CnS$KNG!$S+omf7jCC9_tWCKy
z6$Wc(EQg?6mIJHW>pmKf^x>WTAqG8M%9u@1s*q5p_n0+gK+)e$J>yB{2R8v)w1HQ7
z=Mb1MT~kFfFMuiiwjBE0NJxXdSCQ&ia$X(`LEHFR_|xIzNc6*o<rXc!z*P<067eh9
zg{%bziYyuq7yi(=)B(!gNH2C9g?@dRtw$@F$8>H~#^MUVflWRXrvs&*c0*dq&s!TO
zvv_4HL%Q#qm6rnsESt_oLMgrrh<YYGRvEEQ(xMsgAet}EqGHIUJ_Y>ka&9l+{R4g=
zl=>w>yqCNI(25YEPtzOU9KBQ^nJXHa@Boyg{L;qj3jAGwLk%b<iU+sP`7{9x3yyS^
z**!~C1afAY`o}JBPhQR3-tTp9@C7&lzMN7XdnrV(3kK!5UZzr_%j&_so<@ScBz8hm
z?I<z>@%=lGX&04%*lfsVb#LX-ABc=8%}Hh!iBCK2Y=N>lrE@jq&Vm--tUK@>PwhQ5
z&*}0$t-ekZc+yy-A^LF6!CQkdQt4I2{Le7^G$Fc*NcTnZ2Pj!pFC~tnvDx@@YEUD>
zf9}17$LxONs%^ud$6T<7&wG!E{tGoi8*e1sg^hL|2qm|vRJzVBX<rMZi{$7_rF6Vn
zrUVKsm;}6CT+u?<adb7yjfzsMW61?G6C4;_d-~od5SEM5b;Vfqt*53*d+B7*(VZH&
z)0g_ysB;Mg(t6zUw^Ja(Za41Qw^S`u?^O5IH#hQHoRz7*OE8nzSd>XWI*^&%8YbFM
zLmFKRdb8otucw{c8y+4$?PkJRM_3Avhye1DUnI70b2(HY-Bm{8>|Vm+Gfu<T!)|IA
zCPoSo&@@2FOD*pM0lA0)?w%Gx`=J%s1eA$wuBtzzsQtpeYI!{)n7%4}dqiI{-<pKs
z?|kVu!(B>gS7aCs;sNev3|KM!4}!n=KT{}oL=*KZ?|w>BbDwB^!dz)y+P`;<_4v+d
zVWzOP(4%;IIRy&T*TSjJ(<ZA~=XtVSQJ2YZztzgvgMwmOIqD8j>;Gy>w7%1&A*si2
zw<UG5((O)?<ET0AZ#_++t^Ym6S}m|@e>Pb<wWr?y>e~Y8P)PFCFZI0pNf})ihy5{@
zpv7STj{r$GaGySNpmeIsJ5_=hECSdL<Lb-rf@&>y_xJS;udsi0G6Y+n@PUvjhw>|~
z%SKcWdPkTBsPd!o$W8N+5Ig);vy>m?`W|iAqmUQG8|kww>G`pv9dAMpFKxS~$dm`X
z?lhq2@oIYAfr%KL<1<Q6i0JH1K$6T}d7rH8ev5Ohe~~M^_@k|kd@;02Qpm0dJJT=R
z)j)(euaf85)++%Z^lAtXbHi+yl<f@W?t7PU7{5oHN-jshZIiEUYj|O7IyAwlNA9JK
zU-@3ji;^AnM#bShy_)-Cry%UgDLW+9(|rFrTY!-E-`#5e`>wq|D?`UV_Tq53iX?{6
zH`tl=1@W=pM5d$|Mv?NyBusEP#?3M1ew#s--HK)!Wr;EAJtHY{@x=<SjTevQtuw0-
zlFSE^cum5k-+35gPmBui-}R)x1f&J5LmbKAZ;vK?Dv1R@I0D7glx+bfmD{n<=b4M&
za2%k1mOp&B@jQfpWzm^cCwR+!ZMm8|mw%tv^c@a2bxbjDI}tL<vH!A79Qiz%_LjIi
z5ec?F;xNgquCBbw^zQ2;rli?3t7ak?thW5&I95%+F7oSB&jpfMKsgp|!_cv1V^*Mt
zk(2rGX=cd1lRw)T-+kST1aGihU(J#}EJVF}aX1OXqxI|mqnYWs!2RRAUD2ytaZW;A
zK*JgQ@u+1`(uuN3_E;xCY}2oziOcvADLo&cq%u0=qgwauk2QU7Um?Z9;@Ext)M>8q
zKLE#a18POVCZo3ALh(*2cI>ONCHh&|nVX`#aDYP(`pZOQo!!s?R2m4Yfpf4>lx`Cf
zs{(Q+K+#lC<KyFHvvFQmtsMKN_CFUHPCIhU<dn>ZVZ$+7`V{#Zdhiq4#>Q2v%)SR<
zmIH5&dv$C&jpP~X0O^3!)e28<o^Qp~-L)TCp;04j=6ZJI(_(sJwLo{<->%qH56^aj
zu#f-TJj^u{N|GI}Vm0!S<>f`EHQ991tY$g8R%1IR<PkW-x7`us4b}LVIk4kIqI4ou
zkc_+vovn0$leuktEM1LQsqQ%?(kvU1%~gPUNSt(PjD#HJE$LHy<)*hp3wcrhS9u#?
zW0Tu!j@!B>XDgJKyJLX3TQq)2k2^TFb}@@LGWPO9Gu2CSDF6+K)d*!n9S8N2PBF2P
z#|X*ICIPOG%#pF(S+IZsk55Dhzey}Jmu1#%9`J0-#KT(oLZOcur%o4evRd3Sktpm(
z^Crb^6a4ICG7VH!vz)V!;wPTXQGXJ8YL4rnnyYljJ|1_7Bw*iV;+C9yChT)c*7dD2
zTsSatA7p#EocK6;`9&SeW1611aY#8SSN9|V1rD|PNfn6QqhI}pX}8|S$%IF<r05=u
zmzSjbXSjkj>Y`z~d?psy+7>QZu^7Sl7>2<tg&LJhM}I0j1sy`|Fzg%xtneno*XhXX
zhgcjq!TSot@cB`}b6%k9PK4W1vF^DX?cJ%rSkyfRy!qQh6GAIJgyxCkhffbt9pTBE
z)Wi7cdtqQO2lJ8lYpZPqDaS%zTv%MhJ#k90YU>L50ogCoxv9YV$I+PZ88I9Wb~z$C
zpN*#8S0{FZes^dDmxfcV4&OgKa1Qd7kv)uBZ3Y3;!y2;&<vSZ28>z)iAG=ryLe)Yl
z`uADyksHxVNuou-zdt91t@*sxrd=Ph2Dz@BGMfZ4+bNqibTHyQHxK}#ele0hqrvGx
z=r(Q_=M>wvs~A@!elG#b+a6mf4s8u2jeKj8W{tHU(w1Rh@_6|F3vI;rD&2C*%Yha@
z4O~REY@2d9W#^g7pg-}Sh3slYUAQ?9^nd^bi>Pzhx}^a6!sKuMla-}Fg08jn6Fdf#
zu`u@JV6COeoRTt%+Q}&C#CG|&0kZ=>JpOY?pr#+e177=*I$2Dm?;SJt)(|0%gN3>V
zWcwr>;pBlI!9K784h$e~fL6IEfD~xe76nNH+@`3?Lp7X>vbEy}c)+DVTUbe13*fQ(
zG=-WR*?Lhh=ci^TdzRyU>xuXn<2q|(&v=R3siQY|0Efc!n&5UD1clugYw<{9(mRMo
zm$)?_Eag%0s)W17wqDt2#G+kd;rnH4l}rBj*LFR;De+gXa4;h}Dp!H#33{XoY=()l
zH5$Gbs&zr{VT7{@kDca8frS_?1TOH$$Q<=!v70+?9Mq{O23!c$oGe|A=A8xh%clPO
z#;%`QV+H{|i>+($y`YymF#kBm6WKUn<*dOGxy9z9>q9f`zEQBJ?-5uhsW(~wg=Dt}
zS7p_mY9~bkg7jzC-T1+1#)`o9I#6|0F%W5(u=U@Aq!}svJshu{M+{Hr<VnD$rq(Po
ziZRKm&HXrXJyAWQWFF|H%jGL1hc?*)jVU82NybH&H!qTthCJ^MG=Q+cD&)Z5rw-Q%
zYg1?hn&AS1Mx5(A9^_;=TU8Bvgm6gJ>{h&t7q5YT_8dWWV6fxn>Afw^0j<)Bi+YRo
zua;*x@*L2<KU_W_7p8;Z<ff5==1B4Hb&6KOjqkM@=h!PrN^Zm0$M-!Xe~DfLtTJZ}
z0as>3`H-e9Pp4NGz|#YJRSNM(j8Y{^!W1DV`ycp{mI4%R>Q@5&HqfX2BR%;;o-d{>
zt?iQqi{K??VMm8U1p0WYw;&nLutM#?^tC5P@%I~l1UF?1cL-VXyKvS9!b^Kc7AO4e
z48F<oCiS`u<b3%u`LH%?4|{9q<GOJ>sM&v3>|_+gG1#0x`L?5Gba$+IuDD+6lmpV`
zj^mOEOmtTr=mmUREZTMVvV{QB{PM^vbiS?sOX-a%KV7h&1r}-cHCmp7!hhE>`*yrj
zI0=n}OD9fuHdmny#Wu3JW||^?0Ctm6>7jS@zWn<j<(bL@vmrIrkK-%xar&5!dnJ%D
zpz+ZVnC6rv&Qa74;L4=>c{I^zf9^QYjEc0p5`xW(^e4YH^m=pmqa}#Z!`4}-%jM3(
zJ<zAuR?J|NhD7ocyXK1BZ|mYGRU|?MPMZRLas5aGsj)iY8d0)Dy=-f{Kw4-|PHXw?
zhI^wmh!-&S0tjE0gEEE<!OdHFy)H?e?IL>zp(Sk<L*KRZ0aJ<y&`AXm*ws4Y0kzCG
zC2kqc%YDCSFEg5VL*le>8ziUK=Vv{?dmfh@>G-~6!WiJ}EQANpb;5NUIL<O%HF3*r
z(pTe2LxM+dq)N>0z6&OTu&sX~S~f;*MQ3)7sfqvx2UU{uxQM<T8XzP;TG-wDx}pkb
z?iglfKLf-BIurKO`+;wDmFoS(e?vzWrQ%Xb+$aS?Q$H^6f3Ise>$+l1>uCy!{e4fS
zd3f^}lZ=Y4NyvD!c1_QNZU@snl7TM(*sg6Lud{`OFe7S@eF#}DbA(#jhoj;u5Pm#E
zc1g^K+3y6<0E><`YO?8I<+A)^4{ZLAv=659G@3=Yk+qC^i%^HaYVjgL@|t0qgdSg<
z;XtMNWnW#F{skgXr8M;x0xG=x)_uZ`T;P-@9VXI=shU;H`XN~fnH9s<k$lewsagZ&
rOa->3q2lLq|60ZW@BA?2K(xHh_08tZ+DhQ3FbsNNqgz!s9i#pOIZQQk

literal 0
HcmV?d00001

diff --git a/tests/ragger/snapshots/stax/blind-signed_approval/00001.png b/tests/ragger/snapshots/stax/blind-signed_approval/00001.png
new file mode 100644
index 0000000000000000000000000000000000000000..b1ff1b3ab3f4dd6e51e46f9c6e0a2b36b8dd1f7b
GIT binary patch
literal 10883
zcmeHtc|6qL|1Y9!Ns?4(K}ll?W1UDv*|U#*B(lpk48~HQD21|&t?XlGCTomcQMQq#
zk!g%RlVxZcvJA#>-#*{({rf)d{oeb#f86`uIqx%b&g-1l>-BuC&+nPuIm&y6myM0>
zsKMRa7Hn+nuh`f)3b;9dFPdg;Rcvgsh6cBFt-{~XNW{iU!&9}c^Zqd$)q<iIVBDe{
zlAQdyw?+jOIghg6d?hHw$<vMe!YH@NO^bcg+JXP*9egF>=G<9pJ@Z|hqr9uACL1<l
z{~?uw?S?I<2pgCi#O5ssWt%vUWh>W(vEO^r#ZhoLj_bxz4!+nk|I0t<+egW>#a1|C
z2$_S65uht^Tv5sLJd+&*18Xn3I3|1sD&(n__Jm!!W*RUTj_i!Kvj6CNZ|_~x)I}^?
z#;@`-*KCGLA25Ah$Z_!9^C&8peJzKPYvKmoNJ111G&N1#7ZWLXLK4>w_MVCqdvqb_
z_5?Pz(cyE3mL<_1Td8-H589YflJU;h8rc4;kDr&c$PkEw4|-+%kG-`$k7Z@H^1*`V
z(afLDIXd;+AXunXNk*2&!N^G%osp${Fw#Sb&#jl9<~4({R~45>NPApWjN__)+S*s(
zmluBl7(QNV5K?|1@~`KD&K$AAe3-}p&N+BFEH<UW`MJSWyMH|*%s|-+vj@)dPZ_ta
z``4p)-7hV7K3a7>$$25CJXH_Ip5ObIsoxGHAHT5nEv&}c)iiAOR{G!b?mH9mD|B+_
z^gRb2Z)lfNpWm@$sKyx|OUnjc9?*?;iw{=0(VJIk^soMpu5*KCi>JDOsxTa~2}Xk$
zu{f@BLONJM*>fe)=mIv@40h4uk<Uo=`{{-t;D*Q31Re#n?h=&xkVU3dUzj8w(CoNX
z<Y<+oL?vrIIQ^I3%U%xQv#L`AZIdd=A&uJrmFLh#IuYaQTT8DPjnbz~ZqB-a=SG;<
z*NqC}xuPDMSKeGcrsNGsRKY*fh_^Nl@07}2+0Ru~Ja3-X-pD){qusGRgC~bOZO=a7
z6e)mWx_RZ6;RxhWPa%%{Qi88?V^uZqsvy`{0;6&0^0*RlNLczb3uVB;x5Y_k6k}op
zQMUj}3a;EgO!j&|J#-Npn_|&=4(qOcy8edOM=(Y9LV+{Y0tSxwdD3eg-0m<vyM-1z
z1O~xQQ#NraqSxH~yb}$0D*#f8tnd-vo;%~Zyq9erpAlKnm_8RbK9P@J?A8F7m~}<p
z4V=`FbH7I9go!;M2nPy+QlY*ITlG~WNt8ui68ty!r}#6fHB5Fs>HVAiZ7CHGOzhi%
zS7u8Tgm%eB-H`TKTFL;(UM|$E_qcmCp^L-ju9L^G4Ga*>*A+f8X*q=}z>)GxXX4jX
z4s!wWm0UEGqg*2ftY1Ev4Gy+HpveAGy^W|tsg-hA>v3pTM7BEA+9SJXDCT)Au%Dk_
zb|cJQV~8qH?NZ_QequDiz1Z+xFGmQr%3hh!^y|93mc`36A_ehC>Z81A)Z3Rnq7#NN
z_JN@j4n8kr0sWV?b{jk`X=j);ym31Nz=V&66r&>_Of18uri%;(p|KGrx6U12AI2z`
z@dLaNL%*jAL9d#X3jq^oYfm{}pX>iF2>H)J=>OdvL|stsb|^U~-l+2&e3ZeuUysy5
z|C&e|jjQ0-Ab7K~@iF)AvI|(nIu(<-bA;tanM8NKC&zBVT#W(r*~Q5ulKh)tt}6&`
z(927Mbr8G}CX4sfiZ%ydaYeh*UAmV3ZJ4Xr7{M9YF2k$D=LYPQj4CB>M7Tpm^mSpb
zoN$-OjOAATz%ChXP+QeB!P!Ds59LlPJRG76`{5*>8%bCWT}qv$9EXMvZbbNDoKGY2
z#+k`#$DyL8(-EZ1GKP4-MXciYSR089P}`HPo*O2IFw=7gQ@Yk+Nvz`NY#(VmYQEHy
zA0YWzn8$tCuY>QSMCOUaQm+A%FQTzsHv@_tscyjc^Vm^5wqsK^f_#lF?rC(Z%A6)V
z;0rUkgB!HI5;SX_w=kw-E&Op%@xGzO`bH<3j}1J{oSy4G@h5-~DqUmj(NasSGa)nj
z<w4pf;-1!ek5|ehLhxwq$#laJm!L`cN9tm!Qm5a&*@CI?d@*RmIQdHr)m2NsH1sAu
zU+*Z^;^2Ebg`^?!2FIl<Gx=~KMYe9sA({XM@}5F}gDnp!iCe=DVcV}wl}xlZ5^3_8
zgX$kYE)>N-Jyk-woVo8Ta9SMYIM(_gUZ?Fg?8no!ZQo0}s+s#kI)?kv3x{uU@F@V#
zcp;g>iVmnWZ48xRl3cSxArf9fe@k=lVV=5%w>Um%u=0~=A9t6C|3O)OR^%DJy#g5j
zkiT2~#rh3Wt&SiBe#bJ9ItHog$^9T1?K5#tPyI@U6G9a-Uo;5P_CWn-&P=15q>1k+
zbk-H0m7@SxXPJB3QB9E_dKHaROD3KvzuTybKdJYH6@Bb+S6h&}m_WiIwZ+*33iQm=
z7q+P(bqOi@<{>yz6uG&|isp5avzryIBat$nv9{et@*h`0_lr9TLKmgD9~a4tsbrW7
z{3#0Yb&@}YJ5~h`#jnX{zG#1dawpPkJhGk_d3LeMM_tfwEj~eJxT~O!#}^{58l*07
zOotfFu7)=dQ<SP+w$xna=8!*LB<T%Zluf*dU;9b6Lx~F<!9DdnhQzvnj@rFaEx3Ms
zIJz^x<JXqpK5)XeB~QcE#3GebxCKN9ov0ywvb;zpxxbjzYSnG%*QcIL^|=!UaQVq{
z>zJwv=I)x}pps=$>IJ?{dpp!y)3T)r0dwKkHj7Wsh(u`R;~VjXE6C0r2iZokqlD1x
z=3~e&2~THo<d@v-;M(~n5Q8vln%wZDz33>H$xZ&_oVtEO**?$azl=715sAM*5mjUZ
zgZRytJQZHs&E(Fwiyb-;{(GYF9_hEjUb=N@afA5PW`l-T!%MC`>jowZt+mKwYev9Q
zF2Esa?#IbTZxKSNtvv_Rs==B;U<J^~m$UA@ueL=Mc{%tbJ<rYE)8dc-6sAW#M_=Q8
ztq*?c$brUrdRLimmLLyydZ|Ajgmo!g=A{5Sc?svbh>!qilL!8tW}jiq=m@b}@ye=U
zr=)!;Q8|1~6F?oGb8~F``e}myffxB-0N@9XYFG2%TANH_G9R;p>_f3beeSysKqMyY
zM{LFgtO%-<>fgNleuWiH&(KQfy<lS5AK0VV<|uz_;7B!392%NaN?4u@6eEPD^i#$@
zvR}FbtGO%4N#jeewDro#!#_m4?dnlGkF}99NJYP3t3G4P!(Og?)JWQk$HUGh;$z^O
z^W65D^YtK{GX{~Tl}tf6i^eNpAR>B!?ap(Li<etF=n1Zit^TwgubiADBR)oycA1yG
zu%2kVxo~?+pvD6-!zUMS!gtp!Kix3d7M`=v(k2vN*e<?SOHp?fMa_In1@Pp=;B(4U
z)G2XW1Vlp4#Z#=`!ytGp-gPTV+sCX8pkUKFNwmJZpJMJbGXua#^Z301#eu%u0bf<9
zeOL8+GCd#v5IlMvpC;{t>5a$>!;$Q@rHA4#{b=4|vA`#fI^>iRX-zv3=EAwdeOBKM
zYYEG6oZmU!O(xTaz}`>Vf&pq<Y1#zAyQk>r=rq#(Rdb&YJaOg*Asq=OsZs_)mW3-2
zg>6fRq*PSF0wQxzPlQNk%sVMVdYVZ7Cf{!#0Ea|MKPy^IYq+jjl{%za4+?ft<L^~Z
zrl>b9TL$<?VV5^@O1%U*GY9A3xD4&ThCL|i$p}VJ%T!~{I8`MAF?!ad$Nig0Ph{0n
z>wJ{5T#gX#T-o%?It4@2OrueTl!4brBF$r_(V+l+eW$~PSQi;Xd6N5=DcU`vlS~`e
zoqnmBW@mCvY5q1$Zb&<lm@zW*5Z_gq1OdEGzEb*?#G+}rTu(sZy;2&zzyp0`p6Vrg
z_}hk^S|`3L(v|t!X)9M%NJgF`k8qSy8QyVcpED`mrj$}=S%8TOn@M%6-QF0v>Co~e
z9Fk7{P$K#jdy&TA=?I=*Z$0!S`MLM825e-3`=c9PaixVk#lBJ4QVU%^4j(;3))mR6
z(4uLLi>y(aw?aOc7MPwy@%bY40e5Lwn1fH%8|pbex7pY2H))`joN^mhIP_aNLL=@&
zrRvPYmG~6hG(mSbT7Q1u;d7tK6qsv#(e~s!RZfwC2jQ)|%tz`I@{*LEFr3pk4Q%QA
zU7*@~>aFQz%{FZbKmnLMy8@9?6Lfk2)v0Aoeo!g<xocArv9X>^c43mnsT0C6TT+}~
z6L%xg6F=WEW1EOHJl>4fjytr~5zv?Jj3LDA?-?K$qO|w-_V#vnv!ss<g=mITHitCy
z%zc}Q`+H3K!omW%GbW+8JCsyPJ-2dgF~oLgtqm}D{sS51hT|dWYc{`6D<#!Um%5}%
z_3DQT%!H>(ZGPa<Gyl{%7r)X$vn;=L)To)VD%$@Jc|T=pRjfZSRjTn2Uy)1%M1t-(
zf3_(wJEwBpMv$|an8Yqfo+Zx(x!(ME3}*k>5)y-z;a%JP@a0^fdN{?yd;B=xlMKm&
zfcgJ2yd9v|4V{0Sx6Bt$0gwPR9`N1*-^e6RXX5LAF&KovH%ykc{xx$9g>Vh_BYSxB
z$&XAsc#C6R1gGvOtKg^BCWJoc!C<ymhvP`4I?w2Hh&+lq0A+Kjq)wdP&_BN~ss`-3
zxoG@+Og#v&X}W?_3Yy8|*9b3J(JsPI4-hKF@?KQKw`j#(C8KmMn=4s>`pX<WLI|a(
zM^`=Ax>V1CZMmal_^Q?B5Wm%vRg4Wwe2gPHDt$h?v`n8Qp45B2fEaA8bB}cG56szn
zvuVGD1`Ue!uR<`J<+NiZGQ8X5O|#j#?yn*+=r)lrplyxRh#~%YQV|W_JZ0<D&Z5-(
z_FS<Yca{<l*>KHplt0xU`1pJ|lJNV;73<+mCUQKr2@sZ;ia!grZr}b^muJQID1t)C
zpQ6#bXv6yze<4r#uZBYmtB&YC>Lgb&{~-5Q!_&1}r_BlmyR~bytJRZf$C{{V715GT
zyb3ehznyD|R&7j{^8k5p?!NZW*pid>%u@1BG+6va$wymGl%vYaBF|28?r%A!6o$nz
zh$&lcW$MW3ybubu;L^pC>BTas!Ho@kX}Wc7c2m__;Xf{=^!KJqB^Jpf4js84ww!aW
zVfSmV;&%W7!(4WTLm*QNE--_${S4%lSi7l_>gj+Iw;%a*WSG;}8o3!7JWYDI@bhIj
zL?V}Cd9I%*1a<1j`K>qh_u8SV)>x{rjGP_I4zTR`dVe->wM1vxda{(kFTz~21&c(O
zf2z@(Aou<D$cjv2<+-~XD^;Cd8j)2C&Y4e;dt5dfp%qvDa)nO&UO66da_=qu_grh^
z$Fy7WC(ViqskfH5Rt1>e5ho2^V7RNj({x9~)*?0@zLqkep?n<9S*P?DM~K^-$}tIU
zhS1?N8V24m6;2|x(k~{X9aFh3h1hFrB1qc#S`xq3=x)tVKEJvI9aI}@U!g~Zi4**G
zx+nBwOZ5F<?YrR)z{OhI6H7iWq=aB-Dj5pKn*KhYWxaAxDC$%gF-W`>KI^j~TSjN*
zEzBY0k?1F<nw&7UWkG1`PcQ0jc-2oLGm?ww-CqSXUvrdr?L_||Z~s1wVb+CPi|fpE
zFAK<w?I8E8dt5VbLhyW#&zp=7dz|2mqcdGaH{0_vSfBS*XjPjV=eb7~f^$mYH#h9x
z+e`EZ))IWc6=+`?f>2B8);t=w@yF~gqo;F?bkw<dF7YARJkHI|_4N#6I}Qv@l}hN<
zwE%V=r~XtQiSAT$Vv`$LSOXkmGyC96#?Zh0^%ZWBpZHbOv{l=MfOfUWB(3GzM+IHH
zFV>Us0YV*=aEP`<3X>(#|8Cb@^Q|dha*;JECIB$!Etm^S8(c*4GMFUC0DBv;{*=RG
zm!}3}f!(6oA-L94(Nke+;Z7BwCM4`LaV}-po{Q}%T@fboMVAeNI>}Ci8u+91PqR$*
z<hg~tKT_%JiIW7hs(EEQ!~Xq;27&J$G`*UoNUZ5CIqKZ`G1sSbCU8SS2q5v(yEf1g
z#&PJzABavq9^Gl0w-8D_kr4(6P=yhWB}e7|1HnwkE;V9nnjSjcT`O}ZT{<Mt1iw=k
zWi$&{IJo6(DEjAQ=!+sCW{`_~GXh*!o1<!GI|>kN9BCx_8a`O#+H|n)Oh#qG>ryZ3
zNuqyq{r)1r<+Q{J)#?a2-!-I5E2^>|h@AlI5<7I}5q4hS9)-bZmPu6PH#%31EDinl
zLGBMq#a<Xps+cqrX%-AQ4EC<%)>a_2u{iA~zENXyS{nV_RUbkSc#YWzhdeMKGiaf6
zosGScxRen3`$tCKes%x78EAdvStI|CYfoZZ&;6>$-wmtBI+iV4Z!Mf9JN1X=M%z!G
z2YdiciArWaQE80zkJxg>O}_t0S(RzL*Gf(SZe<vgL{Ue%7>tMiPG$(f9pCG1z#;fG
z?||B0;Wq!M`{C>P_)LZnN|ji(f@gH#<d>Uv8&aiSYr&$(K-7fqynr#{vgyC*wMq|a
zSrpe(P3aEX9eh-R3d}&{?eFe}=UwjX+2j$8ko*2F{K-S5a*{o>+ooOF;Z}c-nVQ3`
zFgui=>RB>l_$~5<gX?R}`(j^xp2T1jBD;+u-qPr1OR9#Z-yD{4-C+adKo`0gB{p<i
zrN&w9)gA`jngsAXY?LbS(yjg*V57%Ehd_frQ@>w)GH44eQ8Vx5=mP>Wh;q*m>mox|
zBcr0dv*j+`f<&!-JH$V}%He`}`tF&OfguevjyHL&uUn?Y243v_AEllhf>Bb<ChEy<
zI#MUCm43Jk9*XNDnV)DGFQDjq$k5bs7QVhA(!Q=9FUhamJfRr;m(97`J8!*p(5TO4
z`i!7ts&&RD->`Xa>gTY>=U*9+I_`~M2C&$@Pde!Y@}>Xv&NM}SA0G?&o0_r)m#3G0
zq&|=xL>tA`v7+($uR?Pqv6|Xu(9-I4WaoO@rEL3p_rLETP|vHag`e)yWlorPd~Y=I
zpsheKJ8cyxvo854OAVi9sxe}gR+R$H8|#ad+YTC(BY$Fwfc(a@{{%^z=rk=Y|B-w*
z=yLt9<bH6S0Tb(e83tB<l>4p1{cmA}nt@P#gjhd1rC4*j`P(NzdQ7y;wGtT7oz0zD
zr4=2xU-njvtIBxzK4&FMeA4f*?!BdjoW(956LSd%hFL|!-1O&PRcjqbbVuLuS$C{&
z%75H8V*W9vcD$Y*0e>sqMi5=lPU9+0;b>&&{)P5{=`$!ugw!CA6LKPCP^xX3nu&gS
z3+RBbX5!~b)OqeGvO?lTlX1Y!cDJK}8)@)d_iTu)VIHD|NOL4Kszs`cnU<xc8#-&e
zHT`3JnW?qdv0NmhnwtbUG0H&JFAsYJ<48XPV3}qGUbz<GcF6i~6C+$If5+i%@=}xY
z#{eHPr_@}yrS>Y{VDL{`!Y3j+BU%P=mw?BoL`l+)5I;Uf*Ic(O)%r<;I|x4&o86A;
zaK?0YcGfQE;TIJ7=idKhhI-&+HG8dZZoja4ix_#cJ6RT%)%;6G65qM-c<T8~!*LDe
zsubBkCqk`^!8b>OIM!$FKK1X{zoz#rzwYs*?=4PhpC5!Iw68yW^x;r|QUoHWZTD^Z
zj1nnkatxKXBW(n42_m55!7*MABk3Jysm{GYOL;3&zglw<o(`e)mQXzy7~ELdd3HOb
z(rh$%DbL?(`n}_Dg<K!jX)q9cUEf%CWi!=@qsl!uXg)JXf+7(<DLm&zwjHFGw7P4I
zJ4cV;JL_B5@01&=igM~gA6ASty}5!^8@q}%#HHmpT{)c}Lk>7ND7qxl@`&r;$GxQ!
zy=V;^<QHeC$SZxr3btOjTriW+6e6E#wBdzxYVftJ{Ej}t`!aHNE&XBEG#{5o-k(gg
zA7TudvCd`{s`J+sLx;%Hm!Y4mCrO|8<s(@kwB9pyI@|f(xv3%@Asu%Y(kGrArrSH8
z4tq>R-8nkIqd0qFF>=;2^I?{}?T!>*N%OmPRC>Le7e&4H`p@6CXCGdrK@+M!MjTp>
z(#|)%%%rGZo|*N#WB_D^{xP4WCqg>OL{<SQ?D|KuLZnRW0>Z=bCT188S@|}gToD$1
zp$FpTahRS7uTCn*Mx|kGa!PR|dHkA8B7lHR>p&EEs^zejL<-=kMtAlHf|7Q}sSPCm
zBflaNkIMwjtLYWCX@kU_CANm<vP}<+;k<o!#7hf%r-a?)jKipxvd<{ck=ie2Joq)K
zl-~^8aw~k_l;LCqJNjGF^P5Lw1pTFoDQ2$g)D`@D<Hk>ZO};#S#p&?$BpGkjS`}=G
zv_%c7Gfe=I2UKgu!XznWVpT@(nY9j@;Fy>gcTZ#T%_d*V)Q}sQcKwI)YaruZS85ub
zK2$KzH8&(8B}?(|){`(aH-u}v>roG}d$i?7g54ai6_um1Ww1dLQUVu!_U6^RY+VD@
z@KkKosX`om=Nm%I24hx0cwct>Slj2tIWMKzu#06?th2S^=?@M+3lsY~>Mr*64cafC
zy@+{X@YID{Q*%H>Yb@TfZfz5GxlBLQ5m)W((DY?krTt};g_2{}uXl4k;Sh;GSGGDj
z$#ftFh`KtNRz^TvoOC-~;oC&r-DenwkQ+fDa`OVB4qK6v5xq{*iCa=N(V!{#tOLrS
zhsarHy|t3;lJ^tVgL_pSdR95q+UULSIDBt<vui2()8+>u54M5T@M`gdjmbE`q7Ef^
zc5G~73N@3jB)e^YIC2E##Q)<f$$}6_@W_>82njGbBS<*4zvI+Sw?pK#mNv91^t<YR
z_h~+#mcKJSBW+uW9<iCu4E7Dxd4Mwnf)z-;vpH;-RUXkosUZAOa_M=WnT<2H9}Odj
z)0^lUJPr6{#jcWi@XK;Ky~InBF6N67uPJFDm0fsE4_rw`DTTq<yI@z_4Y}E@|0nC6
z1*wo{;XswipHpP|ljR6XUe7LX0Z00MkZl(nO6s~<3>s9;9rkZ_Xg%Mx4^)1D;?a(v
zQbNggSby1r!Qz@+i8td7T#+u~E&;MP@)qQ{WaP3-skwMuLd4n-HQ6A0d!i~0LoogB
z{FVd4%@H}W0VGja6<HcRb1}ohvlo-y5bX^L2oE!_=vC*m54lIW)MN0mUO6G(A@U{U
z{v+4FGRq_Qu_XU`5MS@;8U%57$-g<+iC~&gB=a--dEUb3)AAXa`T6-k(j$+vo=mR?
z8I4bbIvJ=bHzP&k3Cmy;%gFjaSvUIw$5a~6g<rrBw>?kYXgaSo?W@{&0v^yzgy3CF
zf3}nS-3goZt}9;Uu1L1ESKVW`d`jS!5$`sy!7X%TC+$k|tZT5JZt)l$6IAMy!6{iY
zS2~=JX;!25?QDCC{5PbztIbCLSWQ^)s<@A?(cd)Z<GwXuA+2AMFH}ret(ganCM$mP
zpq;2POu7?%58bp-F9a=_WE70Eg0t?pp`1gi{R2+>+7a8l5sQfDkezB7UPN8?8sj~H
z7d?s%T3^uDJ(~p`c+U^_S+F~6Tf9Wg+7=#L#@+qkh_Our$2*?*rEaW}SVZy<Yj>6w
z#4prC_!PJ~aFIrv_m7}_J2%Z!Qk&ZQDt^PYJ{yiL83{tkcTN9<-97vn{y^o4l$B__
z&;wV|0UUZD-Krx;;s+IxhY(&IRQieVkJveu(7PHQwfw4p-J~Z#xPP@cj=JlASq|*Q
z`c?z+k~6fLJdBbuw*(tH)AyiMR<r`ku5A3d179b5+=i2}!;s(CK+CbY^wJ8>G%p61
z?s<~KqyT6E<8STvN;Af5lC@3ETM$pV0|40r0DEl1iIRPKFk~hwFZ9H9q?+_~yGvB5
zLenx!bK%Wp1-|p_jG#7aKLe@jfNdv-7V`I=(T+VW?2I(3wAy@>FdYc>P-(edT?iM>
z82-!L3(~$FI+<Kg2Mbie*>2Mu8lRkfz+Z#BcQ2`HhqIkyc{Tj5DkATc-WMR6scEuE
z%$`I)tlY7@)>t^UrLYze%57c2#$?UN$F{%dh}($LcCVj&?bvuWPM`DZ<;9awd}}0+
zv{q%6j>NIFOK8n6YXNPZjl7pAdOm}0s>D_29_KiB|2P$E+2>fw>Xenx;vdZBZ@DNQ
z<@i~5+ve{(YUb?D$pXkb{klT;;sT*AH3aDvcRoc?uMLCuhTQ*Q7sG!+{`vnO@n2sr
z-gjtaV*#xxKsG)qU6DUi{^l{CV;~{kEGw$810uRc1)CG(J(qu}z?AB!ypJ0R_6v<e
zU!}9t49l`K*yqmqXtCQ0L*Z66G&hcpzce;}Mmak8)?CCslZE;HGzP|UV$j<su^v7z
zYNY#JzmXzKPGaphPq+Sh%5?XJUhNcOFBq6;5~=o<yVrZMhOHe{<2@`6Ejd|0dYldR
zfo11Nd2y9{jQpLg?9<U@-z$BXO%mu)@!$oG@owE!e)v@^PS2kGobSj`4g{O!&%Pz3
z{N|T3n5V)S_}FwJYPzfF8h6xl#F_XLhef=&qB2e^z0e@BmtV7nnYVLvi~=1h2kjYI
zQrL25b{C&9LlH301N8D7)Cv=;pynj~;tbFhq%Q!fv}JqqS=Mgi-;F_TLtRDJw^kF2
zKGpeBEp8-Sv42_>{z|ql!`&{Y^Z)^VwARv@KuMzW+d*tyLs2&u{usEscQ~$tyE-Lx
zVf)9U@;wtG4Nfn6`OP<{bpB(J%pXXYSpOP?5K8{0y&{B!=1UIN0oJJW%+_|)9*c#1
z$ONEc4YHkpSPjwi15Bw$u;$yDZ|b95aT^yBixd$*5i_gdK<SXdylx=GEHtJ+KrJ8`
zOxAW(@>mz=VNp5kVxY@c|7K;AdLT1ErX$G=hywRxAZK^x2~f51AKkDP)&p>Hzp0Jb
z@fI{#2lBD+Xf1vx()Xs19@gn7kH6+9pZQMpX@^8g!uHKHsS2mQT{)iK(KgS=L(%40
zM^)v%Pe^WtL+lgJ^uMDsH~)0dGY5Q|#Pq&UR<W6x>Jn{=^J@M|qf)z^^9os372cWG
zXz#hs@zntjfphYL-99L1ZboSnYU@b;w7E41*;lm~#GeG%L)gezX@hLLbW*?CQ&-Qh
zSD*JU8H|P00OiIs@jx*k0l;MW-(P>EZe^>HkGDe^#Jq6=1G`R&0I_wUaNGvZ5YH9c
z)ts!bJ3Jsl=#%q`#Pk6tqx+i4fSs2n6v+fR5!Tw&lci^K;!FAhL9D=o1k!!DtwX?4
zqoN8><^$@g2YKKiuVdic1;pk_148KVzRh?Iq32#=Trt_R`*@z7Ibc6q5;GSNk?HBJ
z3*uF-4o>e5)&b+tK{v9E7|iyHFVVu-Cy#HlShUGG@>S^Rhx<UEPc(;R3zjkq<otnz
z|2z6-#s|F-8p;2%`>Q^Cv3{lb0()hph)~pc{oYZ)r{JLOqIf6#o6`yn%!Scjvc<%J
z=G>OhQuvz)s_!|pZN~?xc^Z5f`mxGJbhw=0J+xsjYG~fOBRId;0Tj#Ys6j1vReV*?
zDhteXoEYUy82Sx!Cez@>nb=JW4`vh?kw-kW1qjr>!*GE!->oYg%eQWuKZw6AE|37o
zBbiM0{w<brhZ#fTgVznv>GYU=7NI?Jx&%)R(F9Ufhq#Tsvo6>wJ!n8OJ*uhOQL68j
zRVGeE%JFCDi-GYZjTb(hne`F-!}UJ|&N4qPrEbE1;U3=}uhD4KN~N~`B+sj!iM-R8
zQLLWqW3&<EI^?@<ToAuu{*z&zD2HDwkqBvbt~y06*(Zkd;%d+K2Qp-zFSj-mhfNbp
z_b_A0K&BkI?;eA?o;6cFX4MAVK-wFczZBg$$gljT^U|rItI|Lomenx_Ptj4x1oQ>o
zU0G?}(oYG*k-XJreEvCbR`y4~?4)C=)HSz8@2lW|<j}>AomlxtxH<LTJ)=*%c0|z2
zPh$1mHeF2^QQmAz#@8w?gF)4=RqVA?m4T~Ha)YW(h4n}ZG~n^4lOWY`HW%0))+Im`
z1%QS)$`O$a(CnZIgJ15yqtAl_^tqF60i=EUtm5>f`L=Fa>agb>z|SRqkgQ#oZFXzK
zoUv2y#rjx<Yq#t*>cKppL9<VW;g8KEpq7{AV>7aTJjgGO*XtGBf&nd4AB|0JD)DXI
z4KB@4Ucep(hKkB%8Om$wpftM=A_X}bFCP9b$%~vV*MKPT-5Yq*w&r5t04veT=2|@H
znldtZ?dW}0X`LO~33N??5DJA(lSNHj)hJ}VyhA&5>w@qm`j)pt*Yp(lIrvR(Rk*jn
zJFe<spfRfYBK9`8=?xfZ(WNF6I#NyJbTo%OAKMzsh>41Yn~?gKAq1OK&?2wJL&&wR
zlCRm8eTIhyWsp&vB8s&cm#sceAF8@dNZ^Ax0-am`C!H3`KF9VWImU!qV?WSb%4VQv
Ldb{=}?D2mCKHFqS

literal 0
HcmV?d00001

diff --git a/tests/ragger/test_blind_sign.py b/tests/ragger/test_blind_sign.py
new file mode 100644
index 000000000..a4ed7679c
--- /dev/null
+++ b/tests/ragger/test_blind_sign.py
@@ -0,0 +1,55 @@
+import json
+from ragger.backend import BackendInterface
+from ragger.firmware import Firmware
+from ragger.navigator import Navigator, NavInsID
+from ragger.error import ExceptionRAPDU
+from ledger_app_clients.ethereum.client import EthAppClient
+from web3 import Web3
+from constants import ROOT_SNAPSHOT_PATH, ABIS_FOLDER
+
+
+# Token approval, would require loading the "internal plugin" &
+# providing the token metadata from the CAL
+def test_blind_sign(firmware: Firmware,
+                    backend: BackendInterface,
+                    navigator: Navigator):
+    app_client = EthAppClient(backend)
+
+    with open("%s/erc20.json" % (ABIS_FOLDER)) as file:
+        contract = Web3().eth.contract(
+            abi=json.load(file),
+            address=None
+        )
+    data = contract.encodeABI("approve", [
+        # Uniswap Protocol: Permit2
+        bytes.fromhex("000000000022d473030f116ddee9f6b43ac78ba3"),
+        Web3.to_wei("2", "ether")
+    ])
+    tx_params = {
+        "nonce": 235,
+        "maxFeePerGas": Web3.to_wei(100, "gwei"),
+        "maxPriorityFeePerGas": Web3.to_wei(10, "gwei"),
+        "gas": 44001,
+        # Maker: Dai Stablecoin
+        "to": bytes.fromhex("6b175474e89094c44da98b954eedeac495271d0f"),
+        "data": data,
+        "chainId": 1
+    }
+    try:
+        with app_client.sign("m/44'/60'/0'/0/0", tx_params):
+            pass
+    except ExceptionRAPDU:
+        pass
+    else:
+        assert False
+
+    moves = list()
+    if firmware.device.startswith("nano"):
+        if firmware.device == "nanos":
+            moves += [NavInsID.RIGHT_CLICK]
+        moves += [NavInsID.BOTH_CLICK]
+    else:
+        moves += [NavInsID.USE_CASE_CHOICE_CONFIRM]
+    navigator.navigate_and_compare(ROOT_SNAPSHOT_PATH,
+                                   "blind-signed_approval",
+                                   moves)
diff --git a/tests/ragger/test_nft.py b/tests/ragger/test_nft.py
index 87c1ac0c4..fd3987122 100644
--- a/tests/ragger/test_nft.py
+++ b/tests/ragger/test_nft.py
@@ -11,12 +11,9 @@
 from ledger_app_clients.ethereum.utils import get_selector_from_data, recover_transaction
 from web3 import Web3
 import json
-import os
-from constants import ROOT_SNAPSHOT_PATH
+from constants import ROOT_SNAPSHOT_PATH, ABIS_FOLDER
 
 
-ABIS_FOLDER = "%s/abis" % (os.path.dirname(__file__))
-
 BIP32_PATH = "m/44'/60'/0'/0/0"
 NONCE = 21
 GAS_PRICE = 13

From 30067d6f7cd3a239910af7de7fccd65aee363577 Mon Sep 17 00:00:00 2001
From: Alexandre Paillier <alexandre.paillier@ledger.fr>
Date: Fri, 8 Mar 2024 17:51:27 +0100
Subject: [PATCH 5/5] Updated release date in changelog

---
 CHANGELOG.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 0bfabaaa0..9b3afd163 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -5,7 +5,7 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](http://keepachangelog.com/)
 and this project adheres to [Semantic Versioning](http://semver.org/).
 
-## [1.10.4](https://github.com/ledgerhq/app-ethereum/compare/1.10.3...1.10.4) - 2023-02-16
+## [1.10.4](https://github.com/ledgerhq/app-ethereum/compare/1.10.3...1.10.4) - 2023-03-08
 
 ### Added