I just reproduced Coldcard Build v5.1.2.

This process checks the compiled binary against the binary published by Coinkite. If you see the "SUCCESS." message, the binaries are identical, except of 64 bytes (Coinkite's signature).

These bytes are removed using "TRIM_SIG = sed -e 's/^00003f[89abcdef]0 .*/(firmware signature here)/' " in the Makefile.

If you wonder why these checksums in (~/firmware/stm32/built) of the compiled files are different, compare to the binary you have downloaded from https://coldcard.com/downloads/, it's exactly due to those 64 signature bytes.

Full video here:

https://www.youtube.com/watch?v=Y59KacZNIdQ

Here is my copy-n-paste process/instruction for the latest version.

https://gist.github.com/xavierfiechter/0b7323318ada8937f817606dff8fdb57

Just in case you want to send me some sats:

lnurl1dp68gurn8ghj7ampd3kx2ar0veekzar0wd5xjtnrdakj7tnhv4kxctttdehhwm30d3h82unvwqhhxmrfva58gumrwfjk2m34xgfgqgqd 🧡

This PR https://github.com/coinkite/bitcoinbinary.org/pull/71 adds the proof to BitcoinBinary.org

FIN.