What the developer wrote
Authored by Ioan Bizău
chore: update signed T3W1 bootloader
Built from 396ba43
(cherry picked from commit f452da4d8be26500e109a1396c392eb308238fd9)
What changed, and why it matters
This commit replaces the signed bootloader binary for the Trezor T3W1 hardware wallet model and updates the matching cryptographic hash list. The change is a routine version bump from bootloader version 2.1.16.0 to 2.1.17.0. The commit message and diff provide no information about why the bootloader was rebuilt or whether any security issue was fixed. Because the actual bootloader binary is a compiled blob, its contents cannot be reviewed from this diff alone.
Treat this as a routine firmware maintenance commit. To assess security relevance, review the source changes in the referenced bootloader build commit 396ba43 and the original commit f452da4d8be26500e109a1396c392eb308238fd9, plus any associated release notes or changelog entries for bootloader version 2.1.17.0.
Security signals we found
Opaque binary update of a security-critical bootloader component
Version bump from 2.1.16.0 to 2.1.17.0 without stated security relevance
No source diff or changelog visible in the commit
Evidence from the diff
The commit updates core/embed/models/T3W1/bootloaders/bootloader_T3W1.bin and the corresponding core/embed/models/T3W1/bootloaders/bootloader_hashes.h. The header changes the recorded SHA-256 hashes for the production bootloader from version 2.1.16.0 to 2.1.17.0. The devel bootloader hash remains at 2.1.17.0 and is unchanged. The binary diff is opaque (binary files differ), so no source-level security analysis of the bootloader changes is possible from this commit.
Changed components
Trezor T3W1 bootloader binarycore/embed/models/T3W1/bootloaders/bootloader_T3W1.bincore/embed/models/T3W1/bootloaders/bootloader_hashes.hInspect captured patch +3 / −3
diff --git a/core/embed/models/T3W1/bootloaders/bootloader_T3W1.bin b/core/embed/models/T3W1/bootloaders/bootloader_T3W1.bin
index 2002766b..34ef5e73 100644
Binary files a/core/embed/models/T3W1/bootloaders/bootloader_T3W1.bin and b/core/embed/models/T3W1/bootloaders/bootloader_T3W1.bin differ
diff --git a/core/embed/models/T3W1/bootloaders/bootloader_hashes.h b/core/embed/models/T3W1/bootloaders/bootloader_hashes.h
index 18bbbadc..127f2581 100644
--- a/core/embed/models/T3W1/bootloaders/bootloader_hashes.h
+++ b/core/embed/models/T3W1/bootloaders/bootloader_hashes.h
@@ -4,9 +4,9 @@
// Auto-generated file, do not edit.
// clang-format off
-// bootloader_T3W1.bin version 2.1.16.0
-#define BOOTLOADER_T3W1_00 {0x2e, 0xc6, 0xa2, 0x30, 0xd9, 0x3c, 0x41, 0x96, 0x2f, 0xf7, 0xce, 0xfb, 0xea, 0x01, 0xca, 0xd5, 0x8c, 0x9f, 0xe3, 0xed, 0xc1, 0xfe, 0xe1, 0xd4, 0x21, 0xb3, 0xd3, 0xc1, 0xc1, 0x51, 0x9b, 0x14}
-#define BOOTLOADER_T3W1_FF {0x2e, 0xc6, 0xa2, 0x30, 0xd9, 0x3c, 0x41, 0x96, 0x2f, 0xf7, 0xce, 0xfb, 0xea, 0x01, 0xca, 0xd5, 0x8c, 0x9f, 0xe3, 0xed, 0xc1, 0xfe, 0xe1, 0xd4, 0x21, 0xb3, 0xd3, 0xc1, 0xc1, 0x51, 0x9b, 0x14}
+// bootloader_T3W1.bin version 2.1.17.0
+#define BOOTLOADER_T3W1_00 {0xbb, 0x78, 0xe5, 0xd0, 0x5f, 0xde, 0x18, 0x09, 0xfb, 0xec, 0xa0, 0xf3, 0x09, 0xbd, 0xd9, 0xeb, 0xdf, 0x24, 0x84, 0x54, 0x71, 0x60, 0x23, 0x1e, 0x44, 0xfb, 0x91, 0xa4, 0x46, 0x47, 0xa0, 0x93}
+#define BOOTLOADER_T3W1_FF {0xbb, 0x78, 0xe5, 0xd0, 0x5f, 0xde, 0x18, 0x09, 0xfb, 0xec, 0xa0, 0xf3, 0x09, 0xbd, 0xd9, 0xeb, 0xdf, 0x24, 0x84, 0x54, 0x71, 0x60, 0x23, 0x1e, 0x44, 0xfb, 0x91, 0xa4, 0x46, 0x47, 0xa0, 0x93}
// bootloader_T3W1_devel.bin version 2.1.17.0
#define BOOTLOADER_T3W1_DEVEL_00 {0x27, 0xd6, 0xbf, 0xb4, 0xcf, 0x14, 0xfb, 0x71, 0x19, 0xf8, 0x2a, 0x23, 0xb9, 0xe8, 0x7b, 0xd9, 0xc0, 0x8b, 0x2a, 0x07, 0x32, 0x3e, 0xa1, 0xec, 0x71, 0x0d, 0xd0, 0x58, 0xc8, 0x25, 0xe0, 0x6b}
Why this scored 3/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.