chore(core): update T3W1 embedded binaries
What the developer wrote
Authored by obrusvit
chore(core): update T3W1 embedded binaries
- build command: make build_bootloader TREZOR_MODEL=T3W1
BOOTLOADER_DEVEL=1 BOOTLOADER_QA=1
- then: make bootloader_hashes
[no changelog]
What changed, and why it matters
This commit replaces a pre-built bootloader binary file for the T3W1 hardware model and updates the matching cryptographic hashes in a header file. The change itself is a routine binary refresh with no source-code diff, no changelog entry, and no stated security relevance. There is no visible evidence of a vulnerability or malicious change, but the opaque binary blob cannot be independently verified from the commit alone.
Treat as a routine firmware maintenance commit unless independent verification shows the embedded bootloader binary differs from an expected, reproducible build. If auditing, request the matching source commit, build artifacts, and reproducible-build attestation for bootloader_T3W1_qa.bin version 2.1.11.0.
Security signals we found
Critical component modified: device bootloader binary
Opaque binary blob change with no source diff
No changelog entry or security explanation
Hash values updated consistently with the new binary
Evidence from the diff
The commit updates core/embed/models/T3W1/bootloaders/bootloader_T3W1_qa.bin and the corresponding SHA-256 hashes in bootloader_hashes.h. The diff only shows binary content replacement and hash updates for the QA bootloader (version 2.1.11.0). No source code, build reproducibility data, or security explanation is included. The bootloader is a critical trust anchor, so any change to it is security-sensitive by nature, but this commit provides no direct evidence of a security issue.
Changed components
core/embed/models/T3W1/bootloaders/bootloader_T3W1_qa.bincore/embed/models/T3W1/bootloaders/bootloader_hashes.hInspect captured patch +2 / −2
diff --git a/core/embed/models/T3W1/bootloaders/bootloader_T3W1_qa.bin b/core/embed/models/T3W1/bootloaders/bootloader_T3W1_qa.bin
index 28894cd8..dcd4c2b9 100755
Binary files a/core/embed/models/T3W1/bootloaders/bootloader_T3W1_qa.bin and b/core/embed/models/T3W1/bootloaders/bootloader_T3W1_qa.bin differ
diff --git a/core/embed/models/T3W1/bootloaders/bootloader_hashes.h b/core/embed/models/T3W1/bootloaders/bootloader_hashes.h
index d612fc28..fa7360b7 100644
--- a/core/embed/models/T3W1/bootloaders/bootloader_hashes.h
+++ b/core/embed/models/T3W1/bootloaders/bootloader_hashes.h
@@ -9,8 +9,8 @@
#define BOOTLOADER_T3W1_FF {0x1d, 0x64, 0xb5, 0x4f, 0x23, 0xad, 0xce, 0x9f, 0x09, 0x92, 0xc7, 0x54, 0x88, 0xe3, 0xeb, 0x71, 0xa2, 0x9f, 0x69, 0xf1, 0xb2, 0x22, 0x4c, 0x0d, 0x89, 0x7e, 0xad, 0x80, 0x9e, 0x30, 0x08, 0x0d}
// bootloader_T3W1_qa.bin version 2.1.11.0
-#define BOOTLOADER_T3W1_QA_00 {0xb0, 0x78, 0x73, 0x50, 0x87, 0xba, 0x84, 0x4b, 0x67, 0x3c, 0xe0, 0x50, 0x41, 0xcd, 0x13, 0xd3, 0x35, 0x85, 0x38, 0xe1, 0xf5, 0x7d, 0x04, 0x2e, 0x3a, 0x08, 0xe2, 0x01, 0x90, 0xca, 0x2f, 0x15}
-#define BOOTLOADER_T3W1_QA_FF {0xb0, 0x78, 0x73, 0x50, 0x87, 0xba, 0x84, 0x4b, 0x67, 0x3c, 0xe0, 0x50, 0x41, 0xcd, 0x13, 0xd3, 0x35, 0x85, 0x38, 0xe1, 0xf5, 0x7d, 0x04, 0x2e, 0x3a, 0x08, 0xe2, 0x01, 0x90, 0xca, 0x2f, 0x15}
+#define BOOTLOADER_T3W1_QA_00 {0x37, 0x4e, 0x90, 0x00, 0x58, 0xe4, 0x5a, 0x9e, 0xf2, 0x14, 0x25, 0x78, 0x42, 0x8d, 0x69, 0x81, 0xd0, 0x9a, 0xe1, 0x15, 0x43, 0x64, 0xb1, 0x74, 0xc9, 0xfc, 0x97, 0x63, 0x10, 0x8a, 0x94, 0x0d}
+#define BOOTLOADER_T3W1_QA_FF {0x37, 0x4e, 0x90, 0x00, 0x58, 0xe4, 0x5a, 0x9e, 0xf2, 0x14, 0x25, 0x78, 0x42, 0x8d, 0x69, 0x81, 0xd0, 0x9a, 0xe1, 0x15, 0x43, 0x64, 0xb1, 0x74, 0xc9, 0xfc, 0x97, 0x63, 0x10, 0x8a, 0x94, 0x0d}
// clang-format on
Why this scored 3/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.