chore(core): update T3W1 embedded bootloader (dev)
What the developer wrote
Authored by tychovrahe
chore(core): update T3W1 embedded bootloader (dev)
[no changelog]
What changed, and why it matters
This commit swaps in a new pre-built bootloader binary for the T3W1 hardware model used in QA/testing, and updates the matching cryptographic hashes that the firmware uses to recognize a valid bootloader. The actual source-code changes inside the bootloader are not shown, and the commit message gives no security explanation. On its own, this looks like a routine firmware housekeeping update, not a fix for a known security bug.
Treat as a routine embedded-bootloader refresh unless the vendor later publishes an advisory or the bootloader source diff shows a security-relevant change. Users running T3W1 QA firmware should follow normal Trezor update guidance. For a security assessment, request the matching bootloader source commit and any release notes.
Security signals we found
Binary-only change to a bootloader image with no source diff
Updated bootloader hash definitions to match the new binary
Commit message is a routine 'chore' with '[no changelog]'
No mention of security fixes, CVEs, or bug categories
Evidence from the diff
The diff only touches two files: a binary bootloader blob (bootloader_T3W1_qa.bin) and its corresponding SHA-256 hashes in bootloader_hashes.h (BOOTLOADER_T3W1_QA_00 and BOOTLOADER_T3W1_QA_FF). The hashes were identical before and after, which is expected because both represent the same newly-included binary. There is no source diff, no changelog entry, and no description of what changed in the bootloader. Without the bootloader source diff or a vendor advisory, no specific vulnerability can be identified from this commit alone.
Changed components
core/embed/models/T3W1/bootloaders/bootloader_T3W1_qa.bincore/embed/models/T3W1/bootloaders/bootloader_hashes.hInspect captured patch +2 / −2
diff --git a/core/embed/models/T3W1/bootloaders/bootloader_T3W1_qa.bin b/core/embed/models/T3W1/bootloaders/bootloader_T3W1_qa.bin
index 661a44bb..2949df97 100755
Binary files a/core/embed/models/T3W1/bootloaders/bootloader_T3W1_qa.bin and b/core/embed/models/T3W1/bootloaders/bootloader_T3W1_qa.bin differ
diff --git a/core/embed/models/T3W1/bootloaders/bootloader_hashes.h b/core/embed/models/T3W1/bootloaders/bootloader_hashes.h
index d11f4f8c..8a427253 100644
--- a/core/embed/models/T3W1/bootloaders/bootloader_hashes.h
+++ b/core/embed/models/T3W1/bootloaders/bootloader_hashes.h
@@ -9,8 +9,8 @@
#define BOOTLOADER_T3W1_FF {0x1d, 0x64, 0xb5, 0x4f, 0x23, 0xad, 0xce, 0x9f, 0x09, 0x92, 0xc7, 0x54, 0x88, 0xe3, 0xeb, 0x71, 0xa2, 0x9f, 0x69, 0xf1, 0xb2, 0x22, 0x4c, 0x0d, 0x89, 0x7e, 0xad, 0x80, 0x9e, 0x30, 0x08, 0x0d}
// bootloader_T3W1_qa.bin version 2.1.13.0
-#define BOOTLOADER_T3W1_QA_00 {0x11, 0x2c, 0x91, 0x37, 0x5c, 0x77, 0xa9, 0x49, 0x13, 0xc2, 0x94, 0x6b, 0x30, 0x84, 0xc8, 0x2e, 0x7e, 0x44, 0x94, 0x61, 0x32, 0xbd, 0x03, 0x99, 0x95, 0xc0, 0x5a, 0x49, 0x17, 0x48, 0x80, 0x53}
-#define BOOTLOADER_T3W1_QA_FF {0x11, 0x2c, 0x91, 0x37, 0x5c, 0x77, 0xa9, 0x49, 0x13, 0xc2, 0x94, 0x6b, 0x30, 0x84, 0xc8, 0x2e, 0x7e, 0x44, 0x94, 0x61, 0x32, 0xbd, 0x03, 0x99, 0x95, 0xc0, 0x5a, 0x49, 0x17, 0x48, 0x80, 0x53}
+#define BOOTLOADER_T3W1_QA_00 {0x93, 0x13, 0xd0, 0xfb, 0x60, 0x83, 0x95, 0xf9, 0x20, 0x19, 0x22, 0xf3, 0xd6, 0x7e, 0x21, 0x32, 0x3a, 0x82, 0xc0, 0xd9, 0x66, 0xc1, 0x06, 0xee, 0x09, 0x1e, 0x65, 0x72, 0x37, 0xdb, 0x9c, 0x58}
+#define BOOTLOADER_T3W1_QA_FF {0x93, 0x13, 0xd0, 0xfb, 0x60, 0x83, 0x95, 0xf9, 0x20, 0x19, 0x22, 0xf3, 0xd6, 0x7e, 0x21, 0x32, 0x3a, 0x82, 0xc0, 0xd9, 0x66, 0xc1, 0x06, 0xee, 0x09, 0x1e, 0x65, 0x72, 0x37, 0xdb, 0x9c, 0x58}
// clang-format on
Why this scored 3/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.