CommitWatch RSS
MP
← Developer activityStrong match

Martin Pastyřík

Public commit activity attributed with strong match confidence. This page describes observable work, not personal trustworthiness.

23 commits1 monitored projects8 candidates1 high-risk analyses
Project constellation

Where the commits appear

Amber nodes are monitored by CommitWatch. Gray nodes are sampled from authenticated GitHub public commit search and may not represent complete contribution history.

Monitored External sample
Projects connected to Martin PastyříkA visual map of monitored and externally discovered repositories.MPdeveloper23Trezor firmware
Monitored evidence

CommitWatch projects

Trezor firmwareTrezor23 commits8 candidates1 high risk
External discovery

Other public projects

No external sample loaded yet.

A verified GitHub handle is needed before external discovery.
Analyzed activity

Recent published watches

Message quality and risk characterize commits, never the person.

Low 37 AI analysisMessage 72 · Adequate
TZ TrezorTrezor firmware BitcoinHardware wallets

feat(core): Evolu key rotation

This commit adds a key-rotation feature for the 'Evolu' / 'Suite Sync' delegated identity key used by Trezor. It introduces a rotation index that is mixed into the key derivation, lets users rotate the key on demand, and stores the current…

Changes to hardware-backed key derivation (secret_keys)Adds new wire messages for key rotation and index managementAdds device-storage field for rotation index
8807fec0by Martin Pastyřík+1890−26557 files
No security note in commit
Open full analysis →Source commit ↗
Low 32 AI analysisMessage 62 · Adequate
TZ TrezorTrezor firmware BitcoinHardware wallets

chore(core): remove double check when changing pin

This commit refactors how the Trezor hardware wallet changes its PIN. Previously, the storage layer itself re-checked the old PIN while changing it. Now the device must already be unlocked before changing the PIN, and the change-PIN functi…

Removal of internal PIN verification from storage_change_pinAddition of fine-grained unlock and PIN-change result enumsCaller-side enforcement that storage must be unlocked before PIN change
589fd84bby Martin Pastyřík+338−27631 files
No security note in commit
Open full analysis →Source commit ↗
High 76 AI analysisMessage 100 · Strong
TZ TrezorTrezor firmware BitcoinHardware wallets

fix(crypto): Fix side-channel vulnerability in BIP-39 mnemonic processing

This commit fixes a timing side-channel flaw in how Trezor hardware wallets convert a user's recovery phrase (BIP-39 mnemonic words) into secret seed bits. The old code used a fast but variable-time binary search over the word list, which …

Side-channel fix: replaces binary search with constant-time linear scanNew constant-time memory comparison helper `constant_time_memeq`Mask-based selection of matched word index to avoid secret-dependent branches
9b1c0620by Martin Pastyřík+137−787 files
Vendor flagged security relevance
Open full analysis →Source commit ↗
Informational 15 AI analysisMessage 100 · Strong
TZ TrezorTrezor firmware BitcoinHardware wallets

fix(tests): fix Evolu tests on HW devices

This commit only changes test code for the Trezor hardware wallet. It refactors how tests compute expected cryptographic values so they can run on real hardware devices instead of only on emulators, and moves certificate-verification helpe…

d1d28b86by Martin Pastyřík+375−2877 files
No security note in commit
Open full analysis →Source commit ↗
Low 45 AI analysisMessage 57 · Thin
TZ TrezorTrezor firmware BitcoinHardware wallets

feat(core): functions for Evolu spam protection

This commit adds new Trezor firmware features for an 'Evolu' / 'Suite Sync' service. It introduces a device-bound delegated identity key, a way to export that key after user confirmation, and ways to prove possession of that key to request…

New private-key export message added (EvoluGetDelegatedIdentityKey returns raw nist256p1 private key)New syscall/smcall added to read delegated identity key from secure world into caller bufferNew per-device master key generated in flash OTP and used for deterministic key derivation
d2516f1dby Martin Pastyřík+2455−22860 files
No security note in commit
Open full analysis →Source commit ↗
Wrong identity?Names can collide and public author strings can be misleading.Contact commitwatch@karma-x.io →