CommitWatch RSS
OV
← Developer activityStrong match

Ondřej Vejpustek

Public commit activity attributed with strong match confidence. This page describes observable work, not personal trustworthiness.

95 commits1 monitored projects34 candidates0 high-risk analyses
Project constellation

Where the commits appear

Amber nodes are monitored by CommitWatch. Gray nodes are sampled from authenticated GitHub public commit search and may not represent complete contribution history.

Monitored External sample
Projects connected to Ondřej VejpustekA visual map of monitored and externally discovered repositories.OVdeveloper95Trezor firmware
Monitored evidence

CommitWatch projects

Trezor firmwareTrezor95 commits34 candidates0 high risk
External discovery

Other public projects

No external sample loaded yet.

A verified GitHub handle is needed before external discovery.
Analyzed activity

Recent published watches

Message quality and risk characterize commits, never the person.

Low 33 AI analysisMessage 62 · Adequate
TZ TrezorTrezor firmware BitcoinHardware wallets

fix(core): disable writing MCU attestation certificate in firmware

This commit changes a Trezor firmware function so that, outside of a special factory testing mode (PRODTEST), it refuses to write an MCU attestation certificate. Previously the function accepted and stored such a certificate. The change pr…

Function that writes security-relevant attestation material now returns failure outside factory-test buildsChange is in the secret/secure-storage subsystemNo changelog entry and minimal commit message, suggesting quiet hardening rather than documented bug fix
6d2883bbby Ondřej Vejpustek+6−01 file
No security note in commit
Open full analysis →Source commit ↗
Informational 15 AI analysisMessage 57 · Thin
TZ TrezorTrezor firmware BitcoinHardware wallets

chore: create phony target in makefiles

This commit only adds '.PHONY' declarations to many Makefiles. These declarations tell the build system that certain target names are not real files, preventing build mistakes if a file with the same name happens to exist. There is no chan…

40926b8bby Ondřej Vejpustek+110−817 files
No security note in commit
Open full analysis →Source commit ↗
Informational 19 AI analysisMessage 62 · Adequate
TZ TrezorTrezor firmware BitcoinHardware wallets

feat(core): use empty MCU attestation certificate in prodtest

This commit changes how Trezor hardware wallet firmware handles a special factory-testing mode called 'prodtest'. In prodtest builds, it now uses an empty placeholder certificate for MCU (microcontroller) attestation instead of a real devi…

Attestation certificate handling changed in a security-adjacent code pathEmpty/zero-length certificate used in a production-test configurationNo changelog entry provided despite touching security-relevant code
ccb99c5eby Ondřej Vejpustek+11−11 file
No security note in commit
Open full analysis →Source commit ↗
Informational 24 AI analysisMessage 62 · Adequate
TZ TrezorTrezor firmware BitcoinHardware wallets

feat(core/prodtest): enable writing MCU attestation certificate

This commit changes a factory-production testing tool (prodtest) so that the commands for writing and reading the device's MCU attestation certificate also work in the software emulator, instead of returning 'not implemented'. In the emula…

Removal of compile-time disabling of certificate write/read in emulator buildCertificate chain validation (check_device_cert_chain) is now exercised in emulator pathEmulator write path explicitly warns that certificate is non-persistent
0a7deb3eby Ondřej Vejpustek+6−111 file
No security note in commit
Open full analysis →Source commit ↗
Informational 17 AI analysisMessage 72 · Adequate
TZ TrezorTrezor firmware BitcoinHardware wallets

chore(core): add testing MCU attestation certificate

This commit adds a test-only digital certificate for the T3W1 hardware emulator. It is explicitly labeled as a testing certificate for emulators, lives in a 'unix' emulator directory, and is not used in real Trezor devices. There is no dir…

Test-only certificate material added to emulator pathREADME explicitly states 'Certificate chains for emulators'Root ML-DSA seed is disclosed in README as a known test value
83b0cf37by Ondřej Vejpustek+347−33 files
No security note in commit
Open full analysis →Source commit ↗
Informational 18 AI analysisMessage 72 · Adequate
TZ TrezorTrezor firmware BitcoinHardware wallets

chore(core): add testing tropic attestation key and certificate

This commit updates Trezor's internal test-only files that simulate a TROPIC01 secure chip. It replaces old self-signed test certificates with a new four-level test certificate chain and embeds keys directly into config files instead of re…

Hardcoded cryptographic private key material in test fixtures (l3.key / X25519 seed)Addition of certificate chain generation script for test modelRemoval of older self-signed test certificates
e6e20071by Ondřej Vejpustek+560−21022 files
No security note in commit
Open full analysis →Source commit ↗
Informational 15 AI analysisMessage 62 · Adequate
TZ TrezorTrezor firmware BitcoinHardware wallets

refactor(core): move `compact_size()` from `common.py` to `tools.py`

This commit simply moves a helper function called compact_size from one internal file to another and updates the import statements in files that use it. There is no change to what the function does, no bug fix, and no security impact.

2cb59ce6by Ondřej Vejpustek+29−296 files
No security note in commit
Open full analysis →Source commit ↗
Low 44 AI analysisMessage 67 · Adequate
TZ TrezorTrezor firmware BitcoinHardware wallets

fix(core/python): fix encoding in authentication challenge

This commit fixes how the Trezor Python library builds an authentication challenge. Previously, the code encoded the length of a header and the length of the challenge as a single byte, which only works for values up to 255. The fix uses a…

Fix in authentication/verification code pathChange from fixed single-byte length prefix to variable-length compact_size encodingPotential for incorrect serialization if challenge/header length exceeds 255 bytes
86b5d99cby Ondřej Vejpustek+3−31 file
No security note in commit
Open full analysis →Source commit ↗
Informational 15 AI analysisMessage 88 · Strong
TZ TrezorTrezor firmware BitcoinHardware wallets

fix(core): fix tropic int pin

This commit corrects the wrong GPIO pin assignment for the interrupt line of the Tropic01 secure chip on Trezor T3W1 hardware revisions A, B, and C. Previously the interrupt pin was set to the same pin as the power-control line, which does…

Incorrect hardware pin mapping for a secure-element interrupt lineFix references an external hardware schematic rather than a security advisory
57f717eeby Ondřej Vejpustek+9−93 files
No security note in commit
Open full analysis →Source commit ↗
Low 34 AI analysisMessage 62 · Adequate
TZ TrezorTrezor firmware BitcoinHardware wallets

fix(core/prodtest): fix error handling in `prodtest_tropic_get_access_credential()`

This is a one-line bug fix in a Trezor hardware wallet factory/production testing tool. The function `prodtest_tropic_get_access_credential()` now jumps to cleanup code when it fails to retrieve a public key, instead of continuing to run a…

Missing error-path exit after a failed cryptographic key fetchPotential use of invalid/uninitialized public key material in subsequent operationsResource cleanup bypass before the fix
97a266eaby Ondřej Vejpustek+1−01 file
No security note in commit
Open full analysis →Source commit ↗
Informational 11 AI analysisMessage 62 · Adequate
TZ TrezorTrezor firmware BitcoinHardware wallets

refactor(core/embed): cache tropic change pin counter

This commit is a small internal refactor of the Trezor firmware's Tropic secure-element integration. It adds a software cache for a hardware-backed 'change PIN counter' so the firmware does not have to repeatedly ask the secure chip for th…

7db3fa01by Ondřej Vejpustek+35−131 file
No security note in commit
Open full analysis →Source commit ↗
Low 35 AI analysisMessage 62 · Adequate
TZ TrezorTrezor firmware BitcoinHardware wallets

feat(storage,core/embed): use tropic for pin protection

This commit adds support for using a second hardware security chip called Tropic to protect the device PIN, alongside the existing Optiga chip. It is a feature addition that strengthens PIN protection by adding another physical barrier aga…

Adds hardware-backed PIN protection using Tropic secure elementReduces PIN_MAX_TRIES from 16 to 10 when both Optiga and Tropic are enabledUses mac-and-destroy slots and protected memory for PIN-derived secrets
67dcf308by Ondřej Vejpustek+389−35 files
No security note in commit
Open full analysis →Source commit ↗
Low 44 AI analysisMessage 72 · Adequate
TZ TrezorTrezor firmware BitcoinHardware wallets

feat(core/embed): make pin verification faster on T3W1

This commit changes how many times a device 'stretches' (repeats and strengthens) the user's PIN before checking it. On T3W1 devices, when a build-time flag called STRETCHED_PIN_COUNT is greater than 1, the code now reduces both Optiga har…

Reduction of PBKDF2/Optiga PIN stretching iterations to 1 under a build-time conditionConditional bypass of production iteration count via STRETCHED_PIN_COUNT macroChange touches security-critical PIN verification and storage code
915d14d3by Ondřej Vejpustek+5−12 files
No security note in commit
Open full analysis →Source commit ↗
Wrong identity?Names can collide and public author strings can be misleading.Contact commitwatch@karma-x.io →