What the developer wrote
Authored by Marko Bencun
releases: add v9.27.1
What changed, and why it matters
This commit simply adds official signed release artifacts for BitBox02 firmware version 9.27.1. It contains two text files with build attestations and two detached signatures. There is no code change, no bug fix, and no security-relevant content in the diff itself.
No action required. If reviewing for security, inspect the referenced firmware commit 391864cd3f8676a3fd4e57593462921bc01d6064 and verify the published binary hashes match the signed assertions.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The commit adds four files under releases/firmware-v9.27.1/: two assertion text files containing the git tag, commit hash, and SHA-256 of the built firmware binary for the Bitcoin-only and Multi editions, plus two detached signatures by ‘benma’. The actual firmware source changes are not included in this commit; it is purely a release-signing metadata addition.
Changed components
releases/firmware-v9.27.1/assertion-bitbox02-btconly-benma.sigreleases/firmware-v9.27.1/assertion-bitbox02-btconly.txtreleases/firmware-v9.27.1/assertion-bitbox02-multi-benma.sigreleases/firmware-v9.27.1/assertion-bitbox02-multi.txtInspect captured patch +16 / −0
### releases/firmware-v9.27.1/assertion-bitbox02-btconly-benma.sig
[binary or diff unavailable]
### releases/firmware-v9.27.1/assertion-bitbox02-btconly.txt
@@ -0,0 +1,8 @@
+By signing this file, the signer confirms that the BitBox02 Bitcoin-only firmware binary built from:
+
+git tag firmware/v9.27.1
+git commit hash 391864cd3f8676a3fd4e57593462921bc01d6064
+
+resulted, at the time of signing, in a firmware binary file with the following sha256sum:
+
+4fbf3da03f636004d4501bfe7e8043fc0af7c0740009471fca1760a36de24a92
### releases/firmware-v9.27.1/assertion-bitbox02-multi-benma.sig
[binary or diff unavailable]
### releases/firmware-v9.27.1/assertion-bitbox02-multi.txt
@@ -0,0 +1,8 @@
+By signing this file, the signer confirms that the BitBox02 Multi firmware binary built from:
+
+git tag firmware/v9.27.1
+git commit hash 391864cd3f8676a3fd4e57593462921bc01d6064
+
+resulted, at the time of signing, in a firmware binary file with the following sha256sum:
+
+cd8b8b6424dcea8ef19ec0e15ebe0c3bec2fc86c5a8e8c6b049ecf1f3a3c03c1Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.