bitbox03: activate app-u2f in bitbox-hal
What the developer wrote
Authored by Marko Bencun
bitbox03: activate app-u2f in bitbox-hal
What changed, and why it matters
This commit changes a single line in a Rust package configuration file. It makes the 'app-u2f' feature of the bitbox03 package also enable the 'app-u2f' feature in the underlying 'bitbox-hal' hardware abstraction library. There is no visible bug fix or security patch in the diff itself; it appears to be a build/feature wiring change.
No security action is indicated by this commit alone. Reviewers may want to confirm that enabling bitbox-hal/app-u2f does not expose unintended U2F functionality on bitbox03 builds, but that requires inspecting the bitbox-hal crate, not this diff.
Security signals we found
No strong security signals were identified.
Evidence from the diff
In src/rust/bitbox03/Cargo.toml, the feature flag definition was changed from ‘app-u2f = []’ to ‘app-u2f = [“bitbox-hal/app-u2f”]’. This propagates the U2F application feature down to the bitbox-hal crate when the bitbox03 crate is compiled with the app-u2f feature enabled. The change is one line and contains no code modifications, memory-safety fixes, input validation, or cryptographic changes.
Changed components
src/rust/bitbox03/Cargo.tomlInspect captured patch +1 / −1
diff --git a/src/rust/bitbox03/Cargo.toml b/src/rust/bitbox03/Cargo.toml
index 738030e..d7917ce 100644
--- a/src/rust/bitbox03/Cargo.toml
+++ b/src/rust/bitbox03/Cargo.toml
@@ -12,4 +12,4 @@ png-decoder = { version="0.2"}
zeroize = {workspace=true}
[features]
-app-u2f = []
+app-u2f = ["bitbox-hal/app-u2f"]
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.