bitbox02-rust-c: fix wrong features in platform-bitbox02plus
What the developer wrote
Authored by Marko Bencun
bitbox02-rust-c: fix wrong features in platform-bitbox02plus
This platform is only activated in Nova bootloaders, where we don't
need these deps.
What changed, and why it matters
This is a tiny build-configuration fix for a specific BitBox02 hardware variant (the 'BitBox02 Plus' platform used in Nova bootloaders). The change removes two optional Rust dependencies that were accidentally enabled for that platform. The commit message says those dependencies are not needed there. There is no direct evidence in the commit of a security vulnerability; it looks like a cleanup to avoid compiling unnecessary code in the bootloader.
Treat as a routine hardening/cleanup commit. Verify that the Nova bootloader still builds and passes tests without the removed features, and that no other platform or feature combination relied on the old feature list transitively.
Security signals we found
Reduced attack surface in bootloader build by removing unused dependencies
Build configuration change with no functional code modification
No direct security bug or exploit path visible in the diff
Evidence from the diff
In src/rust/bitbox02-rust-c/Cargo.toml, the platform-bitbox02plus feature list was changed from [“sha2”, “bitbox02-noise”, “bitbox02-rust”] to [“sha2”]. The commit message explains that platform-bitbox02plus is only activated in Nova bootloaders, where bitbox02-noise and bitbox02-rust are not required. This reduces the attack surface and binary size of the bootloader build by excluding unused crates. The diff itself is a one-line feature-list correction.
Changed components
src/rust/bitbox02-rust-c/Cargo.tomlplatform-bitbox02plus featureNova bootloader buildInspect captured patch +1 / −1
diff --git a/src/rust/bitbox02-rust-c/Cargo.toml b/src/rust/bitbox02-rust-c/Cargo.toml
index 1efa269..1074d8d 100644
--- a/src/rust/bitbox02-rust-c/Cargo.toml
+++ b/src/rust/bitbox02-rust-c/Cargo.toml
@@ -73,7 +73,7 @@ target-c-unit-tests = [
]
platform-bitbox02 = []
-platform-bitbox02plus = ["sha2", "bitbox02-noise", "bitbox02-rust"]
+platform-bitbox02plus = ["sha2"]
bootloader = []
firmware = ["bitbox02-rust", "bitbox02", "bitbox02-noise", "sha2", "p256", "der"]
Why this scored 19/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.