CommitWatch RSS
AI-generated analysisPublished automatically and not human-verified. Validated context appears in community notes below.
← Watch feed
Informational 15 Bitcoin

Signed for q1 release.

CK0212955c View source ↗
Public commit record

What the developer wrote

Authored by Peter D. Gray

28/100 · Opaque
Signed for q1 release.
✓ Subject identifies a change! No meaningful explanatory body
The short version

What changed, and why it matters

This commit only updates the release signature file (signatures.txt). It refreshes SHA-256 hashes for changelog/history files and adds hashes for two new Q1 firmware release files, plus updates the PGP signature that covers the file. There is no source code change and nothing that directly affects device security.

Recommended action

No action required from a security standpoint; verify the new PGP signature and file hashes through normal release-process checks if auditing the Q1 release.

Security signals we found

No strong security signals were identified.

Risk score

Why this scored 15/100

Our methodology →
Potential impact 0/30
Exploitability 0/25
Stealth signal 0/15
Affected reach 0/15
Confidence 10/10
Evidence quality 5/5
Human-validated context

Community notes

Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.

No validated notes yet.

The AI analysis stands alone for now. Submit a note if you can add evidence or important context.

More from COLDCARD firmware

Related watches

Low 28 AI analysisMessage 45 · Thin
CK CoinkiteCOLDCARD firmware BitcoinHardware wallets

bugfix: allow password typing with USB disabled

This commit fixes a bug in the COLDCARD password-notes feature. Previously, the 'Send Password' menu option was accidentally hidden when USB was disabled, because the code reused a setting meant for something else. The fix removes that wro…

No security-relevant signals in the diff or commit messageChange is framed by the author as a bugfix for intended functionalityNo privilege escalation, bypass, or cryptographic change
627ca44fby scgbckbone+3−32 files
No security note in commit
Open full analysis →Source commit ↗
Low 27 AI analysisMessage 45 · Thin
CK CoinkiteCOLDCARD firmware BitcoinHardware wallets

dice: use model-specific completion keys

This commit changes which physical buttons on the COLDCARD device are treated as 'done' or 'cancel' keys during a dice-roll seed-generation feature. It makes the choice depend on the device model (QWERTY keyboard vs. non-QWERTY) instead of…

Input handling change for seed-generation UIModel-specific key mapping introducedRemoval of hardcoded mixed key set
0fa83926by @Bibo-dochex+2−31 file
No security note in commit
Open full analysis →Source commit ↗
Low 46 AI analysisMessage 60 · Adequate
CK CoinkiteCOLDCARD firmware BitcoinHardware wallets

rng: boot-time self-test proving rng_get() enters the hardware read path

This commit adds a startup safety check for the hardware random-number generator (RNG) in the COLDCARD MK4 firmware. Before anything else can use randomness, the device now verifies that the rng_get() function actually reaches the hardware…

Boot-time self-test of critical RNG linkageFatal halt on RNG linkage failureCounter state intentionally not exposed to higher layers
7ac5d98aby scgbckbone+64−04 files
Vendor flagged security relevance
Open full analysis →Source commit ↗