bump libngu to version with HW accelerated tagged_sha256
What the developer wrote
Authored by scgbckbone
bump libngu to version with HW accelerated tagged_sha256
What changed, and why it matters
This commit updates an internal library (libngu) used by the COLDCARD hardware wallet to a newer version that adds hardware-accelerated tagged_sha256. Tagged SHA-256 is a special way of computing cryptographic hashes used in Bitcoin-related operations. The change itself is a one-line version bump of a submodule, with no diff showing what actually changed inside the library. There is no direct evidence this fixes a security vulnerability; it appears to be a performance or capability upgrade.
Review the actual changes in the libngu submodule between the old and new commits to confirm whether this is purely a performance/capability improvement or if it also includes any correctness or side-channel fixes relevant to tagged_sha256. Without the submodule diff, no security action can be justified.
Security signals we found
Submodule-only change with no visible code diff
No commit message mention of security, fix, vulnerability, or CVE
No supplied verified references indicating security relevance
Change relates to cryptographic hashing primitive used in Bitcoin signatures
Evidence from the diff
The commit bumps the external/libngu submodule to a revision that includes hardware-accelerated tagged_sha256. tagged_sha256 is used in protocols such as BIP-340 (Schnorr signatures) and BIP-341 (Taproot). The change is a single submodule pointer update (+1/-1 line) with no code diff available. No security relevance, CVE, or vulnerability description is present in the commit or supplied references.
Changed components
external/libngu submoduletagged_sha256 implementationInspect captured patch +1 / −1
Diff not available from the source API.Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.