What the developer wrote
Authored by @Bibo-dochex
edits
What changed, and why it matters
This commit only edits the wording of an upcoming release changelog. It does not change any firmware code, cryptographic algorithms, or security behavior. The edits clarify and reorganize descriptions of previously planned entropy-generation improvements, but they do not themselves introduce or fix any vulnerability.
No action required; this is a documentation-only changelog edit.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The diff is limited to releases/Next-ChangeLog.md. It rephrases bullet points about entropy generation, moves one bullet (RNG self-test), and adds a note about Makefile compile-time checks. No source files, build scripts, or firmware logic are modified. Therefore there is no security-relevant code change to assess.
Changed components
releases/Next-ChangeLog.mdInspect captured patch +7 / −6
### releases/Next-ChangeLog.md
@@ -4,14 +4,16 @@ This lists the new changes that have not yet been published in a normal release.
# Shared Improvements - Both Mk and Q
-- Security Improvements to Entropy Generation:
+- Improvements to Entropy Generation:
- Master seed generation mixes entropy from both Secure Elements with
the STM32 TRNG (previously TRNG only).
- - RNG is seeded with the full 256-bit digest of entropy
+ - On every boot, RNG is seeded with the full 256-bit digest of entropy
from both Secure Elements (previously truncated to 32 bits).
- - libngu now uses a `SHA-256 Hash_DRBG` (NIST SP 800-90A)
- instead of the Yasmarang PRNG.
-- Change: New master seeds now **require** extra user supplied entropy.
+ - libngu now uses a `SHA-256 Hash_DRBG` (NIST SP 800-90A) instead of the Yasmarang PRNG.
+ - RNG self-test proves `rng_get()` enters the hardware read path. Brick device otherwise.
+ - Makefile compile-time checks, verifying included code is expanded beyond
+ those in the Hotfix.
+- New master seeds now **require** extra user supplied entropy (dice, coin flips, keyboard mashing):
- Choose key mashing (based on [Peter Todd's Push-Button RNG](https://petertodd.org/2014/push-button-rng)),
physical dice rolls or physical coin flips.
- TRNG, SE1 and SE2 randomness is also mixed into the generated seed.
@@ -24,7 +26,6 @@ This lists the new changes that have not yet been published in a normal release.
delta and key identity are mixed in, but key identity receives no entropy credit.
Users may continue mashing beyond 65 presses to contribute additional timing entropy.
- Generated Temporary Seeds and generated CCC key C now require extra user supplied entropy.
- - RNG self-test proving `rng_get()` enters the hardware read path. Brick device otherwise.
- Dice-Only Enhancements:
- Dice-only seed generation now warns that no hardware randomness is
included and the final hash shown on-screen must be kept secret.Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.