Simplify Casa microSD pairing file
What the developer wrote
Authored by Jack
Simplify Casa microSD pairing file
What changed, and why it matters
This commit removes several lines of informational text from the Casa wallet pairing file that Passport writes to a microSD card. The deleted text included the blockchain name, coin type, internal symbol, and a generic warning not to deposit funds unless the user's wallet is ready. The remaining file still contains the master extended public key, the Casa derivation extended public key, and the master key fingerprint. There is no code change that alters how keys are derived, stored, or transmitted, and no security vulnerability is visible in the diff.
No security action required. Treat as a normal product/usability change. If desired, review whether removing the 'do not deposit' warning affects user guidance or compliance with wallet partner expectations, but this is not a code-security issue.
Security signals we found
No cryptographic code changed
No input validation or parsing logic changed
No privilege, access-control, or storage logic changed
Only user-facing informational text removed from an exported pairing file
Evidence from the diff
The change is a string-template simplification in ports/stm32/boards/Passport/modules/wallets/casa.py. It removes the nb, sym, and ct format arguments and the associated explanatory/warning lines from the Casa microSD export. The cryptographic content (xpub, casa_xpub, xfp) and the function’s return behavior remain unchanged. No cryptographic operations, derivation paths, or access controls were modified.
Changed components
ports/stm32/boards/Passport/modules/wallets/casa.pyCasa wallet microSD pairing file outputInspect captured patch +2 / −12
### ports/stm32/boards/Passport/modules/wallets/casa.py
@@ -52,26 +52,16 @@ def create_casa_export(sw_wallet=None,
# Passport Summary File
# For wallet with master key fingerprint: {xfp}
- Wallet operates on blockchain: {nb}
-
- For BIP44, this is coin_type '{ct}', and internally we use
- symbol {sym} for this blockchain.
-
- # IMPORTANT WARNING
-
- Do **not** deposit to any address in this file unless you have a working
- wallet system that is ready to handle the funds at that address!
-
# Top-level, 'master' extended public key ('m/'):
{xpub}
# Casa extended public key ("m/45'"):
{casa_xpub}
- '''.format(nb=chain.name, xpub=chain.serialize_public(sv.node),
+ '''.format(xpub=chain.serialize_public(sv.node),
casa_xpub=chain.serialize_public(sv.derive_path(CASA_PATH)),
- sym=chain.ctype, ct=chain.b44_cointype, xfp=xfp2str(settings.get('xfp')))
+ xfp=xfp2str(settings.get('xfp')))
return (s, None) # No 'acct_info'
Why this scored 18/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.