feat: defaultly use 20 words for web3 and bitcoin firmware
What the developer wrote
Authored by soralit
feat: defaultly use 20 words for web3 and bitcoin firmware
What changed, and why it matters
This commit changes the default backup seed phrase length for the standard firmware from 33 words to 20 words. SLIP39 seed phrases can use different word counts, and 20 words still provides substantial entropy. There is no direct evidence in the commit or supplied references that this change fixes a security vulnerability; it appears to be a product/usability change.
No security action required based on this commit alone. If reviewing for security, verify that 20-word SLIP39 mnemonics meet the product's entropy requirements and that existing 33-word backups remain compatible.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The patch modifies src/crypto/slip39/slip39.h so that SLIP39_DEFAULT_MNEMONIC_WORDS is set to SLIP39_MNEMONIC_20_WORDS unless the CYPHERPUNK_VERSION build flag is set, in which case it remains 33 words. This is a compile-time default change only. It does not alter cryptographic algorithms, validation, memory handling, or threshold logic. No security relevance is stated in the commit message or diff.
Changed components
src/crypto/slip39/slip39.hInspect captured patch +4 / −1
diff --git a/src/crypto/slip39/slip39.h b/src/crypto/slip39/slip39.h
index aaef4a6..2c11ad9 100644
--- a/src/crypto/slip39/slip39.h
+++ b/src/crypto/slip39/slip39.h
@@ -32,7 +32,11 @@
#define SLIP39_MNEMONIC_WORDS_MAX (33)
#define SLIP39_MNEMONIC_20_WORDS (20)
#define SLIP39_MNEMONIC_33_WORDS (33)
+#ifdef CYPHERPUNK_VERSION
#define SLIP39_DEFAULT_MNEMONIC_WORDS SLIP39_MNEMONIC_33_WORDS
+#else
+#define SLIP39_DEFAULT_MNEMONIC_WORDS SLIP39_MNEMONIC_20_WORDS
+#endif
#define SLIP39_MAX_SLICE_COUNT (16)
#define SLIP39_INVALID_MNEMONIC_INDEX (~0)
@@ -56,4 +60,3 @@ int Slip39GetMasterSecret(uint8_t threshold, uint8_t wordsCount, uint8_t *ems, u
int Slip39GetSeed(uint8_t *ems, uint8_t *seed, uint8_t emsLen, const char *passphrase, uint8_t ie, bool eb, uint16_t id);
#endif /* _SLIP39_H */
-
Why this scored 16/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.