AI-generated analysisPublished automatically and not human-verified. Validated context appears in community notes below.
← Watch feed
Low 28 Bitcoin

feat: add Mnemonic XOR (SeedXOR) (#727)

Public commit record

What the developer wrote

Authored by qlrd

80/100 · Strong
feat: add Mnemonic XOR (SeedXOR) (#727)

* feat: add `Mnemonic XOR` (SeedXOR) as menu entry in `Wallet` settings
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides an explanatory body✓ Links an issue, advisory, or supporting reference
The short version

What changed, and why it matters

This commit adds a new 'Mnemonic XOR' (SeedXOR) feature to Krux, a Bitcoin hardware wallet. It lets users combine two seed phrases using a mathematical XOR operation to create a new seed, or split an existing seed into two parts. The code also refactors existing mnemonic-loading code into a shared base class. There is no indication this is a security fix; it is a new feature implementation.

Recommended action

Review the SeedXOR implementation for correctness against the Coldcard specification, ensure entropy validation cannot be bypassed, and verify that the `MnemonicLoader` refactor did not introduce regressions in mnemonic loading or key derivation. No immediate patching is indicated because this is a feature addition, not a disclosed vulnerability fix.

Security signals we found

01

New cryptographic operation (XOR on mnemonic entropy) added to wallet UI

02

Input/output entropy validation rejects all-zeros and all-ones results

03

Length-mismatch guard prevents leaking longer entropy bytes

04

Refactor of mnemonic loading into shared base class could affect login attack surface

05

No vendor disclosure of a vulnerability or security fix

Risk score

Why this scored 28/100

Our methodology →
Potential impact 5/30
Exploitability 5/25
Stealth signal 5/15
Affected reach 5/15
Confidence 5/10
Evidence quality 3/5
Human-validated context

Community notes

Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.

No validated notes yet.

The AI analysis stands alone for now. Submit a note if you can add evidence or important context.