chore(core): add missing changelog entry
What the developer wrote
Authored by M1nd3r
chore(core): add missing changelog entry
[no changelog]
What changed, and why it matters
This commit only adds a missing line to a changelog file describing a security fix that was already implemented in earlier code. It does not change any source code, firmware behavior, or cryptographic logic. There is nothing here that could directly affect device security.
No security action needed for this commit. Review the separate commit(s) that implemented the low-order key discard logic in THP Code Entry pairing if assessing that fix.
Security signals we found
Changelog-only change
No source code modification
References a prior security fix for low-order public keys in Trezor Hardware Platform (THP) Code Entry pairing
Evidence from the diff
The diff is a single-line addition to core/CHANGELOG.T3W1.md under the ‘Security’ section: ‘Discard low-order keys in THP Code Entry pairing.’ No executable code, build scripts, tests, or documentation beyond the changelog are modified. The actual security fix was committed separately; this is purely a metadata/changelog correction.
Changed components
core/CHANGELOG.T3W1.mdInspect captured patch +1 / −0
diff --git a/core/CHANGELOG.T3W1.md b/core/CHANGELOG.T3W1.md
index e024fd43..7baeecb5 100644
--- a/core/CHANGELOG.T3W1.md
+++ b/core/CHANGELOG.T3W1.md
@@ -21,6 +21,7 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/).
- Fix device menu refresh. [#7202]
### Security
+- Discard low-order keys in THP Code Entry pairing.
- Ask user for confirmation of some previously hidden Solana instruction parameters.
- Solana: Fixed token transfer recipient for ALT addresses.
- Fix external input misidentification in bitcoin signing.
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.