AI-generated analysisPublished automatically and not human-verified. Validated context appears in community notes below.
← Watch feed
Informational 18 Bitcoin

chore: propagate `BackupMethod` from `trezorctl` to recovery handler

Public commit record

What the developer wrote

Authored by Roman Zeyde

97/100 · Strong
chore: propagate `BackupMethod` from `trezorctl` to recovery handler

Currently supports only display-based method.
It will be used by the host in order to skip the choice layout, if the method is already known.

[no changelog]
✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope✓ Provides detailed explanatory context✓ Explains rationale or failure mode
The short version

What changed, and why it matters

This commit adds a way for the Trezor host software (trezorctl) to tell the device which backup/recovery method to use during wallet recovery. Right now only the existing display-based method is actually supported; the new parameter is mainly plumbing so the host can skip an extra user-choice screen in future versions. There is no obvious security bug in the change itself.

Recommended action

No immediate action required. If this code is a precursor to additional backup methods, ensure the firmware validates and enforces the method consistently, fails closed on unknown methods, and documents any trust boundary between host choice and device recovery flow.

Security signals we found

01

New host-to-device message field propagation

02

Firmware logs unsupported backup method but does not fail closed

03

Trezor One explicitly rejects backup_method usage

04

No validation that propagated method matches persisted recovery state

Risk score

Why this scored 18/100

Our methodology →
Potential impact 2/30
Exploitability 1/25
Stealth signal 1/15
Affected reach 2/15
Confidence 8/10
Evidence quality 4/5
Human-validated context

Community notes

Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.

No validated notes yet.

The AI analysis stands alone for now. Submit a note if you can add evidence or important context.