fix(nordic/ble): adjust connection interval in suspend
What the developer wrote
Authored by tychovrahe
fix(nordic/ble): adjust connection interval in suspend
[no changelog]
What changed, and why it matters
This commit tweaks a Bluetooth Low Energy (BLE) connection timing setting used when a Trezor device is suspended. It halves the minimum and maximum connection intervals and raises the supervision timeout. The change is presented as a fix, but the commit message gives no details about what problem it solves or whether there is any security relevance. There is no evidence in the diff or references that this is a security vulnerability.
Treat as a routine firmware tuning change unless additional vendor or researcher documentation identifies a security issue. If reviewing for security, verify that the new connection interval and supervision timeout do not introduce denial-of-service, battery exhaustion, or pairing/encryption downgrade risks in suspend mode.
Security signals we found
Bluetooth Low Energy connection parameter change in suspend state
No changelog entry provided
No security-related description in commit message or diff
Evidence from the diff
The patch changes the PPCP_SUSPEND macro in the Nordic BLE firmware from BT_LE_CONN_PARAM(400, 800, 1, 500) to BT_LE_CONN_PARAM(200, 400, 1, 600). This modifies the Peripheral Preferred Connection Parameters used when the device is in suspend: the connection interval range is narrowed from 500 ms–1000 ms to 250 ms–500 ms (in 1.25 ms units), and the supervision timeout is increased from 5 s to 6 s. The latency remains 1. The change could affect power consumption, responsiveness, or connection stability during suspend, but the diff alone does not reveal a security flaw.
Changed components
nordic/trezor/trezor-ble/src/ble/connection.cBLE connection parameters for suspend modeInspect captured patch +1 / −1
diff --git a/nordic/trezor/trezor-ble/src/ble/connection.c b/nordic/trezor/trezor-ble/src/ble/connection.c
index db70ce98b..6f8683efb 100644
--- a/nordic/trezor/trezor-ble/src/ble/connection.c
+++ b/nordic/trezor/trezor-ble/src/ble/connection.c
@@ -32,7 +32,7 @@
#define LOG_MODULE_NAME ble_connection
LOG_MODULE_REGISTER(LOG_MODULE_NAME);
-#define PPCP_SUSPEND BT_LE_CONN_PARAM(400, 800, 1, 500)
+#define PPCP_SUSPEND BT_LE_CONN_PARAM(200, 400, 1, 600)
#define PPCP_HIGH_SPEED BT_LE_CONN_PARAM(12, 12, 0, 400)
#define PPCP_LOW_SPEED BT_LE_CONN_PARAM(24, 100, 0, 400)
Why this scored 11/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.