chore(core): adjust core to be compatible with libtropic 3.1.0

Trezor/Trezor firmware

aaa34772 View source ↗

Public commit record

What the developer wrote

Authored by M1nd3r

62/100 · Adequate

chore(core): adjust core to be compatible with libtropic 3.1.0

[no changelog]

✓ Specific, descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope! No meaningful explanatory body

The short version

What changed, and why it matters

This commit is a routine build-system update that swaps two source files in the list of files compiled for the Trezor T3W1 hardware model and its emulator. It removes references to files named lt_l1_port_wrap.c and lt_random.c and adds a new file named lt_port_wrap.c, so the project builds against version 3.1.0 of an external library called libtropic. There is no indication in the commit of any security bug, vulnerability fix, or behavior change beyond keeping the build compatible with the newer library version.

Recommended action

No security action required. Treat as a normal dependency/build-system maintenance commit. If reviewing for supply-chain assurance, verify separately that the libtropic 3.1.0 upgrade itself does not introduce security-relevant changes, since this commit only adjusts the build file list.

Security signals we found

No strong security signals were identified.

Technical analysis

Evidence from the diff

The change affects four SCons model files under core/site_scons/models/T3W1. In each, the libtropic source list is updated: lt_l1_port_wrap.c and lt_random.c are removed, and lt_port_wrap.c is added. This is consistent with a library API/structure change between libtropic versions, where porting and randomness support were refactored into a single lt_port_wrap.c source. No functional code, cryptographic logic, or security-critical implementation is modified in this commit.

Changed components

core/site_scons/models/T3W1/emulator.pycore/site_scons/models/T3W1/trezor_t3w1_revA.pycore/site_scons/models/T3W1/trezor_t3w1_revB.pycore/site_scons/models/T3W1/trezor_t3w1_revC.py

Inspect captured patch +4 / −8

diff --git a/core/site_scons/models/T3W1/emulator.py b/core/site_scons/models/T3W1/emulator.py
index 8d68feb9..e7d2ade0 100644
--- a/core/site_scons/models/T3W1/emulator.py
+++ b/core/site_scons/models/T3W1/emulator.py
@@ -81,10 +81,9 @@ def configure(
             "vendor/libtropic/src/lt_crc16.c",
             "vendor/libtropic/src/lt_hkdf.c",
             "vendor/libtropic/src/lt_l1.c",
-            "vendor/libtropic/src/lt_l1_port_wrap.c",
             "vendor/libtropic/src/lt_l2_frame_check.c",
             "vendor/libtropic/src/lt_l3_process.c",
-            "vendor/libtropic/src/lt_random.c",
+            "vendor/libtropic/src/lt_port_wrap.c",
             "vendor/libtropic/src/lt_tr01_attrs.c",
         ]
         paths += ["embed/sec/tropic/inc"]
diff --git a/core/site_scons/models/T3W1/trezor_t3w1_revA.py b/core/site_scons/models/T3W1/trezor_t3w1_revA.py
index 0d595cbe..0a966dfc 100644
--- a/core/site_scons/models/T3W1/trezor_t3w1_revA.py
+++ b/core/site_scons/models/T3W1/trezor_t3w1_revA.py
@@ -202,10 +202,9 @@ def configure(
         sources += ["vendor/libtropic/src/lt_crc16.c"]
         sources += ["vendor/libtropic/src/lt_hkdf.c"]
         sources += ["vendor/libtropic/src/lt_l1.c"]
-        sources += ["vendor/libtropic/src/lt_l1_port_wrap.c"]
         sources += ["vendor/libtropic/src/lt_l2_frame_check.c"]
         sources += ["vendor/libtropic/src/lt_l3_process.c"]
-        sources += ["vendor/libtropic/src/lt_random.c"]
+        sources += ["vendor/libtropic/src/lt_port_wrap.c"]
         sources += ["vendor/libtropic/src/lt_tr01_attrs.c"]
         paths += ["embed/sec/tropic/inc"]
         paths += ["vendor/libtropic/include"]
diff --git a/core/site_scons/models/T3W1/trezor_t3w1_revB.py b/core/site_scons/models/T3W1/trezor_t3w1_revB.py
index c35a48ec..fa88fca9 100644
--- a/core/site_scons/models/T3W1/trezor_t3w1_revB.py
+++ b/core/site_scons/models/T3W1/trezor_t3w1_revB.py
@@ -204,10 +204,9 @@ def configure(
         sources += ["vendor/libtropic/src/lt_crc16.c"]
         sources += ["vendor/libtropic/src/lt_hkdf.c"]
         sources += ["vendor/libtropic/src/lt_l1.c"]
-        sources += ["vendor/libtropic/src/lt_l1_port_wrap.c"]
         sources += ["vendor/libtropic/src/lt_l2_frame_check.c"]
         sources += ["vendor/libtropic/src/lt_l3_process.c"]
-        sources += ["vendor/libtropic/src/lt_random.c"]
+        sources += ["vendor/libtropic/src/lt_port_wrap.c"]
         sources += ["vendor/libtropic/src/lt_tr01_attrs.c"]
 
         paths += ["embed/sec/tropic/inc"]
diff --git a/core/site_scons/models/T3W1/trezor_t3w1_revC.py b/core/site_scons/models/T3W1/trezor_t3w1_revC.py
index 579502e5..19300f55 100644
--- a/core/site_scons/models/T3W1/trezor_t3w1_revC.py
+++ b/core/site_scons/models/T3W1/trezor_t3w1_revC.py
@@ -203,10 +203,9 @@ def configure(
         sources += ["vendor/libtropic/src/lt_crc16.c"]
         sources += ["vendor/libtropic/src/lt_hkdf.c"]
         sources += ["vendor/libtropic/src/lt_l1.c"]
-        sources += ["vendor/libtropic/src/lt_l1_port_wrap.c"]
         sources += ["vendor/libtropic/src/lt_l2_frame_check.c"]
         sources += ["vendor/libtropic/src/lt_l3_process.c"]
-        sources += ["vendor/libtropic/src/lt_random.c"]
+        sources += ["vendor/libtropic/src/lt_port_wrap.c"]
         sources += ["vendor/libtropic/src/lt_tr01_attrs.c"]
         paths += ["embed/sec/tropic/inc"]
         paths += ["vendor/libtropic/include"]

Risk score

Why this scored 15/100

Our methodology →

Potential impact 0/30

Exploitability 0/25

Stealth signal 0/15

Affected reach 0/15

Confidence 10/10

Evidence quality 5/5

Human-validated context

Community notes

Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.

No validated notes yet.

The AI analysis stands alone for now. Submit a note if you can add evidence or important context.

What the developer wrote

What changed, and why it matters

Security signals we found

Evidence from the diff

Changed components

Why this scored 15/100

Community notes

Related watches

refactor(core): digest EIP-1559/EIP-7702 magic without RLP encoding

test(core): test RLP self-encoding bytestrings

chore(core): remove sha1 from regular FW