OSC-2026-0027 · github.com/trezor/trezor-firmware
none-found clean-run grok-4.5 2026-08-04 signed: nostr
- Repository
- github.com/trezor/trezor-firmware
- Commit
- 2b1938cc4d0d1c00d0c484a8b794e7758fe89f5b
- Model
- grok-4.5
- Harness
- grok-build
- Prompts
- prompts/entropy-rng-audit-v1.md
- Independent runs
- 1
- Transcript sha256
- 172e14bedf50bcb95a0b445315dd05739d1f9775b723b5dda806257e23bc1f4f
- Auditor
- TheIcarusWings (theicaruswings)
- Signature
- nostr-schnorr · npub19tzp8lf3klmqj3dz9mz0qnuvjp7uyy9993gmljmyaxs8phztj7wsnujvq5
Scope. Independent entropy/RNG audit of trezor-firmware at 2b1938cc. In scope: BIP-39/SLIP-39 seed generation (reset_device → random.bytes strong → rng_fill_buffer_strong → MCU TRNG XOR Optiga/Tropic), USE_INSECURE_PRNG production gates (core build.rs + legacy EMULATOR), STM32 FIPS continuous RNG test, ECDSA RFC6979 nonces. Out of scope: PIN/UI, PSBT, USB, display, Nordic radio tests. Cross-model independent counterpart (did not read OSC-2026-0025 findings before concluding).
Findings
none-found OSC-2026-0027-F1 unreviewed
No insufficient-entropy defect found in scope. Wallet internal entropy is random.bytes(32, True) → rng_fill_buffer_strong (fail-closed) → STM32 TRNG with FIPS continuous equal-sample test, XOR-mixed with Optiga/Tropic when board features enable them. USE_INSECURE_PRNG LCG is production-blocked and emulator-only on legacy T1. ECDSA k uses RFC6979 by default. No build flag found that silently routes production seed generation through a software PRNG.