SIGN IN SIGN UP

fix: Clarify shared-secret approval text to prevent misleading consent

ui_display_privacy_shared_secret() told the user they were providing a
"public secret key". The corresponding command path is actually an
X25519 derivation that returns a 32-byte shared secret computed from
the device-held private key and an external public key, not a public
value. On a hardware wallet, approval text is the last security
boundary; inaccurate wording can materially change whether a user
consents to secret disclosure.

Rename the confirmation header to "Provide derived shared secret" so
the title accurately describes the secret material being released.

(cherry picked from commit 7dff261be26af87b7db44935d679d74f64ee32f8)
C
Charles-Edouard de la Vergne committed
f2313928a556e47547ada694a79ddf2c51b9406b
Parent: 7d8cf67
Committed by Alexandre Paillier <alexandre.paillier@ledger.fr> on 8/25/2026, 3:03:57 PM