diff --git a/core/embed/upymod/modtrezorutils/modtrezorutils.c b/core/embed/upymod/modtrezorutils/modtrezorutils.c
index f9caa5df25..59fe844a55 100644
--- a/core/embed/upymod/modtrezorutils/modtrezorutils.c
+++ b/core/embed/upymod/modtrezorutils/modtrezorutils.c
@@ -655,31 +655,31 @@ STATIC MP_DEFINE_CONST_FUN_OBJ_0(mod_trezorutils_nrf_get_version_obj,
                                  mod_trezorutils_nrf_get_version);
 #endif
 
-STATIC mp_obj_str_t mod_trezorutils_revision_obj = {
+STATIC const mp_obj_str_t mod_trezorutils_revision_obj = {
     {&mp_type_bytes}, 0, sizeof(SCM_REVISION), (const byte *)SCM_REVISION};
 
-STATIC mp_obj_str_t mod_trezorutils_model_name_obj = {
+STATIC const mp_obj_str_t mod_trezorutils_model_name_obj = {
     {&mp_type_str}, 0, sizeof(MODEL_NAME) - 1, (const byte *)MODEL_NAME};
 
-STATIC mp_obj_str_t mod_trezorutils_full_name_obj = {
+STATIC const mp_obj_str_t mod_trezorutils_full_name_obj = {
     {&mp_type_str},
     0,
     sizeof(MODEL_FULL_NAME) - 1,
     (const byte *)MODEL_FULL_NAME};
 
-STATIC mp_obj_str_t mod_trezorutils_model_usb_manufacturer_obj = {
+STATIC const mp_obj_str_t mod_trezorutils_model_usb_manufacturer_obj = {
     {&mp_type_str},
     0,
     sizeof(MODEL_USB_MANUFACTURER) - 1,
     (const byte *)MODEL_USB_MANUFACTURER};
 
-STATIC mp_obj_str_t mod_trezorutils_model_usb_product_obj = {
+STATIC const mp_obj_str_t mod_trezorutils_model_usb_product_obj = {
     {&mp_type_str},
     0,
     sizeof(MODEL_USB_PRODUCT) - 1,
     (const byte *)MODEL_USB_PRODUCT};
 
-STATIC mp_obj_tuple_t mod_trezorutils_version_obj = {
+STATIC const mp_obj_tuple_t mod_trezorutils_version_obj = {
     {&mp_type_tuple},
     4,
     {MP_OBJ_NEW_SMALL_INT(VERSION_MAJOR), MP_OBJ_NEW_SMALL_INT(VERSION_MINOR),
diff --git a/crypto/base32.c b/crypto/base32.c
index ef9b76bec2..bef40b1bf0 100644
--- a/crypto/base32.c
+++ b/crypto/base32.c
@@ -24,7 +24,8 @@
 
 #include <string.h>
 
-const char *BASE32_ALPHABET_RFC4648 = "ABCDEFGHIJKLMNOPQRSTUVWXYZ23456789";
+const char *const BASE32_ALPHABET_RFC4648 =
+    "ABCDEFGHIJKLMNOPQRSTUVWXYZ23456789";
 
 static inline void base32_5to8(const uint8_t *in, uint8_t length, uint8_t *out);
 static inline bool base32_8to5(const uint8_t *in, uint8_t length, uint8_t *out,
diff --git a/crypto/base32.h b/crypto/base32.h
index 8b5cc8513f..2fc2518f3b 100644
--- a/crypto/base32.h
+++ b/crypto/base32.h
@@ -27,7 +27,7 @@
 #include <stddef.h>
 #include <stdint.h>
 
-extern const char *BASE32_ALPHABET_RFC4648;
+extern const char *const BASE32_ALPHABET_RFC4648;
 
 char *base32_encode(const uint8_t *in, size_t inlen, char *out, size_t outlen,
                     const char *alphabet);