trezor: explicit hardened derivation

9 years ago · 3c1c1d0e0c
parent 0bb3f15aef
commit 3c1c1d0e0c
1 changed files with 2 additions and 1 deletions
--- a/sshagent/trezor.py
+++ b/sshagent/trezor.py
@ -79,8 +79,9 @@ def _get_address(ident):
    digest = formats.hashfunc(addr).digest()
    s = io.BytesIO(bytearray(digest))

+    hardened = 0x80000000
    address_n = [22] + list(util.recv(s, '<LLLL'))
-    return [-a for a in address_n]  # prime each address component
+    return [(hardened | value) for value in address_n]


 def _parse_ssh_blob(data):