|
|
|
@ -76,10 +76,145 @@ def _load_keepkey():
|
|
|
|
|
except ImportError:
|
|
|
|
|
log.exception('Missing module: install via "pip install keepkey"')
|
|
|
|
|
|
|
|
|
|
def _load_ledger():
|
|
|
|
|
import struct
|
|
|
|
|
class LedgerClientConnection(object):
|
|
|
|
|
def __init__(self, dongle):
|
|
|
|
|
self.dongle = dongle
|
|
|
|
|
|
|
|
|
|
def expand_path(self, path):
|
|
|
|
|
result = ""
|
|
|
|
|
for pathElement in path:
|
|
|
|
|
result = result + struct.pack(">I", pathElement)
|
|
|
|
|
return result
|
|
|
|
|
|
|
|
|
|
def get_public_node(self, n, ecdsa_curve_name="secp256k1", show_display=False):
|
|
|
|
|
from trezorlib.messages_pb2 import PublicKey
|
|
|
|
|
donglePath = self.expand_path(n)
|
|
|
|
|
if ecdsa_curve_name == "nist256p1":
|
|
|
|
|
p2 = "01"
|
|
|
|
|
else:
|
|
|
|
|
p2 = "02"
|
|
|
|
|
apdu = "800200" + p2
|
|
|
|
|
apdu = apdu.decode('hex') + chr(len(donglePath) + 1) + chr(len(donglePath) / 4) + donglePath
|
|
|
|
|
result = bytearray(self.dongle.exchange(bytes(apdu)))[1:]
|
|
|
|
|
if ecdsa_curve_name == "nist256p1":
|
|
|
|
|
if ((result[64] & 1) <> 0):
|
|
|
|
|
result = bytearray([0x03]) + result[1:33]
|
|
|
|
|
else:
|
|
|
|
|
result = bytearray([0x02]) + result[1:33]
|
|
|
|
|
else:
|
|
|
|
|
#TODO
|
|
|
|
|
#result = result[1:]
|
|
|
|
|
#keyY = bytearray(result[32:][::-1])
|
|
|
|
|
#keyY = bytearray(result[32:])
|
|
|
|
|
#if ((keyX[31] & 1)<>0):
|
|
|
|
|
# keyY[31] |= 0x80
|
|
|
|
|
#result = chr(0) + str(keyY)
|
|
|
|
|
result = chr(0) + result[1:33]
|
|
|
|
|
publicKey = PublicKey()
|
|
|
|
|
publicKey.node.public_key = str(result)
|
|
|
|
|
return publicKey
|
|
|
|
|
|
|
|
|
|
def sign_identity(self, identity, challenge_hidden, challenge_visual, ecdsa_curve_name="secp256k1"):
|
|
|
|
|
from trezor_agent import client
|
|
|
|
|
from trezorlib.messages_pb2 import SignedIdentity
|
|
|
|
|
import hashlib
|
|
|
|
|
n = client.get_address(identity)
|
|
|
|
|
donglePath = self.expand_path(n)
|
|
|
|
|
if identity.proto == 'ssh':
|
|
|
|
|
ins = "04"
|
|
|
|
|
p1 = "00"
|
|
|
|
|
publicKey = self.get_public_node(n, ecdsa_curve_name)
|
|
|
|
|
else:
|
|
|
|
|
ins = "08"
|
|
|
|
|
p1 = "00"
|
|
|
|
|
if ecdsa_curve_name == "nist256p1":
|
|
|
|
|
p2 = "01"
|
|
|
|
|
else:
|
|
|
|
|
p2 = "02"
|
|
|
|
|
apdu = "80" + ins + p1 + p2
|
|
|
|
|
apdu = apdu.decode('hex') + chr(len(challenge_hidden) + len(donglePath) + 1)
|
|
|
|
|
apdu = apdu + chr(len(donglePath) / 4) + donglePath
|
|
|
|
|
apdu = apdu + challenge_hidden
|
|
|
|
|
result = bytearray(self.dongle.exchange(bytes(apdu)))
|
|
|
|
|
if ecdsa_curve_name == "nist256p1":
|
|
|
|
|
offset = 3
|
|
|
|
|
rLength = result[offset]
|
|
|
|
|
r = result[offset + 1 : offset + 1 + rLength]
|
|
|
|
|
if r[0] == 0:
|
|
|
|
|
r = r[1:]
|
|
|
|
|
offset = offset + 1 + rLength + 1
|
|
|
|
|
sLength = result[offset]
|
|
|
|
|
s = result[offset + 1 : offset + 1 + sLength]
|
|
|
|
|
if s[0] == 0:
|
|
|
|
|
s = s[1:]
|
|
|
|
|
signature = SignedIdentity()
|
|
|
|
|
signature.signature = chr(0) + str(r) + str(s)
|
|
|
|
|
if identity.proto == 'ssh':
|
|
|
|
|
signature.public_key = publicKey.node.public_key
|
|
|
|
|
return signature
|
|
|
|
|
else:
|
|
|
|
|
signature = SignedIdentity()
|
|
|
|
|
signature.signature = chr(0) + str(result)
|
|
|
|
|
if identity.proto == 'ssh':
|
|
|
|
|
signature.public_key = publicKey.node.public_key
|
|
|
|
|
return signature
|
|
|
|
|
pass
|
|
|
|
|
|
|
|
|
|
def get_ecdh_session_key(self, identity, peer_public_key, ecdsa_curve_name="secp256k1"):
|
|
|
|
|
from trezor_agent import client
|
|
|
|
|
from trezorlib.messages_pb2 import ECDHSessionKey
|
|
|
|
|
n = client.get_address(identity, True)
|
|
|
|
|
donglePath = self.expand_path(n)
|
|
|
|
|
if ecdsa_curve_name == "nist256p1":
|
|
|
|
|
p2 = "01"
|
|
|
|
|
else:
|
|
|
|
|
p2 = "02"
|
|
|
|
|
apdu = "800a00" + p2
|
|
|
|
|
apdu = apdu.decode('hex') + chr(len(peer_public_key) + len(donglePath) + 1)
|
|
|
|
|
apdu = apdu + chr(len(donglePath) / 4) + donglePath
|
|
|
|
|
apdu = apdu + peer_public_key
|
|
|
|
|
result = bytearray(self.dongle.exchange(bytes(apdu)))
|
|
|
|
|
if ecdsa_curve_name == "nist256p1":
|
|
|
|
|
sessionKey = ECDHSessionKey()
|
|
|
|
|
sessionKey.session_key = str(result)
|
|
|
|
|
return sessionKey
|
|
|
|
|
pass
|
|
|
|
|
|
|
|
|
|
def clear_session(self):
|
|
|
|
|
pass
|
|
|
|
|
|
|
|
|
|
def close(self):
|
|
|
|
|
self.dongle.close()
|
|
|
|
|
pass
|
|
|
|
|
|
|
|
|
|
def ping(self, msg, button_protection=False, pin_protection=False, passphrase_protection=False):
|
|
|
|
|
return msg
|
|
|
|
|
|
|
|
|
|
class CallException(Exception):
|
|
|
|
|
def __init__(self, code, message):
|
|
|
|
|
super(CallException, self).__init__()
|
|
|
|
|
self.args = [code, message]
|
|
|
|
|
try:
|
|
|
|
|
from ledgerblue.comm import getDongle
|
|
|
|
|
from ledgerblue.commException import CommException
|
|
|
|
|
except ImportError:
|
|
|
|
|
log.exception('Missing module: install via "pip install ledgerblue"')
|
|
|
|
|
try:
|
|
|
|
|
from trezorlib.types_pb2 import IdentityType
|
|
|
|
|
dongle = getDongle(True)
|
|
|
|
|
except:
|
|
|
|
|
return
|
|
|
|
|
yield ClientWrapper(connection=LedgerClientConnection(dongle),
|
|
|
|
|
identity_type=IdentityType,
|
|
|
|
|
device_name="ledger",
|
|
|
|
|
call_exception=CallException)
|
|
|
|
|
|
|
|
|
|
LOADERS = [
|
|
|
|
|
_load_trezor,
|
|
|
|
|
_load_keepkey
|
|
|
|
|
_load_keepkey,
|
|
|
|
|
_load_ledger
|
|
|
|
|
]
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|