Using TREZOR as a hardware SSH/GPG agent

See SatoshiLabs' blog posts about this feature:

• TREZOR Firmware 1.3.4 enables SSH login
• TREZOR Firmware 1.3.6 — GPG Signing, SSH Login Updates and Advanced Transaction Features for Segwit
• TREZOR Firmware 1.4.0 — GPG decryption support

Installation

Install the following packages:

$ apt-get install python-dev libusb-1.0-0-dev libudev-dev
$ pip install -U setuptools pip

Make sure you are running the latest firmware version on your hardware device. Currently the following firmware versions are supported:

• TREZOR: 1.4.2+
• KeepKey: 3.0.17+
• Ledger Nano S: 0.0.3+

TREZOR

Make sure that your udev rules are configured correctly. Then, install the latest trezor_agent package:

$ pip install trezor_agent

Or, directly from the latest source code:

$ git clone https://github.com/romanz/trezor-agent
$ pip install --user -e trezor-agent/agents/trezor

If you have an error regarding protobuf imports (after installing it), please see this issue.

KeepKey

Make sure that your udev rules are configured correctly. Then, install the latest keepkey_agent package:

$ pip install keepkey_agent

Or, directly from the latest source code:

$ git clone https://github.com/romanz/trezor-agent
$ pip install --user -e trezor-agent/agents/keepkey

Ledger Nano S

Make sure that your udev rules are configured correctly. Then, install the latest ledger_agent package:

$ pip install ledger_agent

Or, directly from the latest source code:

$ git clone https://github.com/romanz/trezor-agent
$ pip install --user -e trezor-agent/agents/ledger

Usage

For SSH, see the following instructions (for Windows support, see trezor-ssh-agent project (by Martin Lízner)).

For GPG, see the following instructions.

See here for PIN entering instructions.

Troubleshooting

If there is an import problem with the installed protobuf package, see this issue for fixing it.

Gitter

Questions, suggestions and discussions are welcome: