Using TREZOR as a hardware SSH/GPG agent

See SatoshiLabs' blog posts about this feature:

• TREZOR Firmware 1.3.4 enables SSH login
• TREZOR Firmware 1.3.6 — GPG Signing, SSH Login Updates and Advanced Transaction Features for Segwit

Installation

First, make sure that the latest trezorlib Python package is installed correctly (at least v0.6.6):

$ apt-get install python-dev libusb-1.0-0-dev libudev-dev
$ pip install Cython trezor
$ pip install -U setuptools

Then, install the latest trezor_agent package:

$ pip install trezor_agent

Finally, verify that you are running the latest TREZOR firmware version (at least v1.4.0):

$ trezorctl get_features | head
vendor: "bitcointrezor.com"
major_version: 1
minor_version: 4
patch_version: 0
...

If you have an error regarding protobuf imports (after installing it), please see this issue.

Usage

For SSH, see the following instructions.

For GPG, see the following instructions.

Entering PIN

Look at the digits shown on the TREZOR display and enter their positions using this regular numeric keyboard mapping:

|7|8|9|
|4|5|6|
|1|2|3|

For example, if your PIN is 1234 and your TREZOR is displaying the following:

|3|1|2|
|7|5|8|
|6|4|9|

You have to enter 8972.

Troubleshooting

If there is an import problem with the installed protobuf package, see this issue for fixing it.

Gitter

Questions, suggestions and discussions are welcome: